From 07525e065af0ca8d5b562592496b3cb663b8a8ca Mon Sep 17 00:00:00 2001 From: Ty Date: Sat, 26 Sep 2026 16:54:35 +0000 Subject: [PATCH] Record launcher wrapper fix and new tunnel URL --- .../04_projects/veripath/fleet-2026-09-26.md | 37 +++++++++++++------ 1 file changed, 26 insertions(+), 11 deletions(-) diff --git a/memory-systems/agent-os/04_projects/veripath/fleet-2026-09-26.md b/memory-systems/agent-os/04_projects/veripath/fleet-2026-09-26.md index 940094c..bc13e33 100644 --- a/memory-systems/agent-os/04_projects/veripath/fleet-2026-09-26.md +++ b/memory-systems/agent-os/04_projects/veripath/fleet-2026-09-26.md @@ -1,6 +1,6 @@ # VeriPath fleet snapshot -Updated: 2026-09-26 09:43 PT +Updated: 2026-09-26 09:53 PT Do not store passwords, tokens, or keys in this file. ## Operating model @@ -17,31 +17,46 @@ Do not store passwords, tokens, or keys in this file. - After that: web app on `100.64.0.1`, firewall allow `100.64.0.6` only, status-check test only. - Desktop stays Headscale `HS_tony` / `100.64.0.1`. iPhone stays personal Tailscale. -## Persistence (2026-09-26 09:43 PT) +## Persistence (2026-09-26 09:53 PT) -S4U / session 0 is accepted without a reboot. +S4U / session 0 accepted without a reboot. Wrapper-stop bug closed by CoS at 09:50 without admin. Tasks at Highest, S4U as `fight`, At startup trigger: - `\VeriPath\Hermes_WebUI` - `\VeriPath\Cloudflared_Tunnel` - `\VeriPath\Hermes_Gateway_leonard` -CoS proof: upgrade script stopped all three at 09:37; Task Scheduler started them again under S4U in session 0; parent is Task Scheduler; one copy of each. `/health` 200, bound localhost only, `.env` login passes. Public tunnel 200. Leonard Telegram at 09:38. A real boot with nobody logged in is the only 100% test and was not done. +Launchers in `C:\Users\fight\AppData\Local\VeriPath\` now: +- Check every 3 seconds that the Task Scheduler wrapper is alive. +- If the wrapper is gone or a `.disabled` file exists, stop the program and exit. +- If a new launcher finds an old leftover copy, shut it down and take over. +- Only touch their own program. Cannot catch Jimmy's gateway. +- Old scripts backed up as `*.ps1.bak-20260926`. Task definitions unchanged. -Open bug: stopping a task kills only the wrapper. Launcher + program keep running. After a Task Scheduler stop of `Hermes_WebUI`, the task showed Ready while the web app stayed up. Crash before next boot/logon will not restart it. +CoS proof of wrapper fix: +- Stopped `Hermes_WebUI` at 09:49:13. By 09:49:16 port 8787 was dead. +- Started the task at 09:49:42. `/health` 200 at 09:49:49. +- Web app in session 0 under Task Scheduler, `127.0.0.1:8787` only, `.env` login passes. +- One tunnel copy. Public `/health` 200. +- One Leonard gateway in session 0. Telegram at 09:50:49. Jimmy task not touched. -Side effect: Leonard now runs elevated. `profiles\leonard` state is unreadable to non-admin tools. +Unknown: something else tried to start Leonard at 09:48 and exited because Leonard was already running. Source not investigated. Do not start the default profile while looking. + +Side effect still open: Leonard runs elevated. `profiles\leonard` state unreadable to non-admin tools. -Launchers: `C:\Users\fight\AppData\Local\VeriPath\`. Password only in `C:\Users\fight\Projects\hermes-webui\.env`. Web app still `127.0.0.1:8787` only. -Tunnel URL at 09:43: `https://saving-bosnia-shades-pearl.trycloudflare.com` +Tunnel URL at 09:50: `https://daughter-cards-fog-compete.trycloudflare.com` +Prior URLs dead: `fridge-operations-agent-study`, `saving-bosnia-shades-pearl`, `indicated-forest-notify-low`. Live URL file: `%LOCALAPPDATA%\cloudflared\current-url.txt` +Hermex 530 on the fridge-* URL was expected after rotate. + +A real boot with nobody logged in is still the only 100% cold-boot test and was not done. ## Open / next -1. CoS edits the three launchers so a dead wrapper stops the child. No admin. No Tony click unless CoS cannot apply it live. -2. Do not ask Tony to reboot unless that is the only honest test after the launcher fix. +1. Done: launcher dies with wrapper. +2. Do not open `100.64.0.1` until Gatekeeper says the phone is on the live tunnel. 3. Then narrow Regis line if still wanted. -4. Parked: Leonard running elevated, Telegram flaps / NAT, Coach, default-profile token, client backlog. +4. Parked: Leonard running elevated, unknown 09:48 Leonard start, Telegram flaps / NAT, Coach, default-profile token, client backlog.