Gladex Agent Logs

224:## Constraints
228:### Workflow
253:### Rules
263:## Git Scope (per §9, §10 of AGENT_BRIEF.md)
278:## Systemd Services
290:## App Routes (app/src/php/app.php)
324:## Mail Stack (Postfix + Dovecot, live since 2026-09-23)
=== tools mentions ===
23:│   ├── tools/              # Agent CLI tools
34:└── tools/                  # Symlink to /data/repo/tools
267:- `tools/` — agent CLI tools
336:| Relay policy | `mynetworks = 127.0.0.0/8` only + `defer_unauth_destination`; live-probed 2026-09-23: external RCPT → `454 4.7.1 Relay access denied`. **Re-verified 2026-09-24** with the new `tools/smtp-relay-probe` (DATA never sent): :25 banner `220` answers again (greeting bug gone), :587/:465 → `554 5.7.1`, full public path `77.90.15.49:25` → `454 4.7.1`, loopback `127.0.0.1:25` accepted by design (mynetworks) — exit 0, queue empty. Re-run it after any Postfix change |
$ cd /data/repo && grep -n "naming convention\|Naming\|convention" STRUCTURE.md | head -15; echo "=== symlink def ==="; sed -n '168,180p' STRUCTURE.md
61:## Naming Conventions
=== symlink def ===
- Dispatcher writes task files to `mailboxes/*`; escalation to investor only if blocked >24h.

## Ownership

- `/opt/startup/dev`, `/opt/startup/prod`, `/opt/startup/git` — runtime environments (agent-managed, not in git)
- `/data/repo` — git repository (canonical source, tracked)
- `/data/tools`, `/data/agent-logs`, `/data/STRUCTURE.md`, `/data/BUDGET.md`, `/data/DOMAIN.md` — **agent-exclusive**
- `/data/shared` — shared assets (agent-owned)
- Humans read `REPORT.md`, `README.md` in envs; they do not manage agent internals

## Subagent Communication Protocol (v1)

### Overview
> build · mimo-v2.6-flash-free
→ Read repo/STRUCTURE.md [limit=46, offset=61]
> build · mimo-v2.6-flash-free
← Edit repo/STRUCTURE.md
Index: repo/STRUCTURE.md
===================================================================
--- repo/STRUCTURE.md
+++ repo/STRUCTURE.md
@@ -62,8 +62,18 @@
 
 - **Directories**: kebab-case, lowercase (`agent-logs`, `dev`, `prod`, `shared`, `tools`)
 - **Agent logs**: `run-YYYYMMDD-HHMMSS-N.log` (timestamp + sequence)
 - **Tool scripts**: kebab-case, executable, shebang + `--help` support
+  - **Repo-root derivation (2026-09-24)**: a tool resolves its own location with
+    `realpath` (`os.path.realpath(__file__)` / `realpath "${BASH_SOURCE[0]}"`), never
+    `abspath` or a logical `pwd`. `/data/tools` is a symlink to `/data/repo/tools`, so a
+    logical derivation walks up to `/data` (no `.git`, no `app/src/php`): the tool then
+    either fails closed (`source-sync-check` → `repo=/data`, `MISSING-DIR`, exit 3) or
+    dies under `set -e` with **zero output** (`system-status` → `REPO_DIR=/data`,
+    exit 128 at the git check) — a silent failure of the STEP-0 guard tool. Both paths
+    now resolve to `/data/repo`. Regression-tested: `tests/test_source_sync_check.sh`
+    case N (30 assertions) and `tests/test_system_status_unread.sh` case 10 (24
+    assertions), each proven to fail on the pre-fix code.
 - **Env files**: `.env.example` (committed), `.env` (gitignored, local only)
 - **Scripts**: `run.sh`, `healthz.sh`, `seed.sh`, `backup.sh` (executable)
 - **Source**: `src/` (language-agnostic), tests in `tests/`
   - Exception — **Go tests are co-located** with the package they test as `*_test.go`

$ cd /data/repo && git status --short; echo "=== diffstat ==="; git diff --stat
M STRUCTURE.md
 M tests/test_source_sync_check.sh
 M tests/test_system_status_unread.sh
 M tools/REGISTRY.md
 M tools/source-sync-check
 M tools/system-status
=== diffstat ===
 STRUCTURE.md                       | 10 ++++++++++
 tests/test_source_sync_check.sh    | 23 +++++++++++++++++++++++
 tests/test_system_status_unread.sh | 28 ++++++++++++++++++++++++++++
 tools/REGISTRY.md                  | 29 +++++++++++++++++++++++------
 tools/source-sync-check            |  7 ++++++-
 tools/system-status                |  7 ++++++-
 6 files changed, 96 insertions(+), 8 deletions(-)
> build · mimo-v2.6-flash-free
Appending this run's entry to PROGRESS.md:
← Edit repo/agent-logs/PROGRESS.md
Index: repo/agent-logs/PROGRESS.md
===================================================================
--- repo/agent-logs/PROGRESS.md
+++ repo/agent-logs/PROGRESS.md
@@ -4266,4 +4266,64 @@
 `/data/tools` symlink resolves `repo=/data` — `abspath` not `realpath` in
 `default_repo()` — fails closed with exit 3 instead of comparing wrong trees; one-word
 fix (`realpath`) + doc note if promoted. (2) NEEDS-INVESTOR msg #57 still awaiting the
 investor's A/B/C public-gating decision.
+
+## 2026-09-24T13:00Z main-loop run — STEP 0 clear; symlink repo-root fix landed (candidate (1) DONE, both affected tools)
+
+**STEP 0 — investor reply check (ran FIRST, before any other work):**
+- dev `/opt/startup/dev/data/messages.db`: `direction='investor_to_agent' AND read=0`
+  → **0 rows** (all 24 investor→agent rows already read); prod DB → **0 rows**.
+- INBOX.md: grep for `## ` entries **without** a `~~HANDLED~~` marker → **none**; every
+  RECENT INBOX item in this run's brief was handled in earlier runs.
+- **Replies owed: NONE** → no `agent_to_investor` rows inserted (nothing unanswered —
+  an unanswered investor would have been a failed run). Still open on the *investor's*
+  side: NEEDS-INVESTOR **msg #57** (A/B/C public-gating decision), sent, unopened.
+
+**Small verifiable step — the queued candidate, DONE:** repo-root derivation through
+the documented `/data/tools` symlink.
+- **Root cause** (one class, two tools): `/data/tools` → `/data/repo/tools` is a symlink
+  and neither tool resolved it:
+  - `source-sync-check` used `os.path.abspath(__file__)` (does not follow symlinks) →
+    `repo=/data` → no `app/src/php` under it → `MISSING-DIR`, **exit 3**: blind but loud.
+  - `system-status` derived `SCRIPT_DIR` with a logical `pwd` → `REPO_DIR=/data` (no
+    `.git`) → `set -e`+pipefail killed it at the git check → **exit 128, ZERO output** —
+    a *silent* failure of the very tool that guards STEP 0.
+  - Scope confirmed before touching anything: `promote-dev-to-prod` is unaffected (it
+    passes `GLADEX_REPO_DIR` + a direct path), `verify-landing` computes `SCRIPT_DIR`
+    but never uses it, and no systemd unit/cron job invokes either via the link — the
+    bug was latent, not live-breaking.
+- **Fix**: `realpath` in both (`os.path.realpath(__file__)` in Python,
+  `realpath "${BASH_SOURCE[0]}"` in bash) — both invocation paths now yield `/data/repo`.
+- **Tests written FIRST, run against the unfixed tools** to prove they bite: new case N
+  (`test_source_sync_check.sh`, 4 assertions) → **4 FAIL pre-fix** (exit 3, wrong repo
+  root, walked to the link's parent, never compared); new case 10
+  (`test_system_status_unread.sh`, 4 assertions) → **3 FAIL pre-fix** (rc 128, empty
+  output, no item). After the fix: both green. Hermetic: case N links a *copy* of the
+  tool inside the sandbox, so the live repo is never read by the suite.
+- **Mutation**: fix reverted on a copy → `realpath` gone, run through a link → **rc 128,
+  0 bytes** → the new assertions catch the original defect, not just the happy path.
+- **Suites after the fix**: source-sync **30/30**, system-status-unread **24/24**,
+  system-status-mx-soa **27/27**, promote-gate **67/67** — all exit 0.
+- **Live proof through the actual link**: `/data/tools/source-sync-check` →
+  `repo=/data/repo`, 42 files across dev+prod in sync, **exit 0** (was `repo=/data`,
+  exit 3); `/data/tools/system-status` → **30 lines, rc 0** (was 0 lines, rc 128).
+  Direct-path invocations byte-identical to before (no behavior change).
+- **Assertion nuance found while testing**: `system-status` ends with `exit $ERRORS`
+  (error *count*), and this suite's coarse `dig` stub fails MX/SOA on purpose → rc 2.
+  So case 10 asserts "did not die at the git check" (rc ≠ 128) + content (`git-tree`,
+  `investor-messages` items — `git-tree` can only render once `cd $REPO_DIR && git
+  status` ran in a real work tree), **not** rc=0. The rc-vs-invalid-args collision is
+  documented in REGISTRY; the contract itself was left alone (changing it would churn
+  the mx_soa suite — queued as a doc-only follow-up).
+- **Docs**: `tools/REGISTRY.md` — both entries: Location now notes the symlink +
+  realpath resolution, counts 26→30 and 20→24, new case N / case 10 bullets, and the
+  `exit $ERRORS` nuance. `STRUCTURE.md` — Naming Conventions gained a **repo-root
+  derivation** rule (realpath, never abspath/logical pwd) citing both regression tests.
+- **Money**: model spend **0.00** (`*-free` only), no purchase, no DNS write, no secret
+  read, no service restart, prod untouched.
+
+**Next-candidate queued, not actioned**: (1) NEEDS-INVESTOR **msg #57** still awaiting
+the investor's A/B/C public-gating decision — surface is unchanged until they answer.
+(2) `system-status` documented exit codes (`0/1/2`) collide with `exit $ERRORS` once 2+
+checks error (exit 2 = "invalid arguments" *and* "2 errors") — documented only; fixing
+the contract means touching `test_system_status_mx_soa.sh`'s exit-code assertions.

$ cd /data/repo && git remote -v; echo "=== budget check ==="; tools/budget-show | head -6
origin	git://git.gladex.de/gladex.git (fetch)
origin	git://git.gladex.de/gladex.git (push)
=== budget check ===
=== Budget Status ===
Month:       2026-09
Allowance:   5.00 €
Spent:       1.50 (gladex.de — investor-approved 2026-09-20, purchase pending at registrar) €
Remaining:   3.50 €
> build · mimo-v2.6-flash-free
Committing and pushing:
$ cd /data/repo && git diff | grep -iE "password|secret|token|api[_-]?key|BEGIN .*PRIVATE" | head; echo "SECRET-SCAN-EXIT:$? (1 = clean)"
+- **Money**: model spend **0.00** (`*-free` only), no purchase, no DNS write, no secret
SECRET-SCAN-EXIT:0 (1 = clean)
$ cd /data/repo && bash tests/test_source_sync_check.sh >/dev/null 2>&1; echo "ssc=$?"; bash tests/test_system_status_unread.sh >/dev/null 2>&1; echo "unread=$?"
ssc=0
unread=0
> build · mimo-v2.6-flash-free
Only match is my own prose ("no secret read") — no actual secrets. Final suites green. Committing:
$ cd /data/repo && git add -A && git commit -q -m "fix: tools derive their repo root with realpath, so the documented /data/tools symlink stops breaking them — source-sync-check reported repo=/data and failed closed (exit 3 MISSING-DIR) while system-status died under set -e at the git check (exit 128, ZERO output, silent failure of the STEP-0 guard); regression case N (4 assertions) + case 10 (4 assertions) written first and run against the unfixed code (4/3 FAIL), fix reverted as mutation (rc128, 0 bytes) -> caught; suites green 30/30 + 24/24 + 27/27 + gate 67/67; live via link: repo=/data/repo exit 0 / 30 lines rc0; REGISTRY counts+notes (incl. exit \$ERRORS nuance), STRUCTURE repo-root derivation rule, PROGRESS STEP-0 clear" && git log --oneline -1 && git status --short | wc -l
96b4b8d fix: tools derive their repo root with realpath, so the documented /data/tools symlink stops breaking them — source-sync-check reported repo=/data and failed closed (exit 3 MISSING-DIR) while system-status died under set -e at the git check (exit 128, ZERO output, silent failure of the STEP-0 guard); regression case N (4 assertions) + case 10 (4 assertions) written first and run against the unfixed code (4/3 FAIL), fix reverted as mutation (rc128, 0 bytes) -> caught; suites green 30/30 + 24/24 + 27/27 + gate 67/67; live via link: repo=/data/repo exit 0 / 30 lines rc0; REGISTRY counts+notes (incl. exit $ERRORS nuance), STRUCTURE repo-root derivation rule, PROGRESS STEP-0 clear
0
> build · mimo-v2.6-flash-free
$ cd /data/repo && timeout 30 git push origin main 2>&1 | tail -5; echo "PUSH-EXIT:$?"; timeout 20 git ls-remote origin main 2>&1 | head -2
To git://git.gladex.de/gladex.git
   b4eee82..96b4b8d  main -> main
PUSH-EXIT:0
96b4b8d24c052bc1bd11380d895cfada504be117	refs/heads/main
> build · mimo-v2.6-flash-free
Run complete. Summary:

## STEP 0 — investor check (ran first) ✅
- **Unread `investor_to_agent` rows: 0** in both dev (`/opt/startup/dev/data/messages.db`) and prod DBs — all 24 investor→agent rows already read.
- **INBOX.md: no unhandled entries** (grep for `## ` entries lacking `~~HANDLED~~` → none).
- **Replies owed: none** → nothing unanswered, so no rows inserted; noted in PROGRESS.md. Still open on the *investor's* side: NEEDS-INVESTOR **msg #57** (A/B/C public-gating decision).

## Step done — symlink repo-root fix (the queued candidate)
Investigating it revealed the bug class hits **two** tools via the documented `/data/tools → /data/repo/tools` symlink:

| Tool | Symptom through the link | Fix |
|---|---|---|
| `source-sync-check` | `repo=/data` → `MISSING-DIR`, **exit 3** (blind) | `os.path.abspath` → `realpath` |
| `system-status` | `REPO_DIR=/data` → `set -e` died at git check: **exit 128, zero output** — silent death of the STEP-0 guard tool | logical `pwd` → `realpath "${BASH_SOURCE[0]}"` |

- **Scope checked before touching anything**: `promote-dev-to-prod` unaffected (passes `GLADEX_REPO_DIR`), `verify-landing` never uses its `SCRIPT_DIR`, no systemd/cron invokes either via the link — latent, not live-broken.
- **Tests written first and run against the unfixed code**: case N → 4 FAIL, case 10 → 3 FAIL (proves non-vacuity); fix reverted as a mutation → rc 128, 0 bytes → caught.
- **Suites green**: source-sync **30/30**, system-status-unread **24/24**, mx-soa **27/27**, promote-gate **67/67**.
- **Live proof via the actual link**: `/data/tools/source-sync-check` → `repo=/data/repo`, 42 files in sync, exit 0 (was exit 3); `/data/tools/system-status` → 30 lines rc 0 (was 0 lines rc 128). Direct paths unchanged.
- **Assertion nuance found**: `system-status` ends with `exit $ERRORS` (error count), so case 10 asserts "didn't die at the git check" + content rather than rc=0 — documented in REGISTRY.
- **Docs**: REGISTRY (both entries, counts 26→30 / 20→24, case N/10, `exit $ERRORS` note) + STRUCTURE (repo-root derivation rule).

**Committed** `96b4b8d`, tree clean, **pushed** to `git://git.gladex.de/gladex.git` (remote main verified = local HEAD).

**Money**: model spend **0.00** (`*-free` only); BUDGET unchanged — 1.50 spent / **3.50 remaining**, no purchases, no DNS writes, no secret reads, prod untouched.
exit=0

Select another run log from the list above. Only files matching run-YYYYMMDD-HHMMSS-N.log are readable.

[Fri Sep 25 01:43:04 2026] 127.0.0.1:38886 Accepted
[Fri Sep 25 01:43:04 2026] 127.0.0.1:38886 Closing
[Fri Sep 25 01:43:05 2026] 127.0.0.1:38896 Accepted
[Fri Sep 25 01:43:05 2026] 127.0.0.1:38896 Closing
[Fri Sep 25 01:43:09 2026] 127.0.0.1:38912 Accepted
[Fri Sep 25 01:43:09 2026] 127.0.0.1:38912 Closing
[Fri Sep 25 01:43:10 2026] 127.0.0.1:38918 Accepted
[Fri Sep 25 01:43:10 2026] 127.0.0.1:38918 Closing
[Fri Sep 25 01:43:10 2026] 127.0.0.1:38934 Accepted
[Fri Sep 25 01:43:10 2026] 127.0.0.1:38934 Closing
[Fri Sep 25 01:43:30 2026] 127.0.0.1:53584 Accepted
[Fri Sep 25 01:43:30 2026] 127.0.0.1:53584 Closing
[Fri Sep 25 01:43:30 2026] 127.0.0.1:53596 Accepted
[Fri Sep 25 01:43:30 2026] 127.0.0.1:53596 Closing
[Fri Sep 25 01:43:30 2026] 127.0.0.1:53610 Accepted
[Fri Sep 25 01:43:30 2026] 127.0.0.1:53610 Closing
[Fri Sep 25 01:43:39 2026] 127.0.0.1:34760 Accepted
[Fri Sep 25 01:43:39 2026] 127.0.0.1:34760 Closing
[Fri Sep 25 01:43:40 2026] 127.0.0.1:34764 Accepted
[Fri Sep 25 01:43:40 2026] 127.0.0.1:34764 Closing
[Fri Sep 25 01:43:40 2026] 127.0.0.1:34780 Accepted
[Fri Sep 25 01:43:40 2026] 127.0.0.1:34780 Closing
[Fri Sep 25 01:44:35 2026] 127.0.0.1:51444 Accepted
[Fri Sep 25 01:44:35 2026] 127.0.0.1:51444 Closing
[Fri Sep 25 01:44:35 2026] 127.0.0.1:51450 Accepted
[Fri Sep 25 01:44:35 2026] 127.0.0.1:51450 Closing
[Fri Sep 25 01:44:38 2026] 127.0.0.1:51462 Accepted
[Fri Sep 25 01:44:38 2026] 127.0.0.1:51462 Closing
[Fri Sep 25 01:44:38 2026] 127.0.0.1:51470 Accepted
[Fri Sep 25 01:44:38 2026] 127.0.0.1:51470 Closing
[Fri Sep 25 01:44:38 2026] 127.0.0.1:51474 Accepted
[Fri Sep 25 01:44:38 2026] 127.0.0.1:51474 Closing
[Fri Sep 25 01:44:41 2026] 127.0.0.1:51486 Accepted
[Fri Sep 25 01:44:41 2026] 127.0.0.1:51486 Closing
[Fri Sep 25 01:44:42 2026] 127.0.0.1:51490 Accepted
[Fri Sep 25 01:44:42 2026] 127.0.0.1:51490 Closing
[Fri Sep 25 01:44:42 2026] 127.0.0.1:51494 Accepted
[Fri Sep 25 01:44:42 2026] 127.0.0.1:51494 Closing
[Fri Sep 25 01:45:07 2026] 127.0.0.1:53326 Accepted
[Fri Sep 25 01:45:07 2026] 127.0.0.1:53326 Closing
[Fri Sep 25 01:45:07 2026] 127.0.0.1:53332 Accepted
[Fri Sep 25 01:45:07 2026] 127.0.0.1:53332 Closing
[Fri Sep 25 01:45:07 2026] 127.0.0.1:53346 Accepted
[Fri Sep 25 01:45:07 2026] 127.0.0.1:53346 Closing
[Fri Sep 25 01:45:12 2026] 127.0.0.1:53360 Accepted
[Fri Sep 25 01:45:12 2026] 127.0.0.1:53360 Closing
[Fri Sep 25 01:45:12 2026] 127.0.0.1:53368 Accepted
[Fri Sep 25 01:45:12 2026] 127.0.0.1:53368 Closing
[Fri Sep 25 01:45:13 2026] 127.0.0.1:53382 Accepted
[Fri Sep 25 01:45:13 2026] 127.0.0.1:53382 Closing
[Fri Sep 25 01:46:00 2026] 127.0.0.1:34850 Accepted
[Fri Sep 25 01:46:00 2026] 127.0.0.1:34850 Closing
[Fri Sep 25 01:46:01 2026] 127.0.0.1:34858 Accepted
[Fri Sep 25 01:46:01 2026] 127.0.0.1:34858 Closing
[Fri Sep 25 01:46:01 2026] 127.0.0.1:34874 Accepted
[Fri Sep 25 01:46:01 2026] 127.0.0.1:34874 Closing
[Fri Sep 25 01:46:14 2026] 127.0.0.1:58766 Accepted
[Fri Sep 25 01:46:14 2026] 127.0.0.1:58766 Closing
[Fri Sep 25 01:46:14 2026] 127.0.0.1:58770 Accepted