one-db ONEDB-5 · child of ONEDB-1 one-db: 5 telemetry sqlite -> Postgres17 consolidation (umbrella) Backlog

kpi.pensanta.com dashboard on whey (chat-duo-web model): single-file Node .mjs reads telemetry views -> static KPI pages.

Todo normal cccoder-chatduo-cc ⛔ Q#47: kpi.pensanta.com exposure: Tailscale-only (bind whey tailnet IP, no TLS/cert ops, no public surface) vs public-TLS subdomain? Team rec = Tailscale-only; built exposure-agnostic so public later = bind+proxy change.

Sub-tickets — 1/2 done

DECISION (Elazar): kpi.pensanta.com exposure - Tailscale-only (team rec: bind whey tailnet IP, no TLS/cert ops, no public attack surface) vs public-TLS

ONEDB-6 Backlog high

nwnw-whey-cc

kpi-web MANIFEST: add Track A views (usage.v_kpi_tokens_7d + context.v_kpi_compact_7d) to server.mjs allowlist + restart

ONEDB-14 Done

cccoder-chatduo-cc

+ Add sub-ticket

Questions

q#47 · wi-cli-whey → elazar · 2026-06-06 · answered by wi-cli-whey

kpi.pensanta.com exposure: Tailscale-only (bind whey tailnet IP, no TLS/cert ops, no public surface) vs public-TLS subdomain? Team rec = Tailscale-only; built exposure-agnostic so public later = bind+proxy change.

Converted to standalone WI ONEDB-6 per Elazar (he wants bwis not wiQuestions). Decision still pending Elazar there.

Activity

wi-cli-whey created · 2026-06-06

parent=#1
wi-cli-whey parentChanged · 2026-06-06

parent=#697
wi-cli-whey assigned · 2026-06-06

coder-chatduo-cc / coder
wi-cli-whey blocked · 2026-06-06

blocked behind ONEDB-4 (needs SELECT* views before a view-reader web UI can be built)
wi-cli-whey blocked · 2026-06-06

blocked by question #47
wi-cli-whey questionAsked · 2026-06-06

kpi.pensanta.com exposure: Tailscale-only (bind whey tailnet IP, no TLS/cert ops, no public surface) vs public-TLS subdomain? Team rec = Tailscale-only; built exposure-agnostic so public later = bind+proxy change.
wi-cli-whey questionAnswered · 2026-06-06

Converted to standalone WI ONEDB-6 per Elazar (he wants bwis not wiQuestions). Decision still pending Elazar there.
wi-cli-whey statusChanged · 2026-06-06

Unblocked — ONEDB-4 views landed. coder-chatduo-cc may start brainstorm→spec.
wi-cli-whey note · 2026-06-16

DEPLOYED + LIVE on whey (bin-whey-cc verified 2026-06-15): kpi-web.service enabled+running since 2026-06-11 09:35 ART, /opt/kpi-web/server.mjs (node), LISTEN 127.0.0.1:9876, curl / -> HTTP 200, <title>kpi-web — telemetry</title>. Tailnet-only bind = matches team rec (exposure-agnostic default). Reads pg views via server-side MANIFEST allowlist (network/context/usage/kpi/dbsize, v_latest+v_largest). Status was never advanced past todo. Holding formal close pending ONEDB-6 exposure decision (Elazar), but the build/deploy itself is DONE.