Paseka Hive Runtime

Paseka Hive Runtime An architecture diagram generated by Archify. Beekeeper · Queen Shell · Architecture component Beekeeper Queen Shell Queen Console · HTTP :8787 · Apiary — trusted workstation › no-auth Console · no auth Queen Console HTTP :8787 no auth NATS JetStream · domain events · Apiary — trusted workstation · choreography NATS JetStream domain events choreography Hive Runtime · Reactor · Apiary — trusted workstation · paseka run Hive Runtime Reactor paseka run Adapters · CLI drivers · Apiary — trusted workstation · no LLM Adapters CLI drivers no LLM Agent CLIs · external CLIs · Architecture component · untrusted Agent CLIs external CLIs untrusted Task Ledger · JetStream KV · Apiary — trusted workstation Task Ledger JetStream KV Colony config · .paseka/ · Colony — git repo · shareable Colony config .paseka/ shareable Worktrees · isolated git · Colony — git repo · gitignored Worktrees isolated git gitignored Run IPC · file IPC · Colony — git repo · gitignored Run IPC file IPC gitignored Apiary home · machine-local · Apiary — trusted workstation · secrets Apiary home machine-local secrets HTTP SIGNAL subscribe Dispatch exec CLI KV Apply Ensure secrets Apiary — trusted workstation Colony — git repo no-auth Console Legend Frontend Backend Database Security Message bus External

Primary path

  • • POST /api/cues/:id/run publishes SIGNAL or task.plan
  • • Reactor applies the ledger, then Prepare → Run → Finalize

Ownership

  • • .paseka/ is committed; worktrees/ and runs/ are gitignored
  • • Apiary ~/.config/paseka/<slug>/ holds secrets and state.json

Trust and side paths

  • • Console has no auth — localhost or VPN only
  • • Agents publish only via paseka event emit --stdin