Distillation

["b07484017fea30b9de10cbb24a238139","3ac30024f34bde8c6ea8f385ec88f4e5","8b098aa29becbf35b2c2fd3412fdc3ef","03ff60e8c7871082d7d17199fb2b3973","389109b515680da75fee656e6127104c"]

<observations> Date: Jun 22, 2026 * 🔴 (14:52) User confirmed timer setup completed successfully * 🟡 (14:52) Tool result: `ts-opencode-advertise.timer` active + enabled; next fire in 8s; last fired 14:51:22 UTC (51s ago); `ts-opencode-advertise.service` last run exit 0/SUCCESS, CPU 47ms * 🟡 (14:52) Tool result: service health HTTPS 200 (0.120475s); `AdvertiseServices: ["svc:opencode"]` confirmed set; manual `systemctl start` failed with "Interactive authentication required" (expected — timer runs as root, not affected) * 🟡 (14:52) Final architecture confirmed: `/usr/local/bin/ts-opencode-watchdog.sh` (checks + re-advertises svc:opencode, runs as root) + `ts-opencode-advertise.service` (oneshot) + `ts-opencode-advertise.timer` (60s interval, enabled+active); replaces old drop-in that only fired on tailscaled start * 🟡 (14:52) Root cause of recurring breakage confirmed: `AutoUpdate.Apply=true` triggered re-auth at 13:43 UTC, wiping advertise pref; old drop-in missed this; new 60s timer catches