Kevin Veen-BirkenbachandClaude Opus 5.5
8ba45efd04
The kvb-hub is a local review hub in a container bound to 127.0.0.1: one page, JSON APIs and an MCP endpoint for the operator's inbox, asks, decisions, staged-commit reviews, the radio stream, the agent graph, the worktree tree, push-to-talk and read-aloud radio (Piper, whisper.cpp) and an optional LLM command line. The hub is only a relay. The host executors in hub/client (the runner user service, the PermissionRequest hook and the approval CLI the commit skills call) verify a WebAuthn passkey signature against keys pinned outside every sandbox, refuse replays and fail closed. scripts/hub.sh with make hub-install, hub-check, hub-pin, hub-runner and hub-hook installs and checks the hub; hub-hook writes ~/.claude/settings.json after a backup. make watch-check shows a stuck watch hook. The new kvb-git-diff skill and the commit skills route reviews through the hub; the test_hub_* suites replace test_hub.py. Security review (kvb-think-criticize, three skeptics) fixed four holes: signed rules auto-approved chained shell commands; the client and LLM openers followed redirects, the LLM one with its bearer key; the worktree scan ran git fsmonitor and filter commands from agent-writable repos; compose set no memory, pids or health limits. Documented until core requirement 093, on the operator's word: the hub page is trusted while signing and pinning, local processes can forge the unsigned operator actions, and the container reads the host /tmp. Committed on the operator's word despite the gate: the passkey path is not yet verified live. Accepted MEDUSA false positives (137 findings on 115 lines, rows in security-accepted.jsonl): EXA002 x17, MEDUSA-MM-SCAN-058 x12, B603 x8, MEDUSA-FTSC-SCAN-089 x7, MEDUSA-PRIV-SCAN-762 x6, AIC-EXFIL-005 x5, EXA006 x5, MEDUSA-FTSCAN-231 x5, WEB-SSRF x5, MEDUSA-INF-SCAN-2057 x3, RH005 x3, TC001 x3, LO002 x2, MEDUSA-AEXP-SCAN-096 x2, MEDUSA-CGS-SCAN-028 x2, MEDUSA-INF-SCAN-1350 x2, MEDUSA-INF-SCAN-2369 x2, MEDUSA-INF-SCAN-2440 x2, MEDUSA-INF-SCAN-2638 x2, MLSC-SERIAL-002 x2, PL002 x2, PQC005 x2, SAST-PATH-001 x2, TC004 x2, TC005 x2, TC006 x2, TC007 x2, AA-146, EXA007, FINE-050, GB-ENCODE-001, GB-ENCODE-003, MEDUSA-CGS-SCAN-029, MEDUSA-CGS-SCAN-103, MEDUSA-DP-SCAN-1034, MEDUSA-DP-SCAN-1916, MEDUSA-DP-SCAN-954, MEDUSA-EXF26-TOOL-004, MEDUSA-FT-TRIGGER-005, MEDUSA-INF-SCAN-2206, MEDUSA-INF-SCAN-2457, MEDUSA-INF-WEB-003, MEDUSA-INFRA-SCAN-030, MEDUSA-MP-SCAN-1135, MEDUSA-RLHF-POISON-002, MEDUSA-RT-SCAN-006, MM-ENCODE-001, MP-124, PQC001, PQC002, PQC006, RP001, TC009, TC010, WEB-FLASK-004. 🎯 Fix: 80 % 💥 Break: 4 % 💸 Cost: 129 % ⏱️ Time: – 🛡️ Security: 100 % 💰 Value: ? 🏆 Score: 60 🚦 Gate: ⛔ fix 80 % < 90; cost 129 % > 100: ask the operator before the commit ``` /home/kevinveenbirkenbach/Repositories/github.com/kevinveenbirkenbach/skills/.worktrees/feature/kvb-hub ``` Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
80 lines
2.9 KiB
Python
80 lines
2.9 KiB
Python
from __future__ import annotations
|
|
|
|
import datetime
|
|
from pathlib import Path
|
|
|
|
from .records import iso_epoch, parse_line, read_json, shown
|
|
|
|
EDGE_READ = 256 << 10
|
|
GONE = 86400
|
|
|
|
|
|
def lifetime_stamp(ts: float | None) -> str:
|
|
if ts is None:
|
|
return ""
|
|
return datetime.datetime.fromtimestamp(ts, datetime.UTC).strftime("%Y-%m-%dT%H:%MZ")
|
|
|
|
|
|
def line_ts(raw: bytes) -> float | None:
|
|
row = parse_line(raw.decode("utf-8", errors="replace"))
|
|
return None if row is None else iso_epoch(row.get("timestamp"))
|
|
|
|
|
|
def edge_times(path: Path) -> tuple[float | None, float | None, float | None]:
|
|
try:
|
|
info = path.stat()
|
|
with path.open("rb") as handle:
|
|
head = handle.read(EDGE_READ)
|
|
handle.seek(max(info.st_size - EDGE_READ, 0))
|
|
tail = handle.read(EDGE_READ)
|
|
except OSError:
|
|
return None, None, None
|
|
first = next((ts for ts in map(line_ts, head.splitlines()) if ts is not None), None)
|
|
last = next((ts for ts in map(line_ts, reversed(tail.splitlines())) if ts is not None), None)
|
|
return first, last, info.st_mtime
|
|
|
|
|
|
def lifetime(times: tuple[float | None, float | None, float | None], gone: bool) -> dict:
|
|
"""Args:
|
|
times: first entry, last entry and modification time of a transcript.
|
|
gone: whether the agent is known to have ended.
|
|
|
|
Returns:
|
|
born and died as YYYY-MM-DDTHH:MMZ in UTC, empty when unknown; died
|
|
stays empty unless gone. since and until hold the same moments in
|
|
epoch seconds, None when unknown or not gone.
|
|
"""
|
|
first, last, _ = times
|
|
ended = last if gone else None
|
|
return {"born": lifetime_stamp(first), "died": lifetime_stamp(ended), "since": first, "until": ended}
|
|
|
|
|
|
def session_gone(beat: float | None, changed: float | None, now: float) -> bool:
|
|
return (beat is None or now - beat > GONE) and changed is not None and now - changed > GONE
|
|
|
|
|
|
def subagent_rows(root: Path, session: str) -> list[dict]:
|
|
try:
|
|
paths = sorted(root.glob(f"*/{session}/subagents/agent-*.meta.json"))
|
|
except OSError:
|
|
return []
|
|
rows = []
|
|
for path in paths:
|
|
data = read_json(path)
|
|
if not isinstance(data, dict):
|
|
continue
|
|
ident = path.name.removeprefix("agent-").removesuffix(".meta.json")
|
|
depth = data.get("spawnDepth")
|
|
try:
|
|
started = path.stat().st_mtime
|
|
except OSError:
|
|
continue
|
|
finished = bool(data.get("finished"))
|
|
rows.append({
|
|
"id": ident, "type": shown(data.get("agentType")), "description": shown(data.get("description")),
|
|
"depth": depth if isinstance(depth, int) and not isinstance(depth, bool) and depth > 0 else 1,
|
|
"finished": finished, "tool_use": shown(data.get("toolUseId")), "started": started,
|
|
**lifetime(edge_times(path.with_name(f"agent-{ident}.jsonl")), finished),
|
|
})
|
|
return sorted(rows, key=lambda row: (row["started"], row["id"]))
|