chore(satellite): sync metis from aicom monorepo

Auto-generated by scripts/mirror_satellites.sh

Author: alexar76

coverage/coverage.json

@@ -81,7 +81,7 @@ silently resets `knowledge_entries` to 0.
 
 ## First-time setup
 
-1. **DNS** — point an `A` record at the node (e.g. `metis.modelmarket.dev → 31.77.67.99`).
+1. **DNS** — point an `A` record at the node (e.g. `metis.modelmarket.dev → <metis-host-ip>`).
 2. **Landing** — sync `docs/landing/` to `/var/www/metis-landing/`.
 3. **Config** — copy `nginx.conf` to `/opt/metis/deploy/nginx.conf`.
 4. **Run nginx** (HTTP first, so the ACME challenge is reachable):

deploy/README.md

@@ -35,7 +35,7 @@ Logs land at:
   - name: metis
     source: ssh_http_access_log
     ssh:
-      host: "31.77.67.99"
+      host: "<metis-host>"
       port: 22
       user: stats
       key_path: "~/.ssh/id_ed25519"

deploy/apache-test/README.md

@@ -48,25 +48,25 @@ server {
     proxy_cache off;
     gzip off;
     chunked_transfer_encoding on;
-    proxy_read_timeout 300s;
+    proxy_read_timeout 420s;
   }
   # Factory confidence-gate — runs can take up to Metis _RUN_TIMEOUT (300s).
   location = /v1/verify {
     limit_req zone=metis_api burst=40 nodelay;
     proxy_pass http://metis:8080;
     proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr;
-    proxy_connect_timeout 10s; proxy_read_timeout 300s;
+    proxy_connect_timeout 10s; proxy_read_timeout 420s;
   }
   location /v1/ {
     limit_req zone=metis_api burst=40 nodelay;
     proxy_pass http://metis:8080;
     proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr;
-    proxy_connect_timeout 10s; proxy_read_timeout 120s;
+    proxy_connect_timeout 10s; proxy_read_timeout 420s;
   }
   location = /health { proxy_pass http://metis:8080/health; }
   location /aimarket/ {
     limit_req zone=metis_api burst=20 nodelay;
-    proxy_pass http://metis:8080; proxy_set_header Host $host; proxy_read_timeout 120s;
+    proxy_pass http://metis:8080; proxy_set_header Host $host; proxy_read_timeout 420s;
   }
 }
 
@@ -95,25 +95,25 @@ server {
     proxy_cache off;
     gzip off;
     chunked_transfer_encoding on;
-    proxy_read_timeout 300s;
+    proxy_read_timeout 420s;
   }
   # Factory confidence-gate — runs can take up to Metis _RUN_TIMEOUT (300s).
   location = /v1/verify {
     limit_req zone=metis_api burst=40 nodelay;
     proxy_pass http://metis:8080;
     proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr;
-    proxy_connect_timeout 10s; proxy_read_timeout 300s;
+    proxy_connect_timeout 10s; proxy_read_timeout 420s;
   }
   location /v1/ {
     limit_req zone=metis_api burst=40 nodelay;
     proxy_pass http://metis:8080;
     proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr;
-    proxy_connect_timeout 10s; proxy_read_timeout 120s;
+    proxy_connect_timeout 10s; proxy_read_timeout 420s;
   }
   location = /health { proxy_pass http://metis:8080/health; }
   location /aimarket/ {
     limit_req zone=metis_api burst=20 nodelay;
-    proxy_pass http://metis:8080; proxy_set_header Host $host; proxy_read_timeout 120s;
+    proxy_pass http://metis:8080; proxy_set_header Host $host; proxy_read_timeout 420s;
   }
 }
 

deploy/nginx.conf

@@ -1,6 +1,6 @@
 # SKOPOS test deployment on metis
 
-Test instance of **SKOPOS** on the Metis node (`31.77.67.99`) — PostgreSQL + dashboard on **localhost:8501** (not public by default).
+Test instance of **SKOPOS** on the Metis node — PostgreSQL + dashboard on **localhost:8501** (not public by default).
 
 ## Stack
 
@@ -39,7 +39,7 @@ Manual Pages publish:
 ## Open UI locally
 
 ```bash
-ssh -L 8501:127.0.0.1:8501 root@31.77.67.99
+ssh -L 8501:127.0.0.1:8501 root@<metis-host>
 # browser: http://localhost:8501
 ```
 

deploy/skopos-test/README.md

@@ -40,8 +40,8 @@ install_probe_key() {
 }
 
 # Best-effort: allow SKOPOS container to SSH to factory + oracle for fleet logs.
-install_probe_key "root@5.129.212.122" 8443 || true
-install_probe_key "root@78.17.126.214" 22 || true
+install_probe_key "root@modeldev.modelmarket.dev" 8443 || true
+install_probe_key "root@oracles.modelmarket.dev" 22 || true
 
 if [[ ! -f "${ENV_FILE}" ]]; then
   log "Creating .env from example with generated passwords…"
@@ -135,7 +135,7 @@ PY
 log "Done."
 echo ""
 echo "  UI (on server):  http://127.0.0.1:8501"
-echo "  SSH tunnel:      ssh -L 8501:127.0.0.1:8501 root@31.77.67.99"
+echo "  SSH tunnel:      ssh -L 8501:127.0.0.1:8501 root@skopos.modelmarket.dev"
 echo "  Password:        grep SKOPOS_DASHBOARD_PASSWORD ${ENV_FILE}"
 echo "  Postgres:        docker exec -it metis-skopos-postgres psql -U skopos skopos"
 echo "  Logs:            cd ${ROOT} && docker compose logs -f skopos"

deploy/skopos-test/deploy.sh

@@ -3,7 +3,7 @@
 set -euo pipefail
 
 REPO="${REPO:-$(cd "$(dirname "$0")/../../.." && pwd)}"
-METIS_HOST="${METIS_HOST:-root@31.77.67.99}"
+METIS_HOST="${METIS_HOST:-root@skopos.modelmarket.dev}"
 APP_REMOTE="/opt/skopos-test/app"
 DEPLOY_REMOTE="/opt/skopos-test/deploy"
 APACHE_REMOTE="/opt/metis/deploy/apache-test"
@@ -60,7 +60,7 @@ REMOTE
 
 PROBE_PUB="$(ssh "${METIS_HOST}" "cat ${DEPLOY_REMOTE}/ssh/id_ed25519.pub 2>/dev/null" || true)"
 if [[ -n "${PROBE_PUB}" ]]; then
-  for spec in "root@5.129.212.122:8443" "root@78.17.126.214:22"; do
+  for spec in "root@modeldev.modelmarket.dev:8443" "root@oracles.modelmarket.dev:22"; do
     target="${spec%%:*}"
     port="${spec##*:}"
     ssh -o BatchMode=yes -o StrictHostKeyChecking=accept-new -p "${port}" "${target}" \

deploy/skopos-test/remote-sync.sh

@@ -13,7 +13,7 @@ servers:
   - name: factory
     source: ssh_nginx_access_log
     ssh:
-      host: 5.129.212.122
+      host: modeldev.modelmarket.dev
       port: 8443
       user: root
       key_path: /root/.ssh/id_ed25519
@@ -25,7 +25,7 @@ servers:
   - name: oracle
     source: ssh_nginx_access_log
     ssh:
-      host: 78.17.126.214
+      host: oracles.modelmarket.dev
       port: 22
       user: root
       key_path: /root/.ssh/id_ed25519

deploy/skopos-test/servers.yaml

@@ -20,12 +20,12 @@ alerting**, **backup & disaster recovery**, and **load testing**. Honest status
       static_configs: [{ targets: ["metis:8080"] }]
   rule_files: [ "deploy/monitoring/prometheus-alerts.yml" ]
   ```
-- **Alerts** ([`deploy/monitoring/prometheus-alerts.yml`](deploy/monitoring/prometheus-alerts.yml)):
+- **Alerts** ([`deploy/monitoring/prometheus-alerts.yml`](../deploy/monitoring/prometheus-alerts.yml)):
   `MetisDown` (up==0, 1m, **critical**), `MetisNoScrape` (target absent), `MetisProviderCircuitOpen`
   (an LLM/vision provider failing), `MetisKnowledgeStoreEmptied` (lost data mount). Route
   `severity: critical` to your pager (PagerDuty/OpsGenie/Alertmanager) so a Metis outage pages
   **you**, not your users.
-- **Grafana**: import [`deploy/monitoring/grafana-dashboard.json`](deploy/monitoring/grafana-dashboard.json)
+- **Grafana**: import [`deploy/monitoring/grafana-dashboard.json`](../deploy/monitoring/grafana-dashboard.json)
   (uid `metis-cognition`) — up, knowledge, breaker state, run/failure rates.
 
 ## Backup & disaster recovery
@@ -34,21 +34,21 @@ State that matters lives in the **`/app/data` bind-mount** (`/opt/metis/data` on
 knowledge store (SQLite), vector/episodic memory, traces. It is **not** rebuildable from the
 image — back it up.
 
-- **Snapshot + rotate**: [`deploy/backup.sh`](deploy/backup.sh) → `/opt/metis/backups/metis-data-<ts>.tar.gz`, keeps newest 14.
+- **Snapshot + rotate**: [`deploy/backup.sh`](../deploy/backup.sh) → `/opt/metis/backups/metis-data-<ts>.tar.gz`, keeps newest 14.
   ```cron
   30 3 * * *  /opt/metis/deploy/backup.sh >/var/log/metis-backup.log 2>&1
   ```
 - **Restore**: `./deploy/backup.sh --restore /opt/metis/backups/metis-data-<ts>.tar.gz`
   (stops the container, rsyncs the snapshot, `chown 1000:1000`, restarts).
 - **Rebuild from scratch** (total loss): recreate the container per
-  [`deploy/README.md`](deploy/README.md), then re-seed grounding:
+  [`deploy/README.md`](../deploy/README.md), then re-seed grounding:
   `docker exec -i metis python3 - data/knowledge < scripts/seed_ecosystem_knowledge.py`.
 - **Config**: `prod.yaml` holds the provider keys and is **git-excluded** — keep it in your
   secret store; it is the only piece not reproducible from the repo.
 
 ## Load testing
 
-[`deploy/loadtest.k6.js`](deploy/loadtest.k6.js) (k6): a health + fast-route mix with SLO
+[`deploy/loadtest.k6.js`](../deploy/loadtest.k6.js) (k6): a health + fast-route mix with SLO
 thresholds (errors <5%, health p95 <500ms, fast-verify p95 <20s).
 ```bash
 k6 run -e BASE=http://127.0.0.1:8080 -e VUS=20 -e DURATION=2m deploy/loadtest.k6.js

docs/OPERATIONS.md

@@ -3,7 +3,7 @@
 Metis is one of the **strongest** ecosystem components (external reviews ~8/10). This doc states
 what is production-grade today vs what still needs soak testing and adversarial benchmarks.
 
-**Related:** Factory [KI-8](../../docs/known-issues.md#ki-8--metis-distributed-mode--adversarial-verification-gap) · [DISTRIBUTED.md](./DISTRIBUTED.md) · [benchmarks/](../benchmarks/)
+**Related:** Factory [KI-8](../../../docs/known-issues.md#ki-8--metis-distributed-mode--adversarial-verification-gap) · [DISTRIBUTED.md](./DISTRIBUTED.md) · [benchmarks/](../../benchmarks/)
 
 ---
 
@@ -42,7 +42,7 @@ Regression tests: `metis/tests/test_adversarial_gates.py` document this class.
 
 ### Verifier — limited adversarial corpus
 
-Benchmarks cover trap/ambiguous cases ([`benchmarks/report.py`](../benchmarks/report.py)) but
+Benchmarks cover trap/ambiguous cases ([`benchmarks/report.py`](../../benchmarks/report.py)) but
 there is **no wide red-team suite** (encoding, contradictory sources, confident fabrication).
 
 **Mitigation:** expand `metis/benchmarks/` adversarial track (KI-8).
@@ -72,4 +72,4 @@ consumer ignores budgets.
 2. Distributed mode **beta** label removed after soak green
 3. Document high-stakes preset: `enforce_confidence_gate: true` + mandatory verify
 
-**Russian:** see ecosystem [maturity review RU](../../docs/ecosystem-maturity-review.ru.md)
+**Russian:** see ecosystem [maturity review RU](../../../docs/ecosystem-maturity-review.ru.md)