dtoro
d80a394b7f
Documentation and repo-hygiene pass following the client/server split:
Plan drift (audited all other active plans against current code):
- oikos-gaps-and-improvements.md: mark Section C and D.5 resolved (both
described cmd/hermes, renamed to cmd/nomos with a real LLM loop since);
refresh ~10 stale file:line citations; fix tool-count (33, not 28).
- liveness-drift-and-ux-cohesion.md: fix stale default-model claim (now
deepseek-v4-pro since 2026-07-10) and "not yet deployed" status.
- nomos-agent-code-review.md: fix C1's citation (one unauthenticated route
to nomos now, not two, after the client/server split).
- wails-desktop-app.md: record the production deploy outcome.
Repo structure: added missing directories to README/CONTRIBUTING layout
tables (checks/, tools/, cmd/webhook/, docs/operations/), fixed a broken
link, added ADR 0015 documenting the auth/CORS/client-split model (there
wasn't one despite CONTRIBUTING's own process requiring it), normalized
ADR 0013/0014's format drift, added an Authentication section to
AGENTS.md/CLIENTS.md (every example call was missing the now-required
bearer header).
Retired the Goose+Nomos workstation flow (bootstrap.sh --with-nomos,
tools/setup-nomos-soul.sh, .agents/operations/nomos-agent.md) and the
Caveman auto-install tooling (tools/setup-caveman.sh, tools/caveman/) —
both superseded by the production containerized Nomos agent, which has
never used either. Kept .agents/shared/caveman.md itself (the terse
writing-style convention agents still follow by reading it).
Deleted the orphaned legacy Python oikos/ directory — nothing imports it,
and bin/homelab (the CLI it was kept for) no longer exists in the repo.
Rewrote .agents/operations/agent-enrollment.md (365 -> ~110 lines) and
commands.md to match the current architecture instead of the retired
`homelab` CLI; migrated the still-true networking prerequisites (Netbird,
split-horizon DNS, SSH key distribution) into the knowledge base as a
runbook via upsert_knowledge rather than duplicating them in markdown.
Updated all 10 .agents/skills/ runbooks referencing the dead CLI with
their real MCP tool / REST API equivalents, or flagged them as needing
verification where no equivalent is confirmed yet.
Two real bugs found and fixed, not just docs:
- The tools/setup-*.sh auto-setup glob was tools/*.setup.sh in THREE
places (tools/post-pull.sh, bootstrap.sh, and internal/httpapi/impl.go's
GetClientContext handler) since the mechanism's introduction on
2026-06-02 — never matched any real filename, so no client has ever
picked up an auto-setup script via git-pull or the context-poller sync.
Fixed all three; the Go server-side fix is the one that actually matters
since it's what the current context-poller mechanism depends on.
- bootstrap.sh removed dead vestigial --gitea-token/--gitea-user flags
(parsed, never consumed) left over from an earlier clone-based model.
Also flagged, not fixed (documented as an open gap in
client-enrollment/SKILL.md): bootstrap.sh tells a freshly-enrolled client
to call POST /api/v1/clients/{slug}/activate to finish enrollment, but
that route doesn't exist in api/openapi.yaml — EnrollClient sets entities
to provisioning and nothing currently transitions them to active.
Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
43 lines
1.7 KiB
Bash
43 lines
1.7 KiB
Bash
#!/usr/bin/env bash
|
|
# post-pull.sh — homelab-context sync hook.
|
|
# Replaces raw `git pull` in the launchd/systemd timer.
|
|
# Runs after every git pull to auto-setup tools from the repo.
|
|
#
|
|
# Convention: any script at tools/setup-*.sh is sourced/exec'd after pull.
|
|
# This lets us ship new tooling to all agent hosts via a simple git push.
|
|
|
|
set -euo pipefail
|
|
|
|
CONTEXT_DIR="${HOMELAB_CONTEXT_DIR:-/opt/homelab-context}"
|
|
|
|
# Git safe.directory workaround: the repo is owned by the regular user
|
|
# but launchd runs as root. Run git as the repo owner.
|
|
if command -v realpath &>/dev/null; then
|
|
REPO_REAL=$(realpath "$CONTEXT_DIR")
|
|
elif command -v grealpath &>/dev/null; then
|
|
REPO_REAL=$(grealpath "$CONTEXT_DIR")
|
|
else
|
|
REPO_REAL=$(perl -e 'print Cwd::abs_path(shift)' "$CONTEXT_DIR" 2>/dev/null || echo "/Users/dtoro/oikos")
|
|
fi
|
|
REPO_OWNER=$(stat -f "%Su" "$REPO_REAL" 2>/dev/null || echo "dtoro")
|
|
|
|
# 1. Git pull (as repo owner to avoid safe.directory issues)
|
|
if [ "$REPO_OWNER" != "root" ] && command -v sudo &>/dev/null; then
|
|
sudo -u "$REPO_OWNER" git -C "$CONTEXT_DIR" pull --ff-only --quiet 2>&1 | grep -v "failed to store" || \
|
|
echo "[post-pull] git pull failed (network?) continuing..."
|
|
else
|
|
git -C "$CONTEXT_DIR" pull --ff-only --quiet 2>&1 || \
|
|
echo "[post-pull] git pull failed (network?) continuing..."
|
|
fi
|
|
|
|
# 2. Run any auto-setup scripts
|
|
for setup_script in "$CONTEXT_DIR"/tools/setup-*.sh; do
|
|
[ -f "$setup_script" ] || continue
|
|
echo "[post-pull] running $setup_script..."
|
|
bash "$setup_script" || echo "[post-pull] WARNING: $setup_script exited with code $?"
|
|
done
|
|
|
|
# 3. Symlink AGENTS.md for agent orientation (macOS)
|
|
if [ "$(uname)" = "Darwin" ]; then
|
|
ln -sf "$CONTEXT_DIR/AGENTS.md" /etc/AGENTS.md 2>/dev/null || true
|
|
fi |