Cryptograss:Recovery
Recovery is how we get back in when things are broken. Two things live here:[unverified]
- The
magenta.sh recoverytool — the emergency way into hunter.[unverified] - Procedures for rebuilding what broke. The plan for the total cold start rebuild drill is on Cryptograss:Drill:Cold Start Rebuild (moved here from this page on 1 Nov 2026, at Justin's ask).[unverified]
Written by re, 1 Nov 2026. This page documents the tool as of magenta main @ 20daf90.[unverified]
magenta.sh recovery
The emergency entry: when nothing answers — magent down, hunter's containers gone, the host unresponsive — a person runs this from their laptop:[unverified]
magenta.sh recovery [--fresh] [--openrouter | --subscription][unverified]
What it does, from magenta.sh (main @ 20daf90, the recovery) case, ~line 220):[unverified]
- SSHes straight to the host as
recovery@hunter.cryptograss.live(override the host withMAGENTA_RECOVERY_HOST). Therecoverykey opens only the recovery session — no agent container, no shell on any agent.[unverified] - Takes plain words:[unverified]
- fresh starts the recovery session over, for when the old one is wedged.[unverified]
- openrouter or subscription picks the way to the model, each its own session. Pick one, not both.[unverified]
- Needs nothing else of the script: no login link, no target, no other session. It works when every other path is dead.[unverified]
In the first person: run it, say what's wrong, and the recovery session works on the host with the tooling there. It is the door you knock on when the front door is gone.[unverified]
What belongs here
Procedures get written here as they're proven, not before:[unverified]
- Restoring the record's Postgres from maybelle's dumps.[unverified]
- Re-seeding the vault (a person enters the master; nothing generates a secret).[unverified]
- Rebuilding hunter from the ansible playbook — the drill's checklist lives on Cryptograss:Drill:Cold Start Rebuild.[unverified]