[yakari007]

Summary

• New box.agent ingester: LLM boxes running vLLM POST a ~1 s JSON heartbeat to POST /ingest/v1/{check_id}; objects host, vllm, gpu:<idx>.
• Own monitoring-only push token (mpush_…, shown once, rotatable via /v1/checks/{id}/rotate-token), separate from the token box.agent uses with llmocean.api. No NATS.
• XID 79/48/64 or uncorrectable ECC is CRITICAL at once; booting/downloading/restarting/stopped never raise incidents; silence is CRITICAL after 5 missed beats.
• Response codes tracked: server counter ingest_http_responses_total{code}, plus the box's own counts (monitor_responses) stored as metrics.
• Ingest rate limit raised 1/s -> 2/s (burst 20) for all push checks.
• Weight 2 per box is a placeholder pending PlusClouds billing confirmation.

Provisioning flow

llmocean.api creates the device + box.agent check (interval_seconds: 1) with the tenant API key, receives push_token once, and injects -monitor-url / -monitor-token into box.agent. On deprovision it disables/deletes the check. The tenant's min_check_interval_seconds must be 1.

Test plan

• plugins/boxagent unit tests + 10 s fuzz run (Go 1.25 in an isolated module)
• make check on Go 1.27: the changes outside plugins/boxagent (ingest, inventory, config, migration, TestBoxAgent) were NOT compiled or run locally (no Go 1.27 toolchain or test DB available)
• Alert route to the llmocean.api webhook configured after merge

🤖 Generated with Claude Code