402 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
abiba-bot	1dc040251d	Merge pull request 'docs(litellm-health): single source of truth, gpu-vision alias, litellm-health as live owner' (#79) from fix/litellm-health-drift-20260912 into master	2026-09-12 16:05:28 +00:00
root	21f7b6171c	no-mistakes(document): Dedupe cadence copies; registry remains authoritative	2026-09-12 16:02:15 +00:00
root	bb17c2120f	no-mistakes(document): Make litellm-health the live owner; dedupe probes	2026-09-12 16:00:56 +00:00
root	dc42ecc235	no-mistakes(document): Align gpu-vision and single-source-of-truth documentation	2026-09-12 15:56:16 +00:00
root	baaac9d7c6	no-mistakes(review): delete remaining duplicated timeout and frozen model-list state	2026-09-12 15:43:21 +00:00
root	2f65c38213	no-mistakes(review): delete duplicated config tables, point to CT 116 authority	2026-09-12 15:39:15 +00:00
root	d9eb18c024	no-mistakes(review): align sibling contracts on aliases, crew cap, and monitor key	2026-09-12 15:30:14 +00:00
root	3f07b9bbcc	no-mistakes(review): fix master-key inference and probe-surface drift in sibling contracts	2026-09-12 15:22:02 +00:00
abiba	1a598d0fcb	docs(litellm-health): fix public-vs-backend probe surfaces and stale gemma model list ... - Execution step 2 now documents the public edge and the backend edge as two distinct surfaces: public serves /ui/ and /docs (404 on the /litellm/ prefix), backend http://192.168.68.116 serves /litellm/ui/ and /litellm/docs (with /ui/ and /docs as 301 helpers). Each probe names its surface. - GPU topology: ocu-llm RTX 5070 now serves gpu-vision (gemma-4-12b retired). - Fallback/timeout table rewritten to the live router_settings.fallbacks chains. - Step 7 model list: gemma-4-12b -> gpu-vision, with a key-scoped /v1/models note and the 2026-09-12 master-key registry snapshot.	2026-09-12 15:11:24 +00:00
abiba-bot	e3752af162	Merge pull request 'fix(zulip-health): retire the dead kagentz Zulip adapter leg' (#78) from fix/zulip-kagentz-adapter-20260912 into master	2026-09-12 14:34:08 +00:00
root	22d2c3acac	no-mistakes(document): Reconcile Zulip docs with retired kagentz adapter leg	2026-09-12 14:31:26 +00:00
root	5f582e2c9c	no-mistakes(review): fix duplicate-000 probe capture at assignment boundary	2026-09-12 14:23:35 +00:00
root	b1b3b4c010	no-mistakes(review): fix kagentz A2A status logging, tests, and contract retirement	2026-09-12 14:19:13 +00:00
root	5d9b9847bc	fix: remove kagentz Zulip adapter leg (code no longer exists) ... - Remove adapter process check and restart logic - Keep A2A probe (port 80, HTTP code check) - The adapter code at /a0/usr/kagentz-zulip/ no longer exists - Captain's ruling: Zulip communication with agent zero is not priority	2026-09-12 14:09:01 +00:00
root	d29da3cc69	Make missing key file fail loudly instead of using dead key fallback ... - Drop dead key literal from except block - Report 'no-key-file' as check status when key file missing/unreadable	2026-09-12 12:49:15 +00:00
root	2ba1016ca8	Fix LiteLLM API key source and auth header ... - Load API key from durable file /root/.abiba-workspace/secrets/litellm-key.txt (works in cron) - Fix http_get to use Bearer token instead of Basic Auth for API endpoint check - All 6 LiteLLM checks now pass (was 5/6)	2026-09-12 12:45:50 +00:00
abiba-bot	9c8637bcaf	Merge pull request 'fix: correct Agent Zero A2A probe port in zulip-monitor.sh' (#76) from fix/a2a-port-20260911 into master	2026-09-11 22:17:37 +00:00
root	aec62f7e77	fix: correct Agent Zero A2A probe from stale port 8001 to correct port 80 ... - Changed A2A probe from http://127.0.0.1:8001/.well-known/agent.json to http://127.0.0.1:80/a2a/ inside agent-zero container - Port 8001 does not exist inside container (nothing listens there) - Port 80 maps to external port 50080; returns 401 (auth-gated, alive by design) - Updated A2A_URL in adapter.py restart command to use port 80 instead of 8001 - Verified: probe now returns 401 (auth-gated) instead of 000 (connection refused) - Before: kagentz A2A reported DOWN on every run (false positive due to stale port) - After: kagentz A2A reports ✅ A2A alive (auth-gated 401 = healthy)	2026-09-11 21:54:13 +00:00
kagentz-bot	b326a8944a	Merge pull request 'feat(litellm): 1.99.1 update coverage, trove agent, nginx /ui /docs fixes' (#75) from update/litellm-1991-trove-20260911 into master	2026-09-11 19:34:21 +00:00
agent-zero	7730cc7c03	feat(litellm): 1.99.1 update coverage, trove agent, nginx /ui /docs path fixes	2026-09-11 15:32:20 -04:00
kagentz-bot	af27530edc	Merge pull request 'fix(router): decommission legacy GPU router across contracts and fleet scripts' (#74) from fix/decommission-router-20260911 into master	2026-09-11 19:19:13 +00:00
agent-zero	832b184af6	fix(litellm): upgrade contract refs 1.90.0-rc.1 -> 1.99.1 and correct redis role ... - harness-litellm pinned tag updated to 1.99.1 in infrastructure-control, litellm-health, litellm-self-heal container tables - infrastructure-update MCP per-key limitation note now cites v1.99.1 - harness-redis role corrected: dead 'Router slots, circuit breakers' -> 'LiteLLM cache + rate-limit state' (router decommissioned 2026-09-11) - litellm-self-heal Rule 9 wording clarified for cache/rate-limit only Live verification 2026-09-11: harness-litellm healthy, /health 200/200, 7 models, 46 keys, prisma migrations 127 -> 157.	2026-09-11 15:05:00 -04:00
abiba-bot	862356bcac	Merge pull request 'fix(dsh-web-auth): Authentik-gated :80 login + non-disruptive token capture' (#73) from fm/dsh-web-auth-restart-20260911 into master	2026-09-11 18:21:02 +00:00
agent-zero	c26255f5ff	fix(router): decommission legacy GPU router across contracts and fleet scripts ... Router container, image, and config are purged on CT 116 (verified: no container, no image, inference-harness-router:latest removed, :9000 free, 11 containers healthy, 7 models, live syslog-auto completion OK). Updates: - gpu-fleet.prose.md: topology diagram rebuilt without the router tier - gpu-monitor / gpu-self-heal / litellm-health / litellm-self-heal: router steps dropped - infrastructure-control.prose.md: container inventory + litellm row corrected - scripts/daily-infra-report.py, scripts/prose-ai-review.sh: host-scoped checks Verified: 40/40 anchors matched uniquely, 0 U+FFFD across changed files, daily-infra-report.py compiles, no stray harness-router references remain.	2026-09-11 14:20:18 -04:00
abiba-bot	767bd22d9c	no-mistakes(document): Align zulip-health v3.2.0 registry metadata and B4 formatting	2026-09-11 17:49:25 +00:00
mumuni-bot	64ccf65eaf	scot-hermes-playbook: send-ready package (PDF render + delivery record + render script) for t_2c716052	2026-09-11 17:40:56 +00:00
abiba-bot	e97145c88f	no-mistakes(review): re-sample systemd invocation each pass during token wait	2026-09-11 17:34:53 +00:00
abiba-bot	55f1208eb8	no-mistakes(review): scope dsh token to invocation; log nginx diagnostics	2026-09-11 17:30:33 +00:00
abiba-bot	b9adf353ee	no-mistakes(review): guard missing include, non-fatal pending reload, chmod stash	2026-09-11 17:24:12 +00:00
abiba-bot	aeb66ea22d	no-mistakes(review): fix pending-reload path, token modes, restart check	2026-09-11 17:17:26 +00:00
abiba-bot	288f74cf84	no-mistakes(review): reprobe dsh tokens; persist pending nginx reload on failure	2026-09-11 17:12:11 +00:00
abiba-bot	c66671dbee	no-mistakes(review): simplify dsh token selection and reload state machine	2026-09-11 17:07:00 +00:00
abiba-bot	b80d3142aa	no-mistakes(review): harden dsh token reload retry, legacy bypass, cookie verification	2026-09-11 16:59:55 +00:00
mumuni-bot	c7af7c0689	Add reviewed Hermes playbook for Scot Murray (client deliverable) ... Provenance: kanban t_02148213 (research) -> t_4265c369 (author) -> t_fefdf30b (review). Review verdict: APPROVED-WITH-FIXES, 7/7 checks PASS, 17/17 YouTube links oEmbed-verified, 26+ CLI commands re-run against v0.21.1, no Murray/JDS client data present. Artifact: deliverables/scot-hermes-playbook/HERMES-PLAYBOOK-FOR-SCOT.md 377 lines, sha256 b0966a649fec96da4975ec00e627fbaba3a92a62c4a92b33bc06589c47d25f7f Includes the research dossier and its raw verification evidence under research/. STATUS: written and reviewed, NOT delivered to the client. Delivery is gated on Kwame's approval and tracked as a separate blocked kanban card.	2026-09-11 12:54:52 -04:00
abiba-bot	266fa1f835	fix(dsh-web-auth): Authentik-gated :80 login + non-disruptive token capture ... Correct the dsh-web authentication fix after parent correction: - Remove the unauthenticated :8081 endpoint (0.0.0.0 bind with no auth_request = full Authentik bypass for the LAN). The script now removes /etc/nginx/sites-enabled/dsh.token automatically if it reappears. - Put the login path inside the Authentik-gated :80 server block as location = /dsh-web-login; proxy to dsh-web with Host = tankodhs.sysloggh.net so the 30-day cookie is bound to the public authority, never to 127.0.0.1:3080. - Isolate the rotating token in a generated include /etc/dsh-web/nginx-login.conf; reload nginx only when it changes. - Replace the disruptive capture (systemctl stop/start dsh-web) with a non-disruptive read of the running service's journal, scoped to the current systemd invocation so a restarted process's stale token is never reused while the new banner is still pending. - Keep x-dsh-task-board-proxy-token and Host $ak_origin_host intact in '/'. - Document the corrected design (B4) in zulip-health.prose.md, v3.2.0. Live-verified 2026-09-11: no auth bypass (302), :8081 refused (000), a cookie minted before two dsh-web restarts still returns 200, the refreshed token mints a fresh cookie, and the systemd ExecStartPost/timer refreshes the token automatically without touching dsh-web.	2026-09-11 16:52:45 +00:00
abiba-bot	85ea1f4f3d	no-mistakes(review): harden dsh token capture: loopback bind, atomic nginx config	2026-09-11 15:22:41 +00:00
abiba-bot	b2a259fa23	fix: add dsh-web restart-persistent authentication ... - Add capture-dsh-token.sh script that captures the dsh-web launch token - Add login endpoint (/dsh-web-login on :8081) that mints 30-day auth cookie - Document the authentication flow in zulip-health.prose.md (Platform B4) - Cookie is authority-bound to 127.0.0.1:3080 with 30-day expiry - After first login, subsequent requests use the cookie — no token required	2026-09-11 14:56:57 +00:00
mumuni-bot	fb185ed90a	Merge pull request 'feat(memory-fixer): v2.1.0 — stale nodes auto-archived (Kwame directive 2026-09-11)' (#72) from feat/memory-fixer-auto-archive-20260911 into master	2026-09-11 12:12:52 +00:00
mumuni-bot	b001b657d4	feat(memory-fixer): v2.1.0 — stale nodes are auto-archived (Kwame directive 2026-09-11) ... - New Level 1 fix 4: archive-suggested stale nodes are archived outright via one updateNode call (description -> '[ARCHIVED] ' + metadata state=archived). The [REVIEW: archive] tag is retired. - Fix 3 now tags refresh-suggested (living) nodes only; those are still escalated. - Corrected the SSH claim: updateNode DOES accept state transitions and bumps updated_at (verified 2026-09-11 archiving 7 nodes: #61 #373 #388 #465 #475 #526 #1476). - Level 2 escalation 1 rescoped to refresh-suggested nodes. - Checks section: any remaining [REVIEW: archive] means fix 4 was skipped.	2026-09-11 12:10:16 +00:00
abiba-bot	a1ffeaad34	Merge pull request 'update(infrastructure-update): v1.3.0 — full 5-host Docker ecosystem coverage (live-verified 2026-09-08)' (#64) from update/docker-ecosystems-20260908 into master	2026-09-10 23:21:44 +00:00
root	287657a77a	Merge remote-tracking branch 'origin/master' into update/docker-ecosystems-20260908	2026-09-10 23:01:32 +00:00
root	21f9073e0b	fix(daily-infra-report): use pve_probe_status in render + add regression tests (PR #64 round 2)	2026-09-10 23:01:18 +00:00
root	32fe7c0652	fix(daily-infra-report): complete Zulip nested-key fix + Proxmox port/auth fix (PR #64 review fix 1-2)	2026-09-10 22:03:48 +00:00
root	25cf2f5eef	fix(daily-infra-report): read Zulip state from nested 'zulip' key (PR #64 fix 3a)	2026-09-10 20:55:17 +00:00
root	26f2301188	fix(pm2-self-heal): remove stray fragment so script parses (PR #64 fix 2)	2026-09-10 20:43:01 +00:00
root	a6a459acc0	fix: correct Firecrawl GET / response code from 404 to 200 (PR #64)	2026-09-10 20:42:15 +00:00
abiba-bot	14bed6e916	Merge pull request 'fix(monitoring): stop monitoring Mumuni from this host (moved to CT105/.14)' (#71) from fm/denya-mumuni-monitor-removal-20260910 into master	2026-09-10 12:30:19 +00:00
agent-zero	2e70c834cb	docs(infrastructure-update): add mandatory digest-pin sweep to Wave 3 verification ... Digest-pinned images (image: repo@sha256:...) are invisible to 'docker compose pull' — the pin re-pulls the same digest forever, so new releases never appear. Verified 2026-09-10: audiobookshelf ran 2.34.0 for 7 weeks despite weekly pulls; un-pinned to :latest, now 2.36.0 (HTTP 200). Dockhand stack (also pinned) was removed 2026-09-10 as unused (user decision). Weekly task qSOOVzsU now sweeps for digest pins every run and flags them for user-approved un-pinning.	2026-09-10 06:30:07 -04:00
abiba-bot	4f59b82404	no-mistakes(document): Refresh stale Mumuni roster docs and registry metadata	2026-09-10 10:26:00 +00:00
abiba-bot	8a4ee4cf5a	no-mistakes(review): Pin Mumuni removal behaviorally and fix digest import bug	2026-09-10 10:18:38 +00:00