Files
docs/apps/base-docs/app
zeekayandHanzo Dev cbc7903b9b docs: collapse the KMS Infisical mirror to the surface we actually serve
The KMS docs were a 549-file vendored Infisical mirror documenting a v2/v3
API that exists nowhere in our estate. Ground truth, from source:

  cloud/apps/kms/mount.go registers exactly seven routes --
    GET/POST   /v1/kms/health, /config, /auth/login
    GET/POST/DELETE /v1/kms/secrets[/+]
  lux/kms (the standalone binary) registers ZERO /api/ routes in Go; the
    only /api/v3 strings live in a vendored SPA under cmd/kms/web/assets,
    JS calling an API nobody serves.

So rewriting /api/v3/secrets/raw to /v1/kms/secrets/raw would have
fabricated a surface: probed live, /v1/kms/secrets/raw and
/v1/kms/secrets/zzz-not-real both return 403, i.e. secrets/* is a wildcard
behind an auth wall and "raw" is not demonstrated to exist. A doc that says
nothing beats a doc that 404s -- so the mirror is deleted, not translated.

549 files -> 7, and both meta.json nav files pruned to pages that exist.
This also retires app.kms.hanzo.ai, an NXDOMAIN host the mirror cited 351
times.

Two edits here look like damage and are not; both verified against source:
  - base-docs k8s probe /api/health -> /healthz is CORRECT. base
    apis/health.go:14 binds /healthz at root ("platform standard"), with
    /health only under the API group.
  - the ported ingress docs /api -> /v1/ingress is CORRECT. hanzoai/ingress
    is our Traefik fork and it renamed the prefix: pkg/api/handler.go:94-120
    serves /v1/ingress/rawdata, /overview, /entrypoints, ...

Co-authored-by: Hanzo Dev <[email protected]>
2026-08-05 15:07:33 -07:00
..