Session handover — 2026-08-22 → 2026-08-29

Single entry point for this long session on telep-mainframe + the tailnet + the KrakenSDR Pi rig. Every thread already has a detailed dated note — this ties them together, gives current per-subsystem status, and lists what still needs a human. Canonical living runbook: telep-mainframe-handover. Prior handover: 2026-08-12-session-handover.

Access

/usr/bin/ssh levander@telep-mainframe (off-LAN: ssh levander@100.115.209.87, slow DERP, use ConnectTimeout 30). Router over LAN ssh root@192.168.1.1 (mainframe can’t reach the router’s tailnet IP). KrakenSDR Pi = raspi/kraken-rig.

Status at a glance

SubsystemState
Control-plane agent OAuth✅ fixed — zeroed ~/.claude/.credentials.json recovered via interactive claude login (TTY required); service auto-picks up new tokens. 2026-08-22-control-plane-oauth-zeroed-creds
Frigate recording✅ resolved — was retention config (continuous/motion days=0), not a jam; record.motion.days:10 + cat tracked. 2026-08-22-frigate-recording-retention-config-not-jam
Frigate → Telegram alertscat added to frigate-notify alerts.labels.allow (a new tracked object needs BOTH lists). 2026-08-26-frigate-notify-cat-alerts
Router / WiFi⚠️ driver-level 5 GHz cross-band CLIENT ISOLATION unresolved — wifi→ethernet works, wifi↔wifi cross-band fails; all config knobs clean, survives wifi restart. Workaround = same-band or Ethernet. bambu.lan (.202) reserved. 2026-08-26-router-reflash-mac-5ghz-dfs-and-bambu-offline
Bambu H2S printer✅ dual-band (seen on 5 GHz), standby≠offline, uses a USB stick not microSD; print-queue “stuck pending” = plate-clear gate + Bambuddy 5-min preheat-soak (normal). Maintenance PDF delivered — printer is due. 2026-08-26-router-reflash-mac-5ghz-dfs-and-bambu-offline
FreeCAD CAD studio (cad node)✅ NEW — headless FreeCAD GUI + Selkies noVNC + FreeCAD MCP (wired into Claude Code) on own tailnet node. 2026-08-26-freecad-cad-workstation
CAD-designer agent✅ NEW — 2nd always-on claude remote-control (cad-designer.service), FreeCAD MCP wired, session cad-designer-telep. 2026-08-26-cad-designer-agent
CAD export pipeline + Online3DViewer✅ NEW — export_all → STEP/STL/3MF into /exports, browse cad:8080, auto-syncs to Mac ~/cad-exports; Online3DViewer at cad:8090 (click-to-view + drag-drop + Finder picker; frame-ancestors 'self'). 2026-08-26-freecad-cad-workstation
KrakenSDR mobile DFfield-working — TETRA uplink 382.114 MHz, UCA 200 mm, ext-3 whips; Kraken Pro iOS app over hunter-ap → 10.42.0.1 using the phone’s GPS (no tether/gpsd/puck). zram reboot-safe. ⚠️ bearings still RELATIVE (array_offset=0); car power blocker. 2026-08-26-krakensdr-field-test-milestone · 2026-08-26-raspi-oom-zram-hunter-ap-433-retune
Filestash (Windows drive browser)✅ remounted — reboot had dropped /mnt/win NTFS; re-mounted RO + docker restart filebrowser. ⚠️ still NOT reboot-safe. filestash

Open items — needs you (as of 2026-08-29)

  • KrakenSDR — array_offset calibration. Bearings are still RELATIVE (array_offset=0); do the calibration pass so headings are absolute. 2026-08-26-krakensdr-field-test-milestone
  • KrakenSDR — car power is the blocker. Pi 5 + DAQ brown out on 5 V/3 A (generic PD-30W only gives 5V/3A → no help). Needs a real 5 V/5 A source. On hand: an XL4015 but set to 6 V (servo/lightaim) + marginal at 5 A / 38 V input ceiling (car load-dump risk). Recommended buy = MINI560-5V-5A (HESTORE 100.423.75) or a proper 12V→5V/5A(/8A) buck + usb_max_current_enable=1; Kraken + phone on their own feeds. 2026-08-26-krakensdr-field-test-milestone · 2026-08-26-raspi-oom-zram-hunter-ap-433-retune
  • Filestash /mnt/win is NOT reboot-safe. Fix = a systemd mount unit keyed on the NTFS partition UUID, ordered Before=docker.service, so it auto-mounts RO on boot and filebrowser sees it. (Windows drive still needs data migration → then LUKS-encrypt per the older FDE plan; sda 447 G still empty/unencrypted.) filestash
  • 5 GHz cross-band client isolation on telep-router — unresolved; workaround in place (Ethernet / same-band). Optional: investigate the radio chipset for an inter-VAP isolation override. 2026-08-26-router-reflash-mac-5ghz-dfs-and-bambu-offline
  • Enroll a BACKUP YubiKey — only ONE enrolled (disk-FDE SPOF); disarm the live-lock udev rule during enrollment. (long-standing) 2026-08-15-yubikey-gated-luks-fde
  • Bambu H2S maintenance is DUE per the schedule PDF (X-axis rail monthly; quarterly items).

What happened this session

Each item links its full write-up — details are NOT duplicated here.

  • Control-plane agent OAuth — service looked active but the pane churned Reconnected after Ns + the app threw an OAuth error; root cause was a zeroed creds file (empty access/refresh tokens → silent refresh impossible). Fixed with interactive claude login in a real TTY. 2026-08-22-control-plane-oauth-zeroed-creds
  • Frigate recording “broken” — root-caused as retention config (continuous.days=0 + motion.days=0 → footage discarded unless a person/car overlapped), not a pipeline jam. Fixed via record.motion.days:10 + added cat to tracked objects. 2026-08-22-frigate-recording-retention-config-not-jam
  • Frigate → Telegram (cat alerts)cat was tracked in Frigate but missing from frigate-notify’s alerts.labels.allow; added it. Reusable rule + the stuck-review-loop and 500-after-restart gotchas. 2026-08-26-frigate-notify-cat-alerts
  • Router reflash / WiFi — corrected the DFS theory (5 GHz telep1 is ch36, non-DFS); found driver-level 5 GHz cross-band client isolation (all config knobs clean, survives wifi restart); workaround = Ethernet the printer or same-band. Added bambu.lan (.202) DHCP reservation. STILL UNRESOLVED at the router. 2026-08-26-router-reflash-mac-5ghz-dfs-and-bambu-offline
  • Bambu H2S — corrected “2.4-only” → dual-band; standby≠offline (pings but ports closed + no SSDP = asleep); H2S uses a USB stick, not microSD; delivered a Hungarian A4 maintenance-schedule PDF. Print-queue “stuck pending” = plate-clear gate (dismiss the finish prompt on the screen) + Bambuddy’s 5-min chamber preheat-soak (normal, logs nothing); verified a print started (KrakenPi_CarBox_frame). 2026-08-26-router-reflash-mac-5ghz-dfs-and-bambu-offline
  • FreeCAD CAD studio (new cad tailnet node) — headless FreeCAD GUI + Selkies noVNC + FreeCAD MCP wired into Claude Code, an on-prem cad-designer.service remote-control agent, an export pipeline (export_all → STEP/STL/3MF into /exports, auto-syncs to the Mac, browsable at cad:8080), and Online3DViewer at cad:8090 (click-to-view + drag-drop + Finder picker; frame-ancestors 'self' hardening; Selkies sidebar Finder-upload into FreeCAD). 2026-08-26-freecad-cad-workstation · 2026-08-26-cad-designer-agent
  • KrakenSDR — Pi5 SD wasn’t corrupt (card was just pulled); zram made reboot-safe; hunter-ap WiFi AP up; retuned to TETRA mobile UPLINK 382.114 MHz (gain 19.7, vfo_bw 25 kHz, UCA 200 mm, ext-3 whips, MUSIC / decorr-off / short-bursts-on). The Kraken Pro iOS app connects LOCAL over hunter-ap → 10.42.0.1 using the phone’s GPS (so no tether/gpsd/USB-puck needed) — mobile DF working, field-testing across the city. 2026-08-26-krakensdr-field-test-milestone · 2026-08-26-raspi-oom-zram-hunter-ap-433-retune
  • Filestash — the Windows NTFS was re-mounted RO at /mnt/win (a reboot had dropped it) and the filebrowser container restarted; browsable again. Still needs the reboot-safe systemd mount unit. filestash