# FORGE-federation-orchestrator

> Monitor and manage the arifOS federation: docker compose ps, restart dead services, MCP health probes (Observed Port Map), container drift detection, restart count monitoring. USE WHEN: "federation status", "restart dead container", "container health", "docker drift", "service down", "probe MCP", "health check federation". Runs on af-forge (VPS) — native docker and curl required.

- Skill: `ariffazil/forge-federation-orchestrator` (Agent Skill, multi-file: 3 files)
- Install (CLI): `npx skillmds@latest add ariffazil/forge-federation-orchestrator`
- Raw SKILL.md: https://api.skillmd.com/api/skills/ariffazil/forge-federation-orchestrator/raw
- Safety review: pending
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: DevOps & Infra
- Author: ariffazil (https://skillmd.com/u/ariffazil)
- Updated: 2026-09-10
- Page: https://skillmd.com/skills/ariffazil/forge-federation-orchestrator

---

# Federation Orchestrator

**arifOS federation infrastructure operator. Monitors, recovers, and reports on all federation nodes.**

## Capabilities

- `docker compose ps` across all federation stacks
- Container restart count tracking (flag containers with >3 restarts)
- MCP endpoint health probes (Observed Port Map below)
- Dead service auto-restart (with confirmation threshold)
- Federation status report generation
- Restart history audit

## Commands

```bash
# Full federation status
docker compose ps
docker ps -a --filter "status=restarting"

# Check organ endpoints (verified 2026-08-14)
for url in 8088 7071 7072 7073 7074 8081 18082 18083; do
  curl -s -o /dev/null -w "%{http_code} :$url\n" --max-time 5 http://localhost:$url/health
done

# Restart dead container
docker compose restart <service>
docker restart <container>

# Restart count audit
docker inspect --format='{{.Name}} {{.RestartCount}}' $(docker ps -aq)

# Federation stack locations
cd /root/arifOS && docker compose ps
cd /root/AAA && docker compose ps
```

## Health Probe Script

```bash
#!/bin/bash
# Probe all MCP endpoints
for port in 8088 7071 7072 7073 7074 8081 18082 18083; do
  code=$(curl -s -o /dev/null -w "%{http_code}" --max-time 5 http://localhost:$port/health)
  if [ "$code" = "200" ]; then
    echo "✅ MCP:$port OK"
  else
    echo "❌ MCP:$port FAILED (HTTP $code)"
  fi
done
```

## Restart Count Thresholds

| Restarts | Severity | Action |
|---|---|---|
| 0 | ✅ Healthy | No action |
| 1–3 | ⚠️ Watch | Log + warn |
| 4–9 | 🔴 Degraded | Alert + review |
| 10+ | ⛔ Critical | Auto-restart cooldown + human alert |

## Observed Port Map (verified 2026-08-14 via ss + systemctl + curl)

| Port | Service | Owner |
|---|---|---|
| 8088 | arifOS kernel | systemd arifos.service |
| 7071 | A-FORGE executor | systemd a-forge.service |
| 7072 | A-FORGE MCP gateway | systemd a-forge-mcp.service |
| 7073 | arifFlow daemon | systemd arifflow.service |
| 7074 | FED router | systemd fed-router.service (`/root/AAA/scripts/fed_router.py`) |
| 8081 | GEOX MCP | systemd geox-mcp.service |
| 18082 | WEALTH | systemd wealth-organ.service |
| 18083 | WELL | systemd (python3) |
| 8080 | searxng (Docker) | NOT an organ — do not probe as arifOS |
| 8083 | headscale | NOT an organ |
| 8082 | (vacant) | legacy WEALTH slot, superseded by 18082 |

## Federation Nodes (LEGACY docker-compose era — verify at runtime before trusting)

| Container | Port | Stack | Criticality |
|---|---|---|---|
| arifosmcp | 8080 | arifOS | CRITICAL |
| geox_eic | 8081 | GEOX | CRITICAL |
| wealth-organ | 8082 | WEALTH | HIGH |
| well | 8083 | WELL | HIGH |
| vault999 | — | Vault999 | CRITICAL |
| vault999-writer | — | Vault999 | HIGH |
| graphiti-mcp | — | arifOS | HIGH |
| postgres | 5432 | arifOS | CRITICAL |
| qdrant | 6333 | arifOS | HIGH |
| redis | 6379 | arifOS | HIGH |
| nats | 4222 | arifOS | MEDIUM |
| aaa-a2a | 3001 | AAA | HIGH |
| apex-prime | 3002 | APEX | HIGH |
| ollama-engine-prod | 11434 | Ollama | MEDIUM |
| headless_browser | — | Browser | MEDIUM |
| uptime-kuma | 3001 | Monitoring | LOW |
| searxng | 8080 | Search | LOW |
| netdata | 19999 | Monitoring | LOW |
| vaultwarden | 8080 | Security | MEDIUM |
| agent-zero | — | AAA | HIGH |
| forge-notifier | — | Notification | MEDIUM |