Skip to content

What Hostwright is

Hostwright is a Mac-native desired-state container platform for Apple container workloads.

You declare services in a versioned hostwright.yaml manifest. Hostwright validates intent, computes a deterministic plan, persists exact desired/observed/operation identity, and crosses a typed runtime-provider boundary for every runtime action.

  • hostwright --version and hostwright capabilities --json expose build and capability truth.
  • hostwright init, validate, and plan provide explicit Manifest v2, restricted fail-closed parsing, and deterministic planning.
  • hostwright migrate preview produces a deterministic non-writing preview for legacy v1/versionless manifests.
  • status, bounded logs, events, recovery, and local redacted diagnostics use explicit state paths.
  • Confirmation-gated apply supports only the currently declared narrow create/start/restart surface.
  • cleanup classifies first and deletes only exact cleanup-eligible Hostwright-owned non-running containers after token confirmation.
  • hostwrightd --foreground observes, plans, checks bounded loopback health, and records events; it is not the autonomous Phase 08 daemon.
  • SQLite schema v7 establishes UUID identity, provider binding, fencing, saga intent, compensation, and verification records.
  • Secret references, local policy/team profiles, a one-shot Control API v2 process, advisory scheduler models, and unsigned developer distribution evidence exist within their documented narrow boundaries.

Everything else is a current limitation with an owner, not a discarded non-goal. The 15-phase v0.0.2 program covers trusted install, both Apple providers, complete lifecycle, images/registries/secrets, storage, networking, autonomous recovery, security/extensions, scheduling/accelerators, multi-Mac HA, Kubernetes, Docker ecosystem, GUI/team/cloud, and GA qualification.

Contract Version
Manifest 2
Control API 2
Runtime Provider API 2
Plugin ABI 1
State schema 7
Section Answers
Getting started Honest source setup and the currently runnable safe loop.
Concepts Desired state, providers, reconciliation, identity/state, policy, safety, and secrets.
Tasks Walkthroughs labeled non-mutating, state-writing, or runtime-mutating.
Reference Exact CLI, manifest, compatibility, limitations, error, policy, and evidence contracts.
Operations Security, team workflow, daemon, events, diagnostics, and recovery.
Release The v0.0.2 RC/GA process plus immutable historical notes.
Roadmap All 15 phases and 167 workstreams; planned behavior is never current support.