72 Commits

Author SHA1 Message Date
Backtalk6858 5634e81d3f docs: add structural wrap-up design principle to both builder playbooks 2026-06-26 13:45:06 -05:00
Backtalk6858 f625281188 docs: update context.md — sprint day 9+10, auth map built, next session tasks
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-06-26 13:33:00 -05:00
Backtalk6858 cdcb892bfb feat: add required_playbooks fetch + prompt review gate to both builder playbooks
Agent Builder: added Step 2 (fetch required_playbooks from Gitea URLs), added
mandatory claude_agent prompt design rules to Ollama prompt (--max-turns 15,
loop detection, credential map inline, defined output), added Step 6 synchronous
human NTFY gate for claude_agent prompt review before sandbox testing.

N8N Builder: same required_playbooks fetch step, added Step 8 synchronous human
NTFY gate for any workflow containing a claude -p node.

Both changes prevent runaway token loops in built automations by ensuring every
generated claude -p call has hard stops baked in and user-reviewed before deploy.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-06-26 01:31:58 -05:00
Backtalk6858 408ae14b84 docs: add sprint gameplan + Hermes grill-me decisions logged 2026-06-24 23:52:57 -05:00
Backtalk6858 25425dfe85 docs: Sprint Day 8 facts — Phase 2+3 complete, Coolify retired 2026-06-24 21:54:05 -05:00
Backtalk6858 e9bfc0e6c7 docs: update context.md — sprint day 7, id=147 phase 2 in progress
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-06-24 19:37:13 -05:00
Backtalk6858 55ea06c57d docs: update context.md — sprint day 6, id=147 phase 1 complete, standalone Traefik live
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-06-24 18:56:05 -05:00
Backtalk6858 46ed603b12 docs: update context.md — sprint day 5, id=141 Jenkins E2E complete, next=Traefik retirement 2026-06-24 16:37:33 -05:00
Backtalk6858 f127f815ed docs: update context.md — sprint day 4, Jenkins E2E blocked on docker binary 2026-06-24 14:25:24 -05:00
Backtalk6858 82c99ee60e note: next session — fix allowlist.json ownership + no-sync policy
allowlist.json must be root-owned so POST /allowlist is the only write
path; direct file edit bypasses audit log and danger veto. No cross-
bridge sync — allowlists grow organically per server.
2026-06-22 20:58:03 -05:00
Backtalk6858 a2d9a57d9f note: next session — sync POST /allowlist to sudo-bridge-server01
Bridge was added to primary only; server-01 needs redeploy of latest
image + allowlist.json sync before it can autonomously add entries.
2026-06-22 20:52:59 -05:00
Backtalk6858 da9ebbf807 note: next session — secrets proxy sandbox precondition scaffolding
Before the shell sandbox dry-run, proxy needs to detect missing state
(files, services, iptables rules) and create it so the test is faithful.
2026-06-22 20:50:20 -05:00
Backtalk6858 3cc8465012 update: context.md — id=51 fully E2E verified, session 4 cont facts
Shell E2E complete. NTFY topic bug, docker-cli fix, DB permissions,
524 Cloudflare limitation documented.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-06-22 20:43:11 -05:00
Backtalk6858 f62a0cbfb6 update: context.md — id=51 fully complete, session 4 facts
E2E tests passed, iptables persisted, POST/GET /allowlist on sudo-bridge.
Key facts: proxy path format, sudo-bridge port, Coolify API internal IP.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-06-22 20:07:21 -05:00
Backtalk6858 a29c7bd037 update: context.md — id=51 deployed healthy on primary, session 3 facts + next session order
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-06-22 19:38:48 -05:00
Backtalk6858 fb0e2acba1 update: context.md + session summary — proxy migration to primary, iptables LAN fix
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-06-22 16:09:56 -05:00
Backtalk6858 6ee57c064c update: context.md — id=51 deployed (partial), pending Cloudflare route + E2E tests
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-06-22 14:51:39 -05:00
Backtalk6858 00460b33f7 update: context.md + playbook — id=51 grill-me complete, session 3/4/5 facts backfilled, N8N API sshTunnel gotcha
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-06-21 21:05:37 -05:00
Backtalk6858 6a90c3bae5 session: June 20 session 2 — sandbox Vault mirror + auto-unseal deployed
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-06-20 15:16:06 -05:00
Backtalk6858 4c47123270 update: context.md — June 20 session progress (id=57 partial, N8N migrated)
Production N8N on server-01, Vault-backed secrets, rollback tested, root token fixed.
id=57 remaining: sandbox Vault mirroring + Bitwarden audit + sandbox credentials.
id=51 not started — next session.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-06-20 14:06:31 -05:00
Backtalk6858 e0ed41ffeb update: context.md — backfill complete, readiness verified, priority reorder, June 19/22 schedule
All prereqs confirmed live on server-01. Full automation_ideas priority reorder (p1–p17 non-blocked,
p20–p29 blocked). Added id=67 N8N Builder Agent. id=57 expanded to full production mirror scope.
June 19: manual infrastructure day (id=51 + id=57). June 22: builder agents extended session.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-06-20 13:09:14 -05:00
Backtalk6858 db6cbbdec1 init: add claude-config and agent-builder context files
Initial commit tracking session context, playbooks, and automation specs
for claude-config and agent-builder Claude Code conversations.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-06-17 23:08:23 -05:00