Autonomous systems: watchdog, smart deploy, site health, auto-heal, agent installer

- deploy/jarvis-watchdog.sh: self-healing watchdog (every 5 min)
  * monitors lsws/mysql/redis, restarts on failure
  * JARVIS HTTP self-check, restarts OLS on 5xx
  * disk/memory alerts inserted to DB
  * offline Proxmox VM agents restarted via qm guest exec
  * log rotation (1000 line cap)
- deploy/jarvis-deploy.sh: smart deploy with PHP validation
  * php8.3 syntax check on every changed .php file
  * auto-reverts git commit + inserts critical alert on syntax error
  * reloads OLS after JARVIS deploys
- api/endpoints/facts_collector.php: site health monitoring
  * curls all 7 managed sites every 3 min
  * stores up/down status in kb_facts
- api/endpoints/alerts.php: auto-heal + site alerts
  * dispatches restart_service commands when services down on agents
  * generates alerts from kb_facts site health data
- public_html/install-agent.sh: one-liner Linux agent installer
  * installs deps, downloads agent, registers with JARVIS, sets up systemd
- public_html/webhook.php: fixed infra deploy path to /opt/infra

deploy/jarvis-deploy.sh

@@ -0,0 +1,74 @@
+#!/bin/bash
+# JARVIS Auto-Deploy Runner — processes GitHub webhook queue every minute.
+# Validates PHP syntax before deploying; auto-reverts on bad code.
+# Restarts OLS after JARVIS deploys to pick up PHP changes.
+
+QUEUE=/tmp/jarvis-deploy-queue.txt
+LOG=/home/jarvis.orbishosting.com/logs/deploy.log
+PHP=/usr/bin/php8.3
+
+TS() { date '+%Y-%m-%d %H:%M:%S'; }
+log() { echo "[$(TS)] $1" >> "$LOG"; }
+
+[ ! -f "$QUEUE" ] && exit 0
+[ ! -s "$QUEUE" ] && exit 0
+
+# Snapshot and clear queue atomically
+SNAPSHOT=$(cat "$QUEUE")
+> "$QUEUE"
+
+while IFS= read -r path; do
+    [ -z "$path" ] && continue
+    [ ! -d "$path/.git" ] && log "SKIP $path — not a git repo" && continue
+
+    log "Deploying $path"
+    cd "$path" || continue
+
+    BEFORE=$(git rev-parse HEAD 2>/dev/null)
+    git fetch origin main >> "$LOG" 2>&1
+    REMOTE=$(git rev-parse origin/main 2>/dev/null)
+
+    if [ "$BEFORE" = "$REMOTE" ]; then
+        log "Already up to date: $path"
+        continue
+    fi
+
+    git pull origin main >> "$LOG" 2>&1
+    AFTER=$(git rev-parse HEAD 2>/dev/null)
+    CHANGED=$(git diff --name-only "$BEFORE" "$AFTER" 2>/dev/null)
+
+    # PHP syntax validation — check every changed .php file
+    SYNTAX_OK=true
+    BAD_FILE=""
+    while IFS= read -r f; do
+        [[ "$f" != *.php ]] && continue
+        [ ! -f "$f" ] && continue
+        if ! $PHP -l "$f" > /dev/null 2>&1; then
+            SYNTAX_OK=false
+            BAD_FILE="$f"
+            break
+        fi
+    done <<< "$CHANGED"
+
+    if [ "$SYNTAX_OK" = false ]; then
+        log "SYNTAX ERROR in $BAD_FILE — reverting to $BEFORE"
+        git reset --hard "$BEFORE" >> "$LOG" 2>&1
+        # Insert alert into JARVIS DB
+        mysql -u jarvis_user -pJ4rv1s_Pr0t0c0l_2026! jarvis_db -se \
+            "INSERT INTO alerts (alert_type,title,message,severity)
+             VALUES ('deploy_fail','Deploy reverted: syntax error',
+             'PHP syntax error in $BAD_FILE. Commit $AFTER was reverted automatically.','critical');" 2>/dev/null
+        log "Reverted. Bad commit: $AFTER"
+        continue
+    fi
+
+    log "Deploy OK ($BEFORE -> $AFTER): $path"
+    log "Changed: $(echo "$CHANGED" | tr '\n' ' ')"
+
+    # Restart OLS after any JARVIS deploy to pick up PHP changes
+    if [[ "$path" == *"jarvis"* ]]; then
+        systemctl reload lsws 2>/dev/null || systemctl restart lsws 2>/dev/null
+        log "OLS reloaded for JARVIS deploy"
+    fi
+
+done <<< "$SNAPSHOT"