state-hub/dashboard/src/tools.md

title
Tools & Apps

import {API} from "./components/config.js";

// Probe local services — best-effort, timeout after 2s
async function probe(url) {
  try {
    const ctrl = new AbortController();
    const tid = setTimeout(() => ctrl.abort(), 2000);
    const r = await fetch(url, {signal: ctrl.signal, mode: "no-cors"});
    clearTimeout(tid);
    return true; // no-cors = opaque response, but no throw = reachable
  } catch { return false; }
}

// Only probe local services the browser can actually reach
const [apiUp, giteaUp, pgadminUp] = await Promise.all([
  probe(`${API}/state/health`),
  probe("http://92.205.130.254:32166"),
  probe("http://127.0.0.1:5050"),
]);

// Cluster services — mark as "unknown" unless we can check
// (browser can't reach coulomb.social without the cluster being up;
//  just show them as static links without a live probe)

function dot(up) {
  if (up === null) return html`<span class="app-dot app-dot-unknown" title="status unknown">●</span>`;
  return up
    ? html`<span class="app-dot app-dot-up"   title="reachable">●</span>`
    : html`<span class="app-dot app-dot-down" title="unreachable">●</span>`;
}

function appCard({name, desc, url, label, status, icon, note}) {
  const linkEl = url
    ? html`<a class="app-link" href="${url}" target="_blank" rel="noopener">${label ?? url}</a>`
    : html`<span class="app-link app-link-local">${label ?? "local app"}</span>`;
  return html`<div class="app-card">
    <div class="app-card-header">
      <span class="app-icon">${icon}</span>
      <span class="app-name">${name}</span>
      ${dot(status)}
    </div>
    <p class="app-desc">${desc}</p>
    ${linkEl}
    ${note ? html`<p class="app-note">${note}</p>` : ""}
  </div>`;
}

Tools & Apps

Connected applications, services, and local tools used across the Custodian ecosystem.

Local Services

display(html`<div class="app-grid">
  ${appCard({
    icon: "🗄️", name: "State Hub API", status: apiUp,
    desc: "FastAPI backend — the source of truth for all workstream, task, and decision data.",
    url: "http://127.0.0.1:8000/docs", label: "127.0.0.1:8000 · Swagger UI",
  })}
  ${appCard({
    icon: "🔑", name: "KeePassXC", status: null,
    desc: "Primary credential store. Holds all service secrets in the FOS group hierarchy. Single root of trust per the Credential Management Standard.",
    label: "local desktop app",
    note: "Standard: canon/standards/credential-management_v0.1.md",
  })}
  ${appCard({
    icon: "🐘", name: "pgAdmin", status: pgadminUp,
    desc: "PostgreSQL admin UI for the state-hub database. Start with: make db in state-hub/.",
    url: "http://127.0.0.1:5050", label: "127.0.0.1:5050",
    note: pgadminUp ? "" : "Start with: cd ~/state-hub && docker compose --profile pgadmin up -d",
  })}
  ${appCard({
    icon: "🌉", name: "ops-bridge", status: null,
    desc: "SSH reverse tunnel lifecycle manager. Keeps CoulombCore and Railiance nodes connected to the local state hub.",
    label: "~/ops-bridge · CLI",
    note: "bridge up / bridge status / bridge logs",
  })}
</div>`);

Source Control

display(html`<div class="app-grid">
  ${appCard({
    icon: "🦊", name: "Gitea", status: giteaUp,
    desc: "Self-hosted git server. All domain repos are mirrored here. Coulomb organisation hosts the primary remotes.",
    url: "http://92.205.130.254:32166", label: "92.205.130.254:32166",
    note: "Org: coulomb · also accessible as gitea.local on LAN",
  })}
</div>`);

Identity & Auth (NetKingdom)

Services deployed on the k3s cluster. Require cluster to be running (ThreePhoenix / CoulombCore).

display(html`<div class="app-grid">
  ${appCard({
    icon: "🪪", name: "KeyCape", status: null,
    desc: "Lightweight OIDC orchestration layer. Binds LLDAP, Authelia, and privacyIDEA into a single IAM profile.",
    url: "https://id.coulomb.social", label: "id.coulomb.social",
    note: "OIDC discovery: /.well-known/openid-configuration",
  })}
  ${appCard({
    icon: "🔐", name: "Authelia", status: null,
    desc: "Authentication and authorisation server. Handles password auth, session management, and OIDC relying-party flows.",
    url: "https://auth.coulomb.social", label: "auth.coulomb.social",
  })}
  ${appCard({
    icon: "📱", name: "privacyIDEA", status: null,
    desc: "MFA token management. Issues TOTP challenges via trigger-admin API. Backs all second-factor authentication.",
    url: "https://pink.coulomb.social", label: "pink.coulomb.social",
    note: "Admin portal — credentials in KeePassXC net-kingdom/privacyidea/pi-admin",
  })}
  ${appCard({
    icon: "📂", name: "LLDAP", status: null,
    desc: "Lightweight LDAP directory. Stores user accounts and group memberships queried by Authelia and KeyCape.",
    url: "https://ldap.coulomb.social", label: "ldap.coulomb.social",
    note: "Admin UI at :17170 · credentials in KeePassXC net-kingdom/lldap",
  })}
</div>`);

Dev Tooling

display(html`<div class="app-grid">
  ${appCard({
    icon: "🤖", name: "Claude Code", status: null,
    desc: "Primary AI coding assistant. Registered with the state-hub via MCP SSE server on :8001. The tool you're using right now.",
    label: "local CLI · claude",
    note: "MCP server: http://127.0.0.1:8001/sse · registered at user scope in ~/.claude.json",
  })}
  ${appCard({
    icon: "📦", name: "uv", status: null,
    desc: "Python package and project manager. Manages all Python environments across custodian, state-hub, ops-bridge, and domain repos.",
    label: "local CLI · uv",
    note: "uv sync · uv run · uv add",
  })}
</div>`);