Memory

Fan-out sub-agents to cheaper models by default

After shipping work, always commit, push, and deploy — do not wait to be asked

Prefer short plain English in prose and commits

When the user jumps between products, confirm target repo before large edits

Tiny router files + versioned kb brain; reflexive read/write

Versioned, grep-able notes beat rules stuck only in prompts

Before non-trivial work, read the index and relevant notes

CLAUDE.md/AGENTS.md = short stable rules + pointers, not architecture dumps

Persist durable public facts during work, not only at session end

Never claim done if tests/steps were skipped silently

Offload implementation to parallel Herdr child worktrees, squash-merge finished PRs, then remove the worktree

An issue is addressable only when it names where the change starts, what the behaviour becomes, and which check proves it

Co-update tests in the same change; never wait for CI

After merges and new features, verify main CI is green; do not add slow tests or extra hot-path queries

Leave release-please and changeset version PRs for human merge

Agents must close the loop themselves with a project-local verify skill, a CLI lever, a Feature Map, and cloud agents — not worktrees

No secrets, hosts, internal project names, or adhoc session dumps

Use conventional semantic commit messages

Minimum code that solves the problem; no speculative abstraction

Touch only what the request requires; no drive-by refactors

When asked for Tailscale or remote access to a local Vite/TanStack app, bind Vite on every interface and add a tailnet-only Serve proxy. Never Funnel unless asked.

Markup/CSS/JS bugs stay invisible in review — measure the rendered page before claiming done

Index of agent collaboration preferences

State and coordination layer for AI agent fleets (public OSS)

aidr.today keeps wrangler.toml and wrangler deploy because cf migrate drops Workflows and Durable Objects.

Universal multi-provider LLM API gateway at anyrouter.dev

Catalog id is owner/model; host SKUs (date, vision-exp, fast, casing) are upstream names or aliases

Public install is curl | bash; binary is anyr; pin models with anyr claude --model owner/model

steipete/CodexBar closed the AnyRouter provider PRs twice in favor of named-operator, upstream-authorization, and track-record gates

OpenAI-shaped clients; text and embeddings only — image/video generation is gone

Browser OS workshop — repo duyet/anyrouter-os; file bugs on duyet/anyrouter with [os] prefix

Playground new chats enable AnyRouter MCP at the documented HTTP endpoint

Viewport tokens, 44px targets, semantic dark, compact playground row

Ticket — /api/v1/models advertises reasoning params on 12 of 206 listings, never the accepted effort values, so clients cannot discover a uniform reasoning surface; chat is effort-only by the host's own docs

Disable or unlist a broken model from /models and the catalog; do not delete history

Open alternative to Claude Cowork-style agents — local agent + marketing site

Product path: Python agent server plus React GUI; web is separate marketing app

Public Helm charts repository

AI/ops advisor suggests CH changes but does not apply DDL automatically

chm add/ls/use/rm save local ClickHouse HTTP and postgres:// connections; secrets stay in the credentials helper

Four herdr-desk jobs (triage, babysit, prod watch, improve) with staggered minutes and one agent name each

Hover Hide next to pin hides a sidebar leaf; restore in Settings → Workspace → Navigation

Paid chmonitor is honor-system host-count licenses (yearly/lifetime), not hosted SaaS seats

Absent engines on a menu item means ClickHouse family; Postgres hosts must not see those items

Dashboard Tools group holds SQL Console, Data Explorer, Explain, Advisor, Chart Builder, Schema Compare, Settings Diff

System TTL page lists table inventory plus part-health charts; never select system.tables.ttl

Project-local .cursor/skills/verify-chmonitor drives the Rust CLI; default doctor is identity-only

Open-source ClickHouse operational advisor — monitoring + AI recommendations

Project-local .cursor/skills/verify-marketplace; CLI lever on catalogs/manifests, not a hosted UI

Manager agent for the public product fleet — assigns work, keeps kb current

Public personal homelab repo — configs and experiments (no private topology in kb)

Public shared-brain repo — atomic notes, MEMORY.md index, OKF layout

kb.duyet.net renders the shared-brain notes; apps/kb/kb mounts ~/kb

Public SSG timeline of LLM models at llm-timeline.duyet.net

Public Bun+Turborepo for personal duyet.net web apps including news and the kb site

Personal news feed + public digest; homepage AI;DR thumbs; news-tab own 0.1.x release line

CLI apiFetch skips JSON.parse on empty bodies so accepted 202/204 mutations do not look like failures

oma envs get/delete call GET/DELETE /v1/environments/:id; --json; Partial

Argv ordering — version/help before loadConfig; --json before empty-result human sentences

Console /analytics charts cross-agent estimated spend, token mix by kind, and declared multiagent delegation from existing usage APIs

Session detail Inspector Artifacts tab aggregates writes, tool-result media, uploads, and session outputs from the event log

Agent detail Daily summary tab rolls up schedule firings over 1/7/30 UTC days from agent_schedule_runs

Console posts user.tool_confirmation from ApprovalCard; session cards + notice bell for mobile-compact HITL

Console AgentDetail health strip plus Monitor tab is the live agent.status heartbeat feed

Operators inject prompts, MCP, tools, and vault credentials into a live session without mutating the agent

Agent has one durable home inbox plus paired long-lived home runtime; ephemeral sandboxes stay separate

CF SessionDO maps Model Card vendor provider (openai/anthropic) to ApiCompat wire tags — parity with Node

Self-hosted Node resolves tenant Model Card creds before AnyRouter/deployment globals

output_file is gated like browser tools; marks keep-this files as agent.output_declared for Console Artifacts

POST /v1/sessions writes env_secret and inline github tokens via sessionSecrets.put; unwired store fails 500; DELETE cascades

checkInternalSecret and trusted-proxy share timingSafeEqualStr from @duyet/oma-auth/timing-safe-equal

Unset/empty/* stay wildcard for single-operator; multi-tenant credentials refuse start and same-host matches stay tenant-scoped

Project-local .cursor/skills/verify-oma with control-oma.mjs CLI lever and Feature Map for web + Console

OSS self-hostable Managed Agents API — CF Workers/DO or Docker

Sale templates require checkout before install; delivery is email plus secret unlock URL; owners see 5% platform fee plus processor estimate and net

Project-local .cursor/skills/verify-templatebot drives the Vite marketplace over CDP; Feature Map includes 30-per-page D1 browse, browse card coat blend, unlisted /data analytics, PostHog funnel, marquee, pay-to-install, MCP publish, live X embeds, multi-bot collect progress/skip/claim + master-detail publish, viewport presets

UIMessage is id+role+parts; unknown part types render as null

Jan 2026: Astro team joined Cloudflare; Flue agent framework context

Recurring public blog themes on blog.duyet.net

Catalog of notable public duyet/* and related OSS repos

Back-to-back merges silently drop master builds; with per-path filtering the newer green run does not rebuild the earlier merge's images

Squash-merge via github-actions bot with the default Actions token creates a push that skips CI and deploy workflows

herdr agent prompt with a long brief lands unsent in the opencode composer; verify the lifecycle moved instead of trusting the CLI's success response

Primary Linux workstation (duet-ubuntu) — OS, Herdr workspaces, local repo checkout paths, and which credentials are stale

A service-token-protected origin becomes publicly reachable if the Access application is absent; clients still send CF-Access-Client-* headers, so nothing errors and it looks healthy

bun:test mock.module cannot replace node:child_process in importers; use PATH shims or spyOn before import

Bun creates ~/.bun (install/cache dirs) under whatever HOME is set when it runs, so hermetic tests must not assert an empty fixture HOME — assert the app-owned state dir is absent instead

bash `source` aborts at the offending line, so variables defined after it are empty at point of use with no error — dotenv loaders parse the same file fine, which hides it

Cloudflare inter-account zone/registrar transfer carries DNS records but drops Worker routes and Custom Domains, so every proxied hostname 403s with Error 1000 until routes are recreated

Public GitHub org/user for open-source work

Personal digital garden blog

Public homelab overview site on the personal domain

Public rendered face of this shared-brain repo

Index of public sites and llms.txt sources

Homelab chmonitor vs public dash; image ghcr.io/chmonitor/chmonitor; no CH readonly profile; dedicated SELECT user; proxy auth via forwardAuth

PR fix/review fan-out should not all run on the most expensive model

Periodic cycle triages open PRs and dispatches fix/review work

States, leases, claims, capability tokens, conversations — fleet coordination API

Coordination/state API for fleets — bring your own agent loop

Map of common agent frameworks and what they are for

Keep API neutral; translate tool-call DTOs to AI SDK parts per client

Persist or convert to dynamic-tool / tool-name parts for history reload

Full astro check/build gets SIGKILL (exit 137) when other sessions are active — verify with lighter gates and let CI decide

turbo/CI gate that runs `run lint` lints nothing unless a package defines it; align the local hook and CI on one command

Resolve --assemble/--report/--out from the repo root; do not cd into the crate first

Cloudflare AI Gateway does not validate model names; upstream does

Cron triggers are capped at 5 per Cloudflare account, not per Worker

Cloudflare Email Sending is for transactional mail; bulk/marketing campaigns belong on a dedicated ESP

Semantic commit → push → deploy changed app; avoid parallel deploys that share env files

Deploying a Worker that hosts a running Workflow resets the Durable Object and fails the instance

Measure → fix top issue → verify → commit → deploy → log

CodexBar moved simple API-key providers to bundled QuickJS plugins; a new provider is ~25 lines of Swift plus a .ts file, not bespoke Swift

Reproducible host jobs are committed crontab snippets plus an idempotent installer, not hand-edited crontab

Cloudflare D1 INSERT/UPDATE RETURNING + .first() returns empty results; persist with .run() or batch()

Leave worktrees for human review, but never leave them dirty — commit the work first, and prove a branch landed before deleting it

Debian 13 (trixie) nodejs is 20.x; Wrangler 4 and many CLIs need Node >=22. Install official 22 LTS to /usr/local and dpkg-divert /usr/bin/node.

A UTC-dated snapshot can miss the local calendar day so the daily digest looks up null and never sends

A huge disk swapfile delays OOM and can hang a headless box; prefer small zram plus kill/evict

DO alarm() can schedule work without consuming the account-wide Worker cron cap

Eve authors an agent as agent/ files — instructions, tools, connections

Eve sessions need Vercel Workflow or a self-hosted Nitro Node server

Prefer hairline borders over heavy shadows for public site UI

Use semantic tokens (bg-card, foreground) not ad-hoc color utilities

Custom gateways must register from agent init with ctx.env; module load has empty env

Error pages middleware can rewrite 302 challenges into 401/500 and break OAuth

Editing the PR title does not change the squash commit message unless --subject is passed; release-please then reads the wrong type

A gh vault token keyed to api.github.com does not match github.com git remotes unless lookup aliases those hosts

A bare `charts/` gitignore pattern silently strips vendored Helm dependency tarballs from git, breaking source installs

Daily cron starts a Grok manager on main; children get isolated git worktrees; dated run folder stays on disk for review

Herdr 0.9.3 builds the workspace context menu from hardcoded variants; contexts=["workspace"] is parsed and never acted on

Register custom OpenAI-compatible providers by name, base_url, model

Insecure/loopback allowlists can bypass OAuth if ordered wrong

While busy, new user messages can adjust the current task instead of being ignored

Daily encrypted restic backup of ~/.hermes, ~/kb, SQLite DBs and host config to Cloudflare R2; one-command restore

One issue per cycle with full verify before next

Libraries that call createContext at module scope force client boundaries

Disabling a platform backend can silently kill BYOK that injected through it

Reseller budget errors buried in 400 should failover like 402/429

One fact per file; split when a note needs 'and'

Required top-level fields for every concept note

npx @scope/name runs a bin named `name`. Multiple bins without that name fail with "not found" / could not determine executable.

Generate OG cards at build from one registry shared by generator and route head

Social crawlers need Open Graph tags in static HTML, not only client head

Nested markdown + frontmatter bundle with index.md and log.md

Bare claude-* rewrites to anthropic/claude-*; AnyRouter env-fallback sonnet sends anyrouter/free on both OpenAI and Anthropic wire paths (not dotted BYOK 4.6)

Cloudflare Hono wrappers for /v1/<group>/<name>/* must dispatch via invokePackage, not nested fetch on c.req.path

Managed-agent platforms should inject secrets via outbound proxy, not into the sandbox FS

Planting setAlarm spies then firing via runDurableObjectAlarm reincarnates the DO and empties the spy

Ship self-host and cloud from one tree behind a fail-closed mode flag

Pin actions to version or commit SHA; moving major tags can be force-pushed

Any prefix byte change can bust LLM prompt cache

Prefer stdlib ast over Sphinx/pdoc when emitting markdown API pages from docstrings without importing the app

Many collection params apply at create; retrofit via update_collection

Large float32 collections without HNSW/quantization can time out

URL-shaped citations can be real yet irrelevant — require passage support

Inconsistent metadata keys break filters between ingest and query

Table-of-contents pages rank well but answer poorly — filter or downweight

Standing release PR + CHANGELOG; merge tags and publishes

Under squash-merge, PR title becomes the commit release-please reads

With bump-patch-for-minor-pre-major, feat in 0.x needs breaking marker for minor

WASM usually wins only when the TS path is >~1ms hot work

shadcn + CVA + slot pattern as default React component base

Count consecutive failures per job, not last status; a stale path can kill every future fire permanently

One committed non-secret env file feeds client build and server runtime

git cherry and patch-id report landed branches as unmerged in a squash-merging repo

Missing lazy chunks throw reading 'component'; add reload guard + prerender shells

Prerender Vite/TanStack apps to static HTML for crawlers and edge hosts

Map pane-current-command to short icons for agent vs editor vs idle

Report job always succeeds; separate fail-on-severity job gates the build

Display unit labels must not silently convert values; pair with explicit multiplier

Missing wasm build step makes prerender succeed empty or fail late

Enable per-worker cache with cache.enabled; only public Cache-Control is stored

On HIT the Worker does not run — no CPU billing for that request

SWR serves stale instantly while background refresh runs

Tag responses for targeted purge instead of purge-everything

Workflow binding schedules avoid Worker cron slots but wrangler deploy fails on Free because schedules are paid-only

Index of products and repos Duyet actively builds across

Claude Code is the stated daily coding-agent driver

How public AI practice is structured — agents over hand-writing

Treat specific AI coding tools as replaceable; field moves fast

Public stance: agents write most production code; Markdown tops Wakatime

ClickHouse as primary analytics engine in public work

Public experience with Apache Spark and Airflow

Deep public expertise and writing on ClickHouse

Public focus on large-scale data platforms and DE tooling

Public work on coding agents, agent SDKs, RAG, agent memory

Public handle @duyet on GitHub and personal sites

Duyet runs a personal homelab for self-host experiments and ops practice

Cloudflare Workers/Pages as primary public deploy target

Kubernetes used in public infra writing and Helm charts

Python used for data eng, agents, and glue code

Rust is a primary public language (data tooling, WASM, CLI)

SQL is daily language for analytics and ClickHouse work

TypeScript/JavaScript for web apps and Workers

Public local tooling: macOS, bun, uv, neovim, Obsidian

Expect concurrent work across several public products in one session

Public identity: Duyet Le (@duyet), senior data engineer

Index of public languages, data, infra, and AI tools