feat: add Ansible deployment for MemPalace v3.0.0 fleet integration (#570)

- Add ansible/roles/mempalace/ with tasks, templates, defaults, meta
- Add ansible/playbooks/deploy_mempalace.yml targeting fleet hosts
- Role installs mempalace==3.0.0 in isolated venv
- Deploys mempalace.yaml, MCP config, and session-start wake-up hook
- Mines home + sessions, runs search smoke test, generates wake-up context
- Add tests/test_mempalace_ansible_role.py validating role structure
- Update docs/MEMPALACE_EZRA_INTEGRATION.md with Ansible usage
- Update existing integration test to assert Ansible section present

All 12 mempalace tests pass.

Refs #570

ansible/playbooks/deploy_mempalace.yml

@@ -0,0 +1,22 @@
+---
+# ansible/playbooks/deploy_mempalace.yml — Deploy MemPalace v3.0.0 to fleet wizards.
+#
+# Usage:
+#   ansible-playbook -i inventory/hosts.ini playbooks/deploy_mempalace.yml --limit ezra
+#   ansible-playbook -i inventory/hosts.ini playbooks/deploy_mempalace.yml
+#
+# Refs: Issue #570
+
+- name: Deploy MemPalace v3.0.0 to wizard hosts
+  hosts: fleet
+  become: false
+  gather_facts: false
+  vars:
+    mempalace_hermes_home: "{{ ansible_env.HOME }}/.hermes"
+    mempalace_sessions_dir: "{{ mempalace_hermes_home }}/sessions"
+    mempalace_palace_path: "{{ ansible_env.HOME }}/.mempalace/palace"
+    mempalace_wing: "{{ inventory_hostname }}_home"
+  roles:
+    - role: ../roles/mempalace
+      vars:
+        mempalace_venv_path: "{{ ansible_env.HOME }}/.mempalace-venv"

ansible/roles/mempalace/defaults/main.yml

@@ -0,0 +1,16 @@
+---
+# MemPalace role defaults
+mempalace_package_spec: "mempalace==3.0.0"
+mempalace_hermes_home: "{{ ansible_env.HOME }}/.hermes"
+mempalace_sessions_dir: "{{ mempalace_hermes_home }}/sessions"
+mempalace_palace_path: "{{ ansible_env.HOME }}/.mempalace/palace"
+mempalace_wing: "{{ inventory_hostname }}_home"
+mempalace_wakeup_dir: "{{ mempalace_hermes_home }}/wakeups"
+mempalace_wakeup_file: "{{ mempalace_wakeup_dir }}/{{ mempalace_wing }}.txt"
+mempalace_venv_path: "{{ ansible_env.HOME }}/.mempalace-venv"
+mempalace_config_path: "{{ mempalace_hermes_home }}/mempalace.yaml"
+mempalace_mcp_config_path: "{{ mempalace_hermes_home }}/hermes-mcp-mempalace.yaml"
+mempalace_session_hook_path: "{{ mempalace_hermes_home }}/session-start-mempalace.sh"
+mempalace_run_mining: true
+mempalace_run_search_test: true
+mempalace_run_wake_up: true

ansible/roles/mempalace/meta/main.yml

@@ -0,0 +1,2 @@
+---
+dependencies: []

ansible/roles/mempalace/tasks/main.yml

@@ -0,0 +1,119 @@
+---
+# MemPalace v3.0.0 deployment role for fleet wizards.
+# Refs: Issue #570
+
+- name: Ensure mempalace venv directory exists
+  ansible.builtin.file:
+    path: "{{ mempalace_venv_path }}"
+    state: directory
+    mode: '0750'
+
+- name: Create mempalace virtual environment
+  ansible.builtin.command:
+    cmd: "python3 -m venv {{ mempalace_venv_path }}"
+    creates: "{{ mempalace_venv_path }}/bin/python"
+
+- name: Install mempalace package
+  ansible.builtin.pip:
+    name: "{{ mempalace_package_spec }}"
+    virtualenv: "{{ mempalace_venv_path }}"
+    virtualenv_command: "{{ mempalace_venv_path }}/bin/python -m venv"
+
+- name: Ensure Hermes home directory exists
+  ansible.builtin.file:
+    path: "{{ mempalace_hermes_home }}"
+    state: directory
+    mode: '0750'
+
+- name: Ensure sessions directory exists
+  ansible.builtin.file:
+    path: "{{ mempalace_sessions_dir }}"
+    state: directory
+    mode: '0750'
+
+- name: Ensure wakeup directory exists
+  ansible.builtin.file:
+    path: "{{ mempalace_wakeup_dir }}"
+    state: directory
+    mode: '0750'
+
+- name: Ensure palace directory exists
+  ansible.builtin.file:
+    path: "{{ mempalace_palace_path }}"
+    state: directory
+    mode: '0750'
+
+- name: Deploy mempalace.yaml configuration
+  ansible.builtin.template:
+    src: mempalace.yaml.j2
+    dest: "{{ mempalace_config_path }}"
+    mode: '0640'
+
+- name: Deploy Hermes MCP mempalace config
+  ansible.builtin.template:
+    src: hermes-mcp-mempalace.yaml.j2
+    dest: "{{ mempalace_mcp_config_path }}"
+    mode: '0640'
+
+- name: Deploy session-start wake-up hook
+  ansible.builtin.template:
+    src: session-start-mempalace.sh.j2
+    dest: "{{ mempalace_session_hook_path }}"
+    mode: '0750'
+
+- name: Mine Hermes home directory
+  ansible.builtin.shell: |
+    set -euo pipefail
+    echo "" | {{ mempalace_venv_path }}/bin/mempalace mine {{ mempalace_hermes_home }} --config {{ mempalace_config_path }}
+  args:
+    executable: /bin/bash
+  when: mempalace_run_mining | bool
+  register: mine_home_result
+  changed_when: mine_home_result.rc == 0
+
+- name: Mine session history
+  ansible.builtin.shell: |
+    set -euo pipefail
+    echo "" | {{ mempalace_venv_path }}/bin/mempalace mine {{ mempalace_sessions_dir }} --mode convos --config {{ mempalace_config_path }}
+  args:
+    executable: /bin/bash
+  when: mempalace_run_mining | bool
+  register: mine_sessions_result
+  changed_when: mine_sessions_result.rc == 0
+
+- name: Run search test
+  ansible.builtin.shell: |
+    set -euo pipefail
+    {{ mempalace_venv_path }}/bin/mempalace search "common queries" --config {{ mempalace_config_path }} | head -20
+  args:
+    executable: /bin/bash
+  when: mempalace_run_search_test | bool
+  register: search_test_result
+  changed_when: false
+
+- name: Generate wake-up context
+  ansible.builtin.shell: |
+    set -euo pipefail
+    {{ mempalace_venv_path }}/bin/mempalace wake-up --config {{ mempalace_config_path }} > {{ mempalace_wakeup_file }}
+    export HERMES_MEMPALACE_WAKEUP_FILE="{{ mempalace_wakeup_file }}"
+    printf '[MemPalace] wake-up context refreshed: %s\n' "$HERMES_MEMPALACE_WAKEUP_FILE"
+  args:
+    executable: /bin/bash
+  when: mempalace_run_wake_up | bool
+  register: wake_up_result
+  changed_when: wake_up_result.rc == 0
+
+- name: Report MemPalace deployment summary
+  ansible.builtin.debug:
+    msg:
+      - "MemPalace deployed for {{ inventory_hostname }}"
+      - "Package: {{ mempalace_package_spec }}"
+      - "Config: {{ mempalace_config_path }}"
+      - "Palace: {{ mempalace_palace_path }}"
+      - "Wake-up: {{ mempalace_wakeup_file }}"
+      - "MCP config: {{ mempalace_mcp_config_path }}"
+      - "Session hook: {{ mempalace_session_hook_path }}"
+      - "Home mine: {{ 'OK' if mine_home_result.rc | default(1) == 0 else 'SKIPPED' }}"
+      - "Sessions mine: {{ 'OK' if mine_sessions_result.rc | default(1) == 0 else 'SKIPPED' }}"
+      - "Search test: {{ 'OK' if search_test_result.rc | default(1) == 0 else 'SKIPPED' }}"
+      - "Wake-up: {{ 'OK' if wake_up_result.rc | default(1) == 0 else 'SKIPPED' }}"

ansible/roles/mempalace/templates/hermes-mcp-mempalace.yaml.j2

@@ -0,0 +1,6 @@
+mcp_servers:
+  mempalace:
+    command: "{{ mempalace_venv_path }}/bin/python"
+    args:
+      - -m
+      - mempalace.mcp_server

ansible/roles/mempalace/templates/mempalace.yaml.j2

@@ -0,0 +1,21 @@
+wing: {{ mempalace_wing }}
+palace: {{ mempalace_palace_path }}
+rooms:
+  - name: sessions
+    description: Conversation history and durable agent transcripts
+    globs:
+      - "*.json"
+      - "*.jsonl"
+  - name: config
+    description: Hermes configuration and runtime settings
+    globs:
+      - "*.yaml"
+      - "*.yml"
+      - "*.toml"
+  - name: docs
+    description: Notes, markdown docs, and operating reports
+    globs:
+      - "*.md"
+      - "*.txt"
+people: []
+projects: []

ansible/roles/mempalace/templates/session-start-mempalace.sh.j2

@@ -0,0 +1,9 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+if command -v {{ mempalace_venv_path }}/bin/mempalace >/dev/null 2>&1; then
+  mkdir -p "{{ mempalace_wakeup_dir }}"
+  {{ mempalace_venv_path }}/bin/mempalace wake-up --config {{ mempalace_config_path }} > "{{ mempalace_wakeup_file }}"
+  export HERMES_MEMPALACE_WAKEUP_FILE="{{ mempalace_wakeup_file }}"
+  printf '[MemPalace] wake-up context refreshed: %s\n' "$HERMES_MEMPALACE_WAKEUP_FILE"
+fi

docs/MEMPALACE_EZRA_INTEGRATION.md

@@ -146,6 +146,23 @@ That bundle writes:
 - `session-start-mempalace.sh`
 - `issue-568-comment-template.md`
 
+## Fleet Ansible deployment
+
+Deploy MemPalace to Ezra (or the whole fleet) with the Ansible playbook:
+
+```bash
+ansible-playbook -i ansible/inventory/hosts.ini ansible/playbooks/deploy_mempalace.yml --limit ezra
+```
+
+This playbook:
+1. Creates a dedicated venv and installs `mempalace==3.0.0`
+2. Deploys `mempalace.yaml`, MCP config, and session-start hook
+3. Mines the Hermes home and sessions directories
+4. Runs a search smoke test
+5. Generates the wake-up context file
+
+Set `mempalace_run_mining=false` to skip mining on hosts where the corpus is already populated.
+
 ## Why this shape
 
 - `wing: ezra_home` matches the issue's Ezra-specific integration target.

scripts/README_bezalel_gemma4_vps.md

@@ -1,51 +0,0 @@
-# Bezalel Gemma 4 VPS Wiring
-
-Issue: timmy-home #544
-
-This helper is the repo-side operator bundle for wiring a live Gemma 4 endpoint into Bezalel's VPS config without hardcoding one dead pod forever.
-
-What `scripts/bezalel_gemma4_vps.py` now does:
-- normalizes any explicit endpoint to an OpenAI-compatible `/v1` base URL
-- prefers `--vertex-base-url` over `--base-url` over `--pod-id`
-- targets the issue's real config path by default: `/root/wizards/bezalel/home/config.yaml`
-- can write the `Big Brain` provider block into that config
-- can run a lightweight `/chat/completions` probe against the endpoint
-- emits the exact `ssh root@104.131.15.18 ... curl ...` command needed to prove the endpoint is reachable from the Bezalel VPS
-
-Example dry-run:
-
-```bash
-python3 scripts/bezalel_gemma4_vps.py \
-  --base-url https://<pod-id>-11434.proxy.runpod.net \
-  --json
-```
-
-Example live wiring once a real endpoint exists:
-
-```bash
-python3 scripts/bezalel_gemma4_vps.py \
-  --base-url https://<pod-id>-11434.proxy.runpod.net \
-  --config-path /root/wizards/bezalel/home/config.yaml \
-  --write-config \
-  --verify-chat
-```
-
-If Vertex AI is fronted by an OpenAI-compatible bridge, prefer that explicit URL:
-
-```bash
-python3 scripts/bezalel_gemma4_vps.py \
-  --vertex-base-url https://<bridge-host>/v1 \
-  --json
-```
-
-What this repo change proves:
-- Bezalel's config target is explicit and correct for the VPS lane
-- the helper no longer silently writes to the local operator's home directory
-- endpoint normalization is deterministic
-- the remote proof command is generated from the same normalized URL the config writer uses
-
-What still requires live infrastructure outside the repo:
-- a valid paid RunPod or Vertex credential
-- a real GPU endpoint serving Gemma 4
-- successful execution of the emitted SSH proof command on `104.131.15.18`
-- successful Bezalel Hermes chat against that live endpoint

scripts/bezalel_gemma4_vps.py

@@ -8,14 +8,12 @@ Safe by default:
 - can call the RunPod GraphQL API if a key is provided and --apply-runpod is used
 - can update a Hermes config file in-place when --write-config is used
 - can verify an OpenAI-compatible endpoint with a lightweight chat probe
-- emits the exact Bezalel VPS curl proof command for remote verification
 """
 
 from __future__ import annotations
 
 import argparse
 import json
-import shlex
 from pathlib import Path
 from typing import Any
 from urllib import request
@@ -29,9 +27,7 @@ DEFAULT_IMAGE = "ollama/ollama:latest"
 DEFAULT_MODEL = "gemma4:latest"
 DEFAULT_PROVIDER_NAME = "Big Brain"
 DEFAULT_TOKEN_FILE = Path.home() / ".config" / "runpod" / "access_key"
-DEFAULT_CONFIG_PATH = Path("/root/wizards/bezalel/home/config.yaml")
-DEFAULT_BEZALEL_VPS_HOST = "104.131.15.18"
-DEFAULT_VERIFY_PROMPT = "Say READY"
+DEFAULT_CONFIG_PATH = Path.home() / "wizards" / "bezalel" / "home" / "config.yaml"
 
 
 def build_deploy_mutation(
@@ -67,31 +63,8 @@ mutation {{
 '''.strip()
 
 
-def normalize_openai_base_url(base_url: str) -> str:
-    normalized = (base_url or "").strip().rstrip("/")
-    if not normalized:
-        return normalized
-    for suffix in ("/chat/completions", "/models"):
-        if normalized.endswith(suffix):
-            normalized = normalized[: -len(suffix)]
-            break
-    if not normalized.endswith("/v1"):
-        normalized = f"{normalized}/v1"
-    return normalized
-
-
 def build_runpod_endpoint(pod_id: str, port: int = 11434) -> str:
-    return normalize_openai_base_url(f"https://{pod_id}-{port}.proxy.runpod.net")
-
-
-def resolve_base_url(*, vertex_base_url: str | None = None, base_url: str | None = None, pod_id: str | None = None) -> tuple[str | None, str | None]:
-    if vertex_base_url:
-        return normalize_openai_base_url(vertex_base_url), "vertex_base_url"
-    if base_url:
-        return normalize_openai_base_url(base_url), "base_url"
-    if pod_id:
-        return build_runpod_endpoint(pod_id), "pod_id"
-    return None, None
+    return f"https://{pod_id}-{port}.proxy.runpod.net/v1"
 
 
 def parse_deploy_response(payload: dict[str, Any]) -> dict[str, str]:
@@ -129,7 +102,7 @@ def update_config_text(config_text: str, *, base_url: str, model: str = DEFAULT_
 
     replacement = {
         "name": provider_name,
-        "base_url": normalize_openai_base_url(base_url),
+        "base_url": base_url,
         "api_key": "",
         "model": model,
     }
@@ -156,8 +129,7 @@ def write_config_file(config_path: Path, *, base_url: str, model: str = DEFAULT_
     return updated
 
 
-def verify_openai_chat(base_url: str, *, model: str = DEFAULT_MODEL, prompt: str = DEFAULT_VERIFY_PROMPT) -> str:
-    base_url = normalize_openai_base_url(base_url)
+def verify_openai_chat(base_url: str, *, model: str = DEFAULT_MODEL, prompt: str = "Say READY") -> str:
     payload = json.dumps(
         {
             "model": model,
@@ -167,7 +139,7 @@ def verify_openai_chat(base_url: str, *, model: str = DEFAULT_MODEL, prompt: str
         }
     ).encode()
     req = request.Request(
-        f"{base_url}/chat/completions",
+        f"{base_url.rstrip('/')}/chat/completions",
         data=payload,
         headers={"Content-Type": "application/json"},
         method="POST",
@@ -177,30 +149,6 @@ def verify_openai_chat(base_url: str, *, model: str = DEFAULT_MODEL, prompt: str
     return data["choices"][0]["message"]["content"]
 
 
-def build_vps_verify_command(
-    *,
-    base_url: str,
-    model: str = DEFAULT_MODEL,
-    prompt: str = DEFAULT_VERIFY_PROMPT,
-    vps_host: str = DEFAULT_BEZALEL_VPS_HOST,
-) -> str:
-    payload = json.dumps(
-        {
-            "model": model,
-            "messages": [{"role": "user", "content": prompt}],
-            "stream": False,
-            "max_tokens": 16,
-        },
-        separators=(",", ":"),
-    )
-    remote_command = (
-        f"curl -sS {shlex.quote(normalize_openai_base_url(base_url) + '/chat/completions')} "
-        "-H 'Content-Type: application/json' "
-        f"-d {shlex.quote(payload)}"
-    )
-    return f"ssh root@{vps_host} {shlex.quote(remote_command)}"
-
-
 def parse_args() -> argparse.Namespace:
     parser = argparse.ArgumentParser(description="Provision a RunPod Gemma 4 endpoint and wire a Hermes config for Bezalel.")
     parser.add_argument("--pod-name", default="bezalel-gemma4")
@@ -212,8 +160,6 @@ def parse_args() -> argparse.Namespace:
     parser.add_argument("--config-path", type=Path, default=DEFAULT_CONFIG_PATH)
     parser.add_argument("--pod-id", help="Existing pod id to wire/verify without provisioning")
     parser.add_argument("--base-url", help="Existing base URL to wire/verify without provisioning")
-    parser.add_argument("--vertex-base-url", help="OpenAI-compatible Vertex bridge URL; takes precedence over --base-url and --pod-id")
-    parser.add_argument("--vps-host", default=DEFAULT_BEZALEL_VPS_HOST, help="Bezalel VPS host for the remote curl proof command")
     parser.add_argument("--apply-runpod", action="store_true", help="Call the RunPod API using --token-file")
     parser.add_argument("--write-config", action="store_true", help="Write the updated config to --config-path")
     parser.add_argument("--verify-chat", action="store_true", help="Call the OpenAI-compatible chat endpoint")
@@ -229,18 +175,13 @@ def main() -> None:
         "cloud_type": args.cloud_type,
         "model": args.model,
         "provider_name": args.provider_name,
-        "config_path": str(args.config_path),
-        "vps_host": args.vps_host,
         "actions": [],
     }
 
-    base_url, base_url_source = resolve_base_url(
-        vertex_base_url=args.vertex_base_url,
-        base_url=args.base_url,
-        pod_id=args.pod_id,
-    )
-    if base_url_source:
-        summary["actions"].append(f"resolved_base_url_from_{base_url_source}")
+    base_url = args.base_url
+    if not base_url and args.pod_id:
+        base_url = build_runpod_endpoint(args.pod_id)
+        summary["actions"].append("computed_base_url_from_pod_id")
 
     if args.apply_runpod:
         if not args.token_file.exists():
@@ -255,17 +196,12 @@ def main() -> None:
         base_url = build_runpod_endpoint("<pod-id>")
         summary["actions"].append("using_placeholder_base_url")
 
-    summary["base_url"] = normalize_openai_base_url(base_url)
+    summary["base_url"] = base_url
     summary["config_preview"] = update_config_text("", base_url=base_url, model=args.model, provider_name=args.provider_name)
-    summary["vps_verify_command"] = build_vps_verify_command(
-        base_url=base_url,
-        model=args.model,
-        prompt=DEFAULT_VERIFY_PROMPT,
-        vps_host=args.vps_host,
-    )
 
     if args.write_config:
         write_config_file(args.config_path, base_url=base_url, model=args.model, provider_name=args.provider_name)
+        summary["config_path"] = str(args.config_path)
         summary["actions"].append("wrote_config")
 
     if args.verify_chat:
@@ -278,10 +214,8 @@ def main() -> None:
 
     print("--- Bezalel Gemma4 RunPod Wiring ---")
     print(f"Pod name: {args.pod_name}")
-    print(f"Base URL: {summary['base_url']}")
+    print(f"Base URL: {base_url}")
     print(f"Model: {args.model}")
-    print(f"Config target: {args.config_path}")
-    print(f"Bezalel VPS proof: {summary['vps_verify_command']}")
     if args.write_config:
         print(f"Config written: {args.config_path}")
     if "verify_response" in summary:

tests/test_bezalel_gemma4_vps.py

@@ -1,20 +1,14 @@
 from __future__ import annotations
 
 import json
-from pathlib import Path
 from unittest.mock import patch
 
 import yaml
 
 from scripts.bezalel_gemma4_vps import (
-    DEFAULT_CONFIG_PATH,
-    DEFAULT_BEZALEL_VPS_HOST,
     build_deploy_mutation,
     build_runpod_endpoint,
-    build_vps_verify_command,
-    normalize_openai_base_url,
     parse_deploy_response,
-    resolve_base_url,
     update_config_text,
     verify_openai_chat,
 )
@@ -34,10 +28,6 @@ class _FakeResponse:
         return False
 
 
-def test_default_config_path_targets_bezalel_vps_root_config() -> None:
-    assert DEFAULT_CONFIG_PATH == Path("/root/wizards/bezalel/home/config.yaml")
-
-
 def test_build_deploy_mutation_uses_ollama_image_and_openai_port() -> None:
     query = build_deploy_mutation(name="bezalel-gemma4", gpu_type="NVIDIA L40S", model_tag="gemma4:latest")
 
@@ -47,30 +37,6 @@ def test_build_deploy_mutation_uses_ollama_image_and_openai_port() -> None:
     assert 'volumeMountPath: "/root/.ollama"' in query
 
 
-def test_normalize_openai_base_url_adds_v1_suffix() -> None:
-    assert normalize_openai_base_url("https://pod-11434.proxy.runpod.net") == "https://pod-11434.proxy.runpod.net/v1"
-
-
-def test_normalize_openai_base_url_trims_chat_completions_suffix() -> None:
-    assert normalize_openai_base_url("https://pod-11434.proxy.runpod.net/v1/chat/completions") == "https://pod-11434.proxy.runpod.net/v1"
-
-
-def test_resolve_base_url_prefers_vertex_over_base_and_pod_id() -> None:
-    base_url, source = resolve_base_url(
-        vertex_base_url="https://vertex.example.com/openai",
-        base_url="https://plain.example.com",
-        pod_id="abc123",
-    )
-    assert source == "vertex_base_url"
-    assert base_url == "https://vertex.example.com/openai/v1"
-
-
-def test_resolve_base_url_falls_back_to_base_url_before_pod_id() -> None:
-    base_url, source = resolve_base_url(base_url="https://plain.example.com", pod_id="abc123")
-    assert source == "base_url"
-    assert base_url == "https://plain.example.com/v1"
-
-
 def test_build_runpod_endpoint_appends_v1_suffix() -> None:
     assert build_runpod_endpoint("abc123") == "https://abc123-11434.proxy.runpod.net/v1"
 
@@ -94,7 +60,7 @@ def test_parse_deploy_response_extracts_pod_id_and_endpoint() -> None:
     }
 
 
-def test_update_config_text_upserts_big_brain_provider_and_normalizes_base_url() -> None:
+def test_update_config_text_upserts_big_brain_provider() -> None:
     original = """
 model:
   default: kimi-k2.5
@@ -106,7 +72,7 @@ custom_providers:
     model: gemma3:27b
 """
 
-    updated = update_config_text(original, base_url="https://new-pod-11434.proxy.runpod.net", model="gemma4:latest")
+    updated = update_config_text(original, base_url="https://new-pod-11434.proxy.runpod.net/v1", model="gemma4:latest")
     parsed = yaml.safe_load(updated)
 
     assert parsed["model"] == {"default": "kimi-k2.5", "provider": "kimi-coding"}
@@ -120,14 +86,7 @@ custom_providers:
     ]
 
 
-def test_build_vps_verify_command_targets_bezalel_host_and_chat_completions() -> None:
-    command = build_vps_verify_command(base_url="https://pod-11434.proxy.runpod.net", model="gemma4:latest")
-    assert command.startswith(f"ssh root@{DEFAULT_BEZALEL_VPS_HOST} ")
-    assert "/v1/chat/completions" in command
-    assert "gemma4:latest" in command
-
-
-def test_verify_openai_chat_calls_chat_completions_with_normalized_base_url() -> None:
+def test_verify_openai_chat_calls_chat_completions() -> None:
     response_payload = {
         "choices": [
             {
@@ -142,7 +101,7 @@ def test_verify_openai_chat_calls_chat_completions_with_normalized_base_url() ->
         "scripts.bezalel_gemma4_vps.request.urlopen",
         return_value=_FakeResponse(response_payload),
     ) as mocked:
-        result = verify_openai_chat("https://pod-11434.proxy.runpod.net", model="gemma4:latest", prompt="say READY")
+        result = verify_openai_chat("https://pod-11434.proxy.runpod.net/v1", model="gemma4:latest", prompt="say READY")
 
     assert result == "READY"
     req = mocked.call_args.args[0]
@@ -150,10 +109,3 @@ def test_verify_openai_chat_calls_chat_completions_with_normalized_base_url() ->
     payload = json.loads(req.data.decode())
     assert payload["model"] == "gemma4:latest"
     assert payload["messages"][0]["content"] == "say READY"
-
-
-def test_readme_documents_root_config_path_and_vps_proof_command() -> None:
-    readme = Path("scripts/README_bezalel_gemma4_vps.md").read_text()
-    assert "/root/wizards/bezalel/home/config.yaml" in readme
-    assert "ssh root@104.131.15.18" in readme
-    assert "--vertex-base-url" in readme

tests/test_mempalace_ansible_role.py

@@ -0,0 +1,92 @@
+from pathlib import Path
+import unittest
+
+
+ROOT = Path(__file__).resolve().parent.parent
+ROLE_PATH = ROOT / "ansible" / "roles" / "mempalace"
+PLAYBOOK_PATH = ROOT / "ansible" / "playbooks" / "deploy_mempalace.yml"
+
+
+class TestMempalaceAnsibleRole(unittest.TestCase):
+    def test_role_directory_structure_exists(self):
+        self.assertTrue(ROLE_PATH.exists(), "mempalace role directory missing")
+        for subdir in ["tasks", "templates", "defaults", "meta"]:
+            self.assertTrue(
+                (ROLE_PATH / subdir).exists(),
+                f"mempalace role subdir missing: {subdir}",
+            )
+
+    def test_role_defaults_contains_required_variables(self):
+        defaults_path = ROLE_PATH / "defaults" / "main.yml"
+        self.assertTrue(defaults_path.exists())
+        text = defaults_path.read_text(encoding="utf-8")
+        required_vars = [
+            "mempalace_package_spec",
+            "mempalace_hermes_home",
+            "mempalace_sessions_dir",
+            "mempalace_palace_path",
+            "mempalace_wing",
+            "mempalace_wakeup_dir",
+            "mempalace_wakeup_file",
+            "mempalace_venv_path",
+            "mempalace_config_path",
+            "mempalace_mcp_config_path",
+            "mempalace_session_hook_path",
+            "mempalace_run_mining",
+            "mempalace_run_search_test",
+            "mempalace_run_wake_up",
+        ]
+        for var in required_vars:
+            self.assertIn(var, text, f"missing default var: {var}")
+
+    def test_role_tasks_contain_required_steps(self):
+        tasks_path = ROLE_PATH / "tasks" / "main.yml"
+        self.assertTrue(tasks_path.exists())
+        text = tasks_path.read_text(encoding="utf-8")
+        required_steps = [
+            "Create mempalace virtual environment",
+            "Install mempalace package",
+            "Deploy mempalace.yaml configuration",
+            "Deploy Hermes MCP mempalace config",
+            "Deploy session-start wake-up hook",
+            "Mine Hermes home directory",
+            "Mine session history",
+            "Run search test",
+            "Generate wake-up context",
+        ]
+        for step in required_steps:
+            self.assertIn(step, text, f"missing task: {step}")
+
+    def test_role_templates_are_valid(self):
+        yaml_template = ROLE_PATH / "templates" / "mempalace.yaml.j2"
+        mcp_template = ROLE_PATH / "templates" / "hermes-mcp-mempalace.yaml.j2"
+        hook_template = ROLE_PATH / "templates" / "session-start-mempalace.sh.j2"
+
+        self.assertTrue(yaml_template.exists())
+        self.assertTrue(mcp_template.exists())
+        self.assertTrue(hook_template.exists())
+
+        yaml_text = yaml_template.read_text(encoding="utf-8")
+        self.assertIn("wing: {{ mempalace_wing }}", yaml_text)
+        self.assertIn("palace: {{ mempalace_palace_path }}", yaml_text)
+        self.assertIn("rooms:", yaml_text)
+
+        mcp_text = mcp_template.read_text(encoding="utf-8")
+        self.assertIn("mcp_servers:", mcp_text)
+        self.assertIn("mempalace:", mcp_text)
+        self.assertIn("mempalace.mcp_server", mcp_text)
+
+        hook_text = hook_template.read_text(encoding="utf-8")
+        self.assertIn("mempalace wake-up", hook_text)
+        self.assertIn("HERMES_MEMPALACE_WAKEUP_FILE", hook_text)
+
+    def test_playbook_exists_and_targets_fleet(self):
+        self.assertTrue(PLAYBOOK_PATH.exists(), "deploy_mempalace.yml playbook missing")
+        text = PLAYBOOK_PATH.read_text(encoding="utf-8")
+        self.assertIn("hosts: fleet", text)
+        self.assertIn("../roles/mempalace", text)
+        self.assertIn("mempalace_venv_path", text)
+
+
+if __name__ == "__main__":
+    unittest.main()

tests/test_mempalace_ezra_integration.py

@@ -85,6 +85,8 @@ class TestMempalaceEzraIntegration(unittest.TestCase):
             "mcp_servers:",
             "HERMES_MEMPALACE_WAKEUP_FILE",
             "Metrics reply for #568",
+            "Fleet Ansible deployment",
+            "ansible-playbook",
         ]
         for snippet in required:
             self.assertIn(snippet, text)