fix: fleet config issues from 2026-07-18 relay review #23

Merged

jerome merged 3 commits from fix/fleet-config-issues-20260718 into master 2026-07-18 22:06:49 +00:00

Conversation 0 Commits 3 Files Changed 5

+37 -36

abiba-bot commented 2026-07-18 17:40:45 +00:00

Owner

Copy Link

Copy Source

Summary

Addresses 4 issues found during the relay inbox resolution session (2026-07-18) while investigating the 504 Gateway Timeout and compression configuration across the agent fleet.

Changes

1. hermes-agent-baseline.prose.md - Add stable aliases

• Added gpu-dense and gpu-light to the baseline models list alongside strix-moe
• Tanko was missing gpu-dense entirely (x_search was using grok-4.20-reasoning)

2. hermes-config-template.prose.md - Fix pgrep traps + vault guard

• Rule 12: Fixed pgrep pattern to use grep -v infisical | head -1 to avoid matching the infisical bash wrapper
• Rule 13: Added vault empty-key guard documentation

3. litellm-api-keys.prose.md - Fix auditable check

• Fixed pgrep hermes_cli to filter out the infisical wrapper

4. scripts/agent-health-check.py - Fix gateway PID detection

• Fixed pgrep to exclude infisical bash wrapper

Root Cause

The infisical-gateway.sh wrapper contains python -m hermes_cli.main gateway run in its command line. When pgrep matches this, health checks read the bash wrapper instead of the python process, returning 401.

Verification

• All 3 pgrep patterns consistently use grep -v infisical | head -1
• Rule 13 documents the vault empty-key scenario
• Baseline config now includes all 3 stable aliases

## Summary Addresses 4 issues found during the relay inbox resolution session (2026-07-18) while investigating the 504 Gateway Timeout and compression configuration across the agent fleet. ## Changes ### 1. hermes-agent-baseline.prose.md - Add stable aliases - Added `gpu-dense` and `gpu-light` to the baseline models list alongside `strix-moe` - Tanko was missing `gpu-dense` entirely (x_search was using `grok-4.20-reasoning`) ### 2. hermes-config-template.prose.md - Fix pgrep traps + vault guard - **Rule 12**: Fixed `pgrep` pattern to use `grep -v infisical | head -1` to avoid matching the infisical bash wrapper - **Rule 13**: Added vault empty-key guard documentation ### 3. litellm-api-keys.prose.md - Fix auditable check - Fixed `pgrep hermes_cli` to filter out the infisical wrapper ### 4. scripts/agent-health-check.py - Fix gateway PID detection - Fixed `pgrep` to exclude infisical bash wrapper ## Root Cause The infisical-gateway.sh wrapper contains `python -m hermes_cli.main gateway run` in its command line. When pgrep matches this, health checks read the bash wrapper instead of the python process, returning 401. ## Verification - All 3 pgrep patterns consistently use `grep -v infisical | head -1` - Rule 13 documents the vault empty-key scenario - Baseline config now includes all 3 stable aliases

abiba-bot added 1 commit 2026-07-18 17:40:45 +00:00

fix: fleet config issues from 2026-07-18 relay review ... 17a77e6b3f

- hermes-agent-baseline: add gpu-dense and gpu-light to models list
- hermes-config-template: fix pgrep traps (exclude infisical wrapper) + add
  vault empty-key guard documentation in Rule 13
- litellm-api-keys: fix pgrep pattern in auditable check
- scripts/agent-health-check: fix pgrep to exclude infisical bash wrapper

Addresses issues found during relay inbox resolution session:
1. pgrep -f 'hermes_cli.main gateway run' matches both the real python
   gateway and the infisical bash wrapper, causing false health readings
2. infisical vault stores empty key silently — no guard/monitoring
3. gpu-dense/gpu-light stable aliases missing from baseline config

abiba-bot added 1 commit 2026-07-18 17:49:03 +00:00

fix: remove trailing whitespace from litellm-api-keys.prose.md aebc98ead6

jerome added 1 commit 2026-07-18 18:06:22 +00:00

Merge branch 'master' into fix/fleet-config-issues-20260718 a74229ee74

jerome merged commit 06d2bcbc9e into master 2026-07-18 22:06:49 +00:00

Sign in to join this conversation.

Reviewers

No Reviewers

Labels

No items

No labels

Milestone

No items

No Milestone

Projects

Clear projects

No projects

Assignees

Clear assignees

abiba-bot jerome (Jerome Kwame Tabiri) kagentz-bot kwame (Kwame Tabiri) mumuni-bot (Mumuni 🦅 (Syslog Falcon)) tanko-bot theo

No Assignees

2 Participants

Notifications

Subscribe

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: SyslogSolution/prose-contracts#23