Stado

CLI reference / host

stado host

Invocation

stado host <COMMAND>

Purpose

Manage operating-system resources on registry hosts

Required inputs and options

This command has no command-specific inputs or options.

Output and state effect

This command group selects one of the subcommands listed below; use its exact child invocation to perform an operation.

Refusals

  • Before dispatch, Stado refuses a missing required token shown in the invocation, an unknown option, or a value outside a listed value set; argument-usage failures exit with code 2.

Subcommands

  • health — Show the latest Stado health beacon and log tail for TARGET
  • publish-beacon — Publish one locally collected beacon through the scoped Stado health API
  • beacon-units — The unit ids the registry declares for THIS host, one per line
  • collect-beacon — Collect THIS host's health beacon from the registry's declarations and the init system's own answers
  • reboot — Request a graceful reboot of TARGET through its approved channel
  • user — Manage local macOS and Linux user accounts
  • gpu-power-limit — Persist and immediately reconcile TARGET's NVIDIA board power cap
  • uptime — Report TARGET's uptime, load averages and logged-in users
  • ping — Check TARGET's ssh reachability AND health-beacon age as one verdict
  • gates — Report HOST's measured disk space, its published memory refusal and the watermarks behind it, the published admission decision and the source, duration and error of every diagnostic read
  • link — Why TARGET went quiet: beacon age, the path and endpoint it published, its last sleep and wake, its interface changes, the silences recorded against it, and what readers refused because of them
  • unit-log — The tail of one managed unit's own log on TARGET
  • exec — Run one approved command on TARGET (allowlist, not a shell). Every entry is read-only except the declared provider sign-in repairs
  • deliver — Deliver one local file or directory into a canonical run directory on TARGET
  • build — Build one declared Cargo binary inside a delivered managed run tree
  • run-attached — Run one executable from a managed run tree with this process's standard input, output, and error attached
  • remove-run-directory — Recursively remove one complete managed run directory
  • cron — Read TARGET's crontab, and optionally prune one entry from it
  • render-spis-admission-trust — Deliver the checked-in Weles receipt-trust renderer to TARGET and print the public five-field Spis receipt-trust document it builds from TARGET's own live Skarbiec. The admission authority's private half never leaves the host
  • inventory — Report TARGET's stado-managed binaries, fixed Cargo-home metadata and bin membership, forward markers and loopback listeners, and whether each marker still matches a live listener
  • config-show — Read TARGET's effective Stado configuration through its fleet channel
  • config-set — Persist one dotted Stado configuration value on TARGET
  • config-unset — Remove one dotted Stado configuration key from TARGET