monitoring: taler-monitoring www/inside/sanity/server/e2e scaffold

scripts/taler-monitoring/README.md

@@ -0,0 +1,95 @@
+# taler-monitoring
+
+Report for the **GOA** stack with clear severity tags and **per-area test IDs**:
+
+| Tag | Meaning |
+|-----|---------|
+| `[OK]` | check passed |
+| `[INFO]` | inside status (container, ports, log noise) |
+| `[WARN]` | degraded but maybe not fatal |
+| `[ERROR]` | component problem |
+| `[BLOCKER]` | **withdraw/pay path cannot complete** because of this |
+
+IDs: **`www-001`**, **`inside-001`**, **`versions-001`**, **`sanity-001`**, **`server-001`**, **`e2e-001`** …  
+Catalog: **[TESTS.md](./TESTS.md)**.
+
+```text
+[OK]    www-001  exchange /config https://exchange…/config
+[BLOCKER] e2e-015  prereq: merchant HTTP 502
+```
+
+End of each phase: totals + list of **BLOCKERS** and **ERRORS**.
+
+## Commands
+
+```bash
+# Local GOA stack (may use SSH for inside/e2e)
+./taler-monitoring.sh              # urls + inside + versions + e2e
+./taler-monitoring.sh inside       # containers on koopa
+./taler-monitoring.sh versions     # deb.taler.net + package versions vs trixie
+./taler-monitoring.sh sanity
+./taler-monitoring.sh e2e
+
+# Other domains — public HTTPS only, never SSH
+./taler-monitoring.sh -d taler.net
+./taler-monitoring.sh --domain taler-ops.ch
+./taler-monitoring.sh -d demo.taler.net urls
+./taler-monitoring.sh taler.net    # bare domain = same as -d
+```
+
+| Domain | Bank | Exchange | Merchant | Currency |
+|--------|------|----------|----------|----------|
+| `hacktivism.ch` (default) | bank.hacktivism.ch | exchange.hacktivism.ch | taler.hacktivism.ch | GOA |
+| `taler.net` / `demo.taler.net` | bank.demo.taler.net | exchange.demo.taler.net | backend.demo.taler.net | KUDOS |
+| `taler-ops.ch` | bank.* (probe) | exchange.taler-ops.ch | backend.* (probe) | CHF |
+| other | bank.DOMAIN | exchange.DOMAIN | backend/taler/merchant (probe) | any |
+
+**SSH only for koopa** (`hacktivism.ch` / `-d koopa`).
+
+Other domains: never SSH. Optional **e2e** aborts cleanly on login/KYC.
+
+### E2E amounts (variable)
+
+| | Local (koopa) | Remote |
+|--|---------------|--------|
+| **ATM withdraw** | 20 · 50 · 100 · 200 | 10 · 20 · 50 |
+| **Pay ladder** | 0.01 … 10 | 0.01 … 1 |
+
+```bash
+./taler-monitoring.sh e2e
+./taler-monitoring.sh -d taler.net urls e2e
+# customize:
+E2E_WITHDRAW_VALUES="20 50 100" E2E_PAY_VALUES="0.05 1 5" ./taler-monitoring.sh e2e
+E2E_VARIABLE=0 WITHDRAW_AMT=GOA:50 PAY_AMT=GOA:1 ./taler-monitoring.sh e2e   # single fixed
+# remote secrets:
+#   E2E_BANK_ADMIN_PASS=…  E2E_MERCHANT_TOKEN=…
+```
+
+## Phases
+
+| Phase | What |
+|-------|------|
+| **inside** | SSH koopa: processes, postgres, local /config,/keys, wirewatch, recent log ERRORs |
+| **versions** | `deb.taler.net` reachable (InRelease/Packages/pool `.deb`); containers can reach it + have apt source; installed Taler packages vs **trixie** |
+| **sanity** | bank · exchange · merchant sections (public + server) |
+| **e2e** | account → credit → withdraw → wallet → confirm → order → pay |
+
+```bash
+# package suite (default trixie on deb.taler.net)
+TALER_APT_SUITE=trixie ./taler-monitoring.sh versions
+TALER_PKG_BEHIND=error ./taler-monitoring.sh versions   # any behind = ERROR
+```
+
+E2E maps failures to blockers, e.g.:
+
+- `bank-confirm HTTP 409` → wallet did not select exchange  
+- `no GOA balance` → wirewatch / transfer  
+- `create order failed` → merchant auth/instance  
+- `Alarm clock` during pay → usually missing `handle-uri --yes` or wrong pay URI (must be `…/instances/{inst}/{oid}/?c={token}` from merchant `taler_pay_uri`)
+- `insufficient balance` → withdraw incomplete  
+
+## Needs
+
+- SSH `koopa` (inside/sanity server bits)
+- secrets under `koopa-admin-secrets/...` for e2e
+- `taler-wallet-cli` for e2e