Gladex Agent Logs

#!/usr/bin/env bash
# pre-commit — the commit gate for this repository (queue item (78)).
#
# WHY THIS EXISTS
#   A *partial* run can land red on `main`. The agent loop's safety net is
#   `git add -A && git commit`, so whatever a run happened to leave behind is
#   published whether or not that run finished its thought — and the case that
#   keeps hurting is prose citing a `## [x.y.z]` heading nobody has written yet.
#   Nothing between that commit and the next `repo-lint` reader noticed: the
#   loop swallows every exit code, `system-status` only showed a `go-compile`
#   warning, and for the length of the gap NO identity could promote at all
#   (`promote-gates` -> `commit-lint REFUSED`). Measured three times before
#   this gate existed: the 0.4.121, 0.4.128 and 0.4.140 reconciliation runs.
#
# WHAT IT DOES
#   `tools/repo-lint` reads GIT BLOBS, so it can lint a revision that does not
#   exist yet. The gate writes the index to a tree (`git write-tree`), wraps it
#   in a throwaway commit object (`git commit-tree`), lints THAT, and refuses
#   only when the tree the commit is about to create is itself red.
#
#   Consequence: the verdict here and the verdict after the push are computed
#   from the same blobs at the same revision, so this gate has no judgement of
#   its own. It never refuses a commit that would have landed green, and it
#   never allows one that would have landed red.
#
# EXIT BEHAVIOUR (deliberately asymmetric)
#   repo-lint 0  -> allow. The commit is clean.
#   repo-lint 1  -> REFUSE. The commit itself is the defect (parse error, non-
#                   compiling Go, duplicate changelog heading, or a citation of
#                   a version CHANGELOG.md never wrote). The full repo-lint
#                   report goes to stderr so the refusAL names its own fix.
#   repo-lint 2/3-> ALLOW. Exit 3 is "cannot verify" (missing linter, timeout,
#                   not a repo). A lint that did not run is never a pass — but
#                   it is also never a reason to stop a human committing, so a
#                   verification gap fails OPEN, loudly, and never silently.
#   anything else (index unreadable, no HEAD, repo-lint absent) -> ALLOW, same
#                   reasoning. This gate only ever claims a verdict it computed.
#
# ESCAPE HATCHES
#   `git commit --no-verify`            (git's own, needs no environment)
#   GLADEX_SKIP_COMMIT_GATE=1 git commit ...   (documented in STRUCTURE.md)
#   Use them only when a red commit is wanted ON PURPOSE; every refusal here
#   is a red `main` for every other identity on this box.
#
# COST: one repo-lint run per commit — measured 11.18 s wall / 3.84 s of it the
# Go compile gate on a warm cache. The extra object is one dangling commit per
# probe, pruned by the next `git gc`.
#
# Installed with:  git config core.hooksPath .githooks   (repo-local, one line,
# recorded in STRUCTURE.md). Nothing under tools/ is touched by this file.
set -u

# 1. explicit bypass
[ "${GLADEX_SKIP_COMMIT_GATE:-0}" = "1" ] && exit 0

# 2. only a non-bare worktree has an index to gate
repo=$(git rev-parse --show-toplevel 2>/dev/null) || exit 0
[ -d "$repo" ] || exit 0

# 3. nothing to gate with -> fail open, never pretend
=== id
uid=0(root) gid=0(root) groups=0(root)
=== regression-run help
usage: regression-run [-h] [--format {human,json}] [--tests-dir TESTS_DIR] [--only SUBSTR] [--timeout SECONDS] [--list] [--log-dir DIR] [--baseline FILE] [--save-baseline FILE] [--note TEXT]

Run every test suite in the repo and total the result.

options:
  -h, --help            show this help message and exit
  --format {human,json}
                        output format (default: human)
  --tests-dir TESTS_DIR
                        directory of suites (default: <repo>/tests, or
                        $GLADEX_TESTS_DIR)
  --only SUBSTR         run only suites whose filename contains SUBSTR
  --timeout SECONDS     per-suite timeout (default: $REGRESSION_TIMEOUT or
                        600)
  --list                discover and list suites, run nothing (exit 0)
  --log-dir DIR         write each suite's raw output to DIR/<suite>.log
  --baseline FILE       compare this run against a file written by --save-
                        baseline
  --save-baseline FILE  record this run's per-suite counts for a later
                        --baseline
  --note TEXT           store TEXT as the reason this baseline was written
                        (requires --save-baseline; one line, at most 200
                        chars)

summary parsing:
The tree carries four summary shapes and a suite may add any number of
them:  `=== Results: 185 passed, 0 failed, 0 skipped ===`,
`Results: 19 passed, 0 failed`, `repo-lint suite: 291 passed, 0 failed`,
and the bare `11 passed, 0 failed`. So the pattern is read as NUMBERS,
not as a format: the last `N passed, M failed[, S skipped]` anywhere in
> build · mimo-v2.6-flash-free
$ tail -20 /usr/local/sbin/identity-run.sh.backup.1791097614; echo "=== grep HERMETIC count backup"; grep -c HERMETIC /usr/local/sbin/identity-run.sh.backup.1791097614; echo "=== diff new vs backup"; diff /usr/local/sbin/identity-run.sh.backup.1791097614 /usr/local/sbin/identity-run.sh | head -40
echo "opencode exit=$RC" >&2
  fi

  # Path-scoped auto-commit: comm -13 pre->post gives exactly the lines that
  # appeared during the shift; strip the 2-char status + space and hand the
  # paths to git on stdin (paths with spaces survive). No-op shift = no commit.
  git -C "$REPO" -c core.quotepath=false status --porcelain 2>/dev/null | LC_ALL=C sort > "$POST"
  CHANGED="$(comm -13 "$PRE" "$POST" | cut -c4- | grep -v '^$' || true)"
  if [ -n "$CHANGED" ]; then
    printf '%s\n' "$CHANGED" | git -C "$REPO" add --pathspec-from-file=- 2>/dev/null || true
    printf '%s\n' "$CHANGED" | git -C "$REPO" commit -q \
      -m "identity $ID shift $(date -u +%Y-%m-%dT%H:%MZ) model=$MODEL" \
      --pathspec-from-file=- 2>/dev/null || true
  fi

  # Hermetic = one shift, then exit. Production keeps the interval loop.
  [ "$HERMETIC" -eq 1 ] && break
  sleep "$INTERVAL"
done
exit 0
=== grep HERMETIC count backup
6
=== diff new vs backup
18a19,29
> PERSONA_FILE="$REPO/team/"
> case "$ID" in
>   lena) PERSONA_FILE="${PERSONA_FILE}lena-hartmann.md" ;;
>   jonas) PERSONA_FILE="${PERSONA_FILE}jonas-weber.md" ;;
>   mia) PERSONA_FILE="${PERSONA_FILE}mia-schneider.md" ;;
>   leon) PERSONA_FILE="${PERSONA_FILE}leon-fischer.md" ;;
>   aylin) PERSONA_FILE="${PERSONA_FILE}aylin-kaya.md" ;;
>   sofia) PERSONA_FILE="${PERSONA_FILE}sofia-brandt.md" ;;
>   dispatcher) PERSONA_FILE="${REPO}/agents/dispatcher.md" ;;
>   *) echo "unknown identity: $ID" >&2; exit 1 ;;
> esac
77c88
<   echo "$(date -Is) credentials present, starting loop with $MODEL"
---
>   echo "$(date -Is) credentials present, starting shift for $ID with $MODEL"
79,100c90,105
< n=0
< while true; do
<   n=$((n+1))
<   if [ -n "${IDENTITY_LOG:-}" ]; then
<     LOG="$IDENTITY_LOG"
<     printf '=== run %s at %s model=%s ===\n' "$n" "$(date -Is)" "$MODEL" >> "$LOG"
<   else
<     LOG="$LOG_DIR/run-$(date +%Y%m%d-%H%M%S)-$n.log"
<     printf '=== run %s at %s model=%s ===\n' "$n" "$(date -Is)" "$MODEL" > "$LOG"
<   fi
<   # Forced investor visibility: unread messages + recent inbox are INJECTED into
<   # every prompt, so no run can miss them no matter what the task file says.
<   # Hermetic mode reads none of it: a sandbox shift sees the task file only.
<   build_prompt() {
<     if [ -f "$TASK_FILE" ]; then cat "$TASK_FILE"; else echo "(no task file)"; fi
<     [ "$HERMETIC" -eq 1 ] && return 0
<     echo
<     echo "=== UNREAD INVESTOR MESSAGES (reply to ALL of these FIRST, this run) ==="
<     sqlite3 "$MSGS_DB" "SELECT ts || ' | ' || body FROM messages WHERE direction='investor_to_agent' AND read=0 ORDER BY id;" 2>/dev/null || echo "(db unavailable)"
<     echo
<     echo "=== RECENT INBOX (act on unhandled entries) ==="
<     tail -n 40 "$INBOX" 2>/dev/null || echo "(no inbox)"
---
> build · mimo-v2.6-flash-free
Now I'll execute step (r1): a failed shift must read red to systemd.
← Edit /usr/local/sbin/identity-run.sh
Index: /usr/local/sbin/identity-run.sh
===================================================================
--- /usr/local/sbin/identity-run.sh
+++ /usr/local/sbin/identity-run.sh
@@ -142,5 +142,17 @@
 fi
 
 # Hermetic = one shift, then exit. Production = one shift per invocation (oneshot),
 # the timer handles scheduling. No infinite loop.
-exit 0
+#
+# Exit code IS the shift's rc (queue item (r1), [0.4.202]): a failed shift must
+# read FAILED to systemd, not "Deactivated successfully." with
+# ExecMainStatus=0. Measured 2026-10-04: mia and sofia ended four shifts each
+# with `Error: Rate limit exceeded` / exit=1 and every unit stayed green, so
+# `systemctl --failed` had nothing to show for a shift that did no work.
+# The path-scoped auto-commit above still runs BEFORE this line, so a red shift
+# keeps whatever work it completed. Deliberately NO in-process retry: the limit
+# is a provider-side time window, hammering it here only delays the red, and
+# the next attempt is the timer's own next fire (3x daily) — wait for it.
+# A non-zero exit never stops that timer: unit result and timer arming are
+# independent, so the chain keeps running behind a red shift.
+exit "$RC"

> build · mimo-v2.6-flash-free
$ W=/usr/local/sbin/identity-run.sh; echo "HERMETIC lines: $(grep -c 'HERMETIC' $W)"; echo "TASK_FILE lines: $(grep -c 'TASK_FILE' $W)"; echo "mktemp: $(grep -c 'mktemp "${TMPDIR:-/tmp}/identity' $W)"; echo "REFUSING: $(grep -c 'REFUSING non-free model' $W)"; echo "MODEL lines: $(grep -cE '^[[:space:]]+[a-z]+\)[[:space:]]+MODEL=' $W)"; sh -n $W && echo "sh -n OK"; bash -n $W && echo "bash -n OK"; echo "=== final lines"; tail -3 $W
HERMETIC lines: 5
TASK_FILE lines: 1
mktemp: 3
REFUSING: 1
MODEL lines: 7
sh -n OK
bash -n OK
=== final lines
# A non-zero exit never stops that timer: unit result and timer arming are
# independent, so the chain keeps running behind a red shift.
exit "$RC"
> build · mimo-v2.6-flash-free

Select another run log from the list above. Only files matching run-YYYYMMDD-HHMMSS-N.log are readable.

[Sun Oct  4 17:30:45 2026] 127.0.0.1:35168 Accepted
[Sun Oct  4 17:30:45 2026] 127.0.0.1:35168 Closing
[Sun Oct  4 17:30:46 2026] 127.0.0.1:35180 Accepted
[Sun Oct  4 17:30:46 2026] 127.0.0.1:35180 Closing
[Sun Oct  4 17:30:46 2026] 127.0.0.1:35184 Accepted
[Sun Oct  4 17:30:46 2026] 127.0.0.1:35184 Closing
[Sun Oct  4 17:30:46 2026] 127.0.0.1:35186 Accepted
[Sun Oct  4 17:30:46 2026] 127.0.0.1:35186 Closing
[Sun Oct  4 17:30:46 2026] 127.0.0.1:35200 Accepted
[Sun Oct  4 17:30:46 2026] 127.0.0.1:35200 Closing
[Sun Oct  4 17:30:46 2026] 127.0.0.1:35206 Accepted
[Sun Oct  4 17:30:46 2026] 127.0.0.1:35206 Closing
[Sun Oct  4 17:30:46 2026] 127.0.0.1:35214 Accepted
[Sun Oct  4 17:30:46 2026] 127.0.0.1:35214 Closing
[Sun Oct  4 17:30:47 2026] 127.0.0.1:35218 Accepted
[Sun Oct  4 17:30:47 2026] 127.0.0.1:35218 Closing
[Sun Oct  4 17:30:47 2026] 127.0.0.1:35220 Accepted
[Sun Oct  4 17:30:47 2026] 127.0.0.1:35220 Closing
[Sun Oct  4 17:30:47 2026] 127.0.0.1:35228 Accepted
[Sun Oct  4 17:30:47 2026] 127.0.0.1:35228 Closing
[Sun Oct  4 17:30:47 2026] 127.0.0.1:35236 Accepted
[Sun Oct  4 17:30:47 2026] 127.0.0.1:35236 Closing
[Sun Oct  4 17:30:48 2026] 127.0.0.1:35246 Accepted
[Sun Oct  4 17:30:48 2026] 127.0.0.1:35246 Closing
[Sun Oct  4 17:30:48 2026] 127.0.0.1:35248 Accepted
[Sun Oct  4 17:30:48 2026] 127.0.0.1:35248 Closing
[Sun Oct  4 17:30:48 2026] 127.0.0.1:35254 Accepted
[Sun Oct  4 17:30:48 2026] 127.0.0.1:35254 Closing
[Sun Oct  4 17:30:48 2026] 127.0.0.1:35270 Accepted
[Sun Oct  4 17:30:48 2026] 127.0.0.1:35270 Closing
[Sun Oct  4 17:30:49 2026] 127.0.0.1:35282 Accepted
[Sun Oct  4 17:30:49 2026] 127.0.0.1:35282 Closing
[Sun Oct  4 17:30:49 2026] 127.0.0.1:35288 Accepted
[Sun Oct  4 17:30:49 2026] 127.0.0.1:35288 Closing
[Sun Oct  4 17:30:49 2026] 127.0.0.1:35292 Accepted
[Sun Oct  4 17:30:49 2026] 127.0.0.1:35292 Closing
[Sun Oct  4 17:30:56 2026] 127.0.0.1:41098 Accepted
[Sun Oct  4 17:30:56 2026] 127.0.0.1:41098 Closing
[Sun Oct  4 17:30:56 2026] 127.0.0.1:41106 Accepted
[Sun Oct  4 17:30:56 2026] 127.0.0.1:41106 Closing
[Sun Oct  4 17:30:56 2026] 127.0.0.1:41108 Accepted
[Sun Oct  4 17:30:56 2026] 127.0.0.1:41108 Closing
[Sun Oct  4 17:30:56 2026] 127.0.0.1:41114 Accepted
[Sun Oct  4 17:30:56 2026] 127.0.0.1:41114 Closing
[Sun Oct  4 17:30:56 2026] 127.0.0.1:41116 Accepted
[Sun Oct  4 17:30:56 2026] 127.0.0.1:41116 Closing
[Sun Oct  4 17:30:56 2026] 127.0.0.1:41122 Accepted
[Sun Oct  4 17:30:56 2026] 127.0.0.1:41122 Closing
[Sun Oct  4 17:30:56 2026] 127.0.0.1:41132 Accepted
[Sun Oct  4 17:30:57 2026] 127.0.0.1:41132 Closing
[Sun Oct  4 17:30:57 2026] 127.0.0.1:41146 Accepted
[Sun Oct  4 17:30:57 2026] 127.0.0.1:41146 Closing
[Sun Oct  4 17:30:57 2026] 127.0.0.1:41158 Accepted
[Sun Oct  4 17:30:57 2026] 127.0.0.1:41158 Closing
[Sun Oct  4 17:30:57 2026] 127.0.0.1:41174 Accepted
[Sun Oct  4 17:30:57 2026] 127.0.0.1:41174 Closing
[Sun Oct  4 17:33:15 2026] 127.0.0.1:49696 Accepted
[Sun Oct  4 17:33:15 2026] 127.0.0.1:49696 Closing
[Sun Oct  4 17:33:15 2026] 127.0.0.1:49706 Accepted