auto: docs sync 2026-06-29T06:00:08+00:00

Files changed: credentials engine/lint-report.md vault/.obsidian/workspace.json vault/docs/software/central.md

credentials

@@ -354,6 +354,10 @@ CENTRAL_PG_DSN="postgresql://central:3LNVFQJHsK3e7dOcAdvK3oS6d70f@localhost/cent
 # Central Data Hub Master Key
 CENTRAL_MASTER_KEY=jfooDHnsS8n5J61bDzmiq6u7QpJhUoEQ/BVk1Sj3PqE=
 
+# Central GUI operator login (http://central.echo6.mesh:8000)
+CENTRAL_OPERATOR_USER="admin"
+CENTRAL_OPERATOR_PASS="7redditGold"
+
 # Recon VM (CT 1130) — padus PostgreSQL (192.168.1.130 / recon-vm)
 # PostgreSQL 16, opened for LAN 2026-05-24 — scram-sha-256, allow 192.168.1.0/24
 RECON_PG_HOST=192.168.1.130

engine/lint-report.md

@@ -1,6 +1,6 @@
 # Vault Lint Report
 
-Generated: 2026-06-28T18:00:07Z  |  Docs scanned: 96  |  Elapsed: 0.0s
+Generated: 2026-06-29T00:00:11Z  |  Docs scanned: 96  |  Elapsed: 0.0s
 
 ## Summary
 

vault/.obsidian/workspace.json

@@ -199,6 +199,8 @@
   },
   "active": "17bd4a6166f789d0",
   "lastOpenFiles": [
+    "docs/software/central.md.tmp.3603785.6c9205f08816",
+    "docs/software/central.md.tmp.3603785.ecf07e484b59",
     "runbooks/central-deploy-cutover.md.tmp.3603785.4e7865cbcf79",
     "runbooks/central-deploy-cutover.md.tmp.3603785.af9622a37ece",
     "runbooks/central-deploy-cutover.md.tmp.3603785.45f414c68859",
@@ -209,8 +211,6 @@
     "docs/software/navi.md.tmp.5281.4b9a09bef001",
     "projects/nominatim-v5-reimport.md.tmp.5281.7f47896f6abc",
     "runbooks/fleet-magicdns-resolved-migration.md.tmp.5281.0b86b5de4a11",
-    "runbooks/fleet-magicdns-resolved-migration.md.tmp.5281.f94befc79ce2",
-    "runbooks/fleet-magicdns-resolved-migration.md.tmp.5281.e8ec4cd814f7",
     "runbooks/fleet-magicdns-resolved-migration.md",
     "projects/fleet-platform-baseline.md",
     "runbooks/toc-cortex-pve9.2-update.md",

vault/docs/software/central.md

@@ -64,7 +64,7 @@ All three units are **enabled and active**; deployment survives reboot. Deps: `n
 
 ## GUI / API Surface
 
-Authenticated app with login/sessions/CSRF, first-run setup wizard, operator management, adapter configuration, stream viewer, enrichment pipeline, monitoring-area management, API key management, audit log, and manual resend.
+Authenticated app with login/sessions/CSRF, first-run setup wizard, operator management, adapter configuration, stream viewer, **JetStream consumer management** (`/consumers` — view + delete consumers; central's own `archive-*` durable consumers are protected/non-deletable; CSRF + audit-logged), enrichment pipeline, monitoring-area management, API key management, audit log, and manual resend.
 
 **Auth-exempt tile endpoints** (used by navi, verified HTTP 200):
 
@@ -91,14 +91,14 @@ navi-traffic (navi's in-VM :8421 extraction service) was **retired on 2026-05-26
 
 Single TimescaleDB hypertable `public.events` (~22 GB, ~3.19 M rows, 331 chunks, compression not enabled). JetStream ~5.86 GB / 20 GB across 12 streams.
 
-## Deploy / Drift Notes (as of 2026-06-27)
+## Deploy / State Notes (as of 2026-06-29)
 
-- **Deployed HEAD:** v0.14.5 (detached HEAD, not a branch) — caught up to latest tag since the 2026-06-18 audit.
+- **Deployed HEAD:** v0.14.7 (detached HEAD — the box tracks tags). All prior drift resolved: migration 036 committed, `pyproject.toml` version current, README operational.
-- **Uncommitted local migration:** `sql/migrations/036_add_avalanche_org_adapter.sql` — untracked on disk, already applied in the DB (avalanche_org row live), but missing from the repo so a clean rebuild would skip it. A PR to commit it is in progress.
+- **Deploy mechanism:** manual, tag-based (`git checkout <tag>` → `uv sync` → `central-migrate` → restart). One-command `scripts/deploy.sh` ships in-repo; full procedure in the [[central-deploy-cutover]] runbook. No CI/CD; no automated DB backup (pre-flight `pg_dump` is the only migration safety net; migrations are forward-only).
-- **Stale `pyproject.toml`:** version field shows 0.3.0 (stale); being fixed in the same PR.
+- **`central-migrate` env gotcha:** manual calls need `cd /opt/central && set -a && . /etc/central/central.env && set +a && …` (the units supply this via WorkingDirectory + EnvironmentFile).
-- **Stale README:** still reads *"Phase 0 — scaffold, not yet operational"* (stale); being fixed in the same PR.
+- **EONET:** now **global** as of v0.14.6 (2026-06-28) — `bypass_bbox_filter=True` + the adapter `region` key removed. NOTE: its `events`-table row count is a misleading health signal (dedup + partition expiry); use the CENTRAL_DISASTER stream as the EONET flow signal. `avalanche_org` zero-events is expected (off-season gate).
-- **Zero-event adapters:** `avalanche_org` (off-season severity gate — expected) and `eonet` (under investigation) are enabled but have produced no events.
+- **Supervisor CPU** ~17%→~1.4% and **cursors.db** 1.3 GB→496 MB after the v0.14.6 dedup/WAL fix + a VACUUM.
 
 ---
 
-*Last updated: 2026-06-27 — Refreshed from live recon; blanks filled, drift notes current.*
+*Last updated: 2026-06-29 — v0.14.7 deployed (consumers admin page); drift cleared, EONET global, perf fixes verified.*