Stream -> Radio gets one line per station with state, play and stop, autoplay and CSP refusals as row state and toast, and the speaking agent pulsing there and in the Orbit and Chord views. The composer sends on all seven channels; push-to-talk records with MediaRecorder, whisper.cpp transcribes off the request thread under per-minute and per-hour caps, and the recording travels only when "Aufnahme anhängen" is ticked. Every operator message, the mayday clear, the day and night board actions and a settings save that adds a stream origin take the passkey; the hub verifies each signature once against the pinned keys before it relays or acts. The container gets TMPDIR=/scratch so that verification no longer fails on the read-only root. A denial now signs its recipient: the inbox and the signing step resolve it through one function, a claim set naming several agents leaves a direct denial without recipient, and a recipient that changed after the inbox showed it is refused with 409. operator_message returns only the signed reason for a denial, never the agent's own words the radio row quotes, and the permission hook hashes the signed recipient too. 🎯 Fix: 95 % 💥 Break: 3 % 💸 Cost: 99 % ⏱️ Time: 68 % 🛡️ Security: 100 % 🏆 Score: 100 🚦 Gate: ✅ 90/5, cost and time <= 100, security 100 % Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
111 lines
5.7 KiB
Python
Executable File
111 lines
5.7 KiB
Python
Executable File
#!/usr/bin/env python3
|
|
"""Args:
|
|
--bind: address the server listens on.
|
|
--listen-port: port the server listens on.
|
|
--public-port: port browsers and agents reach the hub on; the Host and
|
|
Origin headers must name it.
|
|
--council: directory holding rasci.json, news.jsonl, queue-history.jsonl,
|
|
night.json, radio-silence.json and the claims under cluster/*/ and
|
|
work/*/; a missing file leaves its part of the state empty. The board
|
|
actions change it through the skill scripts.
|
|
--pages: directory every review page must lie in.
|
|
--state: writable directory for reviews.json, asks.json, decisions.json,
|
|
messages.json, rules.json, jobs.json, marks.json, settings.json,
|
|
log.jsonl, the page copies, uploads/<id>/<name>, the operator's last
|
|
50 voice recordings beside those a stored message carries as
|
|
voice/<id>.wav and the replay store of the signatures the hub checks
|
|
itself as replay/messages.json.
|
|
--host-state: the state directory's path on the host, named in the radio
|
|
rows that carry an upload or a voice recording.
|
|
--skills: installed skills directory holding the kvb-org-radio,
|
|
kvb-org-rasci and kvb-org-sunset scripts.
|
|
--transcripts: directory the Claude Code transcripts (*.jsonl) lie under.
|
|
--templates: directory holding index.html.j2 and the *.js modules it
|
|
includes.
|
|
--tree-file: the JSON file `pkgmgr branch tree --output` writes, mounted
|
|
read-only; read again whenever it changes.
|
|
--timers: directory holding the systemd user units (*.timer).
|
|
--vendor: directory holding the vendored Bootstrap Icons sprite,
|
|
3d-force-graph and three with their licence texts.
|
|
--cleanup: host-mounted directory the hub writes signed branch deletions
|
|
into (jobs/) and reads their results from (results/); the host's
|
|
kvb-orchestrator-cleanup path unit runs them.
|
|
--offices: host-mounted directory the hub writes signed office orders
|
|
(appoint, take over, recall) into (jobs/) and reads their results
|
|
from (results/); the host's kvb-orchestrator-offices path unit runs
|
|
council.py for them.
|
|
--llm-url: base URL of an OpenAI-compatible chat endpoint; empty turns the
|
|
natural-language command line off.
|
|
--llm-model: model name sent to that endpoint; empty turns it off.
|
|
--llm-key-file: file holding the endpoint's bearer key; empty file or
|
|
unreadable means no key.
|
|
--piper: the Piper executable, run as a separate process; missing turns
|
|
speech output off.
|
|
--voices: directory holding the Piper voices as <model>.onnx with
|
|
<model>.onnx.json; every speaker of a model is a voice <model>:<id>.
|
|
--operator-voice: the voice of the operator and the hub; it must be one of
|
|
the installed voices when any is installed.
|
|
--whisper: the whisper.cpp command line executable; missing turns speech
|
|
input off.
|
|
--whisper-model: the ggml model whisper.cpp loads.
|
|
--scratch: writable directory the engines use as HOME and TMPDIR.
|
|
--approvers: the pinned passkeys, mounted read-only; the hub lists their
|
|
ids and algorithms for the page, never pins, and verifies a signature
|
|
only for the operator messages, denials and rules it acts on itself,
|
|
and for the mayday and day/night board actions and new stream origins
|
|
it runs as the operator; every other approval its executor verifies.
|
|
"""
|
|
|
|
from __future__ import annotations
|
|
|
|
import argparse
|
|
from pathlib import Path
|
|
|
|
from kvb_orchestrator import NAME
|
|
from kvb_orchestrator.engines import Engines
|
|
from kvb_orchestrator.errors import ToolError
|
|
from kvb_orchestrator.exchange import HubServer
|
|
from kvb_orchestrator.handler import Handler
|
|
from kvb_orchestrator.hub import Places, open_hub
|
|
from kvb_orchestrator.language import Model, read_key
|
|
from kvb_orchestrator.skill_scripts import Scripts
|
|
|
|
|
|
def main() -> int:
|
|
parser = argparse.ArgumentParser(prog=NAME)
|
|
parser.add_argument("--bind", required=True)
|
|
for name in ("--listen-port", "--public-port"):
|
|
parser.add_argument(name, type=int, required=True)
|
|
paths = ("--council", "--pages", "--state", "--host-state", "--skills", "--transcripts", "--templates", "--tree-file", "--timers", "--vendor", "--cleanup", "--offices", "--llm-key-file", "--approvers")
|
|
for name in (*paths, "--piper", "--voices", "--whisper", "--whisper-model", "--scratch"):
|
|
parser.add_argument(name, type=Path, required=True)
|
|
for name in ("--llm-url", "--llm-model", "--operator-voice"):
|
|
parser.add_argument(name, required=True)
|
|
args = parser.parse_args()
|
|
try:
|
|
hub = open_hub(
|
|
council=args.council,
|
|
pages=args.pages,
|
|
public_port=args.public_port,
|
|
state=args.state,
|
|
host_state=args.host_state,
|
|
transcripts=args.transcripts,
|
|
scripts=Scripts(skills=args.skills, council=args.council, home=args.state),
|
|
templates=args.templates,
|
|
places=Places(tree_file=args.tree_file, timers=args.timers, vendor=args.vendor, cleanup=args.cleanup, offices=args.offices),
|
|
model=Model(url=args.llm_url.strip(), model=args.llm_model.strip(), key=read_key(args.llm_key_file)),
|
|
engines=Engines(piper=args.piper, voices=args.voices, operator_voice=args.operator_voice, whisper=args.whisper, whisper_model=args.whisper_model, scratch=args.scratch),
|
|
approvers=args.approvers,
|
|
)
|
|
except ToolError as error:
|
|
parser.error(str(error))
|
|
server = HubServer((args.bind, args.listen_port), Handler)
|
|
server.hub = hub
|
|
print(f"{NAME}: listening on {args.bind}:{args.listen_port}, public port {args.public_port}", flush=True)
|
|
server.serve_forever()
|
|
return 0
|
|
|
|
|
|
if __name__ == "__main__":
|
|
raise SystemExit(main())
|