Files
skills/orchestrator/server.py
T
Kevin Veen-BirkenbachandClaude Opus 5.5 58187e8323 feat(orchestrator): inbox console, deny by channel and agent rule requests
The inbox shows the console output of a command under its "Ausführen"
row, kept to the same tail the job list shows. A deny picks its radio
channel (post by default, call, newsletter, broadcast, pan-pan,
security) and an optional reason; the passkey signs denial, channel and
reason, the hub verifies the proof before it stores or sends anything,
and the PermissionRequest hook quotes a reason only when it verifies.

Agents ask for an auto-approval rule through the MCP tool rule_request;
the request shows in the inbox with a dry run over the last seven days
and is accepted only with a passkey assertion the hub verifies against
the pinned keys and the hub origin, for every rule kind. Requests lapse
with the ask lifetime and are capped per agent and in total.

The image runs as nobody by default and carries the health check
command; compose keeps the timing.

🎯 Fix: 93 %
💥 Break: 4 %
💸 Cost: 98 %
⏱️ Time: 75 %
🛡️ Security: 100 %
🏆 Score: 100
🚦 Gate: ✅ 90/5, cost and time <= 100, security 100 %

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-11-07 18:14:30 +00:00

107 lines
5.4 KiB
Python
Executable File

#!/usr/bin/env python3
"""Args:
--bind: address the server listens on.
--listen-port: port the server listens on.
--public-port: port browsers and agents reach the hub on; the Host and
Origin headers must name it.
--council: directory holding rasci.json, news.jsonl, queue-history.jsonl,
night.json, radio-silence.json and the claims under cluster/*/ and
work/*/; a missing file leaves its part of the state empty. The board
actions change it through the skill scripts.
--pages: directory every review page must lie in.
--state: writable directory for reviews.json, asks.json, decisions.json,
messages.json, rules.json, jobs.json, marks.json, settings.json,
log.jsonl, the page copies and uploads/<id>/<name>.
--host-state: the state directory's path on the host, named in the radio
rows that carry an upload.
--skills: installed skills directory holding the kvb-org-radio,
kvb-org-rasci and kvb-org-sunset scripts.
--transcripts: directory the Claude Code transcripts (*.jsonl) lie under.
--templates: directory holding index.html.j2 and the *.js modules it
includes.
--tree-file: the JSON file `pkgmgr branch tree --output` writes, mounted
read-only; read again whenever it changes.
--timers: directory holding the systemd user units (*.timer).
--vendor: directory holding the vendored Bootstrap Icons sprite,
3d-force-graph and three with their licence texts.
--cleanup: host-mounted directory the hub writes signed branch deletions
into (jobs/) and reads their results from (results/); the host's
kvb-orchestrator-cleanup path unit runs them.
--offices: host-mounted directory the hub writes signed office orders
(appoint, take over, recall) into (jobs/) and reads their results
from (results/); the host's kvb-orchestrator-offices path unit runs
council.py for them.
--llm-url: base URL of an OpenAI-compatible chat endpoint; empty turns the
natural-language command line off.
--llm-model: model name sent to that endpoint; empty turns it off.
--llm-key-file: file holding the endpoint's bearer key; empty file or
unreadable means no key.
--piper: the Piper executable, run as a separate process; missing turns
speech output off.
--voices: directory holding the Piper voices as <model>.onnx with
<model>.onnx.json; every speaker of a model is a voice <model>:<id>.
--operator-voice: the voice of the operator and the hub; it must be one of
the installed voices when any is installed.
--whisper: the whisper.cpp command line executable; missing turns speech
input off.
--whisper-model: the ggml model whisper.cpp loads.
--scratch: writable directory the engines use as HOME and TMPDIR.
--approvers: the pinned passkeys, mounted read-only; the hub lists their
ids and algorithms for the page, never pins, and verifies a signature
only for the denials and rules it acts on itself; every other approval
its executor verifies.
"""
from __future__ import annotations
import argparse
from pathlib import Path
from kvb_orchestrator import NAME
from kvb_orchestrator.engines import Engines
from kvb_orchestrator.errors import ToolError
from kvb_orchestrator.exchange import HubServer
from kvb_orchestrator.handler import Handler
from kvb_orchestrator.hub import Places, open_hub
from kvb_orchestrator.language import Model, read_key
from kvb_orchestrator.skill_scripts import Scripts
def main() -> int:
parser = argparse.ArgumentParser(prog=NAME)
parser.add_argument("--bind", required=True)
for name in ("--listen-port", "--public-port"):
parser.add_argument(name, type=int, required=True)
paths = ("--council", "--pages", "--state", "--host-state", "--skills", "--transcripts", "--templates", "--tree-file", "--timers", "--vendor", "--cleanup", "--offices", "--llm-key-file", "--approvers")
for name in (*paths, "--piper", "--voices", "--whisper", "--whisper-model", "--scratch"):
parser.add_argument(name, type=Path, required=True)
for name in ("--llm-url", "--llm-model", "--operator-voice"):
parser.add_argument(name, required=True)
args = parser.parse_args()
try:
hub = open_hub(
council=args.council,
pages=args.pages,
public_port=args.public_port,
state=args.state,
host_state=args.host_state,
transcripts=args.transcripts,
scripts=Scripts(skills=args.skills, council=args.council, home=args.state),
templates=args.templates,
places=Places(tree_file=args.tree_file, timers=args.timers, vendor=args.vendor, cleanup=args.cleanup, offices=args.offices),
model=Model(url=args.llm_url.strip(), model=args.llm_model.strip(), key=read_key(args.llm_key_file)),
engines=Engines(piper=args.piper, voices=args.voices, operator_voice=args.operator_voice, whisper=args.whisper, whisper_model=args.whisper_model, scratch=args.scratch),
approvers=args.approvers,
)
except ToolError as error:
parser.error(str(error))
server = HubServer((args.bind, args.listen_port), Handler)
server.hub = hub
print(f"{NAME}: listening on {args.bind}:{args.listen_port}, public port {args.public_port}", flush=True)
server.serve_forever()
return 0
if __name__ == "__main__":
raise SystemExit(main())