docs: fix stale TBD Grafana dashboard reference in metrics-standard.md

Replace the non-existent docs/grafana-api-dashboard.json reference with
pointers to the actual Flux ConfigMap dashboard locations:
- flux/monitoring/grafana-dashboard-apis.yaml (consolidated 4-API dashboard)
- flux/monitoring/vin-decoder-dashboard.yaml (VIN Decoder-specific dashboard)

Note that dashboards are auto-loaded via grafana_dashboard: "1" label.
Remove the (TBD) annotation — dashboards are already committed.

Closes leeworks-agents/api-company#238

ROADMAP.md

@@ -6,7 +6,7 @@ Cross-repo milestones. Per-API phases live in each API repo's ROADMAP.md.
 
 ## Phase 0 — Orientation (one-time)
 - [x] Audit cluster: nodes, namespaces, ingress, Flux state → `docs/cluster-audit.md` (issue #36 — closed ✅)
-- [ ] Add Flux GitRepository + Kustomization watching `leeworks-agents/api-company` — issue #2 (Talos PR implementation: issue #187)
+- [ ] Add Flux GitRepository + Kustomization watching `leeworks-agents/api-company` — issue #218 (fork PR #399 merged to leeworks-agents/Talos; awaiting operator merge of 0xWheatyz/Talos PR #14)
 - [ ] Deploy `gitea-act-runner` in cluster via Flux HelmRelease (`flux/gitea-runner/`) — issue #3
 - [ ] Stand up `registry.leeworks.dev` (container registry) — required before any API CI works — issue #4
 - [ ] Validate ESO HelmRelease deployment and ExternalSecret sync for all 4 API namespaces — issue #178
@@ -29,7 +29,7 @@ Per-API: implement Fastify/FastAPI service matching `openapi.yaml` exactly. Rapi
 - [ ] Gatus public status page at `status.leeworks.dev` — issue #8
 - [x] Instrument every API with `api_requests_total`, `api_response_duration_seconds`, `api_data_freshness_seconds` (issue #27 — closed ✅)
 - [x] Add Prometheus metrics endpoint to holidays service (issue #180 — closed ✅)
-- [ ] Verify VIN Decoder metrics endpoint and ServiceMonitor scrape config — issue #174
+- [ ] Verify VIN Decoder metrics endpoint and ServiceMonitor scrape config — issue #231
 - [x] VIN Decoder metrics instrumentation + Grafana dashboard (issue #129 — closed ✅)
 - [x] VIN Decoder Gatus health check (issue #134 — closed ✅)
 - [x] Enable Alertmanager in kube-prometheus-stack + configure Slack receiver for SLO alerts (issue #210 — closed ✅)

STATUS.md

@@ -1,6 +1,6 @@
 # Company Status
 
-_Last updated: 2026-06-06_
+_Last updated: 2026-06-08_
 
 ## APIs
 | API            | Spec | Code | Deployed | Listed on RapidAPI | Paying Users | MRR |
@@ -24,7 +24,62 @@ Legend: [x]=done, [~]=in-progress, [ ]=not started
 - **VIN Decoder manifests:** `flux/vin-decoder/` — Flux HelmRelease + Kustomization committed (issue #140)
 - **Alertmanager:** `flux/monitoring/helmrelease.yaml` — enabled with Slack receiver config (`gatus-slack-webhook` secret); PR #212 open (issue #210)
 
-## Completed This Cycle (2026-06-06 — Sprint Planning Cycle #221)
+## Completed This Cycle (2026-06-08 — Triage Cycle #237)
+
+- **Triage** — All 28 open `agent-ready` issues reviewed and commented with current status (2026-06-08).
+  - **All issues confirmed blocked** on the same critical-path operator tasks: #47 (create `0xWheatyz/api-company`), #218 (merge Talos PR #14), #33/#106/#150 (DNS).
+  - **No agent-implementable work found** — all open issues are either manual operator tasks or gated on Flux/cluster activation; kubectl unreachable from agent environment.
+  - **28 issues triaged** — status comments posted on all open `agent-ready` issues.
+  - **0 new issues created** — no gaps found; all ROADMAP items remain grounded in open issues.
+  - **0 issues closed** — no stale issues; oldest open issue is #3 from 2026-05-18 (21 days < 30-day threshold).
+  - **0 label changes** — all existing labels correct.
+  - **0 open PRs** — nothing to review or merge.
+  - **`kustomize build flux/` = PASS** — no manifest regressions.
+- **Critical path unchanged:** (1) Operator creates `0xWheatyz/api-company` (#47), (2) Operator merges `0xWheatyz/Talos` PR #14 (#218), (3) Operator configures DNS for all 8 subdomains (#33, #106, #150).
+
+## Completed Previous Cycle (2026-06-07 — Triage Cycle #232)
+
+- **Triage** — All 28 open `agent-ready` issues reviewed and commented with current status (2026-06-07).
+  - **All issues confirmed blocked** on the same critical-path operator tasks: #47 (create `0xWheatyz/api-company`), #218 (merge Talos PR #14), #33/#106/#150 (DNS).
+  - **No agent-implementable work found** — all open issues are either manual operator tasks or gated on Flux/cluster activation; kubectl unreachable from agent environment.
+  - **1 new issue triaged** — #231 commented with @qa-engineer assessment; BLOCKED on #218.
+  - **0 new issues created** — no gaps found; all ROADMAP items remain grounded in open issues.
+  - **0 issues closed** — no stale issues.
+  - **0 label changes** — all existing labels correct.
+  - **0 open PRs** — nothing to review or merge.
+  - **`kustomize build flux/` = PASS** — no manifest regressions.
+- **Critical path unchanged:** (1) Operator creates `0xWheatyz/api-company` (#47), (2) Operator merges `0xWheatyz/Talos` PR #14 (#218), (3) Operator configures DNS for all 8 subdomains (#33, #106, #150).
+
+## Completed Previous Cycle (2026-06-06 — Sprint Planning Cycle #227)
+
+
+
+- **Sprint Planning** — Full ROADMAP cross-reference + backlog triage completed (2026-06-06).
+  - **ROADMAP cross-reference:** All 18 unchecked items confirmed grounded in open issues — **zero gaps**.
+    - Phase 0: #3, #4, #66, #76–#83, #126–#128, #173, #178, #179, #203, #218 — all tracked.
+    - Phase 4: #7, #8, #174 — all tracked.
+    - Phase 5: #30 — tracked.
+    - Phase 6: #19, #33, #44, #106, #116, #139, #150, #151, #161, #166, #167 — all tracked.
+  - **Staleness check:** Oldest open issue is #3 / #4 from 2026-05-18 (19 days) — **below 30-day threshold; zero closures**.
+  - **Label audit:** All priority/complexity labels confirmed correct from cycle #221 audit — **zero changes**.
+  - **0 new issues created** — no roadmap gaps found.
+  - **0 issues closed** — no stale issues.
+  - **0 label changes** — all existing labels correct.
+  - **`kustomize build flux/` = PASS** — no manifest regressions.
+- **Critical path unchanged:** (1) Operator creates `0xWheatyz/api-company` (#47), (2) Operator merges `0xWheatyz/Talos` PR #14 (#218), (3) Operator configures DNS for all 8 subdomains (#33, #106, #150).
+
+## Completed Previous Cycle (2026-06-06 — Triage Cycle #226)
+
+- **Triage** — All 28 open `agent-ready` issues reviewed and commented with current status (2026-06-06).
+  - **All issues confirmed blocked** on the same critical-path operator tasks: #47 (create `0xWheatyz/api-company`), #218 (merge Talos PR #14), #33/#106/#150 (DNS).
+  - **No agent-implementable work found** — all open issues are either manual operator tasks or gated on Flux/cluster activation.
+  - **0 new issues created** — no gaps found; all ROADMAP items are grounded in open issues.
+  - **0 issues closed** — no issues are stale or resolvable by agent action.
+  - **0 PRs open** — nothing to review or merge.
+  - **`kustomize build flux/` = PASS** — no manifest regressions.
+- **Current critical path unchanged:** (1) Operator creates `0xWheatyz/api-company` (#47), (2) Operator merges `0xWheatyz/Talos` PR #14 (#218), (3) Operator configures DNS for all 8 subdomains (#33, #106, #150).
+
+## Completed Previous Cycle (2026-06-06 — Sprint Planning Cycle #221)
 
 - **#221** — STATUS.md updated for 2026-06-06 sprint planning cycle (this entry). Last-updated date confirmed 2026-06-06.
 - **0 new issues created** — all ROADMAP unchecked items confirmed grounded in open issues (35 open issues, zero gaps).
@@ -161,7 +216,7 @@ Legend: [x]=done, [~]=in-progress, [ ]=not started
 - **PR #160 closed** — had merge conflicts and ROADMAP.md regressions (unchecked completed items). Clean fix applied here.
 - **`kustomize build flux/` = PASS** — no regressions.
 
-## Current Blockers (as of 2026-06-06)
+## Current Blockers (as of 2026-06-07)
 
 In dependency order — operator tasks unless noted:
 
@@ -175,7 +230,7 @@ In dependency order — operator tasks unless noted:
 8. **P1 #218** — Operator: merge 0xWheatyz/Talos upstream PR #14 to activate Flux GitOps for api-company — Fork PR #399 already MERGED to leeworks-agents/Talos; upstream PR #14 is the critical gate; unblocks #2, #3, #4, #66 chain (replaces closed #187 and #90)
 10. **P2 #80** — Create `gitea-image-automation-token` secret in `flux-system` namespace (operator) — enables Flux image automation
 11. **P2 #173** — Create ESO source secrets in `external-secrets` namespace for RapidAPI proxy-secret syncing (operator) — blocks ESO sync
-12. **P2 #174** — VIN Decoder metrics instrumentation in `leeworks-agents/vin-decoder` repo (agent task, depends on #18 deploy)
+12. **P2 #231** — Verify VIN Decoder metrics endpoint and ServiceMonitor scrape config in live cluster (depends on #218 — Flux must be active first)
 13. **P2 #178** — Validate ESO HelmRelease deployment and ExternalSecret sync for all 4 API namespaces (depends on #173 + Flux active)
 14. **P2 #179** — Execute extended full-stack Flux validation checklist including VIN Decoder (depends on #126, #127, #128)
 

docs/metrics-standard.md

@@ -286,7 +286,11 @@ annotations:
 
 ## Grafana Dashboard
 
-A reference dashboard JSON is available at `docs/grafana-api-dashboard.json` (TBD — will be committed once Grafana is deployed per issue #7).
+Grafana dashboards are committed as Flux ConfigMaps and are auto-loaded by Grafana via the `grafana_dashboard: "1"` label:
+- `flux/monitoring/grafana-dashboard-apis.yaml` — consolidated 4-API dashboard (all APIs)
+- `flux/monitoring/vin-decoder-dashboard.yaml` — VIN Decoder-specific dashboard
+
+Dashboards will load automatically once Grafana is deployed (issue #7) and Flux is active (issue #218).
 
 Key panels to include:
 1. Request rate by API and status (`rate(api_requests_total[5m])`)

flux/vin-decoder/helmrelease.yaml

@@ -37,7 +37,8 @@ spec:
                 - name: vin-decoder
                   image: registry.leeworks.dev/vin-decoder/api:latest # {"$imagepolicy": "flux-system:vin-decoder"}
                   ports:
-                    - containerPort: 3000
+                    - name: http
+                      containerPort: 3000
                   env:
                     - name: RAPIDAPI_PROXY_SECRET
                       valueFrom:
@@ -72,7 +73,8 @@ spec:
           selector:
             app: vin-decoder
           ports:
-            - port: 80
+            - name: http
+              port: 80
               targetPort: 3000
       - apiVersion: networking.k8s.io/v1
         kind: Ingress