Machines

Machines ("service nodes" in the console) are the computers that actually run sessions: Mac or Linux. Sessions move between machines; members do not pick one.

Hosted customers: we add, maintain and retire the machines; nothing on this page is yours to do. You can see each machine's state on the Service nodes & clients page; to know what happens when you see "Maintenance" or "Lost", the "States" section below is all you need. Running short of machines, or adding more people — tell us.

States: online · in maintenance · lost

State	What it is	How the hub treats it
Online	Reporting in as normal	Everything as usual
In maintenance	An admin marked it "going offline"	No new sessions are sent to it; the sessions already on it keep running
Lost	Has not reported in for about 15 seconds	Only marked: its sessions grey out in the list; the tasks they held are released after 30 minutes, and are not reopened elsewhere automatically

"Lost" beats "in maintenance": a machine in maintenance that then drops off is lost.

Where to see it: the badges on the cards of the console's Service nodes & clients page; the top line of a member client's list, ● mac-a 22 · ◐ mac-b 3 维护中 · ○ linux-a 0 (● online · ◐ in maintenance · ○ lost); on the command line fleet hub machines — each machine's state, sessions, load and accounts (spare · used / cap).

Letting a person use only some machines

Their sign-ins on every machine stay; you only stop one person using some of them for now: an admin gives that person a machine allowlist.

fleet-machine-policy.sh set gh:2987262 linux-a   # only linux-a
fleet-machine-policy.sh show gh:2987262          # every machine: open / disabled + why
fleet-machine-policy.sh clear gh:2987262         # drop the list: all machines again

On a machine outside the list: they cannot connect (fleet <machine> says 「这台机器暂未对你开放，可用：…」 — this machine is not open to you for now, available: …), new sessions are not sent there (neither automatic placement nor naming it), sessions already open are disabled within half a minute and show 「已停用（管理员限制）」 (disabled by an admin) in the list. Their sign-in, home directory and records on that machine are not deleted, and come back as they were once the list is dropped. No list = every machine.

Adding a machine (self-hosted)

Console Service nodes & clients → Add service node. The dialog gives a join code and one command, valid for 1 hour and usable once.
Run that command on the machine (it needs sudo). On a Mac it looks like:
```
 curl -fsSL https://hub.example.com/install/bin/fleet-node-install.sh | sudo bash -s -- --hub https://hub.example.com --join <join-code>
```
A Mac that already has fleet can also run sudo fleet node install --join <join-code>. On Linux, run the command the dialog gives.
When it appears on the page with an "Online" badge, it is added.

Running the same command again repairs it: steps already done are skipped, broken ones redone. Never paste a join code into a chat, a ticket or a commit.

By default a machine holds accounts for 10 people: change it with fleet hub set fleet.node_user_cap.mac-a 20. With Spare logins on every service node on in Settings, each machine keeps a few empty accounts ready, usable the moment a newcomer signs in.

Planned downtime: upgrades, moves, new hardware (self-hosted)

Every step is done by a person; no step powers anything off by itself.

Put it in maintenance: Maintenance on its card → give a reason (for example "OS upgrade, about 40 minutes"). Or on the command line fleet hub set fleet.node_maintenance.mac-a "OS upgrade". From this moment no new sessions are sent to it.
Move the idle sessions away: on that machine, run once in each account
```
 ~/.claude/fleet/bin/fleet-evacuate.sh --dry-run   # see what would move, and where
 ~/.claude/fleet/bin/fleet-evacuate.sh             # move them
```
Only idle sessions with no uncommitted changes move; nothing that is working is touched. A moved session carries on as it was on the other machine. The left N it prints is what stays; run it again once those finish.
Check: the card's session count falls to 0 (or only the ones you decided may drop with the machine are left).
Shut down, upgrade.
Afterwards: power it on; the machine reconnects to the hub by itself and its badge returns to "Maintenance". Run fleet doctor on it and check there is nothing red, then End maintenance on its card (or fleet hub unset fleet.node_maintenance.mac-a).

Unplanned downtime: power cut, crash, network loss

Members: nothing to do. fleet lands on another online machine by itself; sessions on the lost machine cannot be reached for now — start anything urgent again on another machine (task claims are released after 30 minutes).
Self-hosted admins: first tell whether the network dropped or the machine really stopped. With only the network down the sessions are in fact still running, and everything recovers by itself when the network returns. If it really stopped: when it comes back, put it in maintenance first (or the hub starts sending it work at once), check it with fleet doctor; if the same task has already been reopened on another machine, keep the new one and close the old one, then end maintenance.
Hosted: we handle it, and tell you once it is back.

Removing a machine for good (self-hosted)

Empty it of sessions first, as in "Planned downtime".
Take back every person's account on it (Creating and removing accounts).
Remove on its card: the machine's credential is revoked at once and the card disappears. To connect it again later takes a new join code.