Local planning platform

Make planning systems programmable.

Hive turns the portals, dashboards and workbooks you already use into authenticated commands and local APIs. Its current adapters cover seven access and authentication patterns, so new connections can start from a proven credential chain. Build a workflow on top yourself, or let an AI agent do it against the live tool.

Install Hive See real tools
IdentitySeven proven patternsEach adapter declares the credential chain its system requires
On your laptopHive daemon127.0.0.1:7700 and hivectl
Connected systemsAdaptersTyped access to planning and operations data
Your workTools and agentsDashboards, reports and repeatable workflows

What it is

One local layer over systems that were never designed to work together.

Hive is a CLI, a daemon and a set of adapters. It handles the awkward authentication and data access once, then gives planners and agents a consistent surface to build on.

Local-firstThe daemon runs on your machine. There is no shared Hive application server.
HeadlessPlan reads and adapter calls do not depend on keeping a portal tab open.
ComposableThe same underlying capabilities serve the CLI, local HTTP clients and tools.
What Hive does not hide

Team tool distribution needs AWS account access granted through the HiveAI bindle. That is a human approval, not an installer step. The CLI, daemon, adapters and browser UI remain useful without team membership.

Install

Start with one command.

The installer is a bootstrapper. It gets a working hivectl, then hands release movement to the CLI's update manager.

macOS, Apple Silicon

curl -fL https://d3rhi226q1gz8n.cloudfront.net/install.sh | bash

Run in Terminal. Requires Python 3.12+, Git, a current Midway cookie and access to the Hive repositories.

What the bootstrapper does, in order

  1. Checks the machine.Validates the OS, Python 3.12+ and Git; macOS also requires the Midway cookie before continuing.
  2. Validates the stable release manifest.Refuses an unexpected schema, an invalid version or malformed artifact integrity fields.
  3. Bootstraps paired checkouts on a new install.Clones core and adapters at the same release. A partial or non-Git install is rejected instead of guessed through.
  4. Creates an isolated environment and exposes hivectl.Installs the core and adapter SDKs into the daemon virtual environment and adds the CLI shim to your user path.
  5. Delegates to the update manager.Calls hivectl update --to for the selected release so verification and rollback state have one owner.
  6. Installs the desktop app on first install.Checks the artifact byte size and SHA-256 first. On macOS it also clears the quarantine attribute because the app is ad-hoc signed.
  7. Starts and checks the daemon.Runs hivectl daemon ensure-running, then checks http://localhost:7700/health.
  8. Reports team readiness honestly.Working AWS credentials get the join command. Everyone else gets the human-grant and credential steps; missing team tools do not turn a functional install into a failure.

First-time setup

Get the core working before you add team tools.

  1. Run the installer for your OS

    Let it finish through the daemon health check. Open a new shell if the installer added ~/bin to your path.

  2. Refresh Midway and inspect the full stack

    mwinit -s -f
hivectl self-check --full

    -f is required when your security key enforces an on-token PIN. The full self-check adds catalogue, sample read, schema, daemon and mutation-registry checks.

  3. Open the local UI

    Use the Hive desktop app or open http://localhost:7700/home. Both are backed by the local daemon.

  4. Choose the right team path

    Do not join a team just because the installer mentioned one. Canada S&OP and everyone else follow different paths below.

Teams

Join the team you work with, or create your own.

A team points everyone at one tools repository and one pinned Git ref. Members sync explicitly, so the shared set is reproducible and changes do not arrive silently.

Canada S&OP

Join the existing hive-core-team

This route needs a human grant. Contact Pradeep Katasani (bsimhapk) to be added to the HiveAI bindle, then configure the team AWS profile.

toolbox install ada
ada profile add --profile Hive --provider conduit \
  --account 391965393124 \
  --role IibsAdminAccess-DO-NOT-DELETE
AWS_PROFILE=Hive aws sts get-caller-identity
hivectl team join hive-core-team
hivectl team sync

PowerShell credential check: $env:AWS_PROFILE="Hive"; aws sts get-caller-identity. It must report account 391965393124.

Every other team

Create and publish your own team

team create uploads the team manifest. Join it locally, then publish your tools repository at a pin. Replace the example slug, alias and uppercase repository placeholder.

hivectl team create my-team --member my-alias
hivectl team join my-team
hivectl team publish v1.0.0 --repo YOUR_GIT_URL
hivectl team sync --dry-run
hivectl team sync

Team prefixes organize shared resources; they are not an isolation boundary. Repository write access is the trust boundary for the tools the team installs.

What a team gives you

One repository under tools/, one published repo pin, and an explicit sync that installs new tools, updates changed tools, removes deleted tools and skips unchanged content. Local tools can coexist and shadow a team tool while you develop.

What you can build

Connect a system once. Build many workflows on top.

Adapters solve access

An adapter turns one upstream system into a named, testable client. Hive's current adapter catalogue uses seven declared auth patterns. When a new system matches one of these chains, its adapter can reuse the closest implementation and focus on the data calls.

midway-stsSandOP Portal, Amazon QuickSight
midway-cookieAndes Workbench, GalaxyBI Labor Planning
midway-aeaDataCentral, Unified Portal
kerberosCA Transportation Dashboard, SharePoint (share.amazon.com)
federate-oidcROC Ground Control
delegatedSCE Intelligence Agent
localExcel Bridge, Workspaces (Office + Browser)
SandOP PortalROC Ground ControlAmazon QuickSight Unified PortalCA Transportation DashboardGalaxyBI Labor Planning SharePoint (share.amazon.com)Excel BridgeSCE Intelligence Agent DataCentralAndes WorkbenchWorkspaces (Office + Browser)

Tools turn those adapters into planner workflows

These are installed tools visible in the running daemon, with behavior taken from their manifests.

Beta / macOS + Windows

sop-email

Builds the CA weekly leadership flash from IPT data: nine metric charts, four ETL workbook blocks, four share-token URLs, and Outlook-safe HTML plus .eml.

Uses SandOP Portal and DataCentral capabilities.
Alpha / macOS + Windows

inbound_dashboard

Shows NVF and NTI inbound actuals against forecast by FC and week, plus backlog days and a daily synchronization view.

Uses SandOP Portal, Amazon QuickSight, ROC Ground Control and Unified Portal.
Alpha / macOS + Windows

nwd_sculpt

A Workable Demand share planner: drag-edit FC-by-week shares against an F2P baseline, check mechmax caps and export edits as YAML.

Uses SandOP Portal, Amazon QuickSight and the constraints surface.
Alpha / macOS

balancer

Guides fullness balancing one FC-week at a time, enumerates feasible crossdock redirects, checks violations and exports move JSON. It does not submit plan changes.

Uses the SandOP Portal plan-query capability.

The CLI

Ten commands that make Hive useful.

Start with health and discovery. Add filters only after you can see what the connected system exposes.

01
hivectl auth status

Show SandOP credential health and expiry.

02
hivectl plan list

List available plans for the most recent Sunday.

03
hivectl q --plan bintype --metric Arrivals --week wk+1 --group-by fc

Query next week's Arrivals and group the result by FC.

04
hivectl up list

List Unified Portal views and endpoints.

05
hivectl qs dashboards

List Amazon QuickSight dashboards available to the configured account.

06
hivectl gc fcs list

Show the ROC Ground Control Canadian FC roster.

07
hivectl ca-trans list

List registered CA Transportation Dashboard metrics.

08
hivectl excel backends

Show which Excel access backends are available.

09
hivectl tool list

List installed local and team tools.

10
hivectl update --check

Check the stable release channel without applying changes.

Canvas + streams

The agent can inspect the tool it is building.

Open a tool as a canvas, then use ⌨ Terminal - build. The app starts a fresh Claude Code session with the current tool's context and an MCP connection to the live window.

1You open a toolThe Tauri window navigates directly to the tool's local URL.
2The bridge observesConsole, errors, network, DOM, navigation and performance events enter the stream.
3The agent looks and actsMCP exposes the window's pixels, DOM, JavaScript and deliberate UI actions.
4The agent iteratesEdit local source, update the tool, reload and inspect the result.

The terminal launcher assembles the Hive knowledge prompt, current canvas identity, per-canvas MCP config, allowed tool list and directory grants. A local tool's editable source directory is granted; an installed team tool is treated as a pinned copy that must be changed through its team repository.

screenshotinspectevalactionlist_windows

The surface stream is read-only. Clicking, filling or selecting happens only through an explicit agent or human action. The canvas prompt tells the agent to observe first and never drive the UI unprompted.

Hive is not a chat window.

The built-in chat was removed. The adapters, CLI and local APIs can be used by Kiro, Q, Claude Code or another harness that can invoke them. The one-click canvas build launcher currently starts Claude Code; equivalent context injection for other harnesses is not automatic today.

Requirements + troubleshooting

Known walls, with the shortest verified way through.

Supported install targetsmacOS on Apple Silicon; Windows 11 x64 is a pilot path.
Base requirementsPython 3.12+, Git, Midway and repository access.
Team tools onlyAWS CLI, Builder Toolbox, ada and HiveAI bindle membership.
Desktop app on macOSAd-hoc signed. The installer clears com.apple.quarantine after verifying the artifact.
Python 3.12+ required

Stock macOS provides Python 3.9, which is too old. Install a current interpreter:

brew install python@3.13

On Windows, use the python.org installer rather than the Microsoft Store stub.

No Midway session. Run: mwinit -s -f

Refresh Midway before retrying. The -f flag handles security keys with an enforced on-token PIN.

mwinit -s -f
Cannot use team '...': no AWS credentials...

This is not evidence that the team is missing. Configure the Hive profile, then verify the account before joining again.

AWS_PROFILE=Hive aws sts get-caller-identity

Older releases may report Team 'hive-core-team' not found or a missing manifest for the same credential failure.

Cannot use team '...': access denied...

Your profile resolved, but your identity cannot read the Hive account. Canada S&OP users should ask Pradeep Katasani to add them to the HiveAI bindle.

Partial Hive install detected

The bootstrapper found only one of the paired core and adapters checkouts. Repair the missing checkout or move the incomplete install aside before retrying; it will not guess through a half-installed state.

daemon did not answer on :7700

Restart only the daemon, then run the full check:

hivectl daemon stop
hivectl daemon ensure-running
hivectl self-check --full
Team tools are missing after install

This is not a failed platform install. Confirm the daemon and CLI first with hivectl self-check --full, then complete the human grant, AWS profile and team sync steps.