Linux service / process / container verbs

Adds five typed verbs covering the gap between the existing
Windows-side surface (Task Manager-style operations via Win32) and
the Linux-side MiOS-DEV/host environment:

  service_status(name)     -- systemctl is-active + status snapshot
  service_restart(name)    -- systemctl restart <name>           WRITE
  process_list(filter?, sort="rss", limit=20)
                           -- ps -eo pid,user,rss,pcpu,comm,args
                              sorted by rss (default) or cpu
  container_status(name?)  -- podman ps -a, optional name filter
  container_restart(name)  -- podman restart <name>              WRITE

Wired through every surface:

  usr/share/mios/owui/pipes/mios_agent_pipe.py
    * _dispatch_mios_verb gains 5 case branches.
    * _ROUTER_SYSTEM verb table lists the new verbs with [READ]/
      [WRITE] tags and example service / container names operators
      typically reference (hermes-agent, mios-daemon, mios-open-webui,
      mios-surrealdb, ollama, etc.).

  usr/share/mios/owui/tools/mios_verbs.py
    * Five new async methods on the Tools class so Hermes can
      invoke them via OpenAI tool_calls during multi-step paths.
      All go through _broker_send (same socket as the rest of
      the verbs) so dispatch context is identical.

  usr/libexec/mios/mios-owui-install-tools
    * Five JSONSchema specs registered in the `tool` row of
      webui.db so the chat model sees them as native typed
      tool_calls.

Live-verified on podman-MiOS-DEV:
  * service_status mios-daemon -> "active" + status block
  * process_list filter=ollama -> ollama serve / runner PIDs
  * container_status -> mios-forge / mios-ollama / mios-code-server /
    mios-searxng / mios-forgejo-runner / mios-surrealdb all Up
  * Tool row in webui.db: 26711 -> 31528 chars (+4817 for the
    5 verb specs + Tools class methods)

Symmetric Linux <-> Windows verb table is now:
  FS search     everything_search <-> fs_search
  App launch    open_app / launch_app (auto-picks env)
  URL open      open_url
  Window ctrl   focus/move/close/list_windows (WSLg = Win32)
  Service ctrl                                <-> service_status / restart
  Process audit                               <-> process_list
  Container                                   <-> container_status / restart

WRITE verbs (service_restart, container_restart) are tagged in
the router prompt so the model only picks them when the operator
explicitly asks; READ verbs are free-fire for status questions.
process_kill deliberately omitted -- too dangerous as a single-
verb dispatch; agent path still has shell-exec for that case.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

Author: mios-dev

usr/libexec/mios/mios-owui-install-tools

@@ -221,6 +221,89 @@ def main() -> int:
                 "required": [],
             },
         },
+        {
+            "name": "service_status",
+            "description": "systemctl status snapshot for a single Linux service (read-only). Returns is-active line + first 20 lines of status. Use this when the operator asks 'is X running' / 'why did X fail' / 'what's the status of <service>'.",
+            "parameters": {
+                "type": "object",
+                "properties": {
+                    "name": {
+                        "type": "string",
+                        "description": "Service unit name. Examples: hermes-agent, mios-daemon, mios-open-webui, mios-surrealdb, ollama, mios-forge.",
+                    }
+                },
+                "required": ["name"],
+            },
+        },
+        {
+            "name": "service_restart",
+            "description": "systemctl restart <name>. WRITE verb -- visibly restarts a Linux service. Use when the operator asks to restart / reload / kick a service. Confirms with the post-restart is-active state.",
+            "parameters": {
+                "type": "object",
+                "properties": {
+                    "name": {
+                        "type": "string",
+                        "description": "Service unit name (same names as service_status).",
+                    }
+                },
+                "required": ["name"],
+            },
+        },
+        {
+            "name": "process_list",
+            "description": "ps snapshot of running Linux processes, sorted by RSS (memory) or CPU. Read-only. Use when the operator asks 'what's using memory' / 'what's eating CPU' / 'is <process> running'.",
+            "parameters": {
+                "type": "object",
+                "properties": {
+                    "filter": {
+                        "type": "string",
+                        "description": "Case-insensitive substring on command name. Empty = top processes overall.",
+                        "default": "",
+                    },
+                    "sort": {
+                        "type": "string",
+                        "enum": ["rss", "cpu"],
+                        "default": "rss",
+                        "description": "Sort key: rss (memory) or cpu.",
+                    },
+                    "limit": {
+                        "type": "integer",
+                        "default": 20,
+                        "description": "Max rows.",
+                    },
+                },
+                "required": [],
+            },
+        },
+        {
+            "name": "container_status",
+            "description": "podman ps -a snapshot. Read-only. Returns one line per container with name, status, image. Use when the operator asks 'is <container> running' / 'list containers' / 'show podman status'.",
+            "parameters": {
+                "type": "object",
+                "properties": {
+                    "name": {
+                        "type": "string",
+                        "description": "Optional case-insensitive substring filter on container name. Empty = all containers (including stopped).",
+                        "default": "",
+                    }
+                },
+                "required": [],
+            },
+        },
+        {
+            "name": "container_restart",
+            "description": "podman restart <name>. WRITE verb. Use when the operator asks to restart a MiOS-DEV container (mios-open-webui, mios-ollama, mios-surrealdb, mios-forge, etc.).",
+            "parameters": {
+                "type": "object",
+                "properties": {
+                    "name": {
+                        "type": "string",
+                        "description": "Container name (exact). Examples: mios-open-webui, mios-ollama, mios-surrealdb, mios-forge, mios-searxng.",
+                    }
+                },
+                "required": ["name"],
+            },
+        },
         # ── PHASE-3 typed window/launch surface ────────────────────
         # Operator directive 2026-05-18 (native OpenAI strict
         # function-calling with enum positions; replaces SOUL.md

usr/share/mios/owui/pipes/mios_agent_pipe.py

@@ -1047,6 +1047,18 @@ def _render_tool_history_for_compose(self, msgs: list[dict]) -> str:
         '             /root /var/log /usr/share/mios. type: "f" files only,\n'
         '             "d" directories only, omit for both.\n'
         '  [READ ] system_status()\n'
+        '  [READ ] service_status(name)\n'
+        '          -- systemctl is-active + status snapshot for a Linux\n'
+        '             service (hermes-agent, mios-daemon, mios-open-webui, ...).\n'
+        '  [WRITE] service_restart(name)\n'
+        '          -- systemctl restart <name>. Use for live patches.\n'
+        '  [READ ] process_list(filter?, sort=\"rss\", limit=20)\n'
+        '          -- ps snapshot sorted by rss (default) or cpu.\n'
+        '             filter = case-insensitive substring on command name.\n'
+        '  [READ ] container_status(name?)\n'
+        '          -- podman ps -a snapshot. name = optional substring filter.\n'
+        '  [WRITE] container_restart(name)\n'
+        '          -- podman restart <name> (or substring of a container name).\n'
         "\n"
         "Verb-pick priority (most common cases first):\n"
         '  "open X" / "launch X" / "start X" / "run X"  -> open_app(name=X)\n'
@@ -1243,6 +1255,55 @@ async def _dispatch_mios_verb(
                 cmd += f" -type {type_filter}"
         elif tool == "system_status":
             cmd = "mios-system-status"
+        elif tool == "service_status":
+            # systemctl is-active + status snapshot for a Linux service.
+            # Read-only. Picks system bus by default; passes through
+            # whatever the operator named.
+            name = shlex.quote(str(args.get("name", "")))
+            cmd = (
+                f"echo \"=== is-active ===\"; systemctl is-active {name}; "
+                f"echo; echo \"=== status ===\"; "
+                f"systemctl --no-pager status {name} | head -20"
+            )
+        elif tool == "service_restart":
+            # systemctl restart <name>. WRITE verb -- visible side
+            # effect on the operator's system. Returns the post-restart
+            # is-active line so the agent can confirm.
+            name = shlex.quote(str(args.get("name", "")))
+            cmd = (
+                f"systemctl restart {name} && "
+                f"echo \"restarted; is-active=$(systemctl is-active {name})\""
+            )
+        elif tool == "process_list":
+            # ps snapshot sorted by RSS (default) or CPU. limit caps lines.
+            # filter is a case-insensitive substring on the command name.
+            limit = int(args.get("limit", 20))
+            sort = str(args.get("sort", "rss")).lower()
+            sort_arg = "--sort=-pcpu" if sort == "cpu" else "--sort=-rss"
+            filt = str(args.get("filter", "")).strip()
+            base = (
+                f"ps -eo pid,user,rss,pcpu,comm,args {sort_arg} --no-headers"
+            )
+            if filt:
+                base += f" | grep -i -- {shlex.quote(filt)}"
+            cmd = f"{base} | head -{limit}"
+        elif tool == "container_status":
+            # podman ps -a snapshot (all containers, including stopped).
+            # No filter = all; filter = case-insensitive substring on name.
+            filt = str(args.get("name", "")).strip()
+            base = "podman ps -a --format '{{.Names}}\\t{{.Status}}\\t{{.Image}}'"
+            if filt:
+                base += f" | grep -i -- {shlex.quote(filt)}"
+            cmd = base
+        elif tool == "container_restart":
+            # podman restart <name>. WRITE verb. Confirms by showing the
+            # post-restart status line.
+            name = shlex.quote(str(args.get("name", "")))
+            cmd = (
+                f"podman restart {name} && "
+                f"podman ps --filter name={name} "
+                f"--format '{{.Names}}\\t{{.Status}}'"
+            )
         else:
             return json.dumps({"success": False,
                                "stderr": f"router emitted unknown tool {tool!r}"})

usr/share/mios/owui/tools/mios_verbs.py

@@ -592,3 +592,113 @@ async def open_url(
             "browser": browser or "(default)",
             "stderr": result.get("stderr", ""),
         })
+
+    # ─── service_status ─────────────────────────────────────────────
+    async def service_status(self, name: str, __user__: Optional[dict] = None) -> str:
+        """systemctl status snapshot for a Linux service. Read-only.
+        Returns is-active + first 20 lines of status output.
+        """
+        if not self.valves.ENABLED:
+            return json.dumps({"success": False, "stderr": "disabled"})
+        q = shlex.quote(name)
+        cmd = (
+            f"echo '=== is-active ==='; systemctl is-active {q}; "
+            f"echo; echo '=== status ==='; "
+            f"systemctl --no-pager status {q} | head -20"
+        )
+        result = _broker_send(cmd, timeout=self.valves.SEARCH_TIMEOUT_S, capture=True)
+        return json.dumps({
+            "success": result["success"],
+            "name": name,
+            "output": (result.get("stdout") or "")[:4000],
+            "stderr": result.get("stderr", ""),
+        })
+
+    # ─── service_restart ────────────────────────────────────────────
+    async def service_restart(self, name: str, __user__: Optional[dict] = None) -> str:
+        """systemctl restart <name>. WRITE verb -- visible side effect.
+        Confirms via post-restart is-active line.
+        """
+        if not self.valves.ENABLED:
+            return json.dumps({"success": False, "stderr": "disabled"})
+        q = shlex.quote(name)
+        cmd = (
+            f"systemctl restart {q} && "
+            f"echo \"restarted; is-active=$(systemctl is-active {q})\""
+        )
+        result = _broker_send(cmd, timeout=self.valves.LAUNCH_TIMEOUT_S, capture=True)
+        return json.dumps({
+            "success": result["success"],
+            "name": name,
+            "output": (result.get("stdout") or "")[:1000],
+            "stderr": result.get("stderr", ""),
+        })
+
+    # ─── process_list ───────────────────────────────────────────────
+    async def process_list(
+        self,
+        filter: str = "",
+        sort: str = "rss",
+        limit: int = 20,
+        __user__: Optional[dict] = None,
+    ) -> str:
+        """ps snapshot, sorted by rss (default) or cpu. Read-only.
+
+        :param filter: case-insensitive substring on command name.
+        :param sort: "rss" (memory, default) or "cpu".
+        :param limit: max lines (default 20).
+        """
+        if not self.valves.ENABLED:
+            return json.dumps({"success": False, "stderr": "disabled"})
+        sort_arg = "--sort=-pcpu" if sort.lower() == "cpu" else "--sort=-rss"
+        base = f"ps -eo pid,user,rss,pcpu,comm,args {sort_arg} --no-headers"
+        if filter.strip():
+            base += f" | grep -i -- {shlex.quote(filter.strip())}"
+        cmd = f"{base} | head -{int(limit)}"
+        result = _broker_send(cmd, timeout=self.valves.SEARCH_TIMEOUT_S, capture=True)
+        lines = [ln for ln in (result.get("stdout") or "").splitlines() if ln.strip()]
+        return json.dumps({
+            "success": result["success"],
+            "lines": lines,
+            "count": len(lines),
+            "stderr": result.get("stderr", ""),
+        })
+
+    # ─── container_status ───────────────────────────────────────────
+    async def container_status(self, name: str = "", __user__: Optional[dict] = None) -> str:
+        """podman ps -a snapshot. Read-only.
+
+        :param name: optional case-insensitive substring filter on container name.
+        """
+        if not self.valves.ENABLED:
+            return json.dumps({"success": False, "stderr": "disabled"})
+        base = "podman ps -a --format '{{.Names}}\\t{{.Status}}\\t{{.Image}}'"
+        if name.strip():
+            base += f" | grep -i -- {shlex.quote(name.strip())}"
+        result = _broker_send(base, timeout=self.valves.SEARCH_TIMEOUT_S, capture=True)
+        return json.dumps({
+            "success": result["success"],
+            "output": (result.get("stdout") or "")[:4000],
+            "stderr": result.get("stderr", ""),
+        })
+
+    # ─── container_restart ──────────────────────────────────────────
+    async def container_restart(self, name: str, __user__: Optional[dict] = None) -> str:
+        """podman restart <name>. WRITE verb.
+
+        :param name: container name (exact or substring -- podman resolves).
+        """
+        if not self.valves.ENABLED:
+            return json.dumps({"success": False, "stderr": "disabled"})
+        q = shlex.quote(name)
+        cmd = (
+            f"podman restart {q} && "
+            f"podman ps --filter name={q} --format '{{{{.Names}}}}\\t{{{{.Status}}}}'"
+        )
+        result = _broker_send(cmd, timeout=self.valves.LAUNCH_TIMEOUT_S, capture=True)
+        return json.dumps({
+            "success": result["success"],
+            "name": name,
+            "output": (result.get("stdout") or "")[:1000],
+            "stderr": result.get("stderr", ""),
+        })