Backtalk6858/claude-projects
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

update: context.md — June 20 session progress (id=57 partial, N8N migrated)

Browse Source 
Production N8N on server-01, Vault-backed secrets, rollback tested, root token fixed.
id=57 remaining: sandbox Vault mirroring + Bitwarden audit + sandbox credentials.
id=51 not started — next session.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
This commit is contained in:
Backtalk6858
2026-06-20 14:06:31 -05:00
parent e0ed41ffeb
commit 4c47123270
1 changed files with 22 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files
agent-builder/.claude/context.md
+22 -6
View File
@@ -84,17 +84,33 @@ All 8 prereq checklist items verified live on server-01:
- Ollama: llama3.1:8b loaded - Ollama: llama3.1:8b loaded
- agent_test_results table: confirmed correct schema + FK - agent_test_results table: confirmed correct schema + FK
## June 19 — Manual Infrastructure Day (before any agent builds) ## June 20 (Saturday) — Session progress
Two manual projects only: **id=57 partially complete.** Carried over from June 19 (sick day).
- **id=51 Secrets Execution Proxy** — build FastAPI script that intercepts secret access, prevents raw credential exposure in agent stdout. Must be live before agents deploy.
- **id=57 Sandbox Environment Deployment Completion** — (1) Migrate production N8N from primary server to server-01. (2) Mirror production security in sandbox: equivalent Vault AppRole policies, Bitwarden Bridge populated with test credential entries matching production structure, N8N sandbox credentials matching production names (-sandbox suffix). Goal: sandbox = production mirror, so passing sandbox tests guarantees production works. ### id=57 — DONE this session:
- Grill-me required at session start before any work begins. - Production N8N migrated from primary server → server-01 port 5678
- Vault-backed start.sh: secrets pulled from production Vault at runtime, nothing on disk
- n8n-server01 AppRole created in production Vault (scoped to secret/data/n8n read-only)
- Stale root token in Bitwarden replaced — regenerated via generate-root (3/5 keys), updated, revoked
- Traefik static route live: /traefik/dynamic/n8n.yaml → 192.168.1.90:5678
- Rollback procedure documented + all 4 checks passed: /opt/appdata/docker/docker-compose/n8n/ROLLBACK.md
- claude-policy extended: AppRole management + sys/generate-root paths added
### id=57 — REMAINING (next session):
- Sandbox Vault AppRole policy mirroring (audit production roles/policies → recreate in vault-sandbox)
- Production Bitwarden audit (enumerate infra items, map field structure)
- Sandbox Bitwarden Bridge population (test credentials, dummy values, NO production data)
- N8N sandbox credentials (-sandbox suffix names)
### id=51 — NOT STARTED. Scope locked:
- Option B zero-exposure proxy: agent sends "run X using secret Y", proxy executes + injects secret, returns result only
- Must be live before builder agents deploy
## June 22 (Monday) — Builder Agents (extended session) ## June 22 (Monday) — Builder Agents (extended session)
Build, test, and push both builder agents to production. Work as long as it takes. Build, test, and push both builder agents to production. Work as long as it takes.
- id=24 Agent Builder Agent (claude_agent + script types) - id=24 Agent Builder Agent (claude_agent + script types)
- id=67 N8N Builder Agent (n8n_automation types) - id=67 N8N Builder Agent (n8n_automation types)
- Prerequisites: id=51 live, id=57 complete (sandbox mirrors production) - Prerequisites: id=51 live, id=57 FULLY complete (sandbox mirrors production)
## Priority queue summary (as of 2026-06-18) ## Priority queue summary (as of 2026-06-18)
- p1: id=51 (manual), id=57 (manual) — infrastructure foundation - p1: id=51 (manual), id=57 (manual) — infrastructure foundation