552 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
root	21f7b6171c	no-mistakes(document): Dedupe cadence copies; registry remains authoritative	2026-09-12 16:02:15 +00:00
root	bb17c2120f	no-mistakes(document): Make litellm-health the live owner; dedupe probes	2026-09-12 16:00:56 +00:00
root	dc42ecc235	no-mistakes(document): Align gpu-vision and single-source-of-truth documentation	2026-09-12 15:56:16 +00:00
root	baaac9d7c6	no-mistakes(review): delete remaining duplicated timeout and frozen model-list state	2026-09-12 15:43:21 +00:00
root	2f65c38213	no-mistakes(review): delete duplicated config tables, point to CT 116 authority	2026-09-12 15:39:15 +00:00
root	d9eb18c024	no-mistakes(review): align sibling contracts on aliases, crew cap, and monitor key	2026-09-12 15:30:14 +00:00
root	3f07b9bbcc	no-mistakes(review): fix master-key inference and probe-surface drift in sibling contracts	2026-09-12 15:22:02 +00:00
abiba	1a598d0fcb	docs(litellm-health): fix public-vs-backend probe surfaces and stale gemma model list ... - Execution step 2 now documents the public edge and the backend edge as two distinct surfaces: public serves /ui/ and /docs (404 on the /litellm/ prefix), backend http://192.168.68.116 serves /litellm/ui/ and /litellm/docs (with /ui/ and /docs as 301 helpers). Each probe names its surface. - GPU topology: ocu-llm RTX 5070 now serves gpu-vision (gemma-4-12b retired). - Fallback/timeout table rewritten to the live router_settings.fallbacks chains. - Step 7 model list: gemma-4-12b -> gpu-vision, with a key-scoped /v1/models note and the 2026-09-12 master-key registry snapshot.	2026-09-12 15:11:24 +00:00
abiba-bot	e3752af162	Merge pull request 'fix(zulip-health): retire the dead kagentz Zulip adapter leg' (#78) from fix/zulip-kagentz-adapter-20260912 into master	2026-09-12 14:34:08 +00:00
root	22d2c3acac	no-mistakes(document): Reconcile Zulip docs with retired kagentz adapter leg	2026-09-12 14:31:26 +00:00
root	5f582e2c9c	no-mistakes(review): fix duplicate-000 probe capture at assignment boundary	2026-09-12 14:23:35 +00:00
root	b1b3b4c010	no-mistakes(review): fix kagentz A2A status logging, tests, and contract retirement	2026-09-12 14:19:13 +00:00
mumuni-bot	9312c1a806	Remove client deliverable from the contracts repo (process fix) ... The Scot Murray Hermes playbook package did not belong in this repo. It was added directly to master in c7af7c0 (and extended in 64ccf65) in violation of this repo's own rule - "No agent pushes directly to main; all changes go through PRs with automated validation" - and prose-contracts is publicly readable (private: false), so client engagement material was exposed beyond the intended audience. Both commits are unwound by removing the path here, through a PR this time. The deliverable and its provenance are preserved outside the repo at: /home/hermes/syslog/drafts/scot-hermes-playbook/ /home/hermes/syslog/projects/murray-capital/deliverables/ No contract files are touched by this change.	2026-09-12 10:09:14 -04:00
root	5d9b9847bc	fix: remove kagentz Zulip adapter leg (code no longer exists) ... - Remove adapter process check and restart logic - Keep A2A probe (port 80, HTTP code check) - The adapter code at /a0/usr/kagentz-zulip/ no longer exists - Captain's ruling: Zulip communication with agent zero is not priority	2026-09-12 14:09:01 +00:00
root	d29da3cc69	Make missing key file fail loudly instead of using dead key fallback ... - Drop dead key literal from except block - Report 'no-key-file' as check status when key file missing/unreadable	2026-09-12 12:49:15 +00:00
root	2ba1016ca8	Fix LiteLLM API key source and auth header ... - Load API key from durable file /root/.abiba-workspace/secrets/litellm-key.txt (works in cron) - Fix http_get to use Bearer token instead of Basic Auth for API endpoint check - All 6 LiteLLM checks now pass (was 5/6)	2026-09-12 12:45:50 +00:00
abiba-bot	9c8637bcaf	Merge pull request 'fix: correct Agent Zero A2A probe port in zulip-monitor.sh' (#76) from fix/a2a-port-20260911 into master	2026-09-11 22:17:37 +00:00
root	aec62f7e77	fix: correct Agent Zero A2A probe from stale port 8001 to correct port 80 ... - Changed A2A probe from http://127.0.0.1:8001/.well-known/agent.json to http://127.0.0.1:80/a2a/ inside agent-zero container - Port 8001 does not exist inside container (nothing listens there) - Port 80 maps to external port 50080; returns 401 (auth-gated, alive by design) - Updated A2A_URL in adapter.py restart command to use port 80 instead of 8001 - Verified: probe now returns 401 (auth-gated) instead of 000 (connection refused) - Before: kagentz A2A reported DOWN on every run (false positive due to stale port) - After: kagentz A2A reports ✅ A2A alive (auth-gated 401 = healthy)	2026-09-11 21:54:13 +00:00
kagentz-bot	b326a8944a	Merge pull request 'feat(litellm): 1.99.1 update coverage, trove agent, nginx /ui /docs fixes' (#75) from update/litellm-1991-trove-20260911 into master	2026-09-11 19:34:21 +00:00
agent-zero	7730cc7c03	feat(litellm): 1.99.1 update coverage, trove agent, nginx /ui /docs path fixes	2026-09-11 15:32:20 -04:00
kagentz-bot	af27530edc	Merge pull request 'fix(router): decommission legacy GPU router across contracts and fleet scripts' (#74) from fix/decommission-router-20260911 into master	2026-09-11 19:19:13 +00:00
agent-zero	832b184af6	fix(litellm): upgrade contract refs 1.90.0-rc.1 -> 1.99.1 and correct redis role ... - harness-litellm pinned tag updated to 1.99.1 in infrastructure-control, litellm-health, litellm-self-heal container tables - infrastructure-update MCP per-key limitation note now cites v1.99.1 - harness-redis role corrected: dead 'Router slots, circuit breakers' -> 'LiteLLM cache + rate-limit state' (router decommissioned 2026-09-11) - litellm-self-heal Rule 9 wording clarified for cache/rate-limit only Live verification 2026-09-11: harness-litellm healthy, /health 200/200, 7 models, 46 keys, prisma migrations 127 -> 157.	2026-09-11 15:05:00 -04:00
abiba-bot	862356bcac	Merge pull request 'fix(dsh-web-auth): Authentik-gated :80 login + non-disruptive token capture' (#73) from fm/dsh-web-auth-restart-20260911 into master	2026-09-11 18:21:02 +00:00
agent-zero	c26255f5ff	fix(router): decommission legacy GPU router across contracts and fleet scripts ... Router container, image, and config are purged on CT 116 (verified: no container, no image, inference-harness-router:latest removed, :9000 free, 11 containers healthy, 7 models, live syslog-auto completion OK). Updates: - gpu-fleet.prose.md: topology diagram rebuilt without the router tier - gpu-monitor / gpu-self-heal / litellm-health / litellm-self-heal: router steps dropped - infrastructure-control.prose.md: container inventory + litellm row corrected - scripts/daily-infra-report.py, scripts/prose-ai-review.sh: host-scoped checks Verified: 40/40 anchors matched uniquely, 0 U+FFFD across changed files, daily-infra-report.py compiles, no stray harness-router references remain.	2026-09-11 14:20:18 -04:00
abiba-bot	767bd22d9c	no-mistakes(document): Align zulip-health v3.2.0 registry metadata and B4 formatting	2026-09-11 17:49:25 +00:00
mumuni-bot	64ccf65eaf	scot-hermes-playbook: send-ready package (PDF render + delivery record + render script) for t_2c716052	2026-09-11 17:40:56 +00:00
abiba-bot	e97145c88f	no-mistakes(review): re-sample systemd invocation each pass during token wait	2026-09-11 17:34:53 +00:00
abiba-bot	55f1208eb8	no-mistakes(review): scope dsh token to invocation; log nginx diagnostics	2026-09-11 17:30:33 +00:00
abiba-bot	b9adf353ee	no-mistakes(review): guard missing include, non-fatal pending reload, chmod stash	2026-09-11 17:24:12 +00:00
abiba-bot	aeb66ea22d	no-mistakes(review): fix pending-reload path, token modes, restart check	2026-09-11 17:17:26 +00:00
abiba-bot	288f74cf84	no-mistakes(review): reprobe dsh tokens; persist pending nginx reload on failure	2026-09-11 17:12:11 +00:00
abiba-bot	c66671dbee	no-mistakes(review): simplify dsh token selection and reload state machine	2026-09-11 17:07:00 +00:00
abiba-bot	b80d3142aa	no-mistakes(review): harden dsh token reload retry, legacy bypass, cookie verification	2026-09-11 16:59:55 +00:00
mumuni-bot	c7af7c0689	Add reviewed Hermes playbook for Scot Murray (client deliverable) ... Provenance: kanban t_02148213 (research) -> t_4265c369 (author) -> t_fefdf30b (review). Review verdict: APPROVED-WITH-FIXES, 7/7 checks PASS, 17/17 YouTube links oEmbed-verified, 26+ CLI commands re-run against v0.21.1, no Murray/JDS client data present. Artifact: deliverables/scot-hermes-playbook/HERMES-PLAYBOOK-FOR-SCOT.md 377 lines, sha256 b0966a649fec96da4975ec00e627fbaba3a92a62c4a92b33bc06589c47d25f7f Includes the research dossier and its raw verification evidence under research/. STATUS: written and reviewed, NOT delivered to the client. Delivery is gated on Kwame's approval and tracked as a separate blocked kanban card.	2026-09-11 12:54:52 -04:00
abiba-bot	266fa1f835	fix(dsh-web-auth): Authentik-gated :80 login + non-disruptive token capture ... Correct the dsh-web authentication fix after parent correction: - Remove the unauthenticated :8081 endpoint (0.0.0.0 bind with no auth_request = full Authentik bypass for the LAN). The script now removes /etc/nginx/sites-enabled/dsh.token automatically if it reappears. - Put the login path inside the Authentik-gated :80 server block as location = /dsh-web-login; proxy to dsh-web with Host = tankodhs.sysloggh.net so the 30-day cookie is bound to the public authority, never to 127.0.0.1:3080. - Isolate the rotating token in a generated include /etc/dsh-web/nginx-login.conf; reload nginx only when it changes. - Replace the disruptive capture (systemctl stop/start dsh-web) with a non-disruptive read of the running service's journal, scoped to the current systemd invocation so a restarted process's stale token is never reused while the new banner is still pending. - Keep x-dsh-task-board-proxy-token and Host $ak_origin_host intact in '/'. - Document the corrected design (B4) in zulip-health.prose.md, v3.2.0. Live-verified 2026-09-11: no auth bypass (302), :8081 refused (000), a cookie minted before two dsh-web restarts still returns 200, the refreshed token mints a fresh cookie, and the systemd ExecStartPost/timer refreshes the token automatically without touching dsh-web.	2026-09-11 16:52:45 +00:00
abiba-bot	85ea1f4f3d	no-mistakes(review): harden dsh token capture: loopback bind, atomic nginx config	2026-09-11 15:22:41 +00:00
abiba-bot	b2a259fa23	fix: add dsh-web restart-persistent authentication ... - Add capture-dsh-token.sh script that captures the dsh-web launch token - Add login endpoint (/dsh-web-login on :8081) that mints 30-day auth cookie - Document the authentication flow in zulip-health.prose.md (Platform B4) - Cookie is authority-bound to 127.0.0.1:3080 with 30-day expiry - After first login, subsequent requests use the cookie — no token required	2026-09-11 14:56:57 +00:00
mumuni-bot	fb185ed90a	Merge pull request 'feat(memory-fixer): v2.1.0 — stale nodes auto-archived (Kwame directive 2026-09-11)' (#72) from feat/memory-fixer-auto-archive-20260911 into master	2026-09-11 12:12:52 +00:00
mumuni-bot	b001b657d4	feat(memory-fixer): v2.1.0 — stale nodes are auto-archived (Kwame directive 2026-09-11) ... - New Level 1 fix 4: archive-suggested stale nodes are archived outright via one updateNode call (description -> '[ARCHIVED] ' + metadata state=archived). The [REVIEW: archive] tag is retired. - Fix 3 now tags refresh-suggested (living) nodes only; those are still escalated. - Corrected the SSH claim: updateNode DOES accept state transitions and bumps updated_at (verified 2026-09-11 archiving 7 nodes: #61 #373 #388 #465 #475 #526 #1476). - Level 2 escalation 1 rescoped to refresh-suggested nodes. - Checks section: any remaining [REVIEW: archive] means fix 4 was skipped.	2026-09-11 12:10:16 +00:00
abiba-bot	a1ffeaad34	Merge pull request 'update(infrastructure-update): v1.3.0 — full 5-host Docker ecosystem coverage (live-verified 2026-09-08)' (#64) from update/docker-ecosystems-20260908 into master	2026-09-10 23:21:44 +00:00
root	287657a77a	Merge remote-tracking branch 'origin/master' into update/docker-ecosystems-20260908	2026-09-10 23:01:32 +00:00
root	21f9073e0b	fix(daily-infra-report): use pve_probe_status in render + add regression tests (PR #64 round 2)	2026-09-10 23:01:18 +00:00
root	32fe7c0652	fix(daily-infra-report): complete Zulip nested-key fix + Proxmox port/auth fix (PR #64 review fix 1-2)	2026-09-10 22:03:48 +00:00
root	25cf2f5eef	fix(daily-infra-report): read Zulip state from nested 'zulip' key (PR #64 fix 3a)	2026-09-10 20:55:17 +00:00
root	26f2301188	fix(pm2-self-heal): remove stray fragment so script parses (PR #64 fix 2)	2026-09-10 20:43:01 +00:00
root	a6a459acc0	fix: correct Firecrawl GET / response code from 404 to 200 (PR #64)	2026-09-10 20:42:15 +00:00
abiba-bot	14bed6e916	Merge pull request 'fix(monitoring): stop monitoring Mumuni from this host (moved to CT105/.14)' (#71) from fm/denya-mumuni-monitor-removal-20260910 into master	2026-09-10 12:30:19 +00:00
agent-zero	2e70c834cb	docs(infrastructure-update): add mandatory digest-pin sweep to Wave 3 verification ... Digest-pinned images (image: repo@sha256:...) are invisible to 'docker compose pull' — the pin re-pulls the same digest forever, so new releases never appear. Verified 2026-09-10: audiobookshelf ran 2.34.0 for 7 weeks despite weekly pulls; un-pinned to :latest, now 2.36.0 (HTTP 200). Dockhand stack (also pinned) was removed 2026-09-10 as unused (user decision). Weekly task qSOOVzsU now sweeps for digest pins every run and flags them for user-approved un-pinning.	2026-09-10 06:30:07 -04:00
abiba-bot	4f59b82404	no-mistakes(document): Refresh stale Mumuni roster docs and registry metadata	2026-09-10 10:26:00 +00:00
abiba-bot	8a4ee4cf5a	no-mistakes(review): Pin Mumuni removal behaviorally and fix digest import bug	2026-09-10 10:18:38 +00:00