feat(orchestrator): rename kvb-hub to Agent Orchestrator with the phase 2 surface

Surface (requirement 001 phase 2): navigation Stream (Inbox, Regeln) / Agents / Artifacts with keys 1-3 and hash routes (#graph and #tree redirect), header with title, command palette and settings only, server-side badges (unsnoozed inbox, beats within 900 s, open jobs), a Mayday banner with "aufheben", four stream chips with agent:/art:/seit: search, Filter and time menus, the inbox in main, an agents toolbar (Funk an alle with Newsletter, Broadcast, Pan-Pan, Security, Mayday; Priorität; Tag/Nacht), Post or Call in the agent panel, Ambiente in the settings and read-aloud over the seven classes with Mayday locked.

Rename (decision 9): hub/ is orchestrator/, the package kvb_orchestrator, the unit kvb-orchestrator-runner.service, scripts/orchestrator.sh, environment KVB_ORCHESTRATOR_*, make targets orchestrator-*, the MCP server, image and compose project kvb-orchestrator, the guard header X-Kvb-Orchestrator and the message marker [kvb-orchestrator msg <id>]. install runs migrate first: it stops the old container, removes its image and code, moves state, approvals and pinned keys, swaps the MCP registration, the PermissionRequest hook and the runner unit, and changes nothing on a second run (scratch-HOME test with stub docker, claude and systemctl). Saved views fall back to the old localStorage key once.

MEDUSA acceptances carried to the renamed paths: 82 rows whose lines are unchanged (reason prefixed "renamed from <old path>, line unchanged"), and 7 rows whose text changed only in the product name, the package name, a temp prefix or a new class argument, each upheld by one kvb-think-criticize skeptic (approval.py:60, messaging.py:53, server.py:56, tests/hub_support.py:64, passkey.py:205, page-agent.js:75, language.py:46).

Cost 101 %: the longer name adds 15 tokens of skill text; the operator approved it with the commit.

🎯 Fix: 92 %
💥 Break: 4 %
💸 Cost: 101 %
⏱️ Time: –
🛡️ Security: 100 %
💰 Value: ?
🏆 Score: 87
🚦 Gate: ⚠️ cost 101 % > 100: ask the operator before the commit

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

tests/test_hub_asks.py

@@ -41,10 +41,10 @@ class TestHubAsks(HubCase):
         self.claim("s1", "Skills session")
         bad_headers = (
             {"Host": self.host},
-            {**self.local(), "X-Kvb-Hub": "0"},
+            {**self.local(), "X-Kvb-Orchestrator": "0"},
             {**self.local(), "Origin": "http://evil.example"},
             {**self.local(), "Origin": "null"},
-            {"Host": "evil.example", "X-Kvb-Hub": "1"},
+            {"Host": "evil.example", "X-Kvb-Orchestrator": "1"},
         )
         for headers in bad_headers:
             with self.subTest(headers=headers):
@@ -61,7 +61,7 @@ class TestHubAsks(HubCase):
         waiter = threading.Thread(target=lambda: results.append(self.ask_status(ask_id, "20")))
         waiter.start()
         time.sleep(0.3)
-        for headers in ({"Host": self.host, "X-Kvb-Hub": "1"}, {"Host": self.host, "Origin": f"http://{self.host}"}, {**self.guard(self.host), "Origin": "http://evil.example"}):
+        for headers in ({"Host": self.host, "X-Kvb-Orchestrator": "1"}, {"Host": self.host, "Origin": f"http://{self.host}"}, {**self.guard(self.host), "Origin": "http://evil.example"}):
             with self.subTest(headers=headers):
                 self.assertEqual(self.call("POST", f"/api/asks/{ask_id}/allow", b"", headers)[0], 403)
         signer = key(-7, "main")
@@ -115,7 +115,7 @@ class TestHubAsks(HubCase):
             return compromised
 
         code, out = asked(deny)
-        self.assertEqual((code, json.loads(out)), (0, {"hookSpecificOutput": {"hookEventName": "PermissionRequest", "decision": {"behavior": "deny", "message": "The operator denied this in the kvb-hub."}}}))
+        self.assertEqual((code, json.loads(out)), (0, {"hookSpecificOutput": {"hookEventName": "PermissionRequest", "decision": {"behavior": "deny", "message": "The operator denied this in the Agent Orchestrator."}}}))
         self.assertEqual(asked(allow_by(key(-7, "main"))), (0, ""))
         self.pin()
         self.assertEqual(asked(allow_by(key(-8, "stranger"))), (0, ""))
@@ -140,7 +140,7 @@ class TestHubAsks(HubCase):
             with self.subTest(name=name):
                 process = self.hook(self.port, "3", {**HOOK, **change})
                 self.assertEqual((self.finish(process), self.httpd.hub.asks.listed()), ((0, ""), []))
-                self.assertRegex(process.stderr.read(), rf"\Akvb-hub: [^\n]*\b{name}\b[^\n]*\n\Z")
+                self.assertRegex(process.stderr.read(), rf"\Akvb-orchestrator: [^\n]*\b{name}\b[^\n]*\n\Z")
         process = self.hook(self.port, "20", {**HOOK, "tool_input": {"command": "x" * 4000}})
         ask = self.first_ask()
         self.assertEqual(ask["command"], "x" * 4000)
@@ -182,7 +182,7 @@ class TestHubAsks(HubCase):
         waiter.start()
         time.sleep(0.3)
         path = f"/api/decisions/{decision_id}/choose"
-        self.assertEqual(self.post_json(path, {"label": "Merge now"}, {"Host": self.host, "X-Kvb-Hub": "1"})[0], 403)
+        self.assertEqual(self.post_json(path, {"label": "Merge now"}, {"Host": self.host, "X-Kvb-Orchestrator": "1"})[0], 403)
         self.assertEqual(self.post_json(path, {"label": "Later"}, self.guard(self.host))[0], 400)
         self.assertEqual(self.post_json(path, {"label": "Merge now", "x": 1}, self.guard(self.host))[0], 400)
         self.assertEqual(self.post_json(path, {"label": "Merge now"}, self.guard(self.host))[0], 200)