Help your agent solve problems faster.

docker desktop linux engine pipe not found error daemon unreachable bug

docker desktop linux engine pipe not found error daemon unreachable bug

Problem outcome: unknown

ModuleNotFoundError: No module named 'keycloak' (python-keycloak): install the right distribution

Fixes ModuleNotFoundError: No module named 'keycloak' when importing KeycloakOpenID or KeycloakAdmin in Python: the import name is keycloak but the PyPI distribution is python-keycloak (7.1.1, Python 3.10+), and a separate unrelated distribution named keycloak also exists. Covers python -m pip installs into the right …

EF Core optimistic concurrency: add a rowversion token with an additive migration

Shows how to add optimistic concurrency to an existing EF Core entity with a SQL Server rowversion column in one additive migration, deploy it expand-first, and handle DbUpdateConcurrencyException. Use when existing rows must keep working, old code must run against the new schema, and lost updates must stop. Not for P…

SonarQube connected mode error: Loading the projects from the server failed

Diagnoses SonarQube for IDE connected mode when a connection validates but loading projects or binding fails: reads the verbose log HTTP status first, then checks user-token type, Browse permission, exact server URL, proxy and TLS interception, and version compatibility. Use when you see Loading the projects from the …

pysaml2: ModuleNotFoundError: No module named 'saml2'

Fixes ModuleNotFoundError: No module named 'saml2' when code imports saml2 from pysaml2. Use when the import fails in a venv, Docker, CI, Jupyter, or under a web server, when pip says pysaml2 is already installed, when the install itself fails on system dependencies, or when a local file shadows the package. Not for p…

ModuleNotFoundError: No module named 'oauthlib' after pip install

Fixes ModuleNotFoundError: No module named 'oauthlib' when pip install already succeeded. Use when pip show lists oauthlib or requests-oauthlib but the import still fails in the running code, usually a pip and python interpreter mismatch, a pip versus pip3 split, or a no-deps install that dropped the transitive oauthl…

ModuleNotFoundError: No module named 'paramiko' after pip install

Fixes ModuleNotFoundError: No module named 'paramiko' when pip install paramiko already succeeded. Use when pip show lists paramiko but the import still fails, usually a pip and python interpreter or virtualenv mismatch. Installs with python -m pip into the exact interpreter that runs the code and verifies sys.executa…

ASP.NET Core named opaque API tokens hashed secrets revocation endpoint-specific authentication schemes prevent

Shows how to build named opaque API tokens in ASP.NET Core: issue a prefixed random token once, store only its hash, authenticate it in a dedicated scheme, scope and revoke it per endpoint, and add per-token rate limiting and usage aggregates. Use when replacing shared bearer secrets with revocable per-client tokens. …

Approval workflow immutable submitted revision optimistic concurrency transaction outbox notifications publish

Shows how to build an approval workflow in ASP.NET Core with EF Core where a submitted revision is an immutable snapshot, optimistic concurrency stops overwrites, and notifications are written to a transactional outbox in the same transaction as the submit and published afterwards. Use when approvers must approve exac…

Client side highlight.js lowlight untrusted code performance size limit no eval escaped React AST syntax highlighting

Shows how to highlight untrusted code in the browser with lowlight and highlight.js: cap input size before highlighting, register only needed languages instead of all grammars or auto detection, and render the returned hast AST as React elements so code text is escaped by React and no raw HTML string or eval is involv…

letsencrypt certificate renewal failed: certbot Challenge failed (unauthorized)

Diagnoses and fixes Certbot renewals that fail LetsEncrypt domain validation: reads the ACME error Type and Detail from a staging dry run, then fixes the matching path (HTTP-01 unauthorized 404 or 403, stale AAAA, DNS and CAA problems, expired DNS plugin credentials, timeouts, and rate limits) and verifies the server …

fastlane match failed "could not find a profile matching Runner" after certificate renewal

Rebuild the chain from the portal outward so the certificate, the profile created from it, and the identity the builder signs with are one matched set, then re archive instead of re uploading the same binary. Use when this exact failure blocks a named record, run, or build in fastlane. Not for a different error messag…

fastlane match failed "could not find a profile matching Runner" after certificate renewal

Rebuild the chain from the portal outward so the certificate, the profile created from it, and the identity the builder signs with are one matched set, then re archive instead of re uploading the same binary. Use when this exact failure blocks a named record, run, or build in fastlane. Not for a different error messag…

auth token expired mid-delivery run: agent failed with error 401 unauthorized

Fixes an agent run that fails with a 401 during the delivery run because its access token expired mid run, by refreshing credentials inside the run and retrying the failed step once. Use when early steps succeed and later steps return 401. Not for a run whose credentials were wrong from the first call, which is a conf…

bacula director failed "Authentication failed" backup job error

Fixes Bacula director Authentication failed errors by matching daemon names, shared passwords and ports across director, file daemon and storage daemon configs. Use when consoles or jobs fail authentication between Bacula daemons. Not for a user login failure to a web backup dashboard.

App Store Connect upload failed: "ITMS-90809 deprecated API usage" error how to fix

Fixes ITMS-90809 deprecated API usage in a mobile release pipeline by working through the specific checks and corrections for this failure. Use when this exact error or symptom blocks an archive, upload, review or rollout step. Not for unrelated build failures or for general release planning with no error present.

TypeError: Failed to fetch (JavaScript) - diagnose CORS, network, mixed content, and blocked requests

Diagnoses TypeError: Failed to fetch in browser JavaScript, where the caught error is intentionally generic and the real reason sits in the DevTools console and Network tab. Classifies CORS and failed preflight, unreachable or misaddressed server, DNS, mixed content, CSP connect-src blocks, and extension blocking, the…

tailscale logout node key - what logout expires and how to fully remove or re-register a node

Explains the tailscale logout node key behaviour: logout brings the node down and expires its node key, but a non-ephemeral device record and the local machine identity stay behind. Shows how to re-register with a renewed key, delete the device record so the hostname is freed, and wipe local state only when a fresh id…

npm warn EBADENGINE - the new dep requires a newer node - how to fix

Resolves npm warn EBADENGINE by aligning the node version with what the dependency requires. Use it when an upgrade pulls in a package whose engines field demands a newer node. Key trigger: EBADENGINE naming the package and the node range it needs. Not for engine warnings you have consciously accepted on a pinned olde…

agent mTLS origin test failed: presented the wrong client cert

Fixes a failed mTLS handshake against an origin server where the client presented the wrong client certificate. Shows how to capture exactly which cert the client sent, verify the cert/key pair matches, check the origin's acceptable-CA list, and point the test at the right files. Use when an mTLS test or agent probe f…

agent kv write during deploy raced the old bundle: stale reads for an hour

Diagnoses and fixes stale Cloudflare Workers KV reads after a KV write raced a deploy: reads the true stored value through the KV API, re-applies clobbered writes, bypasses the regional read cache, and serializes writes around rollouts. Use when a Worker or wrangler write issued during a deployment does not show up in…

GitLab "job failed (system failure)": runner infrastructure debugging

Debugs GitLab jobs failing with job failed (system failure), separating runner infrastructure faults from job misconfiguration. Reach for it when the failure message blames the system rather than your script.

ImportError: DLL load failed while importing _ssl" after upgrading a native python package on windows CI

Fixes ImportError: DLL load failed while importing _ssl on Windows CI after a native Python package upgrade. Use it when Python starts but importing ssl (or anything using TLS, like pip and requests) fails on a Windows runner. Key trigger: the interpreter's OpenSSL DLLs (libssl and libcrypto) are missing from the DLL …

bundle update failed: Bundler could not find compatible versions for gem \"rails\""

Resolves Bundler's could not find compatible versions for gem rails failure. Use it when bundle install or bundle update dies naming rails and listing the gems that pin it. Key trigger: the error output shows which gems constrain rails (for example a gem that requires rails below 7 while your Gemfile asks for rails 7)…

agent loop detected: bouncing between "compatibility_date too old" and "too new"

Breaks an agent out of bouncing compatibility_date between "too old" and "too new" errors. Use when an autonomous loop keeps changing the date and each change produces the opposite complaint. Trigger: consecutive passes show the date moving older then newer (or vice versa) with alternating "too old" / "too new" style …