---
title: Tools & Apps
---
```js
import {API} from "./components/config.js";
```
```js
// Probe local services — best-effort, timeout after 2s
async function probe(url) {
try {
const ctrl = new AbortController();
const tid = setTimeout(() => ctrl.abort(), 2000);
const r = await fetch(url, {signal: ctrl.signal, mode: "no-cors"});
clearTimeout(tid);
return true; // no-cors = opaque response, but no throw = reachable
} catch { return false; }
}
// Only probe local services the browser can actually reach
const [apiUp, giteaUp, pgadminUp] = await Promise.all([
probe(`${API}/state/health`),
probe("http://92.205.130.254:32166"),
probe("http://127.0.0.1:5050"),
]);
// Cluster services — mark as "unknown" unless we can check
// (browser can't reach coulomb.social without the cluster being up;
// just show them as static links without a live probe)
```
```js
function dot(up) {
if (up === null) return html`●`;
return up
? html`●`
: html`●`;
}
function appCard({name, desc, url, label, status, icon, note}) {
const linkEl = url
? html`${label ?? url}`
: html`${label ?? "local app"}`;
return html`
${desc}
${linkEl}
${note ? html`
${note}
` : ""}
`;
}
```
# Tools & Apps
Connected applications, services, and local tools used across the Custodian ecosystem.
## Local Services
```js
display(html`
${appCard({
icon: "🗄️", name: "State Hub API", status: apiUp,
desc: "FastAPI backend — the source of truth for all workstream, task, and decision data.",
url: "http://127.0.0.1:8000/docs", label: "127.0.0.1:8000 · Swagger UI",
})}
${appCard({
icon: "🔑", name: "KeePassXC", status: null,
desc: "Primary credential store. Holds all service secrets in the FOS group hierarchy. Single root of trust per the Credential Management Standard.",
label: "local desktop app",
note: "Standard: canon/standards/credential-management_v0.1.md",
})}
${appCard({
icon: "🐘", name: "pgAdmin", status: pgadminUp,
desc: "PostgreSQL admin UI for the state-hub database. Start with: make db in state-hub/.",
url: "http://127.0.0.1:5050", label: "127.0.0.1:5050",
note: pgadminUp ? "" : "Start with: cd ~/state-hub && docker compose --profile pgadmin up -d",
})}
${appCard({
icon: "🌉", name: "ops-bridge", status: null,
desc: "SSH reverse tunnel lifecycle manager. Keeps CoulombCore and Railiance nodes connected to the local state hub.",
label: "~/ops-bridge · CLI",
note: "bridge up / bridge status / bridge logs",
})}
`);
```
## Source Control
```js
display(html`
${appCard({
icon: "🦊", name: "Gitea", status: giteaUp,
desc: "Self-hosted git server. All domain repos are mirrored here. Coulomb organisation hosts the primary remotes.",
url: "http://92.205.130.254:32166", label: "92.205.130.254:32166",
note: "Org: coulomb · also accessible as gitea.local on LAN",
})}
`);
```
## Identity & Auth (NetKingdom)
Services deployed on the k3s cluster. Require cluster to be running (ThreePhoenix / CoulombCore).
```js
display(html`
${appCard({
icon: "🪪", name: "KeyCape", status: null,
desc: "Lightweight OIDC orchestration layer. Binds LLDAP, Authelia, and privacyIDEA into a single IAM profile.",
url: "https://id.coulomb.social", label: "id.coulomb.social",
note: "OIDC discovery: /.well-known/openid-configuration",
})}
${appCard({
icon: "🔐", name: "Authelia", status: null,
desc: "Authentication and authorisation server. Handles password auth, session management, and OIDC relying-party flows.",
url: "https://auth.coulomb.social", label: "auth.coulomb.social",
})}
${appCard({
icon: "📱", name: "privacyIDEA", status: null,
desc: "MFA token management. Issues TOTP challenges via trigger-admin API. Backs all second-factor authentication.",
url: "https://pink.coulomb.social", label: "pink.coulomb.social",
note: "Admin portal — credentials in KeePassXC net-kingdom/privacyidea/pi-admin",
})}
${appCard({
icon: "📂", name: "LLDAP", status: null,
desc: "Lightweight LDAP directory. Stores user accounts and group memberships queried by Authelia and KeyCape.",
url: "https://ldap.coulomb.social", label: "ldap.coulomb.social",
note: "Admin UI at :17170 · credentials in KeePassXC net-kingdom/lldap",
})}
`);
```
## Dev Tooling
```js
display(html`
${appCard({
icon: "🤖", name: "Claude Code", status: null,
desc: "Primary AI coding assistant. Registered with the state-hub via MCP SSE server on :8001. The tool you're using right now.",
label: "local CLI · claude",
note: "MCP server: http://127.0.0.1:8001/sse · registered at user scope in ~/.claude.json",
})}
${appCard({
icon: "📦", name: "uv", status: null,
desc: "Python package and project manager. Manages all Python environments across custodian, state-hub, ops-bridge, and domain repos.",
label: "local CLI · uv",
note: "uv sync · uv run · uv add",
})}
`);
```