From 3363f59b4bfd7aa033e6606344c4c312161e8ea9 Mon Sep 17 00:00:00 2001 From: echo6-autocommit Date: Mon, 29 Jun 2026 06:00:08 +0000 Subject: [PATCH] auto: docs sync 2026-06-29T06:00:08+00:00 Files changed: credentials engine/lint-report.md vault/.obsidian/workspace.json vault/docs/software/central.md --- credentials | 4 ++++ engine/lint-report.md | 2 +- vault/.obsidian/workspace.json | 4 ++-- vault/docs/software/central.md | 16 ++++++++-------- 4 files changed, 15 insertions(+), 11 deletions(-) diff --git a/credentials b/credentials index 28a7f2e..1c70be6 100755 --- a/credentials +++ b/credentials @@ -354,6 +354,10 @@ CENTRAL_PG_DSN="postgresql://central:3LNVFQJHsK3e7dOcAdvK3oS6d70f@localhost/cent # Central Data Hub Master Key CENTRAL_MASTER_KEY=jfooDHnsS8n5J61bDzmiq6u7QpJhUoEQ/BVk1Sj3PqE= +# Central GUI operator login (http://central.echo6.mesh:8000) +CENTRAL_OPERATOR_USER="admin" +CENTRAL_OPERATOR_PASS="7redditGold" + # Recon VM (CT 1130) — padus PostgreSQL (192.168.1.130 / recon-vm) # PostgreSQL 16, opened for LAN 2026-05-24 — scram-sha-256, allow 192.168.1.0/24 RECON_PG_HOST=192.168.1.130 diff --git a/engine/lint-report.md b/engine/lint-report.md index 67a50b3..d4ff260 100644 --- a/engine/lint-report.md +++ b/engine/lint-report.md @@ -1,6 +1,6 @@ # Vault Lint Report -Generated: 2026-06-28T18:00:07Z | Docs scanned: 96 | Elapsed: 0.0s +Generated: 2026-06-29T00:00:11Z | Docs scanned: 96 | Elapsed: 0.0s ## Summary diff --git a/vault/.obsidian/workspace.json b/vault/.obsidian/workspace.json index f2ea9a6..27bce49 100644 --- a/vault/.obsidian/workspace.json +++ b/vault/.obsidian/workspace.json @@ -199,6 +199,8 @@ }, "active": "17bd4a6166f789d0", "lastOpenFiles": [ + "docs/software/central.md.tmp.3603785.6c9205f08816", + "docs/software/central.md.tmp.3603785.ecf07e484b59", "runbooks/central-deploy-cutover.md.tmp.3603785.4e7865cbcf79", "runbooks/central-deploy-cutover.md.tmp.3603785.af9622a37ece", "runbooks/central-deploy-cutover.md.tmp.3603785.45f414c68859", @@ -209,8 +211,6 @@ "docs/software/navi.md.tmp.5281.4b9a09bef001", "projects/nominatim-v5-reimport.md.tmp.5281.7f47896f6abc", "runbooks/fleet-magicdns-resolved-migration.md.tmp.5281.0b86b5de4a11", - "runbooks/fleet-magicdns-resolved-migration.md.tmp.5281.f94befc79ce2", - "runbooks/fleet-magicdns-resolved-migration.md.tmp.5281.e8ec4cd814f7", "runbooks/fleet-magicdns-resolved-migration.md", "projects/fleet-platform-baseline.md", "runbooks/toc-cortex-pve9.2-update.md", diff --git a/vault/docs/software/central.md b/vault/docs/software/central.md index 85b6960..3dabbcc 100644 --- a/vault/docs/software/central.md +++ b/vault/docs/software/central.md @@ -64,7 +64,7 @@ All three units are **enabled and active**; deployment survives reboot. Deps: `n ## GUI / API Surface -Authenticated app with login/sessions/CSRF, first-run setup wizard, operator management, adapter configuration, stream viewer, enrichment pipeline, monitoring-area management, API key management, audit log, and manual resend. +Authenticated app with login/sessions/CSRF, first-run setup wizard, operator management, adapter configuration, stream viewer, **JetStream consumer management** (`/consumers` — view + delete consumers; central's own `archive-*` durable consumers are protected/non-deletable; CSRF + audit-logged), enrichment pipeline, monitoring-area management, API key management, audit log, and manual resend. **Auth-exempt tile endpoints** (used by navi, verified HTTP 200): @@ -91,14 +91,14 @@ navi-traffic (navi's in-VM :8421 extraction service) was **retired on 2026-05-26 Single TimescaleDB hypertable `public.events` (~22 GB, ~3.19 M rows, 331 chunks, compression not enabled). JetStream ~5.86 GB / 20 GB across 12 streams. -## Deploy / Drift Notes (as of 2026-06-27) +## Deploy / State Notes (as of 2026-06-29) -- **Deployed HEAD:** v0.14.5 (detached HEAD, not a branch) — caught up to latest tag since the 2026-06-18 audit. -- **Uncommitted local migration:** `sql/migrations/036_add_avalanche_org_adapter.sql` — untracked on disk, already applied in the DB (avalanche_org row live), but missing from the repo so a clean rebuild would skip it. A PR to commit it is in progress. -- **Stale `pyproject.toml`:** version field shows 0.3.0 (stale); being fixed in the same PR. -- **Stale README:** still reads *"Phase 0 — scaffold, not yet operational"* (stale); being fixed in the same PR. -- **Zero-event adapters:** `avalanche_org` (off-season severity gate — expected) and `eonet` (under investigation) are enabled but have produced no events. +- **Deployed HEAD:** v0.14.7 (detached HEAD — the box tracks tags). All prior drift resolved: migration 036 committed, `pyproject.toml` version current, README operational. +- **Deploy mechanism:** manual, tag-based (`git checkout ` → `uv sync` → `central-migrate` → restart). One-command `scripts/deploy.sh` ships in-repo; full procedure in the [[central-deploy-cutover]] runbook. No CI/CD; no automated DB backup (pre-flight `pg_dump` is the only migration safety net; migrations are forward-only). +- **`central-migrate` env gotcha:** manual calls need `cd /opt/central && set -a && . /etc/central/central.env && set +a && …` (the units supply this via WorkingDirectory + EnvironmentFile). +- **EONET:** now **global** as of v0.14.6 (2026-06-28) — `bypass_bbox_filter=True` + the adapter `region` key removed. NOTE: its `events`-table row count is a misleading health signal (dedup + partition expiry); use the CENTRAL_DISASTER stream as the EONET flow signal. `avalanche_org` zero-events is expected (off-season gate). +- **Supervisor CPU** ~17%→~1.4% and **cursors.db** 1.3 GB→496 MB after the v0.14.6 dedup/WAL fix + a VACUUM. --- -*Last updated: 2026-06-27 — Refreshed from live recon; blanks filled, drift notes current.* +*Last updated: 2026-06-29 — v0.14.7 deployed (consumers admin page); drift cleared, EONET global, perf fixes verified.*