Files

Kyle Isom 78ce5003e1 Update PLATFORM_EVOLUTION.md and TOOLING.md for current state

Reflect Phase E in progress, add orion to fleet, mark mcdoc as
deployed, remove deprecated mcdeploy, update multi-arch fleet info,
and add mcdoc/mcq to tooling tables.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

2026-04-02 15:14:13 -07:00

3.3 KiB

Raw Blame History

Metacircular Platform Tooling

CLI tools for interacting with the Metacircular platform. All tools are Go binaries built with CGO_ENABLED=0 and installed via Nix flakes.

Tool Inventory

Tool	Project	Purpose	Install target
`mcp`	mcp	Control plane CLI — deploy, status, lifecycle, file transfer	vade, orion
`mcp-agent`	mcp	Control plane agent — per-node container management daemon	rift, svc (systemd)
`mciasctl`	mcias	MCIAS admin CLI — accounts, tokens, policies	vade, orion, rift
`mciasgrpcctl`	mcias	MCIAS gRPC debug CLI	vade, orion, rift
`mcproxyctl`	mc-proxy	MC-Proxy admin CLI — routes, firewall, status	vade, orion, rift
`mcrctl`	mcr	MCR admin CLI — repositories, policies, audit	vade, orion, rift

Server-only binaries (not installed as tools)

These run inside containers and are not installed on operator workstations:

Binary	Project	Purpose
`mciassrv`	mcias	MCIAS server
`metacrypt`	metacrypt	Metacrypt server (includes init, unseal, status, snapshot subcommands)
`metacrypt-web`	metacrypt	Metacrypt web UI server
`mcrsrv`	mcr	MCR API server
`mcr-web`	mcr	MCR web UI server
`mc-proxy`	mc-proxy	TLS proxy server
`mcns`	mcns	DNS server
`mcat`	mcat	Login policy tester web app
`mcdoc`	mcdoc	Documentation server
`mcq`	mcq	Document review queue

Installation

All tools are packaged as Nix flakes and installed as system packages via mcpkg.nix in the NixOS configuration. Adding a tool:

Create or update flake.nix in the project repo.
Add the flake as an input in /home/kyle/src/nixos/flake.nix.
Add the package to configs/mcpkg.nix.
sudo nixos-rebuild switch on target machines.

Nix flake conventions

Channel: nixos-25.11 (match the system nixpkgs).
Build: pkgs.buildGoModule with vendorHash = null (vendored deps).
ldflags: -s -w -X main.version=${version}.
subPackages: list only the client binaries, not servers.
system: x86_64-linux for rift, svc, and orion; aarch64-linux for hyperborea. Flakes that target the full fleet should support both.

MCP agent

The mcp-agent is a special case: it runs as a systemd service on managed nodes (not as a container, since it manages containers). Its flake exposes both mcp (client) and mcp-agent (server). Phase E is moving the agent binary to /srv/mcp/mcp-agent on all nodes — NixOS ExecStart will point there instead of a nix store path, and Debian nodes use the same layout. svc already follows this convention. See docs/phase-e-plan.md for details.

Flake status

Project	flake.nix	Packages	In mcpkg.nix	Notes
mcias	Yes	mciasctl, mciasgrpcctl	Yes
mc-proxy	Yes	mcproxyctl	Yes
mcr	Yes	mcrctl	Yes
mcp	Yes	mcp, mcp-agent	Yes	Agent also used by mcp.nix systemd unit
mcns	No	—	No	Server-only, no client tool yet
metacrypt	No	—	No	Server-only, no client tool yet
mcat	No	—	No	Server-only, no client tool yet
mcdoc	No	—	No	Server-only, deployed as container
mcq	No	—	No	Server-only, document review queue
mcdsl	No	—	No	Library, no binaries

3.3 KiB Raw Blame History