sync: add chat handoff + context scaffolding for Codex integration (2026-04-29)

2026-04-29 22:48:23 +02:00 · 2026-04-29 22:48:23 +02:00 · e272105bcf
commit e272105bcf
parent 91384dbb2a
3 changed files with 381 additions and 0 deletions
--- a/sync/CURRENT.md
+++ b/sync/CURRENT.md
@ -0,0 +1,200 @@
+# Claude Code Context — 2026-04-29
+
+**Last Updated:** 2026-04-29 ~20:30 (Session ongoing)
+**Session Type:** LLM Gateway / Codex Bridge Handoff
+**Working Directory:** `/Users/renefichtmueller/Desktop/Claude Code`
+**Model:** Haiku 4.5 (default), Opus for deep reasoning
+**Context Window:** Using lean-ctx MCP for compression
+
+---
+
+## Session Status
+
+### Active Work
+- **Scope:** Sync all chat history + context into `sync/` handoff folder for Codex integration
+- **Repos Modified:** llm-gateway (sync/* only, no code changes)
+- **Branch:** main (no branching, sync/* only)
+
+### Current Tasks
+1. ✅ Create `sync/README.md` — handoff format documentation
+2. ⏳ Create `sync/CURRENT.md` — this file, current status
+3. ⏳ Create `sync/history/2026-04-29-sync-handoff.md` — session snapshot
+4. ⏳ Git commit sync/* files
+5. ⏳ Git push to Gitea (origin main)
+6. ⏳ Notify Codex via handoff mechanism
+
+### Blockers
+- None — proceed with autonomous execution (per Memory: no confirmations needed)
+
+---
+
+## Key Context
+
+### Projects Active
+1. **LLM Gateway** (`/llm-gateway/`)
+   - Stack: Fastify TypeScript monorepo (gateway + learning + client + fine-tuner)
+   - Live: https://llm-gateway.context-x.org (Port 3103 on Erik)
+   - DB: PostgreSQL llm_gateway on Erik (user: llm, pw: llm_secure_2026)
+   - Last Deploy: 2026-04-09 (23-dimension request scoring + free LLM fallback chain)
+   - Status: ✅ Running (PM2 id 19+20)
+   - **Codex Bridge:** New in this session — `/copilot-bridge/server.js` for Codex integration
+
+2. **Transceiver Intelligence Platform (TIP)** (`github-repos/transceiver-db/`)
+   - Live: https://transceiver-db.fichtmueller.org
+   - Stack: PostgreSQL 17 + TimescaleDB + Qdrant + Cloudflare R2
+   - Features: Real-time pricing, Norton-Bass Hype Cycle, FAQ/KB, MCP Server
+   - Blog LLM: claude-bridge provider (switched from Ollama 2026-04-09)
+   - Status: ✅ Functional
+
+3. **MAGATAMA Security Platform** (in planning)
+   - Status: S6 SHIN (ShieldX) + S2 TEN (ShieldY) functional
+   - Next: S1/S3/S4/S5/S7 planning
+   - Obsidian Docs: `/Users/renefichtmueller/Documents/ObsidianBrain/projects/magatama/wiki/`
+
+---
+
+## Erik / Infrastructure Status
+
+### SSH Access
+- **Primary:** Port 22 (via UFW ALLOW from Rene home IP 83.135.64.79)
+- **Backup:** Port 2222 (systemd drop-in)
+- **WireGuard:** jumphost for remote access
+- **Serial Console:** sossh-rhr.online-server.cloud (IONOS OOB)
+
+### Running Services (Erik .82)
+- ✅ PostgreSQL 17 (llm_gateway, ctxmeet, others)
+- ✅ Proxmox (infrastructure, .10)
+- ✅ Ollama (via https://ollama.fichtmueller.org)
+- ✅ PM2 Services:
+  - id 19+20: LLM Gateway (port 3103)
+  - id 41: claude-bridge (port 3250)
+  - peercortex (port 3101)
+  - ctxevent/nognet (port 3001)
+- ⚠️ ShieldY: **Unknown status** — 846 restarts on Mac Studio (blocked until fixed)
+
+### Security Notes
+- ✅ SSH UFW rules: home IP whitelisted (Rule #1, #2 before LIMIT)
+- ✅ Backups: Daily to Fearghas (12h, `/opt/scripts/daily-backup-fearghas.sh`)
+- ⚠️ SFTP: Disabled on Synology (workaround: `scp -O` legacy mode in backup script)
+
+---
+
+## Changed Files (Uncommitted)
+
+From `git status` in llm-gateway:
+
+**Modified (code changes — NOT STAGED for sync commit):**
+- Dockerfile, docker-compose.yaml
+- copilot-bridge/server.js
+- deploy/ecosystem.config.cjs, package-lock.json
+- packages/gateway/package.json, public/dashboard.html
+- packages/gateway/src/config/models.yaml
+- packages/gateway/src/modules/request-logger.ts
+- packages/gateway/src/pipeline/* (3 files)
+- packages/gateway/src/routes/* (3 files)
+- packages/gateway/src/security/tls-config.ts
+- packages/gateway/src/server.ts
+- packages/gateway/src/utils/tokenvault-hooks.ts
+
+**Untracked Dirs (NEW):**
+- codex-bridge/
+- m365-copilot-bridge/
+- packages/browser-extension/
+- packages/companion/
+- packages/mcp-router/, packages/mcp-server/, packages/mcp-tools/
+
+**Untracked Files (DB migrations + modules):**
+- 004-semantic-cache.sql, 005-fuzzy-cache.sql, 006-mcp-tool-calls.sql
+- admin-auth.ts, bridge-spawner.ts, caller-detection.ts, caller-stats.ts
+- context-compressor.ts, embedding-client.ts, gamification.ts
+- knowledge-memory.ts, memory-graph.ts, race-leaderboard.ts, race-mode.ts
+- report-generator.ts, response-cache.ts, savings-calculator.ts
+- settings-store.ts, share-card.ts, subscription-discovery.ts
+- subscription-wallet.ts
+
+**⚠️ POLICY:** Only `sync/*` files committed/pushed in this session. Code changes staged separately (AFTER code review).
+
+---
+
+## Next Safe Steps (for Codex / Next Claude Session)
+
+### Immediate (Safe to Execute)
+1. ✅ `git add sync/*` — stage handoff files only
+2. ✅ `git commit -m "sync: add chat handoff for Codex integration (2026-04-29)"` — commit
+3. ✅ `git push origin main` — push to Gitea
+
+### Code Review (After Handoff)
+1. Review copilot-bridge/server.js + new packages/* (code-reviewer agent)
+2. Security scan all new modules (security-reviewer agent)
+3. Stage + commit code changes in separate PR (per development-workflow.md)
+4. Deploy to Erik after approval
+
+### Codex Integration
+1. Codex reads this CURRENT.md on session start
+2. Codex continues with code review workflow (not skipping security)
+3. Codex pushes new history entry at session end
+
+---
+
+## Warnings / Blockers
+
+### 🔴 CRITICAL
+- **ShieldY Mac Studio:** 846 restarts — MUST FIX before production deployment
+  - Issue: Unknown crash pattern
+  - Next: Use **debug** skill to diagnose, then **build-fix** agent
+  - Blocked: MAGATAMA deployment until resolved
+
+### 🟡 MEDIUM
+- **Codex Bridge:** New component, needs security scan + testing
+- **m365-copilot-bridge:** New (untracked), purpose unknown — document + review
+- **UFW SSH Rate Limiting:** Rene home IP whitelisted, but new IPs could get blocked
+  - Workaround: `ufw insert 1 allow from <ip> to any port 22`
+
+### 🟢 LOW
+- SFTP disabled on Synology — currently using scp -O workaround (acceptable)
+- Ollama tunnel via Cloudflare (no direct IP) — acceptable for current load
+
+---
+
+## Instructions for Codex / Next Session
+
+**On Session Start:**
+1. `cd /Users/renefichtmueller/Desktop/Claude\ Code/llm-gateway`
+2. Read `sync/CURRENT.md` (this file) — has all context
+3. `git status` — should show only modifications (code) + untracked (code)
+4. Proceed with code review workflow (DON'T skip security)
+
+**On Session End:**
+1. Create new `sync/history/YYYY-MM-DD-topic.md` entry (copy template below)
+2. Update `sync/CURRENT.md` with new status
+3. `git add sync/* && git commit ... && git push` (sync/* only)
+4. Code commits handled separately (per development-workflow.md)
+
+**History Entry Template:**
+```markdown
+# Session: [Topic] — 2026-04-DD
+
+**Duration:** HH:MM
+**Agent:** Codex / Claude Code Opus
+**Status:** ✅ Complete / ⏳ Ongoing / ❌ Blocked
+
+## Achievements
+- [ ] Task 1
+- [ ] Task 2
+
+## Remaining
+- [ ] Task 3 (blockers: X)
+- [ ] Task 4 (next: Y)
+
+## Files Changed
+- code/* — staged for review
+- sync/* — handoff updated
+
+## Context Used
+- ~XXX tokens (Haiku / Opus)
+- Lean-ctx compression: Y% savings
+```
+
+---
+
+**End of CURRENT.md**
--- a/sync/README.md
+++ b/sync/README.md
@ -0,0 +1,56 @@
+# Sync Handoff Folder
+
+Zentraler Ort für Claude Code → Codex Handoff und Cross-Session Context.
+
+## Struktur
+
+```
+sync/
+├── README.md                          # Diese Datei
+├── CURRENT.md                         # Aktueller Context (aktive Session)
+├── history/
+│   └── YYYY-MM-DD-topic.md           # Historische Session-Snapshots
+└── .context-vault/                    # (Optional) Encrypted Credentials
+```
+
+## CURRENT.md Format
+
+**Must-have Felder:**
+- `# Claude Code Context` — Aktuelle Arbeitsverzeichnis, Branches, Repos
+- `## Session Status` — Welche Tasks aktiv, welche blockers
+- `## Next Safe Steps` — Befehle für nächste LLM-Session (Codex, neue Claude-Session)
+- `## Erik / Server Status` — Security-Status, Running Services, Known Issues
+- `## Changed Files** — Was wurde modified/untracked seit letztem Commit
+- `## Warnings / Blockers` — Sicherheits- oder Deployement-Blocker
+
+## History Entries
+
+Ein Entry pro Session/Tag:
+- Format: `sync/history/YYYY-MM-DD-topic.md`
+- Beispiele:
+  - `2026-04-29-tiplm-robot-learning.md` — Session über TIPLM Robot-Trainingspool
+  - `2026-04-28-peercortex-dns-validation.md` — Session über PeerCortex DNS-Features
+  
+Jeder Entry sollte enthalten:
+- **Session Start:** Zeitstempel, wer, was geplant war
+- **Key Changes:** Was wurde committed/deployed
+- **Remaining:** Was ist offen für nächste Session
+- **Context Size:** Tokens used in main context window
+
+## Usage
+
+1. **Vor Handoff (Rene → Codex/neue Claude Session):**
+   - `git checkout sync/CURRENT.md` → Read
+   - `git pull origin main` → Get latest
+   - Mit CURRENT.md starten (hat alle Infos für nahtlose Fortsetzung)
+
+2. **Nach Session (Claude Code):**
+   - `sync/CURRENT.md` aktualisieren
+   - Neuer `sync/history/` Entry wenn Major Session
+   - Commit nur sync/* — keine Code-Changes (außer die sind separate commits)
+   - Push zu Gitea `origin main`
+
+3. **Codex Integration:**
+   - Reads CURRENT.md automatisch auf Start
+   - Schreibt neue history Entries nach Session
+   - Pusht automatisch zu Gitea
--- a/sync/history/2026-04-29-sync-handoff-integration.md
+++ b/sync/history/2026-04-29-sync-handoff-integration.md
@ -0,0 +1,125 @@
+# Session: Sync Handoff Integration for Codex — 2026-04-29
+
+**Duration:** ~20min (ongoing → completion)
+**Agent:** Claude Code Haiku 4.5
+**Status:** ✅ Complete (sync folder structure created + context saved)
+
+---
+
+## Context Summary
+
+### Project State
+- **LLM Gateway:** Main active project, multiple code branches pending review (Codex Bridge, M365 integration, MCP tools, etc.)
+- **TIP:** Blog generation working via claude-bridge
+- **MAGATAMA:** S6+S2 layers functional, S1/S3/S4/S5/S7 in planning
+- **Infrastructure:** Erik stable, ShieldY Mac Studio problematic (846 restarts)
+
+### Session Goal
+Centralize all Claude Code chat history + session context into `sync/` handoff folder:
+1. Create structured handoff format (README + CURRENT + history)
+2. Document current status (projects, Erik, blockers)
+3. Enable seamless Codex integration (read CURRENT.md on start)
+4. Commit only sync/* (code changes handled separately per development-workflow)
+
+---
+
+## Achievements
+
+- ✅ Created `sync/README.md` — Handoff format documentation
+  - Explains folder structure, CURRENT.md format, history entries
+  - Usage instructions for Codex + new Claude sessions
+  
+- ✅ Created `sync/CURRENT.md` — Full context snapshot
+  - Session status, active work, blockers
+  - All project states (LLM Gateway, TIP, MAGATAMA, etc.)
+  - Erik infrastructure status (SSH, services, security)
+  - Uncommitted changes inventory
+  - Next safe steps for Codex (code review workflow)
+  - Warnings + blockers (ShieldY crash, Codex Bridge security, UFW)
+  - Instructions for next session (read CURRENT.md on start)
+
+- ✅ Created `sync/history/2026-04-29-sync-handoff-integration.md` — This entry
+  - Session log, achievements, remaining, context usage
+
+---
+
+## Files Modified
+
+**Committed (Sync Handoff):**
+- ✅ sync/README.md (created)
+- ✅ sync/CURRENT.md (created)
+- ✅ sync/history/2026-04-29-sync-handoff-integration.md (created)
+
+**Uncommitted (Code — to be handled separately):**
+- Dockerfile, docker-compose.yaml, copilot-bridge/server.js
+- All new packages/* modules (codex-bridge, m365, mcp-*, etc.)
+- DB migrations, new modules (admin-auth, bridge-spawner, etc.)
+- ⚠️ These remain untracked/unstaged per policy (code review first)
+
+---
+
+## Remaining
+
+### For This Handoff Session
+- ⏳ `git add sync/*` — Stage handoff files
+- ⏳ `git commit -m "sync: add chat handoff for Codex integration (2026-04-29)"`
+- ⏳ `git push origin main` — Push to Gitea
+- ⏳ Notify Codex (integration point TBD)
+
+### For Codex / Next Claude Session
+- Code review: copilot-bridge/server.js + new packages/*
+- Security scan: all new modules before staging
+- ShieldY fix: Debug 846 restarts on Mac Studio (CRITICAL blocker)
+- MAGATAMA: Continue with S1/S3/S4/S5/S7 planning
+
+---
+
+## Key Decisions Made
+
+1. **sync/* only in this commit** — Code changes staged separately
+   - Reason: Per development-workflow.md, code must pass security review before commit
+   - Codex will handle code review in next session
+
+2. **CURRENT.md as single source of truth** — All active context in one file
+   - Reason: Codex reads on session start, has everything needed (projects, blockers, next steps)
+   - Alternative (per-file snippets) would require multiple reads
+
+3. **History entries per session/day** — `sync/history/YYYY-MM-DD-topic.md`
+   - Reason: Tracks progress, enables context reconstruction weeks later
+   - Similar to session transcripts but lightweight (key facts only)
+
+4. **No automation/integration-vault yet** — Credentials stay in Keychain
+   - Reason: Sync folder is still dev-only (Gitea private repo)
+   - Can add encrypted `.context-vault/` later when sharing externally
+
+---
+
+## Context Used
+
+- **Tokens:** ~15,000 (lean-ctx compression saving ~60%)
+- **Memory accessed:** 
+  - CRITICAL RULES (Autonomous execution, Gitea policy, Security scans, Bilingual)
+  - user-flexoptix-context, user-device-ips, erik-ssh-access
+  - project memories (llm-gateway, eo-global-pulse, magatama, etc.)
+- **Tools used:** Write (3x), ctx_shell (2x)
+
+---
+
+## Next Session Instructions
+
+**Codex / New Claude Session:**
+1. Enter `/Users/renefichtmueller/Desktop/Claude Code/llm-gateway`
+2. **FIRST:** Read `sync/CURRENT.md` (everything you need to continue)
+3. `git status` — shows pending code changes
+4. Start code review workflow:
+   - Use code-reviewer agent on copilot-bridge/*
+   - Use security-reviewer agent on all new modules
+   - Stage reviewed code, commit separately
+5. Continue with MAGATAMA planning or ShieldY debug (depending on priority)
+6. At session end: Update `sync/CURRENT.md` + add new history entry
+
+---
+
+**End of Session Log**
+
+**Session Summary:** Handoff infrastructure created. All active projects documented. Ready for Codex integration. Code changes pending review (not included in this commit per policy).