fleet: register cc-ci-orchestrator-backup, emily-lichen, gateway-coop

Three new projects, all running one operator-driven agent over Claude Code
Remote Control:

- cc-ci-orchestrator-backup — self-contained standby for the cc-ci orchestrator
  on the claude backend + Fable (claude-fable-5); isolated from the live loops
  (own dir/state/prefix) and must not drive them without deliberate promotion.
- emily-lichen — plans/builds a sandboxed opencode UI at emily.commoninternet.net
  for editing a lichen.page site with GLM 5.2. Planning only: the sandbox is not
  built and nothing serves that hostname yet.
- gateway-coop — the tunnel gateway (upstream codeberg notplants/tunnel-gateway-server)
  that emily-lichen depends on. Pre-existing repo, not scaffolded by the PO, and
  its harness is deliberately NOT vendored: engine/, agents.toml, prompts/ and
  .ao-state/ are excluded via the project's .git/info/exclude so nothing about
  the harness reaches the public upstream. `ref` is therefore a plain-clone
  checkout, not a submodule pin.

Registry validates at 8 projects, schema v1.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_016L6nYYwkCWnrEFKTnKAfet
This commit is contained in:
2026-08-20 16:06:29 +00:00
co-authored by Claude Opus 4.8
parent 7c8c63367c
commit cf33fe3486
+47
View File
@@ -80,3 +80,50 @@ enabled = true # RUNNING — operator-
secrets = ".env" # atproto creds; gitignored, not yet populated
config = "agents.toml"
notes = "Created 2026-08-01. Analysis of the operator's atproto data, and possibly custom feeds; the operator sets direction interactively. Single persistent agent 'analyst' (claude-opus-5, watch=heal, resume=true) exposed over Claude Code Remote Control as session notplants-atproto-analyst. Engine sourced from the bot's Tangled repo by operator choice (see comment above). Scope is deliberately open — the operator drives."
# Standby orchestrator for cc-ci, on the Claude Code backend + Fable model (claude-fable-5). The
# PRIMARY cc-ci orchestrator runs on opencode + glm-5.2 elsewhere; this is a SELF-CONTAINED standby
# (own dir/state/prefix cc-ci-backup-) that never touches the live cc-ci loops. Operator-driven via
# Remote Control. Engine from the bot's Tangled repo (same as the two projects above).
[[project]]
name = "cc-ci-orchestrator-backup"
location = "/srv/project-orchestrator/projects/cc-ci-orchestrator-backup"
harness = "agent-orchestrator"
ref = "26d93c1eda36dd68d1f59e5bec5e4cea9bc0d761" # latest engine (v0.1.0-33-g26d93c1) from the bot's Tangled repo
enabled = true # RUNNING — operator-driven via Remote Control
secrets = ".env" # none required — claude backend uses the loops user's Claude login; gitignored placeholder
config = "agents.toml"
notes = "Created 2026-08-03. Self-contained STANDBY for the cc-ci orchestrator (primary runs on opencode + glm-5.2). Single persistent agent 'orchestrator' on the claude backend with the Fable model (claude-fable-5), watch=heal, resume=true, exposed over Claude Code Remote Control as session cc-ci-backup-orchestrator. Isolated from the live cc-ci system: own dir, own session prefix cc-ci-backup-, own state — it must NOT drive the live loops unless the operator deliberately promotes it. Engine from the bot's Tangled repo."
# Design/build project for a sandboxed opencode interface at emily.commoninternet.net (the
# operator's mother edits her lichen.page site via GLM 5.2). Architecture is in the project's own
# PLAN.md. NOTE: this entry is the PLANNING project — the sandbox itself is NOT built yet, and
# nothing is serving emily.commoninternet.net.
[[project]]
name = "emily-lichen"
location = "/srv/project-orchestrator/projects/emily-lichen"
harness = "agent-orchestrator"
ref = "26d93c1eda36dd68d1f59e5bec5e4cea9bc0d761" # latest engine (v0.1.0-33-g26d93c1) from the bot's Tangled repo
enabled = true # RUNNING — operator-driven via Remote Control
secrets = ".env" # none yet; the sandbox's 3 creds are operator-supplied (see PLAN.md §2)
config = "agents.toml"
notes = "Created 2026-08-13. Plans + builds a sandboxed opencode web UI at emily.commoninternet.net for editing a lichen.page site with GLM 5.2. Design: a Docker container that joins the tailnet as its OWN node (tag:emily-sandbox), reached via the operator's gateway — the app host exposes nothing new publicly; the container is the security boundary and holds only 3 scoped creds. Single persistent agent 'implementer' (claude-opus-5, watch=heal, resume=true) over Remote Control as session emily-lichen-implementer. STATUS: planning — sandbox not built; blocked on operator input (dedicated opencode-go key, Emily's lichen token, tailscale tagged auth key + ACL, gateway forwarding, whether her site exists). Engine from the bot's Tangled repo."
# The tunnel gateway (upstream: codeberg.org/notplants/tunnel-gateway-server) — nginx SNI/stream
# routing + a Flask admin app, forwarding public domains to tailnet backends. This is the gateway
# the emily-lichen design depends on.
#
# HARNESS IS NOT VENDORED IN THE PROJECT REPO (operator's choice, 2026-08-20): engine/, agents.toml,
# prompts/ and .ao-state/ are excluded via the project's .git/info/exclude (per-clone, never
# committed) rather than a submodule + .gitignore, so nothing about the harness reaches the public
# upstream repo or its pull requests. `ref` below is therefore the pinned commit of a PLAIN CLONE at
# <location>/engine, not a submodule pin — re-pin by checking that clone out at a new ref.
[[project]]
name = "gateway-coop"
location = "/srv/gateway-coop"
harness = "agent-orchestrator"
ref = "26d93c1eda36dd68d1f59e5bec5e4cea9bc0d761" # plain clone at engine/ (NOT a submodule); v0.1.0-33-g26d93c1
enabled = true # RUNNING — operator-driven via Remote Control
secrets = ".secrets/" # Hetzner API token + Tailscale auth keys; gitignored upstream, never in git
config = "agents.toml"
notes = "Registered 2026-08-20 (pre-existing repo, not scaffolded by the PO). Tunnel gateway: nginx SNI/stream routing driven by tunnel_map.conf + Flask admin (app.py, ports.py) mapping domain -> tailnet backend, with regex/wildcard entries and ip:port backends for remapping 443. Two deploy paths: imperative Debian (setup.sh) and declarative NixOS (nix/, flake.nix), with e2e/ tests. Single persistent agent 'orchestrator' (claude-opus-5, watch=heal, resume=true) over Remote Control as session gateway-coop-orchestrator. CAUTION: live infrastructure other projects depend on (it forwards emily.commoninternet.net per the emily-lichen plan), and the working tree carries substantial in-flight STAGED work (NixOS deploy: nix/, flake.nix, e2e/, terraform) that is not the PO's and must not be committed."