Files
cdsr/q5vault/operations/index.md
Antigravity f52d7ba656 cdsr: wire the omp harness into the IDE as a native agent panel over ACP
Pin formulahendry.acp-client 0.2.0 (Open VSX, MIT, sha256-verified) and point
acp.agents at `omp acp`. OMP already ships an ACP v1 server, so no custom
extension and no marketplace exception were needed.

Verified in the running IDE: status bar `ACP: Oh My Pi`, session/list returns
real prior OMP sessions for the open folder, and a full prompt turn streams
text plus tool-call and plan cards.

Credentials never move: OMP authenticates from ~/.omp via its `agent` auth
method and the extension is given no key.
2026-08-20 17:25:06 +02:00

1.8 KiB

title, description, source, reviewed
title description source reviewed
🛠️ Operations Operations index for the code-server SSO-gated IDE stack — install/upgrade, auth/TLS, extensions, and verification procedures. verified deployment on the loca operator host, 2026-08-19 2026-08-19

🛠️ Operations

Operations reference for the single-user code-server deployment at cdsr.loca.zone.

Pages

  • operations/install-upgrade — install or upgrade the upstream Debian package, service lifecycle, extension reinstall after Code version bumps, fallback path
  • operations/auth-tls — Authelia access rule, nginx four-block topology, shared cert lineage, proof commands, rollback/debug order
  • operations/extensions — pinned baseline table, the OMP-over-ACP agent panel, LiteLLM model wiring, optional Cody, explicit exclusions, install/audit scripts
  • operations/verification — every smoke check with expected outputs: systemctl, loopback healthz, auth redirect, wiki public, Authelia compose, extension audit, browser flows, dev proxy, wiki build

🚨 Triage order when something is broken

  1. systemctl status cdsr --no-pager — service active and running?
  2. curl -sf http://127.0.0.1:52224/healthz — always HTTP 200 while the server is up. Body {"status":"expired","lastHeartbeat":0} is healthy-idle (no editor session connected); {"status":"alive",...} appears only while a browser session is connected. Only a non-200 or no response at all indicates failure
  3. sudo -n nginx -t — nginx config clean (harmless flxr ssl_stapling warning is expected)?
  4. Authelia rule present + container healthy:
    • grep -A2 'domain: "cdsr.loca.zone"' /home/loca/dev/services/authelia/config/configuration.yml
    • cd /home/loca/dev/services/authelia && sudo -n docker compose ps
    • cd /home/loca/dev/services/authelia && sudo -n docker compose logs --tail=50 authelia