kitquiet
Loading activity
- #1367version-drift check (from #236) is a raw string-inequality, false-positives on multi-model manifests and metadata-only bumpsShippedfeature
- #1364globalArgs fields leak into method arguments when a method's arguments schema is a bare z.record()Shippedbug
- #1344apps sync/lookup fail with 'partial() cannot be used on object schemas containing refinements'Shippedbug
- #1340Docker-related model types/workflows would benefit from first-class dry-run/plan supportOpenfeature
- #1339open method fails for password-auth hosts: SSHPASS env set but ssh call never wrapped in sshpassShippedbug
Homelab Ingress
SSH-based management of a self-hosted, Cloudflare-free public ingress: nftables/Docker firewall reconciliation, a WireGuard tunnel, a Traefik reverse proxy with its own Let's Encrypt certs, an Authelia forward-auth gate (file or shared-LDAP-directory backed, with optional OIDC provider), an LLDAP user directory, and fail2ban jails. Encodes several non-obvious operational gotchas (Docker chain wipe on nftables reload, mobile-app auth bypass paths, fail2ban's reload-vs-restart trap) discovered standing up a real homelab edge.
Sabnzbd
Category CRUD, queue/history visibility, and NZB-by-URL submission for SABnzbd via its REST API, with the API key resolved from a vault at execution time instead of passed as a literal.
Qbittorrent
Category CRUD and connection verification for qBittorrent's WebUI API, with session-cookie login handled internally and credentials resolved from a vault at execution time instead of passed as literals.
Prowlarr
List, add (Torznab), and remove Prowlarr indexers via its REST API, with the API key resolved from a vault at execution time instead of passed as a literal.
Host Ports
Read-only inventory of TCP ports listening on the local host, correlated with owning process (via ss) and, where applicable, the Docker container that published it (via docker ps). Useful as a pre-flight check before binding a new service to a port.