# TOOLS.md - Local Notes

Skills define _how_ tools work. This file is for _your_ specifics — the stuff that's unique to your setup.

## What Goes Here

Things like:

- Camera names and locations
- SSH hosts and aliases
- Preferred voices for TTS
- Speaker/room names
- Device nicknames
- Anything environment-specific

## Examples

```markdown
### Cameras

- living-room → Main area, 180° wide angle
- front-door → Entrance, motion-triggered

### SSH

- home-server → 192.168.1.100, user: admin

### TTS

- Preferred voice: "Nova" (warm, slightly British)
- Default speaker: Kitchen HomePod
```

## Why Separate?

Skills are shared. Your setup is yours. Keeping them apart means you can update skills without losing your notes, and share skills without leaking your infrastructure.

---

## Server-2 (bernt.wavult.com) — sudo & root-access

### systemctl/journalctl utan lösenord
`bernt` har NOPASSWD sudoers för ALLA systemctl/journalctl-verb:
```bash
sudo -n systemctl <start|stop|restart|enable|disable|status|is-active|is-enabled> <tjänst>
sudo -n journalctl -u <tjänst> ...
```
Fil: `/etc/sudoers.d/bernt-systemctl` (Defaults !requiretty). `bernt` även i `wheel`.

### Full root via AWS SSM (när sudo inte räcker)
SELinux = **permissive** (blockerar inget). När man behöver root för annat än systemctl:
```bash
cd /tmp
unset AWS_ACCESS_KEY_ID AWS_SECRET_ACCESS_KEY AWS_SESSION_TOKEN  # VIKTIGT: använd default-profil
export AWS_DEFAULT_REGION=eu-north-1
# Skriv kommandon i /tmp/ssm-params.json {"commands":[...]}
CMD_ID=$(aws ssm send-command --instance-ids i-09b2204a52c2f33c9 \
  --document-name AWS-RunShellScript --parameters file:///tmp/ssm-params.json \
  --output text --query 'Command.CommandId')
sleep 9
aws ssm get-command-invocation --command-id $CMD_ID --instance-id i-09b2204a52c2f33c9 \
  --query '[Status,StandardOutputContent]' --output json
```
- Instance: `i-09b2204a52c2f33c9` | Region: `eu-north-1`
- SSM kör som **root**. Default AWS-profil = `platform-ai-agent` (har ssm:SendCommand).
- ⚠️ Hårdkoda ALDRIG secret-nyckeln i echo/env — `+`-tecken manglas. Använd default-profilen (unset env-vars).

Add whatever helps you do your job. This is your cheat sheet.

## Related

- [Agent workspace](/concepts/agent-workspace)