The dashboard

After the wizard, the Machine's address is its control plane: one view per item in the side panel (a bottom tab bar on a phone). Sixteen views; five are admin-only. Streaming, Assistant and pipe show only while their service is on.

Overviewboot verdict, uptime, disk, CPU load and temperature, spend today, the alerts strip. re-check now runs a read-only health check; the full boot report is under Services on this view
Streamingthe video pipeline and its providers: streaming
Assistantpick Claude or Hermes, chat, manage the assistant terminal: the assistant
Filesthe explorer over /data and external drives, disks, backup, network storage: files, storage and backup
pipethe Machine's pipe identity, owner, cohorts, contacts: pipe integration
Servicesone switch per service; it writes the persistent config and starts or stops the service now. What is on here starts at boot. Vendor support access shows its key and port here
Usersadmin only. Accounts, roles, unix logins, terminals: users and access
Scheduleadmin only. Jobs and agents: schedule and usage
Secretsadmin only. The vault by name, the recovery phrase, share requests: secrets
Setupadmin only. The wizard's answers: box name, owner nick, Claude sign-in, pipe one-time key
Usagewhat the assistant spent: today, 7 days, 30 days, this month, per day, who spent it. Caps are set here
NetworkMachines on this network, the map, traffic. See below
Clusteradmin only. Every member's health, Reboot everything, services and agents across members: the cluster
Systemmetrics, logs and the Maintenance card. See below
Updateswhat has changed on this Machine, newest first
Docsthis manual, served from the box, readable without internet

Alerts

The alerts strip: a disk filling, a service that failed to start, unsaved state, a stale update origin, a locked vault, a share request waiting. Green means the last check passed; a warning names the check that did not.

Every boot writes the boot report; with pipe on, the owner gets it as a DM. An hourly live check runs while the box is up, and every reader (Overview, lobby, cluster page, pipeos status) prefers the live verdict when it is newer and says which one it shows.

Network

Machines on this network lists every Machine on the LAN with verdict and address. An unclaimed one carries a Claim link, and on a cluster member an Adopt button. A Machine seen before but silent now shows grey, off · last seen …, with a Wake button that sends a magic packet; it is back within a minute if its BIOS allows (hardware notes). Everything on this network is the map of the whole LAN with the Machines marked. Traffic is throughput with 24-hour history.

System

CPU, memory, temperature and disks as 24-hour charts. The Logs picker: the self-check, the web daemon, mDNS, the pipe daemon and listener, the stream, the assistant, the schedule (schedule-<job>), the self-updater, the sweep. Then Maintenance:

Save state to boot media nowwithout waiting for the 15-minute autosave
Repair remote accessput the SSH key back if it vanished, restart sshd, save
Reboot the boxa clean restore of the last saved state; safe at any time
Reboot into BIOSstraight into firmware setup, no keyboard at the splash
update automaticallyimage updates: a newer release is applied in place and the box reboots, checked hourly, held while a job or a terminal is live. Off, packages still update and a new image waits for Update now
Live diskthe running image and whether the release is newer; Flash a new live disk rewrites the boot partition in place; Restore identity stages an identity bundle for the next boot
Change admin passwordcurrent and new; eight characters or more

What a viewer sees

Every view that is not admin-only is readable by every account. A viewer sees what an admin sees; the greyed-out controls are the visible difference, and the server refusing their requests is the real one.

Next

The assistant · schedule and usage · secrets · files, storage and backup