Stado

CLI reference / host

stado host

Invocation

stado host <COMMAND>

Purpose

Manage operating-system resources on registry hosts

Required inputs and options

This command has no command-specific inputs or options.

Output and state effect

This command group selects one of the subcommands listed below; use its exact child invocation to perform an operation.

Refusals

  • Before dispatch, Stado refuses a missing required token shown in the invocation, an unknown option, or a value outside a listed value set; argument-usage failures exit with code 2.

Subcommands

  • health — Show the latest Stado health beacon and log tail for TARGET
  • beacon — The health beacon each host publishes about itself: list every host's, collect this host's, or publish one collected elsewhere
  • privacy — What macOS lets TARGET's Stado process read: Documents, Desktop and Downloads, each `granted`, `denied`, `absent` or `unreadable`, beside the grants `targets[].privacy_grants` declares for TARGET
  • reboot — Request a graceful reboot of TARGET through its approved channel
  • user — Manage local macOS and Linux user accounts
  • gpu — TARGET's GPUs: the declared NVIDIA board power cap, set or unset
  • uptime — Report TARGET's uptime, load averages and logged-in users
  • ping — Check TARGET's ssh reachability AND health-beacon age as one verdict
  • gates — Report HOST's measured disk space against the disk-full rule, the published admission decision and the source, duration and error of every diagnostic read
  • link — Why TARGET went quiet: beacon age, the path and endpoint it published, its last sleep and wake, its interface changes, the silences recorded against it, and what readers refused because of them
  • port — TARGET's TCP ports: which process holds one
  • local — The halves of host verbs that run on this host itself, started over the host channel with this host's installed Stado: a lock to run under, the object API's readers, the release store's repair, the backup's audit, a port the host hands out, and the storage-root transaction's phases, steps and worker
  • exec — Run one fixed approved command on TARGET (allowlist, not a shell)
  • run — A managed run tree below `$HOME/.stado/work/runs` on TARGET: deliver its inputs, build its declared binary, attach to one of its programs, or remove it
  • cron — Read TARGET's crontab, and optionally prune one entry from it
  • document — A public document TARGET renders from its own live vault
  • inventory — Report TARGET's stado-managed binaries, fixed Cargo-home metadata and bin membership, forward markers and loopback listeners, and whether each marker still matches a live listener
  • config — TARGET's own Stado configuration, read and changed through its fleet channel
  • compiler — TARGET's compiler: its cache, read or brought to the version Stado declares