Merge fix/orchestrator-hub-cpu-cap into unify/skills-20261112

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

orchestrator/compose.yml

@@ -15,6 +15,7 @@ services:
     security_opt:
       - no-new-privileges:true
     mem_limit: 2g
+    cpus: 4
     pids_limit: 256
     healthcheck:
       interval: 30s

orchestrator/kvb_orchestrator/engines.py

@@ -20,7 +20,7 @@ from .skill_scripts import SAFE_PATH
 
 MODEL_NAME = re.compile(r"[A-Za-z0-9][A-Za-z0-9_.-]{0,127}")
 SPEAKER_LIMIT = 10000
-TTS_TIMEOUT = 60
+TTS_TIMEOUT = 120
 TTS_KEEP = 200
 STT_RATE = 16000
 STT_SECONDS = 120

tests/test_hub_speech.py

@@ -196,6 +196,13 @@ class TestHubSpeech(HubCase):
 
 
 class TestSpeechImage(unittest.TestCase):
+    def test_the_hub_is_capped_at_four_cpus_and_piper_gets_time_for_it(self):
+        compose = (HUB / "compose.yml").read_text(encoding="utf-8")
+        cpus = re.search(r"(?m)^ {4}cpus: ([0-9.]+)$", compose)
+        self.assertIsNotNone(cpus, "compose.yml sets no cpus limit for the hub")
+        self.assertLessEqual(float(cpus[1]), 4)
+        self.assertGreaterEqual(engines.TTS_TIMEOUT, 120)
+
     def test_every_directory_a_chmod_without_search_bit_creates_is_opened_again(self):
         text = (HUB / "Dockerfile").read_text(encoding="utf-8").replace("\\\n", " ")
         steps = [" ".join(step.split()) for step in text.splitlines() if step.strip() and not step.lstrip().startswith("#")]