chore(ops): rescue pr1371 follow-ups — compose token + transcribe gitlink resolution - #1446
Conversation
|
Warning Rate limit exceeded
You’ve run out of usage credits. Purchase more in the billing tab. ⌛ How to resolve this issue?After the wait time has elapsed, a review can be triggered using the We recommend that you space out your commits to avoid hitting the rate limit. 🚦 How do rate limits work?CodeRabbit enforces hourly rate limits for each developer per organization. Our paid plans have higher rate limits than the trial, open-source and free plans. In all cases, we re-allow further reviews after a brief timeout. Please see our FAQ for further information. ℹ️ Review info⚙️ Run configurationConfiguration used: Path: .coderabbit.yaml Review profile: CHILL Plan: Pro Run ID: 📒 Files selected for processing (1)
📝 WalkthroughWalkthroughThis PR contains two independent operational changes: a docker-compose configuration update that removes host environment variable interpolation for the MCP server token to ensure ChangesEnvironmental Configuration & Audit Documentation
Estimated code review effort🎯 2 (Simple) | ⏱️ ~8 minutes Possibly related PRs
Suggested reviewers
Poem
🚥 Pre-merge checks | ✅ 4 | ❌ 1❌ Failed checks (1 warning)
✅ Passed checks (4 passed)
✏️ Tip: You can configure your own custom pre-merge checks in the settings. ✨ Finishing Touches🧪 Generate unit tests (beta)
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
Docker Hardening ValidationHardening Validation ReportValidated: Sun May 10 12:46:27 UTC 2026Services CheckedPMOVES.AI Docker Hardening Validation[INFO] Checking: pmoves/docker-compose.hardened.yml [INFO] Validating: hi-rag-gateway-v2 [INFO] Validating: extract-worker [INFO] Validating: langextract [INFO] Validating: presign [INFO] Validating: render-webhook [INFO] Validating: retrieval-eval [INFO] Validating: pdf-ingest [INFO] Validating: jellyfin-bridge [INFO] Validating: invidious-companion-proxy [INFO] Validating: ffmpeg-whisper [INFO] Validating: media-video [INFO] Validating: media-audio [INFO] Validating: hi-rag-gateway-v2-gpu [INFO] Validating: hi-rag-gateway-gpu [INFO] Validating: deepresearch [INFO] Validating: supaserch [INFO] Validating: publisher-discord [INFO] Validating: mesh-agent [INFO] Validating: nats-echo-req [INFO] Validating: nats-echo-res [INFO] Validating: publisher [INFO] Validating: analysis-echo [INFO] Validating: graph-linker [INFO] Validating: comfy-watcher [INFO] Validating: grayjay-plugin-host [INFO] Validating: agent-zero [INFO] Validating: archon [INFO] Validating: channel-monitor [INFO] Validating: pmoves-yt [INFO] Validating: notebook-sync [INFO] Validating: supabase_service_role_key [INFO] Validating: supabase_jwt_secret ====================================== |
…TE gitlink RESOLVED) Two surgical edits rescued from D:/PMOVES.AI/PMOVES.AI-pr1371 (PR #1371 merged 2026-04-27). This is a corrected re-do of the original rescue commit that shipped contaminated drift (524-line stale-base bloat in AGNOTE4482.md + undocumented compose healthcheck/network changes). Surgical scope only: 1. pmoves/docker-compose.yml — Agent Zero env block: - A0_SET_mcp_server_token=${MCP_SERVER_TOKEN:-} replaced with a 6-line comment explaining why it's intentionally not set here (compose `${VAR:-}` expansion overrides env_file values when host var is unset, blocking token auto-generation; operators pin via env.tier-agent). 2. pmoves/docs/AGENTS/AGNOTE4482.md — Triage Outcomes table + Handoff Notes: PMOVES-transcribe-and-fetch gitlink row flipped OPEN -> RESOLVED with verify command. Handoff note line updated to point at the resolved row. NOT included from the source worktree (deemed stale/undocumented drift): - compose healthcheck timing changes (retries, start_period reductions) - compose network removals (pmoves_api removal from supabase-db networks) - compose restart-policy changes - AGNOTE4482.md 524-line deletion (worktree was that far behind main) Refs original rescue source D:/PMOVES.AI/PMOVES.AI-pr1371 — only the two edits explicitly identified by the triage agent are kept; remainder is dropped as drift artifacts. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
c5204f7 to
63a730e
Compare
|
Force-push notice (2026-05-10 ~08:46 ET): Replaced the original commit |
Docker Hardening ValidationHardening Validation ReportValidated: Sun May 10 12:50:41 UTC 2026Services CheckedPMOVES.AI Docker Hardening Validation[INFO] Checking: pmoves/docker-compose.hardened.yml [INFO] Validating: hi-rag-gateway-v2 [INFO] Validating: extract-worker [INFO] Validating: langextract [INFO] Validating: presign [INFO] Validating: render-webhook [INFO] Validating: retrieval-eval [INFO] Validating: pdf-ingest [INFO] Validating: jellyfin-bridge [INFO] Validating: invidious-companion-proxy [INFO] Validating: ffmpeg-whisper [INFO] Validating: media-video [INFO] Validating: media-audio [INFO] Validating: hi-rag-gateway-v2-gpu [INFO] Validating: hi-rag-gateway-gpu [INFO] Validating: deepresearch [INFO] Validating: supaserch [INFO] Validating: publisher-discord [INFO] Validating: mesh-agent [INFO] Validating: nats-echo-req [INFO] Validating: nats-echo-res [INFO] Validating: publisher [INFO] Validating: analysis-echo [INFO] Validating: graph-linker [INFO] Validating: comfy-watcher [INFO] Validating: grayjay-plugin-host [INFO] Validating: agent-zero [INFO] Validating: archon [INFO] Validating: channel-monitor [INFO] Validating: pmoves-yt [INFO] Validating: notebook-sync [INFO] Validating: supabase_service_role_key [INFO] Validating: supabase_jwt_secret ====================================== |
![coderabbitai[bot]](https://avatars.githubusercontent.com/in/347564?s=60&v=4){kind=small}
There was a problem hiding this comment.
Actionable comments posted: 1
🤖 Prompt for all review comments with AI agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.
Inline comments:
In `@pmoves/docs/AGENTS/AGNOTE4482.md`:
- Around line 360-365: Update the "PMOVES-transcribe-and-fetch gitlink" RESOLVED
evidence to include the exact reachable upstream commit SHA (the fix-SHA)
referenced in the Triage Outcomes row; locate the table row containing
"PMOVES-transcribe-and-fetch gitlink" and replace "reachable upstream SHA" with
the concrete 40-character commit hash, and optionally append the verification
command suggestion (git -C PMOVES-transcribe-and-fetch rev-parse HEAD) to
confirm the lock matches that SHA.
🪄 Autofix (Beta)
Fix all unresolved CodeRabbit comments on this PR:
- Push a commit to this branch (recommended)
- Create a new PR with the fixes
ℹ️ Review info
⚙️ Run configuration
Configuration used: Path: .coderabbit.yaml
Review profile: CHILL
Plan: Pro
Run ID: 472ec911-95fe-419f-8b3f-a129b54284fb
📒 Files selected for processing (2)
pmoves/docker-compose.ymlpmoves/docs/AGENTS/AGNOTE4482.md
Adds exact commit SHA aef3a86e to the PMOVES-transcribe-and-fetch RESOLVED row so operators can validate the fix against a single source of truth rather than "reachable upstream SHA". Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Docker Hardening ValidationHardening Validation ReportValidated: Mon May 11 00:21:03 UTC 2026Services CheckedPMOVES.AI Docker Hardening Validation[INFO] Checking: pmoves/docker-compose.hardened.yml [INFO] Validating: hi-rag-gateway-v2 [INFO] Validating: extract-worker [INFO] Validating: langextract [INFO] Validating: presign [INFO] Validating: render-webhook [INFO] Validating: retrieval-eval [INFO] Validating: pdf-ingest [INFO] Validating: jellyfin-bridge [INFO] Validating: invidious-companion-proxy [INFO] Validating: ffmpeg-whisper [INFO] Validating: media-video [INFO] Validating: media-audio [INFO] Validating: hi-rag-gateway-v2-gpu [INFO] Validating: hi-rag-gateway-gpu [INFO] Validating: deepresearch [INFO] Validating: supaserch [INFO] Validating: publisher-discord [INFO] Validating: mesh-agent [INFO] Validating: nats-echo-req [INFO] Validating: nats-echo-res [INFO] Validating: publisher [INFO] Validating: analysis-echo [INFO] Validating: graph-linker [INFO] Validating: comfy-watcher [INFO] Validating: grayjay-plugin-host [INFO] Validating: agent-zero [INFO] Validating: archon [INFO] Validating: channel-monitor [INFO] Validating: pmoves-yt [INFO] Validating: notebook-sync [INFO] Validating: supabase_service_role_key [INFO] Validating: supabase_jwt_secret ====================================== |
Consolidates outbound work from a long Z890-CLAUDE session for clean pickup by 4090-CLAUDE, 5090-CLAUDE, KiloCode, and operator. Session output (context for downstream lanes): - 8 PRs in flight: #1432 (+ commit b3bc5f4 Z890 runbook backlink), #1440 cross-platform pattern doc, #1441 W0 Substrate brief, #1444 issue #1436 staleness fix, #1445 NATS auth fallback, #1446 rescue pr1371 (surgical re-do after contamination caught), #1447 rescue pr1385 CATALOG accuracy, #1448 rescue pr1391 typos. - 2 verified-already-done findings (no PR needed): AB-1 A2UI gitlink (gitlink at Hardened tip; AB-1 fix 2 commits behind), PBKDF2 (all callsites at OWASP-baseline 600,000). - 1 stash dropped (USB-PROVISIONING-SWEEP, work merged in #1413). Open lanes for receiving agents: 5090-CLAUDE (mic + voice-activated CHIT): - AB-4 keystone: make -C pmoves secrets-funnel-sync (highest-leverage blocker per KiloCode P0/P1 handoff; unblocks AB-5/AB-6/§9.4/A2A auth verify) - Agent Zero v1.13 boot validation (boot-only, no gitlink bump) - CHIT trail sign for today's session (PRs + ACKs above) 4090-CLAUDE (cross-fleet operability reach): - W0 PR-1..PR-6 from AGNOTE4482PHI.W0-SUBSTRATE.md - Worktree review (16 NEEDS_REVIEW characterized in handoff Lane 2, grouped: 1 stranded merged-PR (pr1390), 2 codex review trees, 2 phase deploy branches, 3 k8s/test branches, 5 docs branches, 3 unrooted feature branches) - 8 REMOVE_SAFE worktrees clear for prune when convenient Operator decisions (cannot be delegated): - 3 stashes remaining (CHIT bypass patterns 22 Apr / submodule integration docs 5 Apr / supabase bootstrap 1 Apr) - Upstream A2UI sync (8 commits behind upstream main on Hardened) - 3 W0 brief questions (CIDR convention / Unifi creds / profile naming) - KiloCode handoff staleness pattern flagged (2 of 4 quick-wins verified already done) Per Village Rule: receiving agents add CLAIM entries to AGNOTE4482PHI.t1.md § Active Claim Register before working a lane. t1.md not edited in this branch to avoid merge conflict with the W0 Substrate CLAIM/RELEASE that lands via PR #1441. The handoff doc itself is self-contained — receiving agents post their CLAIMs after #1441 merges. Trail unsigned locally (CHIT_PASSPHRASE voice-only on 5090; sign on 5090 side per Lane 3 of the handoff). Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
1 participant
Summary
Rescues two stranded edits from
D:/PMOVES.AI/PMOVES.AI-pr1371(PR #1371 merged 2026-04-27). Both are post-merge follow-ups that document and correct the merged PR's outcomes — left in the worktree's working copy when the PR-review session was interrupted.Files
pmoves/docker-compose.yml— Comments outA0_SET_mcp_server_tokenwith 6-line explanation. Root cause: env var expansion to empty string in compose blocks token auto-generation. Fix: operators set token viaenv.tier-agent.pmoves/docs/AGENTS/AGNOTE4482.md— Marks PMOVES-transcribe-and-fetch gitlink as RESOLVED (was OPEN). Updates fix-SHA from unreachable322f05f7ato reachableaef3a86e817bc2d266b8b0845b6b118062e8dc7a. Adds verify instructions.Origin
PR #1371 merged 2026-04-27. The rescue source worktree at
D:/PMOVES.AI/PMOVES.AI-pr1371was created for review; these edits were drafted but never committed before the session ended.Test plan
git -C PMOVES-transcribe-and-fetch rev-parse aef3a86esucceeds)docker compose configclean)🤖 Generated with Claude Code
Summary by CodeRabbit
Chores
Documentation