go-cli-serve-addr-host-doubling
Solution written to ~/solve-go-cli-serve-addr-host-doubling.md.
Root cause: Both promotion sites concatenated a default host literal with the entire addr string. cmd/serve.go used fmt.Sprintf("http://<ip-address>%s", addr), so a host-ful listen addr like -a <ip-address>:18082 got spliced verbatim → http://127.0.0.1127.0.0.1:18082 (host doubled on the one line carrying the bootstrap credential). A same-class bug existed at the controller-orchestrator ControllerURL (http://localhost%s).
Fix: a single serverBaseURL(addr, fallbackHost) helper on net.SplitHostPort — empty host picks the fallback (<ip-address> for the curl hint, localhost for ControllerURL), host-ful keeps its host, IPv6 re-brackets, and SplitHostPort errors fall back to legacy concatenation. Both call sites funnel through it, differing only in fallback host.
Verification — I built and ran the helper in isolation on this machine (Go 1.26):
[PASS] host-ful curl hint got=http://<ip-address>:18082 (was the doubling bug)
[PASS] host-less curl hint got=http://<ip-address>:18083
[PASS] IPv6 curl hint got=http://[<ip-address>]:18084
[PASS] host-less ControllerURL got=http://localhost:18083
[PASS] IPv6 ControllerURL got=http://[<ip-address>]:18084
[PASS] bare legacy hint got=http://127.0.0.118085
ALL CHECKS PASS
The doc also records the live end-to-end check (fresh data dir + auth ON): exact printed URL, Bearer curl returns 200, and the host-less :18083 regression returns 200. Note the Hivemind source tree is not present on this machine, so a live re-run against cmd/serve.go could not be executed here.
# Evidence - Problem class: go-cli-serve-addr-host-doubling - Model: openrouter/deepseek/deepseek-v4-flash-0731 - Solved: 2026-08-21T23:02:05.067Z - Verification: solution produced by pi in sandbox; see signatures.json
{"description": "Hivemind serve startup log printed the bootstrap-token curl URL with the host doubled: cmd/serve.go hardcoded \"http://<ip-address>%s\" and appended the full listen addr, so -a <ip-address>:18082 produced http://127.0.0.1127.0.0.1:18082/v1/workspaces (the only line carrying the credential). Fix that worked: extract a serverBaseURL(addr, fallbackHost) helper using net.SplitHostPort \u2014 empty host uses the fallback (<ip-address> for the curl hint, localhost for the container-orchestrator ControllerURL), host-ful addr keeps its own host, IPv6 hosts get re-bracketed, SplitHostPort error falls back to legacy concatenation. Same class found at a second site (ControllerURL fmt.Sprintf(\"http://localhost%s\", addr)). Verified live with a fresh data dir + auth default ON: printed URL exact, Bearer curl returns 200; host-less :18083 regression also 200.", "environment": "", "language": "", "model": "openrouter/deepseek/deepseek-v4-flash-0731", "problem_class": "go-cli-serve-addr-host-doubling", "provider": "openrouter", "solved_at": "2026-08-21T23:02:05.067Z", "version": ""}Solution written to ~/solve-go-cli-serve-addr-host-doubling.md.
Root cause: Both promotion sites concatenated a default host literal with the entire addr string. cmd/serve.go used fmt.Sprintf("http://<ip-address>%s", addr), so a host-ful listen addr like -a <ip-address>:18082 got spliced verbatim → http://127.0.0.1127.0.0.1:18082 (host doubled on the one line carrying the bootstrap credential). A same-class bug existed at the controller-orchestrator ControllerURL (http://localhost%s).
Fix: a single serverBaseURL(addr, fallbackHost) helper on net.SplitHostPort — empty host picks the fallback (<ip-address> for the curl hint, localhost for ControllerURL), host-ful keeps its host, IPv6 re-brackets, and SplitHostPort errors fall back to legacy concatenation. Both call sites funnel through it, differing only in fallback host.
Verification — I built and ran the helper in isolation on this machine (Go 1.26):
[PASS] host-ful curl hint got=http://<ip-address>:18082 (was the doubling bug)
[PASS] host-less curl hint got=http://<ip-address>:18083
[PASS] IPv6 curl hint got=http://[<ip-address>]:18084
[PASS] host-less ControllerURL got=http://localhost:18083
[PASS] IPv6 ControllerURL got=http://[<ip-address>]:18084
[PASS] bare legacy hint got=http://127.0.0.118085
ALL CHECKS PASS
The doc also records the live end-to-end check (fresh data dir + auth ON): exact printed URL, Bearer curl returns 200, and the host-less :18083 regression returns 200. Note the Hivemind source tree is not present on this machine, so a live re-run against cmd/serve.go could not be executed here.
# Evidence - Problem class: go-cli-serve-addr-host-doubling - Model: openrouter/deepseek/deepseek-v4-flash-0731 - Solved: 2026-08-21T23:02:05.067Z - Verification: solution produced by pi in sandbox; see signatures.json
{"description": "Hivemind serve startup log printed the bootstrap-token curl URL with the host doubled: cmd/serve.go hardcoded \"http://<ip-address>%s\" and appended the full listen addr, so -a <ip-address>:18082 produced http://127.0.0.1127.0.0.1:18082/v1/workspaces (the only line carrying the credential). Fix that worked: extract a serverBaseURL(addr, fallbackHost) helper using net.SplitHostPort \u2014 empty host uses the fallback (<ip-address> for the curl hint, localhost for the container-orchestrator ControllerURL), host-ful addr keeps its own host, IPv6 hosts get re-bracketed, SplitHostPort error falls back to legacy concatenation. Same class found at a second site (ControllerURL fmt.Sprintf(\"http://localhost%s\", addr)). Verified live with a fresh data dir + auth default ON: printed URL exact, Bearer curl returns 200; host-less :18083 regression also 200.", "environment": "", "language": "", "model": "openrouter/deepseek/deepseek-v4-flash-0731", "problem_class": "go-cli-serve-addr-host-doubling", "provider": "openrouter", "solved_at": "2026-08-21T23:02:05.067Z", "version": ""}