The agent host's vault and SilverBullet (M5.4) #166

Merged

dev-agent merged 8 commits from agent-host-vault into main 2026-10-19 22:22:39 +00:00

Conversation 17 Commits 8 Files Changed 9

+465 -7

8 Commits

Author	SHA1	Message	Date
dongarandClaude Opus 5.5	7cd2de6ab6	Merge main into agent-host-vault ... Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01J5Utyfzw7gF7UhjRDEtjTk	2026-10-19 22:10:22 +00:00
dongarandClaude Opus 5.5	bf98445fcb	Agent host: SilverBullet serves the vault as its one space, behind Authelia ... The operator chose single-space mode: the vault is mounted at /data, with memory/ read-only over it, and there are no accounts or setup wizard; Authelia in the operator's Caddy is the login. SB_NAME forces the mode, so an empty vault can't boot the wizard. SilverBullet's own data folder is gone. check now fails if the wizard could be open. The README says how to make memory/ writable for a while and back. Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01J5Utyfzw7gF7UhjRDEtjTk	2026-10-19 16:41:29 +00:00
dongarandClaude Opus 5.5	1d33d50907	Agent host: SilverBullet boots into accounts and the vault, not a bare space ... SB_NAME alone put SilverBullet 2.11 in single-space mode: no accounts, no setup wizard, and its /data folder served instead of the vault. The compose file sets only PUID and PGID now, a test holds it to that, and the host check fails on a single-space boot. Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01J5Utyfzw7gF7UhjRDEtjTk	2026-10-19 16:28:09 +00:00
dongarandClaude Opus 5.5	e287eea2d3	Agent host: the site is nisse-memory.dongar.net, inside garrett-hall.com ... The operator renamed the site from vault.dongar.net. Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01J5Utyfzw7gF7UhjRDEtjTk	2026-10-19 16:08:30 +00:00
dongarandClaude Opus 5.5	5ab0861e8e	Agent host check: run every step, and say so ... The check went to the host on stdin, and the first docker compose exec read the rest of it: the memory and firewall checks never ran, and it passed. It is now its own file, sent as an argument, and ends with "all checks passed" only when every check has run. Tests fake the host with a docker that reads stdin. Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01J5Utyfzw7gF7UhjRDEtjTk	2026-10-19 14:48:31 +00:00
dongarandClaude Opus 5.5	454326e750	Agent host README: rewrap the introduction ... Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01J5Utyfzw7gF7UhjRDEtjTk	2026-10-19 13:08:16 +00:00
dongarandClaude Opus 5.5	e7a0c0f1db	Agent host: the VM is now nisse, not nisse-host ... Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01J5Utyfzw7gF7UhjRDEtjTk	2026-10-19 13:08:06 +00:00
dongarandClaude Opus 5.5	eafe1b9f4a	The agent host's vault and SilverBullet (M5.4) ... deploy/agent-host sets up the vault on nisse-host (infra/tofu#77) and SilverBullet over it: the operator writes the vault, the agents' memory/ is read-only to it, and only the operator's Caddy reaches it, which serves vault.dongar.net to the LAN. scripts/agent-host.sh installs and checks it from here. Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01J5Utyfzw7gF7UhjRDEtjTk	2026-10-18 20:55:21 +00:00