adam/foundry
1
0
Fork 0
Code Issues 7 Pull requests Projects 1 Releases Packages Wiki Activity Actions

Rebuild review, backup plan, and Unraid agent auth fix #34

Merged
adam merged 2 commits from chore/rebuild-review-and-backup-plan into main 2026-10-21 22:21:01 -05:00
Conversation 0 Commits 2 Files changed 5 +261 -8
adam commented 2026-10-21 22:19:37 -05:00
Owner
Copy link

Two things on one branch.

1. Fix: lab-health scan + Unraid MCP auth (b86fffb)

The 2026-10-21 unraid-management-agent update turned on Bearer auth. After it:

  • scan.py's Unraid checks failed with HTTP 401
  • Claude Code's unraid MCP failed at login ("Dynamic Client Registration rejected")

Changes:

  • docs/lab-baseline.toml: [unraid].key = op://foundry/unraid-management-agent/credential
  • scripts/lab-health/scan.py: sends the Bearer header on all 8 Unraid API calls
  • scripts/mcp-headers (new): Claude Code headersHelper that reads the token from 1Password when the MCP connects, so it isn't stored in ~/.claude.json

Verified: the scan is back to 90 checks passed, and claude mcp list shows unraid ✔ Connected.

2. Docs: rebuild review + backup plan (080bb51)

  • docs/reviews/2026-10-21-rebuild-review.md: friction review from 54 sessions, 132 commits and live state; the Hermes usage data (no agent session since 2026-08-13); the 2026 self-hosting scene; the rebuild proposal.
  • docs/plans/backups.md: rebuild step 0. Nightly pg_dumpall + sqlite3 dumps, then Backrest snapshots to R2 foundry-backups. Steps 1–4 done and verified: User Scripts plugin installed, bucket created, token scoped to that bucket only (a probe showed write/read/delete work; listing buckets and writing to other buckets are denied).

Docs-only apart from the scan change. No stack is affected, so merging deploys nothing.

🤖 Generated with Claude Code

Two things on one branch. ## 1. Fix: lab-health scan + Unraid MCP auth (`b86fffb`) The 2026-10-21 unraid-management-agent update turned on Bearer auth. After it: - `scan.py`'s Unraid checks failed with **HTTP 401** - Claude Code's `unraid` MCP failed at login ("Dynamic Client Registration rejected") Changes: - `docs/lab-baseline.toml`: `[unraid].key = op://foundry/unraid-management-agent/credential` - `scripts/lab-health/scan.py`: sends the Bearer header on all 8 Unraid API calls - `scripts/mcp-headers` (new): Claude Code `headersHelper` that reads the token from 1Password when the MCP connects, so it isn't stored in `~/.claude.json` Verified: the scan is back to 90 checks passed, and `claude mcp list` shows `unraid` ✔ Connected. ## 2. Docs: rebuild review + backup plan (`080bb51`) - `docs/reviews/2026-10-21-rebuild-review.md`: friction review from 54 sessions, 132 commits and live state; the Hermes usage data (no agent session since 2026-08-13); the 2026 self-hosting scene; the rebuild proposal. - `docs/plans/backups.md`: rebuild step 0. Nightly `pg_dumpall` + `sqlite3` dumps, then Backrest snapshots to R2 `foundry-backups`. Steps 1–4 done and verified: User Scripts plugin installed, bucket created, token scoped to that bucket only (a probe showed write/read/delete work; listing buckets and writing to other buckets are denied). Docs-only apart from the scan change. No stack is affected, so merging deploys nothing. 🤖 Generated with [Claude Code](https://claude.com/claude-code)
The 2026-10-21 unraid-management-agent update turned on Bearer auth, so
the scan's Unraid checks failed with HTTP 401 and Claude Code's unraid MCP
failed at login. The scan now reads the token from
op://foundry/unraid-management-agent/credential via [unraid].key in the
baseline. scripts/mcp-headers is a Claude Code headersHelper that reads
the same token from 1Password when the MCP connects, so it isn't stored
in ~/.claude.json.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Rebuild review: what we actually do in the lab (54 sessions, 132 commits),
where the friction is, the Hermes usage data, the 2026 self-hosting scene,
and a proposal built on two lanes, one pipeline and one agent identity.

Backup plan (rebuild step 0): nightly pg_dumpall and sqlite3 dumps, then
Backrest snapshots to R2 bucket foundry-backups. Steps 1-4 are done: the
User Scripts plugin is installed, the bucket exists, and the token is
scoped to that bucket and verified.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
adam merged commit 3e4081920a into main 2026-10-21 22:21:01 -05:00
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels   
lab-honing
Lab-access honing backlog (from 2026-07-11 session review)

No labels
lab-honing
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
adam/foundry!34
No description provided.