chore(memory): flush runtime memory updates for .omp and serverAppConfigs roots

MEMORY.md/learned.md/memory_summary.md/raw_memories.md churn from live sessions (DIFR deadlock diagnosis, model-swap ops, outpost verification etc.); new memory root --home-dank-.omp-agent-- started with learned.md.
2026-09-09 16:20:42 -07:00
1 parent 9bfa0be85d
commit 2a3c0da740
@@ -0,0 +1,4 @@
+thread_id: 01a04330-1551-72f6-b57b-8a8f43ffe7e2
+updated_at: 1787862517
+
+frank-default-large (Qwen3.8-Flash-Next ROCmFP4 STRIX on Dankclaw/Strix Halo via ROCmFPX llama.cpp) tuning/benchmark rollout: benchmarked prefill batch/ubatch and decode thread-batch; batch/ubatch 4096/4096 is the documented prefill setting, decode sweep found THREAD_BATCH=16 optimal. Decode benchmark used 8K prompt + 256 gen tokens; 512-token variant was intentionally skipped because gen tok/s is length-independent and would only double wall time. Service restored healthy and tests passed.
@@ -0,0 +1,4 @@
+thread_id: 01a046ba-1301-72c1-8d9f-347ba1c28cf7
+updated_at: 1787952056
+
+Authentik SSO + Anubis bot-protection chain debugging on homelab (Caddy → Anubis → Authentik outpost → apps). Key discovery: CLI curl probes of the auth chain return 200 from Anubis's JS challenge page, not from the outpost — making CLI verification of forward_auth fundamentally limited. External login broken: after passing Anubis externally, user hits Authentik's unstyled 'Not Found' page (outpost 404), indicating provider host-match failure for external requests.
@@ -0,0 +1,4 @@
+thread_id: 01a04717-a7fd-73ab-b7eb-319c4c1271c1
+updated_at: 1787905384
+
+frank-default-large Qwen3.8-Flash-Next on ROCmFPX/qwen4exp cannot use tested MTP GGUF draft heads; both fail missing hyper-connection tensor blk.0.hc_attn_norm.weight. Service left healthy on ngram-mod; repo committed/pushed/pulled.
@@ -0,0 +1,4 @@
+thread_id: 01a04a3f-6596-75d0-8749-8ece9a2b11fd
+updated_at: 1788224586
+
+Homelab serverAppConfigs on Dankclaw/Dankserver. Single Caddy container fronts both hosts via Porkbun DNS-01 (no inbound 80/443) with Authentik SSO forward_auth. Hermes WebUI uses host networking; browser automation via quadlet on loopback 127.0.0.1:9222. Config quirk: /data/config.yaml owned by unmapped UID. NPM npx cache persists across restarts but resets on recreation.
@@ -0,0 +1,4 @@
+thread_id: 01a04f40-c5c0-77a4-89c1-f729e282a9e8
+updated_at: 1788042611
+
+Swap frank-default-large to agentionai/Qwen3.8-Flash-Next-ROCmFP4-FAST-imatrix-GGUF with sidecar MTP; build kingjones30/ROCmFPX fork on Dankclaw pinning to main tip while gating ancestor check for a19d14e4e indexer fix to prevent crash regression.
@@ -0,0 +1,4 @@
+thread_id: 01a04fa5-181d-75a9-ac57-3fdf464a36d3
+updated_at: 1788060388
+
+Switch frank-default-large to ciru-ai/Qwen3.8-Flash-CIRU-STRIX-IU4 runtime (llamacpp v1.1) and jcbtc HF model on Strix Halo (gfx1151). Implement MTP spec decoding first, stack ngram-mod later. Initialize at 128k context, scale to full. Resolve slot-blocking with parallel=1 during long prompts.
@@ -0,0 +1,4 @@
+thread_id: 01a050b6-e0fb-73a0-889c-e663fedd8c96
+updated_at: 1788072313
+
+Swapped frank-default-large to agentionai Qwen3.8-Flash-Next ROCmFP4-FAST main model with matching MTP draft. Resolved prior MTP architecture mismatch (missing blk.0.hc_attn_norm.weight) by pairing same-author models. Deployed straight to main after resolving Caddyfile deletion state and WIP backup.
@@ -0,0 +1,4 @@
+thread_id: 01a05172-a606-7196-bde3-454344369e22
+updated_at: 1788076443
+
+Expanded frank-default-large on dankclaw to parallel 2 slots (n_ctx=200704) with 200k context window. Unified memory (~116.7 GiB) efficiently handles ~12.3x context buffer growth via SSM architecture compression. Updated models.json to contextWindow=200000.
@@ -0,0 +1,4 @@
+thread_id: 01a051bf-4728-7028-82be-247e7b5da2bd
+updated_at: 1788080182
+
+frank-default-large runs on Dankclaw (gfx1151) using charlie12345/ROCmFPX llama.cpp (build-qwen38). Serves Qwen3.8-Flash-Next (87.06 GiB, Q4_0_ROCMFP4_FAST) with --fit off (avoids auto-fit segfault), --flash-attn on (watch for QSA indexer graph build aborts), and ngram-mod speculative decoding (MTP head absent). Profile: ctx 401408, b/ub 4096, f16 KV, deepseek reasoning, f16 vision tower.
@@ -0,0 +1,4 @@
+thread_id: 01a051d8-db9b-76ab-b05f-ac95f79c9e55
+updated_at: 1788079840
+
+Operational cwd is /home/dank/Projects/serverAppConfigs. The bash tool fails if the provided cwd parameter points to a non-existent path (e.g., /workspace). The read tool effectively resolves relative paths (e.g., '.') to absolute paths and reports resultLimit hints. Git merge conflicts detected in active file (lines 25-18, 64-79).
@@ -0,0 +1,4 @@
+thread_id: 01a051e2-6ff9-72cc-b980-b6837011e99f
+updated_at: 1788126110
+
+frank-default-large switched to kingjones777/Qwen3.8-Flash-Next-ROCmFP4-STRIX-GGUF. Runtime: charlie12345/ROCmFPX (build-qwen38). Flash-ATTN ON (QSA path, requires F32-mask patch). MTP draft head skipped (ngram-mod). Watch bare env vars (TEMP, HOST, GPU_MAX_HEAP_SIZE).
@@ -0,0 +1,4 @@
+thread_id: 01a0598c-244a-766a-8485-b02f8ab630b5
+updated_at: 1788209135
+
+Homelab uses split DNS for franksdank.cloud: Porkbun public A records point WAN clients to 71.227.227.172, while Pi-hole LAN DNS/addn-hosts resolves internal names to Dankclaw 192.168.0.143. Removing a normal Porkbun A record makes that subdomain NXDOMAIN externally but LAN resolution via Pi-hole continues; Caddy routing/TLS remain valid because Caddy uses Host headers and DNS-01 wildcard certs via Porkbun API. Keep public DNS for externally needed names like auth/gitea.
@@ -0,0 +1,4 @@
+thread_id: 01a059ae-72f3-76d4-8e09-735f8f2e0a5d
+updated_at: 1788216058
+
+Configured passwordless SSH among dankclaw/dankware, FrankBook-Pro, dankserver, and Hermes containers; installed and verified Podman stack on FrankBook-Pro macOS host.
@@ -0,0 +1,4 @@
+thread_id: 01a059f4-cead-704b-b857-fad89ebde42b
+updated_at: 1788224497
+
+Dankserver copyparty read-only hardening: changed copyparty volume perms from `-v /w::A` to `-v /w::r:ra,dank`, deployed with podman-compose recreate, verified reads work and writes/deletes fail. Important discovery: copyparty bare `A` grants everyone full access, not anonymous-deny; authentik-protected traffic reaches copyparty unauthenticated, so anonymous must retain `r` for web reads.
@@ -0,0 +1,4 @@
+thread_id: 01a05a29-d9fd-71ca-86c8-b92c602492c7
+updated_at: 1788229381
+
+Volume security via writer:readers POSIX ownership with 2775 (setgid) for single-writer/multi-reader SFTP/SSH. FreeToken build on Dankclaw supports Vulkan/ROCm (ROCm 6.3, NVIDIA 575.57.02, CMake/Python/git). GGUF loading restricted to Gemma4GGUFForCausalLM; supports F32/F16/BF16 (native) and Q4_0/Q6_K (dequant), Q8_0 lacks dequant.
@@ -0,0 +1,4 @@
+thread_id: 01a05a42-6580-7043-96eb-a73344efd9e6
+updated_at: 1788221481
+
+Added Dankclaw FLM/NPU Gemma vision model to Hermes and persisted sanitized config; routed Hermes vision auxiliary to gemma4-it:e4b; adjusted agent model context; verified all tests passed.
@@ -0,0 +1,4 @@
+thread_id: 01a05a7d-cc94-7589-8926-c24cb5a10490
+updated_at: 1788248708
+
+Container persistence audit confirms Hermes survives restarts via /home/dank/hermes-data:/data bind mount and corrected headless entrypoint. Establishes persistent storage patterns across Dankclaw/Dankserver: host bind mounts for state, Quadlet units for boot persistence, and rootless-safe group passthrough for GPUs and services.
@@ -0,0 +1,4 @@
+thread_id: 01a05bd4-8dbe-759b-8885-8b86990051ed
+updated_at: 1788314412
+
+frank-default-large runs Qwen3.8-Flash-Next ROCmFP4 STRIX via kingjones30/ROCmFPX llama.cpp on Dankclaw/Strix Halo; stock llama.cpp cannot load it. Also captured ASUS TUF GAMING B650-E WIFI BIOS update/backup workflow for AGESA memory-training improvements.
@@ -0,0 +1,4 @@
+thread_id: 01a05bed-d759-7157-af15-2e178337182a
+updated_at: 1788325757
+
+Podman standardization and *arr-stack migration to FrankBook-Pro. Locked decisions: quadlet units (bind mounts only, no named volumes), data root /home/dank/Containers/<svc>, *arr migrate to Mac with gluetun VPN netns sharing, /Volumes/COMPLETE paths kept verbatim, LAN-only exposure. Execution phases: 0 (prereqs), 1 (dankserver stop-mv-chown-restart, RomM anonymous volume landmine), 2 (dankclaw roots), 3/4 (Mac cutover). Deploy uses deploy.sh (push/pull/dispatch/health). Secrets externalized; --userns=host required.
@@ -0,0 +1,4 @@
+thread_id: 01a06035-a0d8-73ad-8a49-279f51c68bf2
+updated_at: 1788329168
+
+Updated Plex homepage link to /web/index.html in shared/homepage configs. Verified Jellyfin (/mnt/entropy:/data:ro) and Copyparty (/mnt/entropy:/w:ro) mounts, noted correct DB table (BaseItems). Deployed via 8895a02 with 233/233 tests green; user locked state.
@@ -0,0 +1,4 @@
+thread_id: 01a06085-8146-72b0-9e52-b486c767a2f6
+updated_at: 1788331026
+
+Migrated Plex (native) and Tautulli (snap) to podman quadlets on dankserver with zero-bytes-moved data. Rootless podman fleet model adopted (PUID=0/PGID=0 for Plex, PUID=1000 for Tautulli). Network on dankserver_appnet with host aliases. Fixed UID mapping, health gate widened to 600s for 32GB DB migrations, and resolved key-churn in quadlet generation.
@@ -0,0 +1,4 @@
+thread_id: 01a063a7-4c37-7765-8f58-21f7c860aed7
+updated_at: 1788403307
+
+serverAppConfigs service-status investigation from Dankware: repo manages services on Dankserver (192.168.0.235) and Dankclaw (192.168.0.143) via mostly rootless Podman Quadlet user units; both hosts are reachable by passwordless SSH. Hermes WebUI troubleshooting on Dankclaw found hermes/hermes-webui/hermes-dashboard active, but signal-cli-daemon inactive/disabled, which is likely why Hermes/WebUI cannot reach Signal transport.
@@ -0,0 +1,4 @@
+thread_id: 01a06894-8947-74fa-ba09-0f104cd6677f
+updated_at: 1788495432
+
+Deployed frank-npu to dankclaw (commit df0c663) using nuextract3:4b on port 7771. FLM_CTX_LEN=-1 enables per-pack context windows. Routing supports heretic tag alternation with ~6-11s swap cost. Initiating broader service renames (frank-small/large/npu) requiring models.json alias updates prior to runtime restarts. Playwright test requirements established for Authentik auth chains and admin access.
@@ -0,0 +1,4 @@
+thread_id: 01a06aa2-9087-753a-8019-50af77fbaddf
+updated_at: 1788501666
+
+Formatted shared/homepage/services.json to multi-line and deployed 7 description updates to Dankclaw.
@@ -0,0 +1,4 @@
+thread_id: 01a06b4c-fcea-70e2-a342-a41c5f99d927
+updated_at: 1788553425
+
+Consolidated *arr stack to FrankBook-Pro (dankclaw) with local-only DNS via Pi-hole quadlet. Six containers share a gluetun netns, publishing zero internal ports while routing all egress through ProtonVPN. DNS resolves to Caddy (192.168.0.143), which proxies to apps. Prowlarr, readarr, and EZTV/1337x have parked post-migration items awaiting verification.
@@ -0,0 +1,4 @@
+thread_id: 01a06e56-5e70-73f5-83b3-a28b1736f34b
+updated_at: 1788561197
+
+Reset Pi-hole admin password to pihole.2026. Confirmed LAN-only deployment: public Porkbun A record removed (NXDOMAIN externally), LAN resolves via addn-hosts to 192.168.0.143. Caddy retains vhost for TLS termination and basicauth edge, reverse proxying to the Pi-hole quadlet on port 8083. Pi-hole remains authoritative LAN DNS server while relying on Caddy for edge routing and authentication.
@@ -0,0 +1,4 @@
+thread_id: 01a06ef4-c78b-71df-98e0-e1b930f260a5
+updated_at: 1788579402
+
+Sonarr shifted to 'admin' category in shared/homepage/services.json and isolated to local-only reachability by stripping its public Caddyfile vhost (sonarr.franksdank.cloud). Resolves prior Seerr/Sonarr exposure mix-up. Committed as b6f5b2b.