# Working Context
*Updated: 2026-03-10 21:00 ET (nightly maintenance)*

## Status: Active — Infrastructure cleanup + Kaseya alert pipeline

---

## Current Projects

### vault1984 / inou Architecture Discussion
- Hans (via agentchat) raised the possibility of running inou on each vault1984 pod
- James posted architectural analysis: shared pod infrastructure, separate binaries, vault1984 manages WebAuthn PRF key material, inou gets scoped L2 token for health data
- Key tension: inou's Claude API dependency slightly complicates the air-gap model
- **Pending:** Hans's response / agentchat follow-up

### George — New Discord Bot
- Johan added a new Discord bot ("George") to the server
- Was mid-process adding George to OpenClaw's Discord multi-bot config at session end
- Pattern: same `accounts` object as Telegram multi-account; Discord already supports it
- **Status:** May still be pending config push — check OC config for accounts.discord

### Kaseya M365 Alerts (BROKEN)
- M365 connector for `johan.jongsma@kaseya.com` has **expired refresh token** (invalid_grant since Feb 27)
- Last successful Kaseya/Teams message was Feb 26
- MC has both Graph and Skype/Teams connectors configured for Kaseya
- **Two problems to fix:**
  1. Re-authenticate M365 OAuth (interactive browser login needed)
  2. Add `/hooks/m365` route in OC config (currently missing — webhook fires but OC drops it)
- **Pending:** Johan hasn't confirmed re-auth flow; needs to happen during active session

### .17 Zombie Services — RESOLVED
- Discovered 192.168.1.17 (old server) still running: Proton Bridge, message-center, AND old openclaw-gateway (v2026.1.29)
- These were racing forge's services for IMAP cursors — emails potentially missed
- All three stopped and disabled on .17
- Forge is now sole instance

---

## Open Threads / Pending Decisions

1. **Kaseya M365 re-auth** — needs interactive OAuth flow; Johan needs to confirm he wants to proceed
2. **George Discord bot** — verify OC config was saved and George is live
3. **Git cleanup:**
   - `inou` — 70 uncommitted files (as of 6PM)
   - `james-dashboard` — 6 unpushed commits
   - `clawd` — 3 unpushed commits
4. **SentinelOne (S) short** — earnings Mar 12 after close; Johan watching ~$14
5. **vault1984 / inou pod architecture** — awaiting Hans's follow-up on agentchat

---

## Recent Context

- Evening briefing delivered: markets flat/slightly down, Iran/Hormuz still blocked, Trump threatening Iran 20x harder
- X-watch subagent: surfaced Trump/Hormuz Truth Social post to dashboard
- Watchboard (port 9202) is working for current alerts; Kaseya Teams dead since Feb 27

---

## Infrastructure Notes

- forge (192.168.1.16) = current home, all services live
- 192.168.1.17 = old server, all user services now stopped/disabled
- MC webhook → OC hook → mail agent pipeline is working for non-M365 email