[nomad-step-4] S4-fix-1 — vault-seed-agents.sh must seed kv/disinto/bots/dev (missing from .env import) #963

New issue

Closed

opened 2026-04-17 14:40:16 +00:00 by dev-bot · 0 comments

dev-bot commented

2026-04-17 14:40:16 +00:00

Collaborator

Step 4 verification: agents template blocks on Missing: vault.read(kv/data/disinto/bots/dev). The KV path doesn't exist.

Root cause

vault-import.sh maps FORGE_{ROLE}_TOKEN → kv/disinto/bots/{role} for each named role (review, gardener, architect, planner, predictor, supervisor, vault). But the dev role uses FORGE_TOKEN directly — there's no FORGE_DEV_TOKEN in .env. So kv/disinto/bots/dev is never written.

Similarly dev-qwen uses FORGE_TOKEN_LLAMA which vault-import maps to bots/dev-qwen, but only if the key exists in .env.

Fix

In tools/vault-seed-agents.sh (from S4.1 #955): check each bot path in KV. For any missing path, seed with the shared FORGE_TOKEN + FORGE_PASS from kv/disinto/shared/forge. The dev bot is the primary case.

Alternatively: extend vault-import.sh to explicitly map FORGE_TOKEN → kv/disinto/bots/dev/token and FORGE_PASS → kv/disinto/bots/dev/pass as a special case.

Either approach is fine; seed script is more robust (handles fresh-factory-no-import case too).

Acceptance criteria

After vault-seed-agents.sh runs: vault kv get kv/disinto/bots/dev returns token + pass.
Agents alloc starts without template-missing error.
All 8 bot paths exist: dev, dev-qwen, review, gardener, architect, planner, predictor, supervisor, vault.

Labels / meta

backlog + bug-report.

Step 4 verification: agents template blocks on `Missing: vault.read(kv/data/disinto/bots/dev)`. The KV path doesn't exist. ## Root cause `vault-import.sh` maps `FORGE_{ROLE}_TOKEN` → `kv/disinto/bots/{role}` for each named role (review, gardener, architect, planner, predictor, supervisor, vault). But the `dev` role uses `FORGE_TOKEN` directly — there's no `FORGE_DEV_TOKEN` in `.env`. So `kv/disinto/bots/dev` is never written. Similarly `dev-qwen` uses `FORGE_TOKEN_LLAMA` which vault-import maps to `bots/dev-qwen`, but only if the key exists in `.env`. ## Fix In `tools/vault-seed-agents.sh` (from S4.1 #955): check each bot path in KV. For any missing path, seed with the shared `FORGE_TOKEN` + `FORGE_PASS` from `kv/disinto/shared/forge`. The `dev` bot is the primary case. Alternatively: extend `vault-import.sh` to explicitly map `FORGE_TOKEN` → `kv/disinto/bots/dev/token` and `FORGE_PASS` → `kv/disinto/bots/dev/pass` as a special case. Either approach is fine; seed script is more robust (handles fresh-factory-no-import case too). ## Acceptance criteria - After `vault-seed-agents.sh` runs: `vault kv get kv/disinto/bots/dev` returns token + pass. - Agents alloc starts without template-missing error. - All 8 bot paths exist: dev, dev-qwen, review, gardener, architect, planner, predictor, supervisor, vault. ## Labels / meta - `backlog` + `bug-report`.