feat: enable Alertmanager with Slack receiver in kube-prometheus-stack HelmRelease

- Set alertmanager.enabled: true (was false)
- Add Slack receiver config pointing to gatus-slack-webhook secret URL
- Add alertmanagerSpec.secrets to mount gatus-slack-webhook into Alertmanager pod
- Route: group by alertname+namespace, 30s wait, 5m interval, 4h repeat
- Channel: #api-alerts with summary title and description text

Closes leeworks-agents/api-company#210

ROADMAP.md

@@ -6,7 +6,7 @@ Cross-repo milestones. Per-API phases live in each API repo's ROADMAP.md.
 
 ## Phase 0 — Orientation (one-time)
 - [x] Audit cluster: nodes, namespaces, ingress, Flux state → `docs/cluster-audit.md` (issue #36 — closed ✅)
-- [ ] Add Flux GitRepository + Kustomization watching `leeworks-agents/api-company` — issue #2
+- [ ] Add Flux GitRepository + Kustomization watching `leeworks-agents/api-company` — issue #2 (Talos PR implementation: issue #187)
 - [ ] Deploy `gitea-act-runner` in cluster via Flux HelmRelease (`flux/gitea-runner/`) — issue #3
 - [ ] Stand up `registry.leeworks.dev` (container registry) — required before any API CI works — issue #4
 - [ ] Validate ESO HelmRelease deployment and ExternalSecret sync for all 4 API namespaces — issue #178
@@ -51,6 +51,9 @@ Per-API: implement Fastify/FastAPI service matching `openapi.yaml` exactly. Rapi
 - [ ] PayPal linked to RapidAPI (manual, on 18th birthday) — issue #19
 - [ ] Paid tiers enabled on RapidAPI listings (manual) — issues #44 (original 3), #151 (VIN Decoder)
 
+- [ ] Execute pre-launch checklist before go-live — issue #166
+- [ ] Publish launch announcement (HN, Reddit, Twitter, Dev.to) — issue #167
+
 ## Revenue target
 
 $100/mo **net** ≈ $136/mo gross after RapidAPI 25% + PayPal ~2%.

STATUS.md

@@ -1,20 +1,20 @@
 # Company Status
 
-_Last updated: 2026-06-03 (sprint planning cycle)_
+_Last updated: 2026-06-05_
 
 ## APIs
 | API            | Spec | Code | Deployed | Listed on RapidAPI | Paying Users | MRR |
 |----------------|------|------|----------|--------------------|--------------|-----|
-| ZIP Enrichment | [~]  | [~]  | [ ]      | [ ]                | 0            | $0  |
+| ZIP Enrichment | [x]  | [x]  | [ ]      | [ ]                | 0            | $0  |
-| Holidays       | [~]  | [~]  | [ ]      | [ ]                | 0            | $0  |
+| Holidays       | [x]  | [x]  | [ ]      | [ ]                | 0            | $0  |
-| Air Quality    | [ ]  | [ ]  | [ ]      | [ ]                | 0            | $0  |
+| Air Quality    | [x]  | [x]  | [ ]      | [ ]                | 0            | $0  |
 | VIN Decoder    | [x]  | [x]  | [ ]      | [ ]                | 0            | $0  |
 
 Legend: [x]=done, [~]=in-progress, [ ]=not started
 
 ## Infrastructure
 - Cluster nodes: 3 control plane (10.0.1.3, .4, .5) + workers (testing1)
-- **Flux wiring (api-company):** Manifests staged at `flux/api-company-source/` — PENDING Talos merge (issue #2)
+- **Flux wiring (api-company):** `flux/api-company-source/` — Fork PR #399 **MERGED** to leeworks-agents/Talos; upstream PR #14 open on 0xWheatyz/Talos — awaiting operator merge to activate Flux (issue #2)
 - **Gitea Actions runner:** Flux manifest committed at `flux/gitea-runner/` — PENDING runner token secret + Talos wiring (issue #3)
 - **Container registry:** Gitea built-in registry selected; docs/registry.md committed — PENDING Gitea packages enabled (issue #4)
 - **Prometheus + Grafana:** Flux HelmRelease at `flux/monitoring/` — PENDING Flux wiring + Grafana secret (issue #7)
@@ -23,12 +23,72 @@ Legend: [x]=done, [~]=in-progress, [ ]=not started
 - **Image automation:** `flux/image-automation/` — ImageRepository + ImagePolicy + ImageUpdateAutomation for all three APIs
 - **VIN Decoder manifests:** `flux/vin-decoder/` — Flux HelmRelease + Kustomization committed (issue #140)
 
-## Completed This Cycle (2026-06-03 — Sprint Planning Cycle)
+## Completed This Cycle (2026-06-05 — Sprint Planning Cycle #206)
 
-- **#182** — ROADMAP.md Phase 0 annotated with issues #178 (ESO ExternalSecret validation) and #179 (VIN Decoder Flux validation extension); Phase 4 annotated with issues #180 (holidays metrics endpoint) and #174 (VIN Decoder metrics verification).
+- **#206** — STATUS.md updated for 2026-06-05 sprint planning cycle (this entry). Last-updated date set to 2026-06-05.
-- **#181** — STATUS.md updated with 2026-06-03 sprint planning cycle results (this entry). Last updated date set to 2026-06-03.
+- **Completed outcomes from 2026-06-04 sprint planning cycle recorded:**
-- **Sprint Summary:** 6 new issues created this cycle (#173, #174, #178, #179, #180, plus #181/#182 docs). 0 issues closed. 0 stale found.
+  - Issue #204 (smoke-tests): reopened and relabeled `blocked` — was prematurely closed while prerequisites (DNS #33/#150, Flux #2/#187) are still open.
-- **Current Blockers updated:** #178 (ESO ExternalSecret sync validation) and #179 (VIN Decoder Flux validation extension) added.
+  - ROADMAP cross-reference: all 18 unchecked items confirmed grounded in open issues (zero gaps).
+  - Staleness check: oldest open issue is #2 from 2026-05-18 (18 days, under 30-day threshold — no closures).
+  - Label audit: no label changes required — all existing priority/complexity labels are correct.
+- **Critical path confirmed:** Operator must (1) create `0xWheatyz/api-company` (#47), (2) merge upstream Talos PR #14 (#187) to activate Flux, (3) configure DNS (#33, #106, #150).
+- **`kustomize build flux/` = PASS** — no regressions.
+- **0 open PRs** — nothing to review or merge.
+
+## Completed Previous Cycle (2026-06-04 — Triage Cycle #204)
+
+- **Triage** — All 29 open `agent-ready` issues reviewed and commented with current status (2026-06-04).
+  - **#204** (smoke tests): ❌ BLOCKED — all HTTP endpoints timeout; DNS not configured; kubectl unreachable.
+  - **#203** (ClusterIssuer): ❌ BLOCKED — kubectl not accessible from agent environment.
+  - **#187, #90, #2** (Flux wiring): Waiting on operator to merge upstream Talos PR #14.
+  - **#179, #178, #66** (validation checklists): Blocked on Flux active + cluster access.
+  - **#174** (VIN metrics): `kustomize build flux/` PASS; blocked on cluster deploy.
+  - **#173, #81, #128, #126, #127, #83, #80, #79, #77, #76, #74, #73, #70** (secrets): Manual operator tasks, all documented.
+  - **#167, #166** (launch/pre-launch): Blocked on DNS + Flux + RapidAPI + PayPal.
+  - **#161, #151, #150, #139, #116, #106, #47, #44, #33, #30, #19, #8, #7, #4, #3**: Manual operator tasks or blocked on operator actions.
+- **`kustomize build flux/` = PASS** — no regressions.
+- **0 PRs open** — nothing to review or merge.
+- **Critical path unchanged:** Operator must (1) create `0xWheatyz/api-company` (#47), (2) merge upstream Talos PR #14 (#187) to activate Flux.
+
+## Completed Previous Cycle (2026-06-04 — Sprint Planning Cycle #200/#201)
+
+- **#200** — STATUS.md Infrastructure section updated: Flux wiring row for `flux/api-company-source/` updated to reflect Fork PR #399 **MERGED** to leeworks-agents/Talos; upstream PR #14 open on 0xWheatyz/Talos awaiting operator merge. Current Blockers updated to note upstream PR #14 as critical gate.
+- **#201** — Sprint planning STATUS.md update for 2026-06-04 cycle. Issues #200 and #201 created this cycle. ROADMAP cross-reference: all 18 unchecked items confirmed grounded in open issues (no gaps). Staleness check: oldest open issue is #2 from 2026-05-18 (17 days, not stale — threshold 30 days). Priority review: all labels confirmed appropriate. Critical path: operator-gated on 0xWheatyz/Talos PR #14 merge.
+- **`kustomize build flux/` = PASS** — no regressions confirmed.
+
+## Completed Previous Cycle (2026-06-04 — Sprint Planning Cycle #198)
+
+- **#198** — STATUS.md updated for 2026-06-04 sprint planning cycle. Last updated date set to 2026-06-04.
+- **Sprint Summary:** 0 new code issues created (all ROADMAP items grounded — all 18 unchecked items have corresponding open issues). 0 issues closed (no stale; oldest is #2 at 17 days). 0 label changes. Critical path is entirely operator-gated: Talos merge of #187 unblocks the #2/#3/#4 chain.
+- **`kustomize build flux/` = PASS** — no regressions confirmed.
+
+## Completed Previous Cycle (2026-06-04 — Sprint Planning Cycle #196)
+
+- **#196** — STATUS.md updated for 2026-06-04 sprint planning cycle. Last updated date set to 2026-06-04.
+- **Sprint Summary:** ROADMAP cross-reference complete — all 18 unchecked items have corresponding open issues (no gaps). 1 new issue created: #196 (this STATUS.md update). 0 issues closed (no stale issues; oldest open issue is #2 from 2026-05-18, only 17 days old). 0 label changes (all priority/complexity labels correct). Critical path remains entirely operator-gated.
+- **`kustomize build flux/` = PASS** — no regressions confirmed.
+
+## Completed Previous Cycle (2026-06-03 — Sprint Planning Cycle #193/#194)
+
+- **#194** — ROADMAP.md annotated with missing issue cross-references: Phase 0 issue #2 entry updated to reference implementation issue #187; Phase 6 entries added for issue #166 (pre-launch checklist) and #167 (launch announcement). Closes leeworks-agents/api-company#194.
+- **#193** — STATUS.md updated for 2026-06-03 sprint planning cycle. Current Blockers confirmed accurate; #80 (gitea-image-automation-token) listed. Closes leeworks-agents/api-company#193.
+- **Sprint Summary:** 2 new documentation issues created (#193 STATUS.md update, #194 ROADMAP annotation). 0 issues closed. 0 stale. Critical path entirely operator-gated.
+- **`kustomize build flux/` = PASS** — no regressions confirmed.
+
+## Completed Previous Cycle (2026-06-03 — Audit Cycle #190/#191)
+
+- **#190** — ZIP Enrichment API audit complete: `openapi.yaml` present at repo root (57 KB, OpenAPI 3.0.3); server entry point `src/server.js`; all routes confirmed implemented; `X-RapidAPI-Proxy-Secret` preHandler middleware on all routes except `/health`; `/metrics` Prometheus endpoint present; STATUS.md ZIP Enrichment Spec and Code rows updated to `[x]`. Closes leeworks-agents/api-company#190.
+- **#191** — Holidays API audit complete: `openapi.yaml` present at repo root (13 KB, OpenAPI 3.0.3); server entry point `src/server.js`; all routes confirmed implemented; `X-RapidAPI-Proxy-Secret` preHandler middleware on all routes except `/health` and `/metrics`; `/metrics` Prometheus endpoint present (issue #180 confirmed done); STATUS.md Holidays Spec and Code rows updated to `[x]`. Closes leeworks-agents/api-company#191.
+- **`kustomize build flux/` = PASS** — no regressions confirmed.
+
+## Completed Previous Cycle (2026-06-03 — Sprint Planning Cycle)
+
+- **#188** — STATUS.md updated for 2026-06-03 sprint planning cycle (this entry). Last updated date set to 2026-06-03.
+- **#187** — Talos PR for api-company Flux source manifests: PR #399 on `leeworks-agents/Talos` confirmed valid; upstream deploy PR created targeting `0xWheatyz/Talos`.
+- **#186** — Air Quality API audit complete: `openapi.yaml` ✅ exists at repo root in `leeworks-agents/air-quality`; server implementation ✅ present (`src/server.ts`, `src/app.ts`, `src/routes/`); STATUS.md Air Quality row updated to `[x]/[x]`.
+- **#178** relabeled — added `blocked` label (depends on #173 + Flux active).
+- **#174** relabeled — added `blocked` label (depends on #18 deploy + #7 monitoring).
+- **Current Blockers updated:** #187 added before #90 (same unblock target, more actionable).
 - **`kustomize build flux/` = PASS** — no regressions confirmed.
 
 ## Completed Previous Cycle (2026-06-02 — Sprint Planning Cycle #175/#176)
@@ -62,7 +122,7 @@ Legend: [x]=done, [~]=in-progress, [ ]=not started
 - **PR #160 closed** — had merge conflicts and ROADMAP.md regressions (unchecked completed items). Clean fix applied here.
 - **`kustomize build flux/` = PASS** — no regressions.
 
-## Current Blockers (as of 2026-06-03)
+## Current Blockers (as of 2026-06-04)
 
 In dependency order — operator tasks unless noted:
 
@@ -73,10 +133,13 @@ In dependency order — operator tasks unless noted:
 5. **P1 #83** — Configure `GITEA_TOKEN` Actions secret in zip-enrichment, holidays, air-quality repos (operator)
 6. **P1 #126** — Configure `GITEA_TOKEN` Actions secret in vin-decoder repo (operator — depends on #122 ✅)
 7. **P1 #127** — Create `gitea-registry` imagePullSecret in `vin-decoder` namespace (operator)
-8. **P2 #173** — Create ESO source secrets in `external-secrets` namespace for RapidAPI proxy-secret syncing (operator) — blocks ESO sync
+8. **P1 #187** — Merge upstream PR #14 on 0xWheatyz/Talos to activate Flux for api-company (operator) — Fork PR #399 already MERGED to leeworks-agents/Talos; upstream PR #14 is the critical gate; unblocks #2, #3, #4, #66 chain
-9. **P2 #174** — VIN Decoder metrics instrumentation in `leeworks-agents/vin-decoder` repo (agent task, depends on #18 deploy)
+9. **P1 #90** — Wire Flux GitRepository + Kustomization for api-company in `0xWheatyz/Talos` (superseded by #187; upstream PR #14 pending operator merge)
-10. **P2 #178** — Validate ESO HelmRelease deployment and ExternalSecret sync for all 4 API namespaces (depends on #173 + Flux active)
+10. **P2 #80** — Create `gitea-image-automation-token` secret in `flux-system` namespace (operator) — enables Flux image automation
-11. **P2 #179** — Execute extended full-stack Flux validation checklist including VIN Decoder (depends on #126, #127, #128)
+11. **P2 #173** — Create ESO source secrets in `external-secrets` namespace for RapidAPI proxy-secret syncing (operator) — blocks ESO sync
+12. **P2 #174** — VIN Decoder metrics instrumentation in `leeworks-agents/vin-decoder` repo (agent task, depends on #18 deploy)
+13. **P2 #178** — Validate ESO HelmRelease deployment and ExternalSecret sync for all 4 API namespaces (depends on #173 + Flux active)
+14. **P2 #179** — Execute extended full-stack Flux validation checklist including VIN Decoder (depends on #126, #127, #128)
 
 ## Sprint Summary (2026-06-01 — Sprint Planning Cycle)
 - **Issues closed this cycle:** 0

docs/pre-launch-checklist.md

@@ -77,7 +77,7 @@ Use this checklist as the final go-live gate — run through every item the day
 flux get all
 
 # Check API pod health
-for ns in zip-enrichment holidays air-quality docs-site; do
+for ns in zip-enrichment holidays air-quality vin-decoder docs-site; do
   echo "=== $ns ==="
   kubectl get pods -n $ns
 done
@@ -85,13 +85,13 @@ done
 # Verify TLS certs
 kubectl get certificates -A
 
-# Check all 7 DNS subdomains
+# Check all 8 DNS subdomains
-for sub in zip holidays aqi docs status registry grafana; do
+for sub in zip holidays aqi vin docs status registry grafana; do
   echo "$sub.leeworks.dev -> $(dig $sub.leeworks.dev +short)"
 done
 
 # Smoke test health endpoints
-for svc in "zip.leeworks.dev/health" "holidays.leeworks.dev/health" "aqi.leeworks.dev/health"; do
+for svc in "zip.leeworks.dev/health" "holidays.leeworks.dev/health" "aqi.leeworks.dev/health" "vin.leeworks.dev/v1/health"; do
   echo "$svc: $(curl -s -o /dev/null -w '%{http_code}' https://$svc)"
 done
 

flux/monitoring/helmrelease.yaml

@@ -85,7 +85,25 @@ spec:
                 action: replace
                 target_label: kubernetes_pod_name
     alertmanager:
-      enabled: false  # Enable when alert routing is configured
+      enabled: true
+      config:
+        global:
+          slack_api_url_file: /etc/alertmanager/secrets/gatus-slack-webhook/url
+        route:
+          receiver: slack-api-alerts
+          group_by: [alertname, namespace]
+          group_wait: 30s
+          group_interval: 5m
+          repeat_interval: 4h
+        receivers:
+          - name: slack-api-alerts
+            slack_configs:
+              - channel: '#api-alerts'
+                title: '{{ .CommonAnnotations.summary }}'
+                text: '{{ range .Alerts }}{{ .Annotations.description }}{{ end }}'
+      alertmanagerSpec:
+        secrets:
+          - gatus-slack-webhook
     kubeStateMetrics:
       enabled: true
     nodeExporter: