vh/esh-pfi-infrastructure
1
0
Fork 0
Code Issues 7 Pull Requests Actions Packages Projects Releases Wiki Activity
1,821 Commits 2 Branches 5 Tags
e16d8440508ae63a95d753ee2a7914fae1ab4eb2
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
vh e16d844050 feat(albok-service): 1.0.0a3 on nh3-albok (unit 9 slice B: video links); FleetTools albok links row 2026-10-19 13:09:34 -07:00
vh cb3bf228f0 docs(fleettools): spacing 2026-10-19 11:30:39 -07:00
vh 337f5a968c docs(fleettools): Diariz pilot + diariz-yt in the index 2026-10-19 11:30:31 -07:00
vh 1f706b9bd8 feat: diariz-yt (YouTube link -> Diariz upload, vaulted API token); svos v0.0.29 UI 0.0.34 published 2026-10-19 11:30:16 -07:00
vh f267d8997a feat(restic fv-ml1): Diariz in the host backup — run-before pg_dump (soft-fail), stage dir, model cache + raw pgdata excluded; first snapshot 776b700b 2026-10-19 11:23:37 -07:00
vh 366d6fdccd feat(diariz): pilot live on fv-ml1 GPU 3 — smoke test passed (8 speakers, gen summary); GPU 3 2 MiB idle / 9.9 GB peak / 5.1 GB resident 2026-10-19 11:12:39 -07:00
vh 9aecb677a8 feat(diariz): pilot stack on fv-ml1 GPU 3 — override (GPU pin, api port), vault-rendered .env, nightly idle-gated worker restart, fleet caddy site 2026-10-19 10:50:56 -07:00
vh 2929bfc60c feat(svos): v0.0.28 UI 0.0.33 published on nh3-svos (U24 the 3-D tree); no restart 2026-10-19 10:32:40 -07:00
vh c1867088e4 memory: althing-core 3.7.1 (herald rung stop condition) live on nh3-dev; push pending 2026-10-19 10:05:16 -07:00
vh 25029feaf4 feat(svos): v0.0.27 live on nh3-svos — interface 0.0.9 (owner-only state dir), UI 0.0.32; no card 2026-10-19 09:54:41 -07:00
vh b1b9a06011 memory: v0.0.26 publish time 2026-10-19 09:03:20 -07:00
vh ec8436495c feat(svos): v0.0.26 UI 0.0.30 published on nh3-svos (the flows' cadence); no restart 2026-10-19 09:03:11 -07:00
vh 1feb385ca1 ops(svos): v0.0.26 (UI 0.0.30, the flows' cadence) staged on nh3-svos; publish gated on the tag 2026-10-19 09:01:20 -07:00
vh 56668d8862 feat(svos): v0.0.25 UI 0.0.29 published on nh3-svos (U23 the tree in depth); no restart 2026-10-19 08:55:25 -07:00
vh 86532d261c ops(svos): v0.0.25 (UI 0.0.29, U23 the tree in depth) staged on nh3-svos; publish gated on the tag 2026-10-19 08:54:22 -07:00
vh b1a8952812 feat(svos): v0.0.24 live on nh3-svos — judge 0.0.2 + interface 0.0.8 (U22 card summaries), UI 0.0.28; four cards approved; grants 294/295 2026-10-19 08:42:42 -07:00
vh 4e3b3b60ea fix(nh3-svos): stray 50-svos.pre-judge in fsfreeze-hook.d broke the nightly freeze since 10-18 (moved out); NH3 WAN outage recovery; v0.0.16 playbook backs up outside the hook dir 2026-10-19 08:40:34 -07:00
vh 7fc01a4dd9 docs(fleettools): albok links drop (/srv/nemi/links) — writing row + when-to-reach sentence (albok-dev, verbatim) 2026-10-19 03:11:53 -07:00
vh 90b75a3c9e feat(albok-service): 1.0.0a2 on nh3-albok (unit 9 slice A: link sidecar section); deployed after the 0302 walk, health 8/8 2026-10-19 03:05:15 -07:00
vh ea2eba76a6 ops(svos): v0.0.24 (supersedes the unpushed v0.0.23; U22 after review) staged on nh3-svos; two-card cutover playbooks ready 2026-10-19 02:30:33 -07:00
vh 4b3f7769c0 ops(svos): v0.0.23 (U22: judge 0.0.2 explain, interface 0.0.8 summaries, UI 0.0.27) staged on nh3-svos; judge.toml explain_seconds; two-card cutover playbooks ready 2026-10-19 02:00:51 -07:00
vh 3bb5c6b726 feat(svos): v0.0.22 UI 0.0.26 published on nh3-svos (task result files by path); no restart 2026-10-19 01:25:19 -07:00
vh 9e8f439597 ops(svos): v0.0.22 (UI 0.0.26) staged on nh3-svos; publish gated on the tag 2026-10-19 01:24:21 -07:00
vh 83ed354f4a memory: first SVOS task verified end to end; prime -> app:app-terminal read (grant 267) 2026-10-19 01:19:20 -07:00
vh 344744604a memory: SVOS task launches were blocked by the kernel-origin allowlist; fixed 0118 2026-10-19 01:15:20 -07:00
vh d5e41d8cad fix(svos-front): kernel app origin admits the seat host's task reports (POST /tasks/start|progress|checking|exit); every task launch had failed start_unreported on a Caddy 404 2026-10-19 01:15:11 -07:00
vh ee6036a172 feat(svos): v0.0.21 UI 0.0.25 published on nh3-svos (draft survives a hidden tab); no restart 2026-10-19 01:05:01 -07:00
vh 265faa4b15 ops(svos): v0.0.21 (UI 0.0.25, the /tasks draft survives a hidden tab) staged on nh3-svos; publish gated on the tag 2026-10-19 01:03:18 -07:00
vh f9ec331919 ops(svos): repo-dread (dreadnaught; handle dread-dev) and repo-svtc in [[seats.repos]] (gen d7502572) 2026-10-19 01:01:31 -07:00
vh 87ddd9c5f3 feat(svos): v0.0.20 UI 0.0.24 published on nh3-svos (stronger look default, 125 s draft wait); no restart 2026-10-19 00:56:31 -07:00
vh 5be01a8744 fix(scriberr): patch 0004 — chat context window for gateway model names (LLM_DEFAULT_CONTEXT_WINDOW=131072); image ctxwin1 live, idle-gated deploy; svos v0.0.20 staged 2026-10-19 00:55:37 -07:00
vh 94ba3c659c feat(svos): v0.0.19 UI 0.0.23 (U21 working look) published on nh3-svos; no restart 2026-10-19 00:37:49 -07:00
vh 48b8f20919 ops(svos): v0.0.19 (UI 0.0.23, U21 working look) staged on nh3-svos; UI-only publish playbook ready, gated on the tag reaching origin 2026-10-19 00:32:54 -07:00
vh cf4d0ab712 docs(fleettools): albok fleet-agents token now reads the operator's knowledgebase (personal/notes + personal/inbox), Prime 2026-10-19 2026-10-19 00:22:51 -07:00
vh 78b676bb7f ops(svos): repo-albok in [[seats.repos]] so albok-dev is adopted as a seat (gen db56b0ed) 2026-10-19 00:17:29 -07:00
vh 44221e65b0 ops(svos): U20 settings grants issued on Prime's word and approved by him (ns:interface-settings read + autonomous write) 2026-10-18 23:56:40 -07:00
vh f281bfb830 feat(svos): v0.0.18 live on nh3-svos — interface 0.0.7 (U20 settings) + UI 0.0.22; card approved 2352:16; kernel process left on identical 0.0.17 code 2026-10-18 23:52:56 -07:00
vh 16603fe70b memory: v0.0.18 go is Prime's word on either channel; note the kernel's reported version in the release record 2026-10-18 23:26:39 -07:00
vh ec113b6efd ops(svos): v0.0.18 staged on nh3-svos (kernel 0.0.18, interface 0.0.7, UI 0.0.22); cutover playbook ready, gated on the tag reaching origin and Prime at the board 2026-10-18 23:25:46 -07:00
vh 4cc605ecbc feat(svos): v0.0.17 live on nh3-svos and nh3-dev — kernel 0.0.17 + UI 0.0.21, the six runtimes' activity marks (gen 29bc36bf), terminal 0.0.6, voice utterance_seconds 60; activity events verified 2026-10-18 22:57:27 -07:00
vh 42c146c6e7 memory: snapshot for clear — SVOS v0.0.16+judge live, v0.0.17 pushed (deploy at Prime's window); albok u6 done; Worldtree b195; 30+3 entries archived 2026-10-18 21:49:57 -07:00
vh c7a637950e memory: voice utterance_seconds stays 30 until the U17 release widens the web client 2026-10-18 17:06:50 -07:00
vh c509bb7153 fix(svos nh3-svos): voice utterance_seconds back to 30 — the web voice client refuses > 30 (voice panel broken since 10-17 1101) 2026-10-18 16:46:42 -07:00
vh 9c9d6a777a feat(svos): [tasks].judge = app-judge after Prime's grants; card audio verified (3/3 in 4.5-5.5 s) 2026-10-18 16:42:06 -07:00
vh 4f5c01390d feat(svos): v0.0.16 live on nh3-svos — app-judge enrolled and up (gen-large drafting, six local task models); owner grants pending 2026-10-18 16:34:58 -07:00
vh e2d2f63693 feat(svos): v0.0.16 (b51aa5e) staged on nh3-svos — kernel 0.0.16, app-judge 0.0.1, UI 0.0.20; cutover held for Prime 2026-10-18 09:27:58 -07:00
vh fa685c1953 memory: SVOS v0.0.15 on nh3-svos (v0.0.14 underneath), hermes query-file route; two verifications open 2026-10-18 03:04:20 -07:00
vh 251c5a8687 feat(svos): v0.0.15 live on nh3-svos (short spoken summons, voice 0.0.2); utterance_seconds 60, Matrix request_timeout 30 2026-10-17 11:01:56 -07:00
vh e85ea97101 fix(svos nh3-svos): Matrix request_timeout_seconds 60 — stopgap for card audio dying at exactly 15 s (svos-dev) 2026-10-17 09:17:21 -07:00
vh 77b75aa172 feat(svos): v0.0.14 live on nh3-svos + nh3-dev (cards approved 0909); hermes task runtime on the query-file route (Prime) 2026-10-17 09:11:10 -07:00
vh f843cd92b1 feat(wt-memory-gate-batch): --keep-data with a per-batch scratch outside git (TMPDIR), 14-day user tmpfiles retention (worldtree-dev's ask) 2026-10-17 07:55:26 -07:00
vh 39458e013a fix(svos v0.0.14 playbook): terminal verify reads the ScanError line (svos-dev: scan:on is only on the signed /health) 2026-10-17 07:53:30 -07:00
vh b72783cb3c feat(svos): v0.0.14 (3726d73) release playbooks — staged on nh3-svos and built on nh3-dev; cutover in three phases held for Prime's card window 2026-10-17 07:50:44 -07:00
vh bc91b40ac5 chore: retire asset-engine (Prime 2026-10-17); kuma gains delete-by-name; FleetTools/bootstrap/catalog marked 2026-10-17 00:16:31 -07:00
vh 055d56fa45 docs(fleettools/speech): stale Homepage ASR entries cleared 2026-10-17 00:10:24 -07:00
vh 4ddd72f22e docs(parakeet-nemo): rollback is compose up of the kept sherpa stack (old container removed to clear a stale Homepage entry) 2026-10-17 00:10:18 -07:00
vh b0235a1e46 docs(fleettools/speech): ASR table matches live state (Parakeet NeMo primary + LiteLLM aliases, VibeVoice, Scriberr on fv-ml1); retired Speaches/sherpa entries named 2026-10-17 00:07:30 -07:00
vh c560e37739 docs(fleettools): Albok page + index entry (draft by albok-dev, Prime's ask); albok MCP in claude-only; task-board marked mothballed 2026-10-16 19:54:34 -07:00
vh 3cb969f1d1 docs(nh3-dev): book drop path is scp (Prime 2026-10-16), no share 2026-10-16 12:29:53 -07:00
vh 9f79c5e36f memory: Worldtree demo/personal/pinned on v1.0.0b195; pinned's bridge removed 2026-10-16 11:12:52 -07:00
vh eb2a0a532c feat(nh3-dev): /srv/nemi/books book drop (fiction/ nonfiction/ rejected/) for albok unit 8 2026-10-16 11:09:13 -07:00
vh d03e6353ab feat(albok-service): 1.0.0a1 (version-only rebuild of 0.1.24; v1 alpha cut) 2026-10-16 10:46:47 -07:00
vh 58cef5ab00 memory: personal Worldtree retired-config strip done; Matrix bridge profile set on demo/personal 2026-10-16 10:37:09 -07:00
vh 6292ba232b docs(muninn-gate, mimir-inbox): torn down 2026-10-16 (albok unit 6); archive on nh3-nas 2026-10-16 10:33:57 -07:00
vh e518da604c memory: albok unit 6 encrypted-wing harness passed; sealed wing stays mounted 2026-10-16 09:22:49 -07:00
vh f21fc07c23 docs(albok-service): sealed unlock takes ~25 s; the argon2 memory warning is benign 2026-10-16 09:22:22 -07:00
vh 507d62d62a feat(albok-service): 0.1.24 (unit 6 encrypted-wing deferral) + personal/sealed wing in albok.yaml 2026-10-16 09:18:28 -07:00
vh 76e7a76ad9 memory: albok unit 6 teardown — archives verified on nh3-nas, deletion held for Prime's go 2026-10-16 08:37:24 -07:00
vh a4b27ec4ff memory: Worldtree demo/personal/pinned all on v1.0.0b194; pinned now has a seeded host config dir 2026-10-16 08:24:27 -07:00
vh 767b3af409 feat(albok-service): unit 6 sealed wing personal/sealed — LUKS2 volume, gid 1513, rslave bind of /srv/albok/sealed 
albok-dev's host ask under Prime's goal "land all of u6". A 20 GiB LUKS2 file
with ext4, keyed only from the vault (piped over ssh, never on the host's
disk). The mountpoint is immutable while unmounted, and the mounted root is
1500:1513 0750 with .albok-wing. The parent is bound into the container with
rslave propagation: a lock then unlock with the service running showed through
without a restart. The wing is not in albok.yaml yet (albok-dev's release).
Runbook and backup posture are in the README.
 2026-10-16 08:06:06 -07:00
vh 16e0dac572 fix(wt-memory-gate-batch): unset ALBOK_SERVICE/ALBOK_TOKEN for the Worldtree harness 
Since 2026-10-16 every agent shell on nh3-dev exports the fleet-agents Albok
read token (via ~/.config/secrets/env.sh). The memory-gate harness has always
run without albok, so the wrapper unsets both. The daily numbers stay
comparable; removing the unset is worldtree-dev's call.
 2026-10-16 00:04:20 -07:00
vh f49e3f18ed memory: Worldtree demo's retired config removed (instance-configs 2240110); personal/pinned after their deploys 2026-10-15 23:40:27 -07:00
vh 477de888ef docs(pewpewstudio): live rev 3f73448 (svgelements, the vectorize shape change, asset CSP); smoke passed 2026-10-15 23:28:24 -07:00
vh 05e370d2ae albok-service: pin 0.1.23 (unit 7, lineage and durable identity; the facet-reader descriptor fix; deployed on nh3-albok 2026-10-15 1709) 2026-10-15 17:09:27 -07:00
vh 9b2716261c albok-service: pin 0.1.22 (unit 5, related articles; deployed on nh3-albok 2026-10-15 0951) 2026-10-15 09:52:19 -07:00
vh 0b873dd8fe docs(albok): Prime's notes walked into personal/notes (232 objects); old nemi token revoked 2026-10-15 01:48:48 -07:00
vh a583c54399 docs(albok): nemi token re-minted with personal/notes for the vault source 2026-10-15 01:42:15 -07:00
vh db88f76aea feat(albok): /srv/nemi/vault, a pulled clone of Prime's notes (vh/VuongKB) for Nemi's vault source (gate 1) 
Prime keeps his notes at /home/lkraven/kb and syncs them with git (gitea
vh/VuongKB), so Nemi's read-only copy is a fresh clone, pulled fast-forward-only
hourly at :50 by a lkraven user timer, ahead of the ~:01 walk. As a clone it
holds only tracked notes (129 md outside dot-dirs). The untracked Muninn
output in the working copy (main/, fiction/) stays out. Readable from
lkraven's user manager, where Nemi runs.
 2026-10-15 01:40:02 -07:00
vh dd816662dc ops(svos): main 33a7077 (v0.0.13+2) on nh3-svos + nh3-dev — kernel 0.0.13, interface 0.0.5 (briefs), postoffice 0.0.3, UI 0.0.18 
On svos-dev's ask, under Prime's 0955 go. The interface unit gets
SVOS_ARTIFACT_HOST=nh3-svos via a drop-in, and the briefs artifact mapping uses
the same host. Both changed manifests were held for the owner, and each app
read down (wrong-revision) until Prime approved its card: interface at
11:09:45, postoffice at 11:11:17. The postoffice was rolled only once he was
at the board, since a held bridge carries no Miranda mail. Health: schema 13,
config_gen 33f001f4e2dbc7dc, apps up 7.
 2026-10-14 11:11:59 -07:00
vh a84f6b00df ops(svos): kernel 0.0.12 (d95078c) on nh3-svos; hermes runtime task-capable (Prime via svos-dev) 
Kernel-only release from a clean archive of v0.0.12; everything else is
carried from 452a592. Offline backup first; READY in 0.74 s, schema 13, apps
up 7. The existing hermes runtime gained process = python3 and the one-off
task_argv (hermes -z, --accept-hooks, no --yolo), and its argv moved to the
launcher's chat form. check-config valid; config_gen 21489c1f0fff3c10.
 2026-10-14 04:17:35 -07:00
vh 8758c359bc memory: elway sudo note updated for infra-ops (unattended); SVOS task_argv is ruled with svos 2026-10-14 04:11:43 -07:00
vh 9d599caa53 memory: snapshot — SVOS v0.0.11, pewpewstudio, albok inbox, h2o decision seat; 31 old entries archived 2026-10-14 04:04:54 -07:00
vh d1192ca868 feat(pewpewstudio): laser job studio on nh3-docker :8185 (api + Caddy front), Homepage tile 
Prime's directive via pewpew-dev. Images are built on nh3-dev from a clean
archive of vh/pewpewstudio (26bba3c; hamr over gitea SSH via BuildKit --ssh)
and loaded on nh3-docker. Caddy serves the SPA and strips /api/ in front of
the backend. It refuses foreign Host headers inside a route block, because the
Host rewrite would otherwise bypass the backend's TrustedHost. The DB, assets
and the app-edited shop config live on named volumes inside nh3-docker's
nightly vzdump. Verified: SPA, /api/machines and /api/generate/workflows 200;
foreign Host 400.
 2026-10-13 21:39:44 -07:00
vh 5e8307ed7a ops(svos): v0.0.11 (452a592) on nh3-svos + nh3-dev — kernel 0.0.11, schema 13, U15 [tasks] config; terminal 0.0.4 
Built in-session from a clean archive of the tag (kernel, connector base and
terminal wheels; everything else carried from 7f95e54). Ran after the 21:30
vzdump of VM 111, with an offline backup of the schema 12 database first.
check-config accepted the new [tasks] table and the tasks artifact mapping
(host nh3-svos, the terminal's artifact_host). Kernel READY in 1.17 s,
schema 13, apps up 7. nh3-dev's current moved to 452a592; svos-terminal 0.0.4
registered manifest revision 4, which was pinned without a card.
 2026-10-13 21:33:16 -07:00
vh 60a6d6db59 ops(corviduo-dev): muninn-gate and mimir-inbox stopped (retired; data at rest kept for albok unit 6) 2026-10-13 21:23:56 -07:00
vh f1cc7ab995 memory: infra-ops fleet key vaulted (restore tested); notes copy approved, vault location pending 2026-10-13 21:22:51 -07:00
vh 047ff26778 albok-service: pin 0.1.21 (listing paging, a concept's citation in the summary; deployed on nh3-albok 2026-10-13 1805) 2026-10-13 18:04:40 -07:00
vh 4eacb746fa docs(albok): old nemi token revoked after the personal/inbox swap 2026-10-13 17:43:15 -07:00
vh 7ca2f76d21 feat(albok): personal/inbox wing on nh3-albok + /srv/nemi/inbox capture root on nh3-dev (unit 4.4 slice C, gate 2) 
Prime ruled albok subsumes note intake (1530). The wing is like personal/notes
(albok-personal 1511, not service-restricted); health reads 7 wings ready.
Nemi's token was re-minted with read+write on the new wing and vaulted over
albok/token-nemi. /srv/nemi/inbox is lkraven:nemi-drop 2770 with a default ACL,
plus u:lkraven:rx on /srv/nemi, so Nemi reaches it from lkraven's user manager,
whose groups predate nemi-drop. Both paths are verified by the playbook.
 2026-10-13 17:31:49 -07:00
vh eda7025ed1 ops(svos): A171 — miranda's app-postoffice write grant autonomous (Prime 2026-10-13 1400) 2026-10-13 13:59:30 -07:00
vh 3e634bb3d0 ops(infra-ops): per-host satellite keys; satellite-1 authorized on esh-nas 
Satellite agents get their OWN key under the infra-ops identity instead of a
copy of the fleet key, so one can be revoked by deleting a line. The list is
playbooks/files/infra-ops-satellite-keys (target short hostname + public key).
bootstrap-infra-ops-user.yaml now writes the fleet key plus that host's
satellite keys, exactly, so a re-run keeps listed keys and removes unlisted
ones. satellite-1 (SHA256:KEFUjceF...) is authorized on esh-nas only (Prime,
2026-10-13); the playbook re-run there installed both keys, and the fleet key
still logs in with sudo.
 2026-10-13 13:33:04 -07:00
vh 30a7220b2c ops(esh-nas): infra-ops identity bootstrapped in CT 103 via pct from esh-pve-nas 
Prime's ruling 2026-10-13. esh-nas (10.0.50.50) had no infra-ops user, so key
login was refused. The same steps as bootstrap-infra-ops-user.yaml (uid/gid
850, fleet key, NOPASSWD sudoers with log_output and the BULK_DATA carve-out,
visudo-validated) ran inside the container from its host. Verified with a
direct ssh infra-ops@10.0.50.50 and sudo -n whoami = root.
 2026-10-13 13:25:21 -07:00
vh b699088e2b docs(CLAUDE): standing push on main for infra-ops (Prime, 2026-10-13) 2026-10-13 11:26:47 -07:00
vh ee137dbb04 albok-service: pin 0.1.20 (the search reply names its coverage: searched / degraded; deployed on nh3-albok 2026-10-13 1022) 2026-10-13 10:22:38 -07:00
vh a630fe46d6 memory: correct the 7f95e54 deploy time (0906, not 0914) 2026-10-13 09:06:57 -07:00
vh c4c35ae951 memory: nh3-svos static release 7f95e54 (UI 0.0.15) 2026-10-13 09:06:44 -07:00
vh 5000916a7b memory: app-terminal PATH fix; nh3-svos static release 89dad7a (UI 0.0.14) 2026-10-13 08:57:53 -07:00
vh 3c92a1281e fix(svos-apps): svos-terminal unit reaches zellij (~/.cargo/bin on PATH); app-terminal up after 2 days degraded 
A user unit's default PATH lacks ~/.cargo/bin, so every zellij call from
app-terminal failed to launch (rc 127 under the unit's environment), and the app
reported degraded from the U13 cutover on. With PATH set, the kernel logged
app-terminal up at 15:56:40Z; the pinned manifest is unchanged and no card was
raised.
 2026-10-13 08:57:10 -07:00
vh 499678979a docs(gitea-runner): vh/albok green on the nh3-docker runner; its CI was slow fsync, not a hang 2026-10-12 23:25:09 -07:00
vh 9f833b2e90 memory: h2o cutover walk closed — personal reading (18 vs 6) is the one open margin 2026-10-12 18:13:29 -07:00