From e0ed41ffeb7d48c8a4b8475fc4a4003c5ed90d6d Mon Sep 17 00:00:00 2001 From: Backtalk6858 Date: Sat, 20 Jun 2026 13:09:14 -0500 Subject: [PATCH] =?UTF-8?q?update:=20context.md=20=E2=80=94=20backfill=20c?= =?UTF-8?q?omplete,=20readiness=20verified,=20priority=20reorder,=20June?= =?UTF-8?q?=2019/22=20schedule?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit All prereqs confirmed live on server-01. Full automation_ideas priority reorder (p1–p17 non-blocked, p20–p29 blocked). Added id=67 N8N Builder Agent. id=57 expanded to full production mirror scope. June 19: manual infrastructure day (id=51 + id=57). June 22: builder agents extended session. Co-Authored-By: Claude Sonnet 4.6 --- agent-builder/.claude/context.md | 58 ++++++++++++++++++++++++++------ 1 file changed, 48 insertions(+), 10 deletions(-) diff --git a/agent-builder/.claude/context.md b/agent-builder/.claude/context.md index c1661c6..14e1381 100644 --- a/agent-builder/.claude/context.md +++ b/agent-builder/.claude/context.md @@ -57,17 +57,55 @@ First two agents: Agent Builder Agent + N8N Builder Agent. - [x] Verify sandbox Bitwarden bridge ↔ Vaultwarden sandbox end-to-end (bridge on port 8080, returns [] for empty vault — correct) - [x] Write Agent Builder Agent playbook → .claude/playbook_agent_builder_agent.md - [x] Write N8N Builder Agent playbook → .claude/playbook_n8n_builder_agent.md -- [~] Backfill session: Resume from priority 28 (id=34, CalDAV Auto-Refresh Trigger) next session. ~30 automations remain. This session reviewed ids 28, 40, 53, 4, 7, 5, 14, 11, 44, 33, 29, 20, 41, 12, 1, 19, 39, 6. Key changes: id=7+50 merged into id=18 (full 10-stage business pipeline); id=18 expanded with Business Research Agent + Development Agent + parked idea email-to-Tyler flow; id=14+20 blocked (already built by schedule workflows); id=12+1+41 blocked (redundant); id=19 blocked (pending Jenkins); id=5 blocked (Obsidian vault not set up yet); id=40 pending with Jenkins conditional note. New rows added: id=54 (NTFY Topic Provisioner, p54), id=55 (Business Research Agent, p51), id=56 (Business Development Agent, p52), id=57 (Sandbox Environment Deployment Completion, p9 — NOTE: conflicts with id=28 priority 9, fix next session). Calendar events pushed to Nextcloud: Thu 6/18 12:45-3PM backfill + 3-4:30PM readiness, Fri 6/19 12:45-4:30PM agent builds. +- [x] Backfill session: **COMPLETE.** All pending rows reviewed across sessions 1-3. Blocked rows verified (32, 30, 13, 27, 23, 24, 22, 2, 21, 35, 36, 55, 56, 18 — all still blocked, no changes without proper review). Admin done: id=28 → p10, id=57 keeps p9, dummy row id=16 deleted. Session 3 (2026-06-18) final batch: ids 47, 48, 31, 26, 54. + - id=25: type→n8n_automation, status→pending (8b model lifts hardware block), full rewrite with SDK credit model, model router + cost gate + subscription monitor, model_effort_routing_log training table + - id=17: type→n8n_automation, expanded with token_waste_patterns DB table (evolution mechanism), JSONL-based detection, NTFY claude-audit gate, fan-out plan noted + - id=42: expanded with hybrid trigger (Claude flags + asks), B+C output (DB + wrap-up surface), human gate permanent, hard boundary (business research = id=55 only), voice note + - id=46: type→n8n_automation, Hermes ref removed, playbook_schema.md bootstrap design, three risk tiers, id=52 detector/id=46 executor boundary, fan-out plan noted + - id=43: Vault AppRole required (youtube-oauth-script, new policy), vault_registry entries, port 8085 (8080 reserved for bridge), dynamic Vault IP, write verification, token refresh companion + - id=45: hard dep on id=43 (Vault auth), niche_saturation_thresholds DB table (evolution), niche_check_results table, three-signal output (saturated/viable/unclear), id=18 stage 2 integration -## Final readiness check items (scheduled June 18) -- All 8 prereq checklist items verified complete -- Sandbox mirrors production: AppRole, bridge, Vaultwarden all confirmed functional -- **Sensitive output interception system** — design and implement before any agent goes live: - - Agents must scan their own stdout/logs before writing/sending output and redact anything matching secret patterns (tokens, keys, passwords, API keys) - - Pattern list at minimum: `hvs\.`, `eyJ`, bearer tokens, anything from known env var names (BRIDGE_API_KEY, VAULT_TOKEN, N8N_ENCRYPTION_KEY, etc.) - - Root cause: `docker inspect --format '{{range .Config.Env}}...'` dumps all env vars including secrets; agents will reach for broad diagnostic commands without filtering — local models even more so - - Production exposure is a serious risk; sandbox exposure is acceptable but still undesirable - - This system needs to exist at the agent level (not just Claude Code rules) because once agents run autonomously the user will not be watching +## New automation_ideas rows added 2026-06-18 (ids 59–67) +- id=59: Claude Audit Research Prep (n8n_automation, p12) — Saturday briefing for 12:45 PM review +- id=60: Claude Audit Topic Detector (n8n_automation, p11) — detects new topics → claude_config.audit_topics; must build first +- id=61: Claude Config Dev Work Scheduler (n8n_automation, p13) — Sunday session prep from Saturday decisions +- id=62: Monthly Security Audit (n8n_automation, p7) — first Monday of month, 7-area audit → security_audit DB +- id=63: Security Patch Backlog Handler (claude_agent, p7) — works security_audit.findings; Vault/prod always human-gate +- id=64: Business Projects Worker (claude_agent, BLOCKED p29) — 12:45–4:30 PM daily; blocked pending business_projects schema +- id=65: Personal Projects Worker (claude_agent, BLOCKED p29) — 5:30–8:00 PM daily; blocked pending personal_projects schema +- id=66: Media Pipeline Project Worker (claude_agent, BLOCKED p29) — Wednesday 5:30–8:00 PM; blocked pending id=65 + scope +- id=67: N8N Builder Agent (claude_agent, p2, ready_to_build) — builds all n8n_automation rows; deploy Monday June 22 alongside id=24 + +## Readiness check — COMPLETE (2026-06-18 evening) +All 8 prereq checklist items verified live on server-01: +- Vault AppRole: token acquired, N8N secret readable +- N8N sandbox API: returns 200 with real key +- Bridge /items: returns [] (correct for empty sandbox vault) +- Ollama: llama3.1:8b loaded +- agent_test_results table: confirmed correct schema + FK + +## June 19 — Manual Infrastructure Day (before any agent builds) +Two manual projects only: +- **id=51 Secrets Execution Proxy** — build FastAPI script that intercepts secret access, prevents raw credential exposure in agent stdout. Must be live before agents deploy. +- **id=57 Sandbox Environment Deployment Completion** — (1) Migrate production N8N from primary server to server-01. (2) Mirror production security in sandbox: equivalent Vault AppRole policies, Bitwarden Bridge populated with test credential entries matching production structure, N8N sandbox credentials matching production names (-sandbox suffix). Goal: sandbox = production mirror, so passing sandbox tests guarantees production works. +- Grill-me required at session start before any work begins. + +## June 22 (Monday) — Builder Agents (extended session) +Build, test, and push both builder agents to production. Work as long as it takes. +- id=24 Agent Builder Agent (claude_agent + script types) +- id=67 N8N Builder Agent (n8n_automation types) +- Prerequisites: id=51 live, id=57 complete (sandbox mirrors production) + +## Priority queue summary (as of 2026-06-18) +- p1: id=51 (manual), id=57 (manual) — infrastructure foundation +- p2: id=24, id=67 — builder agents (built in sessions, build everything else) +- p3: id=54 NTFY Provisioner, id=58 Human Action Gate +- p4: id=25 Cost Intelligence, id=38 Credential Emergency Rollout +- p5: id=3 Secrets Rotation, id=8 Vault Token Audit, id=52 Session Wrap-up +- p6: id=37 N8N Log Scanner, id=40 Coolify UUID Monitor +- p7: id=62 Monthly Security Audit, id=63 Security Patch Handler +- p8–p17: non-blocked pending/ready items +- p20–p29: all blocked items (builder agents skip these) ## Update instructions Update at the end of every agent-builder session. Keep agent status, key decisions, and prereq checklist current.