sysops git:20260512.f855f80A

Immutable. This exact content is served forever at /api/v1/blob/bc00bd22b2e6cca3.

---
name: sysops
description: Invoke the sysops subagent for VPS maintenance. Use when the user runs /sysops with an optional argument like "status", "update Pulse", or "update my servers".
---

# Sysops

If the argument starts with `log` or `learnings`, handle it directly — do NOT delegate to the sysops subagent.

## /sysops log

Parse the argument:
- `/sysops log` → show last 10 entries across all deployments
- `/sysops log <Deployment>` → show last 10 entries for that deployment (case-insensitive match)
- `/sysops log <Deployment> --last <N>` → show last N entries for that deployment

Run this command, substituting `DEPLOYMENT_FILTER` (empty string `""` if no deployment was given) and `LIMIT` (default `10`):

```bash
DEPLOYMENT_FILTER="<filter or empty string>" LIMIT=<N> python3 -c "
import json, os, sys

log_file = os.path.expanduser('~/.claude/sysops/audit.jsonl')
deployment_filter = os.environ.get('DEPLOYMENT_FILTER', '')
limit = int(os.environ.get('LIMIT', '10'))

if not os.path.exists(log_file):
    print('No audit log found at ~/.claude/sysops/audit.jsonl')
    print('Logs are written after each /sysops status or /sysops update run.')
    sys.exit(0)

entries = []
corrupt_count = 0
try:
    with open(log_file) as f:
        for line in f:
            line = line.strip()
            if not line:
                continue
            try:
                obj = json.loads(line)
            except json.JSONDecodeError:
                corrupt_count += 1
                continue
            if deployment_filter and obj.get('deployment', '').lower() != deployment_filter.lower():
                continue
            entries.append(obj)
except PermissionError:
    print(f'Error: cannot read audit log at {log_file} (permission denied).')
    sys.exit(1)
except OSError as e:
    print(f'Error: cannot read audit log: {e}')
    sys.exit(1)

entries = entries[-limit:]

if not entries:
    msg = 'No entries found'
    if deployment_filter:
        msg += f' for deployment {deployment_filter!r}'
    print(msg + '.')
    if corrupt_count:
        print(f'Warning: {corrupt_count} corrupt line(s) skipped in audit log.')
    sys.exit(0)

for e in entries:
    ts        = e.get('ts', 'unknown')
    dep       = e.get('deployment', 'unknown')
    env       = e.get('env', '?')
    action    = e.get('action', '?')
    project   = e.get('project', '?')
    print(f'{ts}  {dep} [{env}]  {action}  (project: {project})')

    if action == 'maintenance':
        pkgs  = e.get('packages_upgraded', 0)
        reboot = e.get('reboot_performed', False)
        dur   = e.get('reboot_duration_s')
        reboot_str = f'yes ({dur}s)' if reboot and dur else ('yes' if reboot else 'no')
        print(f'  Packages upgraded: {pkgs} · Reboot: {reboot_str}')

    containers = e.get('containers', {})
    if containers:
        parts = [n + (' ✓' if s == 'healthy' else ' ✗') for n, s in containers.items()]
        print('  Containers: ' + '  '.join(parts))

    unregistered = e.get('unregistered_containers', [])
    unreg_str = '  '.join(u + ' ⚠' for u in unregistered) if unregistered else 'none'
    print(f'  Unregistered: {unreg_str}')

    notes = e.get('notes', '')
    if notes:
        print(f'  Notes: {notes}')
    print()

if corrupt_count:
    print(f'Warning: {corrupt_count} corrupt line(s) skipped in audit log.')
"
```

---

## /sysops learnings

Parse the argument:
- `/sysops learnings` → show all stored learnings across all deployments (deduplicated)
- `/sysops learnings <Deployment>` → show learnings for that deployment only (case-insensitive match)

Run this command, substituting `DEPLOYMENT_FILTER` (empty string `""` if no deployment was given):

```bash
DEPLOYMENT_FILTER="<filter or empty string>" python3 -c "
import json, os, sys

learnings_file = os.path.expanduser('~/.claude/sysops/learnings.jsonl')
deployment_filter = os.environ.get('DEPLOYMENT_FILTER', '')

if not os.path.exists(learnings_file):
    print('No learnings stored yet at ~/.claude/sysops/learnings.jsonl')
    print('Learnings are written by the sysops agent when it discovers server quirks.')
    sys.exit(0)

# Read all entries and deduplicate by (deployment, key) pair — latest entry per
# pair wins. Scoping dedup to deployment prevents a key on one server from
# suppressing the same key on another.
seen = {}   # (deployment, key) -> entry
order = []  # first-seen (deployment, key) pairs in insertion order
corrupt_count = 0
try:
    with open(learnings_file) as f:
        for line in f:
            line = line.strip()
            if not line:
                continue
            try:
                obj = json.loads(line)
            except json.JSONDecodeError:
                corrupt_count += 1
                continue
            dedup_key = (obj.get('deployment', ''), obj.get('key', ''))
            if dedup_key not in seen:
                order.append(dedup_key)
            seen[dedup_key] = obj
except PermissionError:
    print(f'Error: cannot read learnings at {learnings_file} (permission denied).')
    sys.exit(1)
except OSError as e:
    print(f'Error: cannot read learnings: {e}')
    sys.exit(1)

# Filter and collect surviving entries in first-seen order.
entries = []
for dedup_key in order:
    entry = seen[dedup_key]
    if deployment_filter and entry.get('deployment', '').lower() != deployment_filter.lower():
        continue
    entries.append(entry)

if not entries:
    msg = 'No learnings found'
    if deployment_filter:
        msg += f' for deployment {deployment_filter!r}'
    print(msg + '.')
    if corrupt_count:
        print(f'Warning: {corrupt_count} corrupt line(s) skipped.')
    sys.exit(0)

for e in entries:
    ts         = e.get('ts', 'unknown')
    dep        = e.get('deployment', 'unknown')
    key        = e.get('key', '?')
    ltype      = e.get('type', '?')
    insight    = e.get('insight', '')
    confidence = e.get('confidence', '?')
    source     = e.get('source', '?')
    print(f'{dep}  [{ltype}]  {key}  (confidence: {confidence}, source: {source}, recorded: {ts})')
    if insight:
        print(f'  {insight}')
    print()

if corrupt_count:
    print(f'Warning: {corrupt_count} corrupt line(s) skipped in learnings store.')
"
```

---

Otherwise, delegate to the `sysops` subagent using the Agent tool.

Pass the user's argument directly as the prompt. If no argument was given, default to a status check across all deployments.

Examples:
- `/sysops` → prompt: "Check the status of all my servers"
- `/sysops status` → prompt: "Check the status of all my servers"
- `/sysops update Pulse` → prompt: "Update Pulse"
- `/sysops update my servers` → prompt: "Update all my servers"

Do not add any preamble or explanation — just invoke the subagent immediately.