Surface (requirement 001 phase 2): navigation Stream (Inbox, Regeln) / Agents / Artifacts with keys 1-3 and hash routes (#graph and #tree redirect), header with title, command palette and settings only, server-side badges (unsnoozed inbox, beats within 900 s, open jobs), a Mayday banner with "aufheben", four stream chips with agent:/art:/seit: search, Filter and time menus, the inbox in main, an agents toolbar (Funk an alle with Newsletter, Broadcast, Pan-Pan, Security, Mayday; Priorität; Tag/Nacht), Post or Call in the agent panel, Ambiente in the settings and read-aloud over the seven classes with Mayday locked. Rename (decision 9): hub/ is orchestrator/, the package kvb_orchestrator, the unit kvb-orchestrator-runner.service, scripts/orchestrator.sh, environment KVB_ORCHESTRATOR_*, make targets orchestrator-*, the MCP server, image and compose project kvb-orchestrator, the guard header X-Kvb-Orchestrator and the message marker [kvb-orchestrator msg <id>]. install runs migrate first: it stops the old container, removes its image and code, moves state, approvals and pinned keys, swaps the MCP registration, the PermissionRequest hook and the runner unit, and changes nothing on a second run (scratch-HOME test with stub docker, claude and systemctl). Saved views fall back to the old localStorage key once. MEDUSA acceptances carried to the renamed paths: 82 rows whose lines are unchanged (reason prefixed "renamed from <old path>, line unchanged"), and 7 rows whose text changed only in the product name, the package name, a temp prefix or a new class argument, each upheld by one kvb-think-criticize skeptic (approval.py:60, messaging.py:53, server.py:56, tests/hub_support.py:64, passkey.py:205, page-agent.js:75, language.py:46). Cost 101 %: the longer name adds 15 tokens of skill text; the operator approved it with the commit. 🎯 Fix: 92 % 💥 Break: 4 % 💸 Cost: 101 % ⏱️ Time: – 🛡️ Security: 100 % 💰 Value: ? 🏆 Score: 87 🚦 Gate: ⚠️ cost 101 % > 100: ask the operator before the commit Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
125 lines
5.9 KiB
Python
125 lines
5.9 KiB
Python
from __future__ import annotations
|
|
|
|
import re
|
|
import secrets
|
|
import time
|
|
|
|
from .council import HUMAN, ordered, read_claims
|
|
from .errors import Missing, ToolError
|
|
from .fields import NAME_LIMIT, ORDER_NAME, decode, expect, field, message_text, single
|
|
from .records import write_atomic
|
|
from .skill_scripts import NIGHT, RADIO, RASCI
|
|
|
|
NIGHTS = {
|
|
"evening": (["set", "evening"], "Operator ran kvb-org-evening in the Agent Orchestrator: run kvb-agent-relax; verify with night.py status."),
|
|
"sunset": (["set", "sunset"], "Operator ran kvb-org-sunset in the Agent Orchestrator: run kvb-agent-sleep; verify with night.py status."),
|
|
"sunrise": (["clear"], "Operator ran kvb-org-sunrise: run kvb-agent-wakeup; verify with night.py status."),
|
|
}
|
|
UNSAFE = re.compile(r"[^A-Za-z0-9._-]+")
|
|
DIRECT = {"post": ["post"], "call": ["send", "call"]}
|
|
TO_ALL = {"newsletter": ["post"], **{cls: ["send", cls] for cls in ("broadcast", "pan-pan", "security", "mayday")}}
|
|
|
|
|
|
def chosen(payload: dict, choices: dict[str, list[str]]) -> list[str]:
|
|
cls = payload["class"]
|
|
if not isinstance(cls, str) or cls not in choices:
|
|
raise ToolError(f"class must be one of {', '.join(choices)}")
|
|
return choices[cls]
|
|
|
|
|
|
def message_row(message: dict) -> dict:
|
|
upload = message["upload"]
|
|
return {
|
|
"id": message["id"],
|
|
"to": message["to"],
|
|
"text": message["text"],
|
|
"created_ts": message["created_ts"],
|
|
"upload": None if upload is None else upload["name"],
|
|
}
|
|
|
|
|
|
def safe_name(text: str) -> str:
|
|
base = re.split(r"[/\\]", text)[-1]
|
|
clean = UNSAFE.sub("_", base).lstrip(".")[:NAME_LIMIT]
|
|
return clean or "upload"
|
|
|
|
|
|
class Messaging:
|
|
def operator_message(self, arguments: dict) -> dict:
|
|
expect(arguments, ("id",))
|
|
message_id = field(arguments, "id")
|
|
record = self.messages.get(message_id)
|
|
if record is None:
|
|
raise ToolError(f"no operator message {message_id}: a radio row naming it did not come from the Agent Orchestrator")
|
|
upload = record["upload"]
|
|
return {
|
|
"id": record["id"],
|
|
"to": record["to"],
|
|
"text": record["text"],
|
|
"created": record["created"],
|
|
"upload": None if upload is None else upload["path"],
|
|
}
|
|
|
|
def upload(self, query: dict[str, list[str]], body: bytes) -> dict:
|
|
name = safe_name(single(query, "name") or "")
|
|
upload_id = secrets.token_hex(8)
|
|
folder = self.uploads / upload_id
|
|
folder.mkdir()
|
|
write_atomic(folder / name, body)
|
|
return {"id": upload_id, "name": name, "path": str(self.host_state / "uploads" / upload_id / name)}
|
|
|
|
def attachment(self, upload_id: str) -> dict | None:
|
|
if upload_id == "":
|
|
return None
|
|
folder = self.uploads / field({"id": upload_id}, "id")
|
|
files = sorted(folder.iterdir()) if folder.is_dir() else []
|
|
if len(files) != 1:
|
|
raise ToolError(f"no upload {upload_id}")
|
|
return {"id": upload_id, "name": files[0].name, "path": str(self.host_state / "uploads" / upload_id / files[0].name)}
|
|
|
|
def message(self, body: bytes) -> dict:
|
|
payload = decode(body)
|
|
expect(payload, ("to", "text", "upload", "class"))
|
|
target = field(payload, "to").strip()
|
|
text = message_text(payload, "text")
|
|
command = chosen(payload, DIRECT)
|
|
if not isinstance(payload["upload"], str):
|
|
raise ToolError("upload must be an upload id or empty")
|
|
upload = self.attachment(payload["upload"])
|
|
claims = read_claims(self.council)
|
|
address = next((claim["address"] for claim in claims if claim["agent"] == target and claim["address"]), target)
|
|
record = self.messages.add({"to": target, "address": address, "text": text, "upload": upload, "created_ts": time.time()})
|
|
note = "" if upload is None else f" file: {upload['path']}"
|
|
run = self.scripts.run(RADIO, [*command, "--to", address, "--session", HUMAN, f"[kvb-orchestrator msg {record['id']}] {' '.join(text.split())}{note}"])
|
|
return {"id": record["id"], "ok": run["code"] == 0, "runs": [run]}
|
|
|
|
def board(self, action: str, body: bytes) -> dict:
|
|
if action == "clear-mayday":
|
|
runs = [self.scripts.run(RADIO, ["clear", "--force", "--session", HUMAN])]
|
|
elif action == "broadcast":
|
|
payload = decode(body)
|
|
expect(payload, ("text", "class"))
|
|
text = message_text(payload, "text")
|
|
command = chosen(payload, TO_ALL)
|
|
record = self.messages.add({"to": "*", "address": "*", "text": text, "upload": None, "created_ts": time.time()})
|
|
runs = [self.scripts.run(RADIO, [*command, "--session", HUMAN, f"[kvb-orchestrator msg {record['id']}] {' '.join(text.split())}"])]
|
|
elif action == "order":
|
|
payload = decode(body)
|
|
expect(payload, ("agents",))
|
|
names = payload["agents"]
|
|
if not isinstance(names, list) or not names or not all(isinstance(n, str) and ORDER_NAME.fullmatch(n) for n in names):
|
|
raise ToolError("agents must be a non-empty list of agent names without commas")
|
|
if len(set(names)) != len(names):
|
|
raise ToolError("agents must be distinct")
|
|
runs = [self.scripts.run(RASCI, ["order", ",".join(names)])]
|
|
elif action in NIGHTS:
|
|
command, text = NIGHTS[action]
|
|
runs = [self.scripts.run(NIGHT, [*command, "--session", HUMAN])]
|
|
peers = ordered({claim["address"] for claim in read_claims(self.council) if claim["address"] and claim["agent"] != HUMAN})
|
|
if peers and runs[0]["code"] == 0:
|
|
targets = [part for peer in peers for part in ("--to", peer)]
|
|
runs.append(self.scripts.run(RADIO, [*DIRECT["call"], *targets, "--session", HUMAN, text]))
|
|
else:
|
|
raise Missing(action)
|
|
return {"ok": all(run["code"] == 0 for run in runs), "runs": runs}
|