mirror of
https://github.com/allaunthefox/Research-Stack.git
synced 2026-07-31 03:05:21 +00:00
c9ccc497f8
**New Rust modules (batch 2 — 9 files)** - src/deepseek_adapter.rs — DeepSeek/Ollama chat + DeepSeekProver - src/ene_cloud_credential_manager.rs — ENE cloud credential + node balancer (SQLite) - src/enhanced_swarm.rs — enhanced swarm stub - src/gemma_integration.rs — SQLite task queue for Gemma 4 model tasks - src/hyperbolic_encoding.rs — Poincaré disk math, HyperbolicManifoldEncoder - src/knowledge_ingestion.rs — WolframAlpha, OpenMath, nLab wiki adapters - src/manifold_perception.rs — filesystem manifest scanner / topological report - src/s3c_lean_review.rs — CLI adapter submitting S3C.lean to Gemma4Integration - src/search_adapter.rs — Google (stub) + Brave search providers All 9 wired into main.rs as mod declarations. **Test fixes (6 pre-existing failures → 0)** - s3c.rs: fix shell decomp width formula (a+b not a+b+1); correct test expectations for n=9 (b=7, not b=1); invariant a+b=2k+1 not 2k - math.rs: fix test_avg_chain expected avg to 10/6 (all-pairs average, not just A→* paths) - ene_core.rs: fix AES-GCM decrypt AAD mismatch in retrieve_sensitive_data — SELECT now fetches pkg column and passes it as AAD (matches store path) - hyperbolic_encoding.rs: fix Möbius transform formula to standard gyrovector form: denom = 1+2⟨a,z⟩+‖a‖²‖z‖² (was missing ‖a‖²‖z‖² term, had +‖z‖² instead) — satisfies T_0(z)=z identity **cargo test: 145 passed, 0 failed** **Delete 35 Python source files** now superseded by Rust crate: All 4-Infrastructure/infra/*.py and embedded_surface/server.py removed. **Deploy scripts updated** to use rs-surface binary instead of Python: - gcl_edge_in_place_upgrade.sh: CURRENT_SERVER → rs-surface binary; validate with test -x; smoke-test exec binary directly; rollback saves rs-surface - xen_alpine/install_rs_surface_openrc.sh: SERVER_SRC → musl release binary; drop python3 from apk; install as rs-surface (not server.py) - xen_alpine/run_qemu_alpine_surface.sh: default SURFACE_IMPL=rust; RUST_BIN var for musl binary; else-branch copies rs-surface; boot script exec binary - recover_credential_server.sh: upload rs-surface binary; ExecStart → binary with RS_SURFACE_PORT=8444 (credential endpoint built into rs-surface /credentials) - nixos-setup-cred-server.sh: same — ExecStart uses /opt/rs-surface/rs-surface Generated with [Devin](https://cli.devin.ai/docs) Co-Authored-By: Devin <158243242+devin-ai-integration[bot]@users.noreply.github.com>
99 lines
3.6 KiB
Bash
99 lines
3.6 KiB
Bash
#!/usr/bin/env bash
|
|
# Deploy credential server to microVM (RackNerd)
|
|
set -euo pipefail
|
|
|
|
REPO_ROOT="$(cd "$(dirname "$0")/../../.." && pwd)"
|
|
VM_IP="172.245.19.182"
|
|
VM_USER="root"
|
|
VM_PASS="${1:-}"
|
|
SSH_OPTS="-o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null -o LogLevel=ERROR"
|
|
|
|
if [ -z "$VM_PASS" ]; then
|
|
VM_PASS="$(cat "$REPO_ROOT/API KEYS/racknerd_510bd9c_root.txt" 2>/dev/null | grep root_password | cut -d: -f2 | tr -d ' ')"
|
|
fi
|
|
|
|
if [ -z "$VM_PASS" ]; then
|
|
echo "ERROR: root password required. Pass as argument or ensure API KEYS/racknerd_510bd9c_root.txt exists."
|
|
exit 1
|
|
fi
|
|
|
|
SSH="sshpass -p "$VM_PASS" ssh $SSH_OPTS ${VM_USER}@${VM_IP}"
|
|
SCP="sshpass -p "$VM_PASS" scp $SSH_OPTS"
|
|
|
|
echo "=== Deploying credential server to ${VM_IP} ==="
|
|
|
|
# Create directories
|
|
$SSH "mkdir -p /opt/rs-surface /etc/rs-surface"
|
|
|
|
# Upload rs-surface binary (credential endpoint is served by rs-surface on /credentials)
|
|
RS_SURFACE_BIN="$REPO_ROOT/4-Infrastructure/infra/embedded_surface/rs-surface/target/x86_64-unknown-linux-musl/release/rs-surface"
|
|
if [ ! -x "$RS_SURFACE_BIN" ]; then
|
|
echo "ERROR: rs-surface binary not found at $RS_SURFACE_BIN — build it first with:"
|
|
echo " cd $REPO_ROOT/4-Infrastructure/infra/embedded_surface/rs-surface && cargo build --release --target x86_64-unknown-linux-musl"
|
|
exit 1
|
|
fi
|
|
echo "Uploading rs-surface binary..."
|
|
$SCP "$RS_SURFACE_BIN" ${VM_USER}@${VM_IP}:/opt/rs-surface/rs-surface
|
|
|
|
# Copy credentials config
|
|
CRED_JSON="/tmp/rs-credentials.json"
|
|
python3 -c "
|
|
import json, os
|
|
creds = {}
|
|
for var, key in [('DEEPSEEK_API_KEY', 'deepseek'), ('QUANDELA_API_KEY', 'quandela'),
|
|
('WOLFRAM_ALPHA_APPID', 'wolfram_alpha'), ('LINEAR_API_KEY', 'linear'),
|
|
('AWS_BEARER_TOKEN_BEDROCK', 'bedrock')]:
|
|
val = os.environ.get(var, '')
|
|
if val:
|
|
creds[key] = val
|
|
if not creds:
|
|
print('WARNING: no credential env vars set; writing empty config')
|
|
with open('$CRED_JSON', 'w') as f:
|
|
json.dump(creds, f, indent=2)
|
|
print(f'Wrote {len(creds)} provider keys from environment')
|
|
"
|
|
echo "Uploading credentials.json..."
|
|
$SCP "$CRED_JSON" ${VM_USER}@${VM_IP}:/etc/rs-surface/credentials.json
|
|
rm -f "$CRED_JSON"
|
|
|
|
# Create systemd service
|
|
echo "Setting up systemd service..."
|
|
$SSH 'cat > /etc/systemd/system/rs-credential-server.service << '"'"'SERVICEEOF'"'"'
|
|
[Unit]
|
|
Description=Research Stack Credential Server
|
|
After=network-online.target
|
|
Wants=network-online.target
|
|
|
|
[Service]
|
|
Type=simple
|
|
User=root
|
|
WorkingDirectory=/opt/rs-surface
|
|
ExecStart=/opt/rs-surface/rs-surface
|
|
Restart=always
|
|
RestartSec=5
|
|
Environment=RS_CREDENTIAL_CONFIG=/etc/rs-surface/credentials.json
|
|
Environment=RS_SURFACE_PORT=8444
|
|
Environment=RS_SURFACE_HOST=0.0.0.0
|
|
|
|
[Install]
|
|
WantedBy=multi-user.target
|
|
SERVICEEOF'
|
|
|
|
# Stop old service if exists, enable new one
|
|
$SSH "systemctl daemon-reload && systemctl enable rs-credential-server && systemctl restart rs-credential-server"
|
|
|
|
# Verify
|
|
echo "=== Verifying ==="
|
|
sleep 2
|
|
$SSH "systemctl status rs-credential-server --no-pager --lines=5"
|
|
echo ""
|
|
echo "=== Testing HTTP ==="
|
|
curl -sf --connect-timeout 5 http://${VM_IP}:8444/ && echo "" || echo "(curl root)"
|
|
curl -sf --connect-timeout 5 http://${VM_IP}:8444/health && echo "" || echo "(curl health)"
|
|
curl -sf --connect-timeout 5 http://${VM_IP}:8444/status && echo "" || echo "(curl status)"
|
|
curl -sf --connect-timeout 5 http://${VM_IP}:8444/openapi.json | python3 -m json.tool > /dev/null 2>&1 && echo "openapi.json: valid" || echo "openapi.json: FAIL"
|
|
|
|
echo "=== Deploy complete ==="
|
|
echo "API: http://${VM_IP}:8444/"
|
|
echo "Docs: http://${VM_IP}:8444/openapi.json"
|
|
echo "Credentials: http://${VM_IP}:8444/credentials"
|