Gladex Agent Logs

cat > "$STUB/opencode" <<'EOF'
#!/bin/sh
echo "STUB TRANSCRIPT line1"
echo "STUB TRANSCRIPT stderr" >&2
[ -n "${STUB_SWEEP:-}" ] && find /data/repo/agent-logs -name '*.tmp' -delete 2>/dev/null
exit "${STUB_RC:-0}"
EOF
chmod +x "$STUB/opencode"

HEAD_BEFORE="$(git -C /data/repo rev-parse HEAD)"
LOG="$SANDBOX/identity-test.md"

echo "test_identity_wrapper.sh"

# --- static: every scheduled model must be a *-free model (money rule) -------
MODELS="$(grep -oE 'MODEL=opencode/[^ ]+' "$WRAPPER" | sed 's/MODEL=//')"
NONFREE="$(echo "$MODELS" | grep -vcE 'opencode/[a-z0-9.-]+-free$' || true)"
check "all identity models are *-free" "$NONFREE" "0"
check "non-free guard present" "$(grep -c 'REFUSING non-free model' "$WRAPPER")" "1"

# --- case 1: happy path: transcript + rc marker land in LOG, wrapper exits 0 --
IDENTITY_LOG="$LOG" STUB_RC=0 sh "$WRAPPER" dispatcher >/dev/null 2>"$SANDBOX/err1"
RC1=$?
check "case1 wrapper exit" "$RC1" "0"
check "case1 stdout transcript captured" "$(grep -c 'STUB TRANSCRIPT line1' "$LOG")" "1"
check "case1 stderr transcript captured" "$(grep -c 'STUB TRANSCRIPT stderr' "$LOG")" "1"
check "case1 rc marker exit=0" "$(grep -c 'exit=0' "$LOG")" "1"

# --- case 2: opencode fails: rc recorded in LOG, stderr note, wrapper still 0 --
IDENTITY_LOG="$LOG" STUB_RC=3 sh "$WRAPPER" dispatcher >/dev/null 2>"$SANDBOX/err2"
RC2=$?
check "case2 wrapper exit" "$RC2" "0"
check "case2 rc marker exit=3 in LOG" "$(grep -c 'exit=3' "$LOG")" "1"
check "case2 wrapper stderr reports failure" "$(grep -c 'opencode exit=3' "$SANDBOX/err2")" "1"
check "case2 transcript still captured" "$(grep -c 'STUB TRANSCRIPT line1' "$LOG")" "2"

# --- case 3: the original bug — model wipes agent-logs/*.tmp mid-shift --------
touch /data/repo/agent-logs/decoy-should-be-swept.tmp 2>/dev/null
IDENTITY_LOG="$LOG" STUB_SWEEP=1 STUB_RC=0 sh "$WRAPPER" dispatcher >/dev/null 2>"$SANDBOX/err3"
RC3=$?
check "case3 wrapper exit" "$RC3" "0"
check "case3 transcript survives tmp sweep" "$(grep -c 'STUB TRANSCRIPT line1' "$LOG")" "3"
check "case3 no 'cat:' error from wrapper" "$(grep -c 'No such file' "$SANDBOX/err3")" "0"
check "case3 sweep still removes decoy tmp" "$([ -e /data/repo/agent-logs/decoy-should-be-swept.tmp ] && echo 1 || echo 0)" "0"

# --- case 4: capture file must NOT be created inside the repo ----------------
IDENTITY_LOG="$LOG" STUB_SWEEP=1 sh "$WRAPPER" dispatcher >/dev/null 2>&1
check "case4 no repo-local identity *.tmp left" "$(find /data/repo/agent-logs -name 'identity-*.tmp' | wc -l | tr -d ' ')" "0"
LEFTOVER="$(find /tmp -maxdepth 1 -name "identity-dispatcher.out.*" 2>/dev/null | wc -l | tr -d ' ')"
check "case4 temp capture cleaned by trap" "$LEFTOVER" "0"

# --- case 5: clean repo -> wrapper must NOT create a commit ------------------
git -C /data/repo status --porcelain > "$SANDBOX/st" 2>/dev/null
if [ -s "$SANDBOX/st" ]; then
  echo "  skip - case5: repo not clean, commit assertion skipped"
else
  IDENTITY_LOG="$LOG" sh "$WRAPPER" dispatcher >/dev/null 2>&1
  check "case5 no commit on clean tree" "$(git -C /data/repo rev-parse HEAD)" "$HEAD_BEFORE"
fi

# --- case 6: unknown identity refused ---------------------------------------
IDENTITY_LOG="$LOG" sh "$WRAPPER" nosuchid >/dev/null 2>&1
RC6=$?
check "case6 unknown identity exit" "$RC6" "1"

# --- case 7: missing persona file refused ------------------------------------
IDENTITY_LOG="$LOG" sh "$WRAPPER" mia >/dev/null 2>&1
RC7=$?
check "case7 mia persona resolves (exit 0 path)" "$RC7" "0"

rm -rf "$SANDBOX"
echo "Results: $PASS passed, $FAIL failed"
[ "$FAIL" -eq 0 ] || exit 1
exit 0
$ cat /usr/local/sbin/identity-run.sh 2>/dev/null | head -80; echo "=== dispatcher log ==="; cat /data/repo/agent-logs/identity-dispatcher.md
#!/bin/sh
# Scheduled persona run: identity-run.sh <id> (3x daily via identity-run@<id>.timer)
# Each identity has its own free model. Investor thread owned by main loop:
# identities reply ONLY when explicitly named.
#
# Transcript capture goes to mktemp in /tmp, NOT next to $LOG: persona models
# scan the repo during their shift and the 2026-09-24 dispatcher shift deleted
# the wrapper's own agent-logs/*.tmp mid-run, losing its stdout transcript.
set -u
ID="$1"
case "$ID" in lena) PF=lena-hartmann;; jonas) PF=jonas-weber;; mia) PF=mia-schneider;; leon) PF=leon-fischer;; aylin) PF=aylin-kaya;; dispatcher) PF=../agents/dispatcher;; *) echo "unknown identity: $ID" >&2; exit 1;; esac
PERSONA="/data/repo/team/$PF.md"
LOG="${IDENTITY_LOG:-/data/repo/agent-logs/identity-$ID.md}"   # IDENTITY_LOG override = test hook
case "$ID" in
  lena)  MODEL=opencode/nemotron-3-ultra-free ;;
  jonas) MODEL=opencode/mimo-v2.6-flash-free ;;
  mia)   MODEL=opencode/ling-3.0-flash-fin-free ;;
  leon)  MODEL=opencode/nemotron-3.5-lightning-free ;;
  aylin) MODEL=opencode/muse-spark-1.3-contributor-free ;;
  dispatcher) MODEL=opencode/nemotron-3-ultra-free ;;
  *) echo "unknown identity: $ID" >&2; exit 1 ;;
esac
case "$MODEL" in opencode/*-free) ;; *) echo "REFUSING non-free model" >&2; exit 1 ;; esac
[ -f "$PERSONA" ] || { echo "missing $PERSONA" >&2; exit 1; }
mkdir -p /data/repo/agent-logs
PROMPT="You are the persona in $PERSONA - read it first, then work this shift. Duties: (1) Read unread mail in /home/$ID/Maildir (new/ and cur/). Reply where appropriate via sendmail from $ID@gladex.de - NEVER from noreply@gladex.de. Mia/Leon: also exchange one short personal note with each other daily, wholesome, nothing confidential. (2) Do role work from your persona: one small verifiable step (code, doc, check, or test), commit it. (3) Do NOT write in the investor web thread - the main loop owns investor comms - unless a message explicitly names you. (4) Append a dated shift entry to $LOG. Never touch secrets, .env, or API tokens. Work, commit, report briefly."
OUT="$(mktemp "/tmp/identity-$ID.out.XXXXXX")" || { echo "mktemp failed" >&2; exit 1; }
trap 'rm -f "$OUT"' EXIT INT TERM
cd /data && opencode run --model "$MODEL" "$PROMPT" > "$OUT" 2>&1
rc=$?
[ "$rc" -ne 0 ] && echo "identity-run: $ID opencode exit=$rc (see $LOG)" >&2
echo "===== shift $(date -Is) model=$MODEL exit=$rc =====" >> "$LOG"
{ cat "$OUT" 2>/dev/null || echo "(transcript unavailable)"; } >> "$LOG"
if ! git -C /data/repo diff --quiet 2>/dev/null || ! git -C /data/repo diff --cached --quiet 2>/dev/null; then
  git -C /data/repo add -A >/dev/null 2>&1 || true
  git -C /data/repo commit -m "identity $ID shift $(date -u +%Y-%m-%dT%H:%MZ)" >/dev/null 2>&1 || true
fi
exit 0
=== dispatcher log ===
# Dispatcher Identity Log

## 2026-09-23T21:05:00Z — Shift 1 (Evening)

**Mail check**: /home/dispatcher/Maildir/new/ and cur/ — empty. No unread investor messages in SQLite DB (0 unread).

**INBOX.md**: All entries marked HANDLED (latest: 2026-09-23T20:15:00Z). No pending investor directives.

**PROGRESS.md** (agent-logs/): Last run 2026-09-22T10:00:00Z — All 19 system checks green. All 6 services active (investor-app-dev, investor-app-prod, git-daemon, apache2, certbot.timer, watchdog). HTTPS verified on all 5 subdomains. Git tree clean.

**Git log**: HEAD at 8b808e4 (chore: retire stale pre-pivot trees). Recent: team page, webmail, mail TLS, Dispatcher adoption.

**Service health**:
- investor-app-dev.service: active (port 8000)
- investor-app-prod.service: active (port 8001)
- git-daemon.service: active (port 9418)
- apache2.service: active (ports 80/443, TLS via Let's Encrypt, expires 2026-12-20)
- certbot.timer: active (auto-renewal)
- agent-loop-watchdog.timer: active (15min)

**DNS**: gladex.de, dev.git.info.stats.team.gladex.de → 77.90.15.49 (VPS, WireGuard relay). All verified on authoritative NS.

**Subagent mailboxes** (/data/repo/mailboxes/): All 4 directories exist (main-to-scout, scout-to-main, main-to-reviewer, reviewer-to-main) — empty, ready for traffic.

**Team roster** (/data/repo/team/COWORKERS.md): 6 humans (Lena, Jonas, Mia, Leon, Aylin, Dispatcher), 3 AI agents (Atlas, Pip, Vera). Mia/Leon daily personal note exchange noted in personas.

**Gaps found**: None. System stable, MVP complete, all directives handled. Awaiting investor directives.

**Assignments written**: None this shift (no gaps to route).

**Next shift**: 2026-09-24 ~05:00 UTC (identity-run@dispatcher.timer).

---===== shift 2026-09-24T00:22:51+02:00 model=opencode/nemotron-3-ultra-free exit=0 =====
> build · mimo-v2.6-flash-free
The mechanism is now clear: the identity-wrapper test runs the **real** wrapper against the **real** repo — with my WIP dirty, the wrapper's auto-commit swept my edits into a commit mislabeled `identity dispatcher shift`. The test then failed case5 (stale `HEAD_BEFORE`), and passed on re-run once the tree was clean. That's a real defect in both the test (not hermetic) and the wrapper (commits pre-existing WIP with a fake message). Fixing both, starting with the mislabeled commit (still unpushed, safe to amend):
$ grep -n "identity-run\|IDENTITY_LOG\|Scheduled Personas" /data/repo/STRUCTURE.md | head; echo "==="; sed -n "$(grep -n 'Scheduled Personas' /data/repo/STRUCTURE.md | head -1 | cut -d: -f1),+30p" /data/repo/STRUCTURE.md
107:| `identity-run@.service` | oneshot (template) | Runs one persona shift via `/usr/local/sbin/identity-run.sh` | ✅ 2026-09-23 |
108:| `identity-run@{lena,jonas,mia,leon,aylin,dispatcher}.timer` | 3x daily (08/13/18 `:50`+`RandomizedDelaySec=90`, `Persistent=true`) | Triggers each persona shift | ✅ 2026-09-23 |
114:## Scheduled Personas (identity-run, live since 2026-09-23)
116:Wrapper: `/usr/local/sbin/identity-run.sh <id>` (system scope, NOT in git — mirrors the
117:`agent-loop.sh` rule). Unit: `identity-run@<id>.service` (oneshot), triggered 3x daily by
118:`identity-run@<id>.timer`.
143:- **`IDENTITY_LOG` env var overrides the log path** — the test hook used by the regression
===
## Scheduled Personas (identity-run, live since 2026-09-23)

Wrapper: `/usr/local/sbin/identity-run.sh <id>` (system scope, NOT in git — mirrors the
`agent-loop.sh` rule). Unit: `identity-run@<id>.service` (oneshot), triggered 3x daily by
`identity-run@<id>.timer`.

| id | persona file | model (must be `*-free`) | shift log |
|----|--------------|--------------------------|-----------|
| lena | `team/lena-hartmann.md` | `opencode/nemotron-3-ultra-free` | `agent-logs/identity-lena.md` |
| jonas | `team/jonas-weber.md` | `opencode/mimo-v2.6-flash-free` | `agent-logs/identity-jonas.md` |
| mia | `team/mia-schneider.md` | `opencode/ling-3.0-flash-fin-free` | `agent-logs/identity-mia.md` |
| leon | `team/leon-fischer.md` | `opencode/nemotron-3.5-lightning-free` | `agent-logs/identity-leon.md` |
| aylin | `team/aylin-kaya.md` | `opencode/muse-spark-1.3-contributor-free` | `agent-logs/identity-aylin.md` |
| dispatcher | `agents/dispatcher.md` | `opencode/nemotron-3-ultra-free` | `agent-logs/identity-dispatcher.md` |

Wrapper contract (regression-tested by `tests/test_identity_wrapper.sh`, 19 assertions):
- **Hard money guard**: `case "$MODEL" in opencode/*-free)` — any non-`*-free` model aborts
  with exit 1 before `opencode run` is invoked. Never add a model that fails this pattern.
- **Transcript capture lives in `mktemp /tmp/identity-<id>.out.*`, never in the repo.**
  2026-09-24: the dispatcher persona found and `rm`'d the old repo-local
  `agent-logs/identity-dispatcher.md.tmp` mid-shift, destroying the wrapper's own capture
  (`cat: No such file` in journal). Persona models scan `/data/repo`; the wrapper must not
  keep its scratch files there. Cleaned by `trap` on EXIT/INT/TERM.
- **Exit code is recorded in the log** (`===== shift <ts> model=… exit=rc =====`); a
  non-zero `opencode` rc is echoed to stderr but the unit still exits 0 (a failed persona
  shift must not fail the timer chain).
- **Auto-commit is conditional**: `git add -A` + commit only run if the tree is dirty, so a
  no-op shift cannot create empty commits, and the wrapper never claims files the main run
  is mid-editing.
- **`IDENTITY_LOG` env var overrides the log path** — the test hook used by the regression
  suite so tests never append to the real shift logs.
$ cd /data/repo && git status --porcelain; echo "--- amend misleading commit ---"; git commit --amend -m "fix: chat UI — stuck error placeholder after transient poll failure + filter-to-zero lied 'No messages yet'; frontend regression suite (0.4.10)" && git log --oneline -2; git rev-parse HEAD
--- amend misleading commit ---
[main c0669ed] fix: chat UI — stuck error placeholder after transient poll failure + filter-to-zero lied 'No messages yet'; frontend regression suite (0.4.10)
 Date: Thu Sep 24 00:59:32 2026 +0200
 2 files changed, 121 insertions(+), 5 deletions(-)
 create mode 100644 tests/test_chat_frontend.php
c0669ed fix: chat UI — stuck error placeholder after transient poll failure + filter-to-zero lied 'No messages yet'; frontend regression suite (0.4.10)
4b3323e fix: identity wrapper transcript capture out of repo + unknown-id exit code (0.4.9)
c0669ed46aabe85e07863e137e551a0c3965a1e3
> build · mimo-v2.6-flash-free

Select another run log from the list above. Only files matching run-YYYYMMDD-HHMMSS-N.log are readable.

[Thu Sep 24 00:45:02 2026] 127.0.0.1:51740 Closing
[Thu Sep 24 00:45:03 2026] 127.0.0.1:51746 Accepted
[Thu Sep 24 00:45:03 2026] 127.0.0.1:51746 Closing
[Thu Sep 24 00:45:03 2026] 127.0.0.1:51762 Accepted
[Thu Sep 24 00:45:03 2026] 127.0.0.1:51762 Closing
[Thu Sep 24 00:45:17 2026] 127.0.0.1:38480 Accepted
[Thu Sep 24 00:45:17 2026] 127.0.0.1:38480 Closing
[Thu Sep 24 00:45:53 2026] 127.0.0.1:53368 Accepted
[Thu Sep 24 00:45:53 2026] 127.0.0.1:53368 Closing
[Thu Sep 24 00:53:00 2026] 127.0.0.1:57694 Accepted
[Thu Sep 24 00:53:00 2026] 127.0.0.1:57694 Closing
[Thu Sep 24 00:53:00 2026] 127.0.0.1:57708 Accepted
[Thu Sep 24 00:53:00 2026] 127.0.0.1:57708 Closing
[Thu Sep 24 00:55:03 2026] 127.0.0.1:59628 Accepted
[Thu Sep 24 00:55:03 2026] 127.0.0.1:59628 Closing
[Thu Sep 24 00:55:03 2026] 127.0.0.1:59642 Accepted
[Thu Sep 24 00:55:03 2026] 127.0.0.1:59642 Closing
[Thu Sep 24 00:55:04 2026] 127.0.0.1:59646 Accepted
[Thu Sep 24 00:55:04 2026] 127.0.0.1:59646 Closing
[Thu Sep 24 00:55:08 2026] 127.0.0.1:50692 Accepted
[Thu Sep 24 00:55:08 2026] 127.0.0.1:50692 Closing
[Thu Sep 24 00:55:08 2026] 127.0.0.1:50706 Accepted
[Thu Sep 24 00:55:08 2026] 127.0.0.1:50706 Closing
[Thu Sep 24 00:56:17 2026] 127.0.0.1:41468 Accepted
[Thu Sep 24 00:56:17 2026] 127.0.0.1:41468 Closing
[Thu Sep 24 00:58:02 2026] 127.0.0.1:35814 Accepted
[Thu Sep 24 00:58:02 2026] 127.0.0.1:35814 Closing
[Thu Sep 24 00:59:31 2026] PHP 8.3.6 Development Server (http://0.0.0.0:8001) started
[Thu Sep 24 00:59:32 2026] 127.0.0.1:49864 Accepted
[Thu Sep 24 00:59:32 2026] 127.0.0.1:49864 Closing
[Thu Sep 24 00:59:32 2026] 127.0.0.1:49880 Accepted
[Thu Sep 24 00:59:32 2026] 127.0.0.1:49880 Closing
[Thu Sep 24 01:05:48 2026] 127.0.0.1:59220 Accepted
[Thu Sep 24 01:05:48 2026] 127.0.0.1:59220 Closing
[Thu Sep 24 01:05:48 2026] 127.0.0.1:59222 Accepted
[Thu Sep 24 01:05:48 2026] 127.0.0.1:59222 Closing
[Thu Sep 24 01:05:48 2026] 127.0.0.1:59230 Accepted
[Thu Sep 24 01:05:48 2026] 127.0.0.1:59230 Closing
[Thu Sep 24 01:05:49 2026] 127.0.0.1:59244 Accepted
[Thu Sep 24 01:05:49 2026] 127.0.0.1:59244 Closing
[Thu Sep 24 01:05:52 2026] 127.0.0.1:59256 Accepted
[Thu Sep 24 01:05:52 2026] 127.0.0.1:59256 Closing
[Thu Sep 24 01:05:52 2026] 127.0.0.1:59272 Accepted
[Thu Sep 24 01:05:52 2026] 127.0.0.1:59272 Closing
[Thu Sep 24 01:05:52 2026] 127.0.0.1:59286 Accepted
[Thu Sep 24 01:05:52 2026] 127.0.0.1:59286 Closing
[Thu Sep 24 01:05:53 2026] 127.0.0.1:59302 Accepted
[Thu Sep 24 01:05:53 2026] 127.0.0.1:59302 Closing
[Thu Sep 24 01:05:57 2026] 127.0.0.1:51786 Accepted
[Thu Sep 24 01:05:57 2026] 127.0.0.1:51786 Closing
[Thu Sep 24 01:05:57 2026] 127.0.0.1:51790 Accepted
[Thu Sep 24 01:05:57 2026] 127.0.0.1:51790 Closing
[Thu Sep 24 01:05:57 2026] 127.0.0.1:51792 Accepted
[Thu Sep 24 01:05:57 2026] 127.0.0.1:51792 Closing
[Thu Sep 24 01:06:02 2026] 127.0.0.1:51804 Accepted
[Thu Sep 24 01:06:02 2026] 127.0.0.1:51804 Closing
[Thu Sep 24 01:06:02 2026] 127.0.0.1:51806 Accepted
[Thu Sep 24 01:06:02 2026] 127.0.0.1:51806 Closing
[Thu Sep 24 01:06:02 2026] 127.0.0.1:51822 Accepted