Lifecycle: HISTORICAL (published KEEP) — prefer current spine pages for SSOT.

Canonical promoted page: Hermes recon report in Architecture history.

🏛️ FUNDAY PLATFORM — HERMES RECON REPORT 2026-07-04

Status: 🟢 ALL SYSTEMS OPERATIONAL — Platform live, healthy, zero critical issues
Scope: Full stack recon (infra, services, cron, git, disk, Sister Brawl engine)
Standard: Zero-bloat, idiot-proof, production-grade cheat sheet

⚡ EXECUTIVE TL;DR

🏗️ INFRASTRUCTURE — PRODUCTION TOPOLOGY

flowchart LR
  U[User :443] --> N[Nginx TLS Term]
  N --> T[Traefik :32443]
  T -->|/console /v2 /ws| NK[Nakama K3s :7350/7351]
  T -->|/*| FE[SvelteKit systemd :3000]
  NK --> PG[(PostgreSQL postgresql ns)]
  NK --> RD[(Redis 7 Cluster)]

• Frontend: funday-frontend.service → /home/usr/funday/frontend/build/ (host-level Node SSR, NOT K8s)
• Nakama: hostPath volume → /home/usr/funday/nakama-modules (no Docker rebuild on module change)
• Certs: Single LE secret funday-tls-cert — NEVER create funday-tls-secret
• DB: Real users in postgresql ns — funday-platform/funday DB is STALE

✅ HEALTH CHECKS — ALL GREEN

# One-liner verification
systemctl is-active funday-frontend nginx && \
systemctl --user is-active hermes-gateway hermes-dashboard && \
curl -sf https://funday.gg/health && \
sudo k3s kubectl get pods -n funday-platform -o wide

Cert: monitoring-funday-tls → Ready: True (renewed Sep 26 2026)
ACME Fix Applied: nginx try_files $uri @acme-k3s-traefik → Traefik ClusterIP 10.43.72.27:80

🔄 CRON ENGINE — 4 JOBS, ALL HEALTHY

Genius Engine Scope: Sister Brawl ONLY (per AGENTS.md §1.1 + user standing order)

• Cycle 41: Tournament forfeit Elo penalty ✅
• Cycle 42: Spectator infra validated → needs manual 2+ player test

🗂️ GIT STATE — DIRTY (NEEDS COMMIT/STASH)

# Modified skills (6)
M .agents/skills/frontend-development/SKILL.md
M .agents/skills/fun-audit/SKILL.md
M .agents/skills/fun-plan/SKILL.md
M .agents/skills/funday-play-shell/SKILL.md
M .agents/skills/funday-play-shell/references/elo-rating-pattern.md
M docs/knowledge/daisy/llms.txt
 
# Stale artifacts TRACKED IN GIT (violates AGENTS.md §1.2)
D frontend/build-backup-1780312269/... (hundreds of files)
D frontend/build.bak.1780318212/... (hundreds of files)
 
# Stashes: 2 (rift-plan-temp + WIP)

Sister Brawl active files: match_handler.ts, Game.svelte, CharacterSelect.svelte, TouchControls.svelte (new)

💾 DISK HYGIENE — VIOLATIONS TO FIX

Memory: 10 GiB available (well above 5 GiB deploy gate)
Load: 3.16 / 2.58 / 4.72 (elevated — likely Genius Engine cycle)

🎮 GAME REGISTRY — 75+ PLUGINS

ls games/*/funday-plugin.json | xargs -I{} sh -c 'd=$(dirname {} | xargs basename); v=$(python3 -c "import json; print(json.load(open(\"{}\").get(\"version\", \"?\"))"); s=$(python3 -c "import json; print(json.load(open(\"{}\").get(\"status\", \"?\"))"); t=$(python3 -c "import json; print(json.load(open(\"{}\").get(\"integrationType\", \"?\"))"); printf "%-25s v%-6s %-12s %s\n" "$d" "$v" "$s" "$t"'

Sister Brawl: Only production-grade game (9/10, all 10 layers)
70+ others: Missing 3+ core layers — NOT worth Genius Engine cycles

🛡️ EMERGENCY RUNBOOKS — ONE-LINERS

# Frontend down / stale build
bash /home/usr/funday/scripts/build-atomic.sh    # ONLY safe deploy (build+restart)
 
# Frontend hash-mismatch 404s (server stale)
sudo systemctl restart funday-frontend
 
# Nakama down / module reload
sudo k3s kubectl rollout restart deployment/nakama -n funday-platform
sudo k3s kubectl logs -n funday-platform deployment/nakama --tail=20
 
# Cert stuck renewing (monitoring-funday-tls)
sudo k3s kubectl delete certificate monitoring-funday-tls -n monitoring
# nginx already has ACME fallback to Traefik
 
# Hermes gateway/dashboard (USER systemd!)
systemctl --user restart hermes-gateway hermes-dashboard
 
# Kill stale vite dev on prod (OOM vector)
pkill -f 'vite dev.*5173'  # ONLY when no active dev session

🔐 ACCESS CONTROL — DEV SURFACE

Discord Embeds: Use explicit channel ID discord:1506357291555754044:1511357049668112445 — target="discord" drops embeds

🧠 HERMES OPS — CONFIGURED 2026-05-19

Tracing verify: hermes chat -q "hello" → trace “Hermes turn” in Langfuse

📋 IMMEDIATE ACTION CHECKLIST

• Kill stale PID 9762 (May 27 node ./dist/api/server.js)
• Purge stale artifacts: rm -rf frontend/build.bak.* frontend/build-backup-* frontend-deploy/
• Commit or stash 6 modified skills + Sister Brawl WIP
• Verify Genius Engine Cycle 42 — manual 2+ player spectator test
• Prune ~/.cache/yarn ~/.cache/puppeteer (keep ms-playwright)

🎯 GENIUS ENGINE — SISTER BRAWL PERFECTION CYCLE

┌─────────────────────────────────────────────────────────────┐
│  TRIPLE-CHECK PERFECTION PROTOCOL (user: "triplecheck")    │
├─────────────────────────────────────────────────────────────┤
│  1. AUDIT UPDATE   → fun-audit  → docs/fun-ops/audits/     │
│  2. IMPROVEMENT    → fun-plan   → prioritized fix plan     │
│  3. VERIFY         → fun-verify → before/after scorecard   │
│     TARGET: avg ≥ 3.5, zero 🔴 killers                     │
└─────────────────────────────────────────────────────────────┘

Cycle 42 Status: Spectator infrastructure ✅ | Manual 2P test ⏳
Scope Lock: Sister Brawl ONLY — 70+ other games excluded by design

📚 REFERENCE INDEX — SKILL-RESOLVED PATHS

🏁 VERIFICATION COMPLETE

All systems nominal. Zero critical blockers. Platform ready for continued Sister Brawl perfection cycles.

“Perfection is not when there is nothing more to add, but when there is nothing left to take away.” — Antoine de Saint-Exupéry