kairos-chain 3.42.2 → 3.45.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 45fd1079aa951da3ac40d0dcd9763e02c2a15413753d5452dab4fc07e928a3cb
-  data.tar.gz: 93e3969307c08b26782c81804c9b5b10c475407e4770962a04ec29ab227a7951
+  metadata.gz: ea7401710d6467287e35146c84d731c08733f184fac36be13e76de11d7af5433
+  data.tar.gz: a823ba8bf1bb1157394ff04466cdcf96c0347eee50796816fe8c2fd1d188792c
 SHA512:
-  metadata.gz: e0d95027c4457cb89a1dee063b3637dc568fce57735e2be211119ace92d684b42451b03b176887202bc2eb797d71cb49af9e3ca49f0e0e9e00689c88ff74c177
-  data.tar.gz: fd1ac48f63e671ce7df974bab3efd35e2f3af8b626aeba655f56d3bffa933903d269f3d5775ae877203f9ef3050c66c5a3d5cbf69811ec113b9f5235b35d6574
+  metadata.gz: a11ba74c10eb1c56ef15b57992755083b6d36bd4fef1ea73bf1cae64afc1f07ad26f8774ee703c3c98eefa25c8a422441c5c5af032b9ae523d7518c7dc50193d
+  data.tar.gz: 26f95dd3245e9e39311349ef540954d200985a59bf9da38b3b08256d11ec50a445d60cc3f0c41538b6a0c0bfb2eb591ce742dc4523950d9ffe8f06471d22e50a

data/CHANGELOG.md

@@ -4,6 +4,35 @@ All notable changes to the `kairos-chain` gem will be documented in this file.
 
 This project follows [Semantic Versioning](https://semver.org/).
 
+## [3.45.0] - 2026-07-21
+
+### Synoptis — mutual anchoring protocol MAP-1..4 (map-1, AUD-L2)
+
+Implements AUD-L2 design v0.5 (FROZEN) slice 1 in the synoptis SkillSet:
+
+- `conventions/map-1.md`: content-addressed mutual-anchoring convention
+  (chain identity credential, typed attestation vocabulary, succession
+  records, declared anchoring rule, changeover event). Builds on khab-1
+  without modifying it.
+- `chain_credential.rb`: Ed25519 self-authenticating chain identity
+  credential — verification needs no registry and no network.
+- `succession.rb`: succession governance (earliest non-retracted designation
+  governs; at-or-before changeover boundary; issuer-only retraction;
+  retract-and-redesignate trails surfaced in the contested register).
+- `anchoring_rule.rb`: result-free declared anchoring rule (closed schema)
+  with a coverage checker that reports and never enforces.
+- `attestation_types.rb`: MAP-4 vocabulary intake validation and anchor-log
+  retraction coherence (issuer = depositor at map-1, disclosed deferral).
+- `entry.rb` / `log.rb` / `write_path.rb`: additive `attestation_type` on
+  newly appended entries only (AHM-4 byte-invariance preserved).
+- `bin/map_verify.rb`: standalone offline verifier (credential, attestation,
+  succession, coverage, pair, retraction subcommands).
+- `test/test_map_anchoring.rb`: 75 design-constraint tests.
+
+Design review converged R5 5/6 APPROVE; implementation review converged
+R4 5/5 APPROVE with zero residual P0/P1. The inaugural mutual anchor with a
+second, independently operated HestiaChain instance is deliberately pending.
+
 ## [3.42.2] - 2026-07-14
 
 ### Knowledge — loop_engineering_patterns §B: Model/Effort budget allocation

data/lib/kairos_mcp/version.rb

@@ -1,4 +1,4 @@
 module KairosMcp
-  VERSION = "3.42.2"
+  VERSION = "3.45.0"
   CHANGELOG_URL = "https://github.com/masaomi/KairosChain_2026/blob/main/CHANGELOG.md"
 end

data/templates/skillsets/hestia/config/hestia.yml

@@ -13,6 +13,30 @@ meeting_place:
   # registry_path: storage/agent_registry.json
   # parent_place_url: null  # URL of parent place for federation
 
+  # Public web surface (unauthenticated, read-only): skill catalog, JSON API,
+  # and — when anchoring is enabled — the ANC-7 verification view.
+  # Mounted by PlaceRouter under /place/web/* and /place/api/v1/*.
+  web_ui:
+    enabled: true
+    # place_host / place_url anchor the public links and the ANC-7 verification
+    # address (place://<place_host>/anchor/<slug>). Set to the served hostname.
+    # place_host: meeting.genomicschain.io
+    # place_url: https://meeting.genomicschain.io
+
+  # Anchor attestation capability (ANC-1..9 / BRD-1..4). Opt-in: when disabled
+  # the catalog still serves but /place/web/verify and /place/web/anchor/* 404.
+  # Enable on the place that hosts external-reference (content-by-reference)
+  # anchors — e.g. the constitutive-note / GenomicsChain provenance deployment.
+  anchoring:
+    enabled: false
+    # ANC-9 free-write budget (mechanism, design §11) — tune to observed load.
+    # The Sybil disclosure is shown regardless of the numbers.
+    per_identity: 60      # writes per identity per window
+    aggregate: 600        # writes across all identities per window
+    window_seconds: 3600  # refill window
+    # log_path: storage/hestia_anchor_log.json
+    # attestation_store_path: storage/hestia_anchor_attestations.json
+
   # Deposit policy (operator-configurable)
   deposit_policy:
     max_skill_size_bytes: 100000

data/templates/skillsets/hestia/lib/hestia/import_command_generator.rb

@@ -0,0 +1,43 @@
+# frozen_string_literal: true
+
+require 'shellwords'
+
+module Hestia
+  # Generates shell-safe import commands for various LLM tools.
+  # All interpolated values are escaped via Shellwords.shellescape.
+  class ImportCommandGenerator
+    def initialize(place_url:)
+      @place_url = place_url
+    end
+
+    def commands_for(skill, deposit_id:)
+      safe_url = Shellwords.shellescape(@place_url)
+      safe_skill_id = Shellwords.shellescape(skill[:skill_id] || deposit_id.split('__', 2).last)
+
+      {
+        claude_code: claude_code_command(safe_skill_id, safe_url),
+        codex: codex_command(safe_skill_id, safe_url),
+        kairos_cli: kairos_cli_command(safe_skill_id, safe_url),
+        curl_preview: curl_preview_command(Shellwords.shellescape(deposit_id), safe_url)
+      }
+    end
+
+    private
+
+    def claude_code_command(skill_id, place_url)
+      "claude -p \"Use meeting_acquire_skill to acquire #{skill_id} from place #{place_url}\""
+    end
+
+    def codex_command(skill_id, place_url)
+      "echo \"Use meeting_acquire_skill to acquire #{skill_id} from place #{place_url}\" | codex exec -"
+    end
+
+    def kairos_cli_command(skill_id, place_url)
+      "kairos-chain acquire --place #{place_url} --skill #{skill_id}"
+    end
+
+    def curl_preview_command(deposit_id, place_url)
+      "curl -s #{place_url}/place/api/v1/skill/#{deposit_id}"
+    end
+  end
+end

data/templates/skillsets/hestia/lib/hestia/place_router.rb

@@ -55,7 +55,8 @@ module Hestia
       end
     end
 
-    attr_reader :registry, :skill_board, :heartbeat_manager, :session_store, :started_at, :extensions
+    attr_reader :registry, :skill_board, :heartbeat_manager, :session_store, :started_at, :extensions,
+                :web_router, :anchor_log, :anchor_board
 
     def initialize(config: nil)
       @config = config || ::Hestia.load_config
@@ -63,6 +64,16 @@ module Hestia
       @skill_board = nil
       @heartbeat_manager = nil
       @session_store = nil
+      # The public (unauthenticated) web UI + JSON API + ANC-7 verification view.
+      # Constructed in #start when the operator enables it (default on). The
+      # Meeting Place SkillSet owns its own public surface here rather than in the
+      # core HTTP server, so mounting it never crosses the L0/SkillSet boundary.
+      @web_router = nil
+      # Anchor store instances (nil until #start with anchoring enabled). Exposed
+      # so an authenticated write entry point can deposit into the same log/board
+      # the public ANC-7 view reads from.
+      @anchor_log = nil
+      @anchor_board = nil
       @started = false
       @started_at = nil
       @self_id = nil
@@ -121,6 +132,16 @@ module Hestia
         observer_id: @self_id
       )
 
+      # Anchor store (ANC-1 log + BRD board + ANC-9 budget). Built independently
+      # of the web UI so it also backs the authenticated write path (the
+      # inaugural / external anchoring deposit), and exposed via attr_reader so an
+      # operator write entry point deposits into the same instances the public
+      # view reads from. [nil, nil] when anchoring is disabled.
+      @anchor_log, @anchor_board = build_anchor_store(place_config, default_storage)
+
+      # Mount the public web surface (catalog/api + ANC-7 verification view).
+      @web_router = build_web_router(place_config)
+
       # Self-register: the Place IS also a participant (主客未分)
       @registry.self_register(identity)
 
@@ -135,6 +156,84 @@ module Hestia
       }
     end
 
+    # Build the public WebRouter (catalog/api + ANC-7 verification view).
+    #
+    # The web classes require rack/utils (present in the server bundle) and are
+    # required lazily here so a place that never serves the web UI does not pull
+    # in rack at load time. A missing dependency degrades to "web UI not mounted"
+    # (the authenticated API keeps working) rather than a boot failure.
+    #
+    # @return [WebRouter, nil] nil when disabled or the dependency is unavailable.
+    def build_web_router(place_config)
+      web_config = place_config['web_ui'] || {}
+      return nil unless web_config.fetch('enabled', true)
+
+      require_relative 'public_rate_limiter'
+      require_relative 'public_presenter'
+      require_relative 'import_command_generator'
+      require_relative 'web_router'
+
+      place_host = web_config['place_host']
+      place_url = web_config['place_url'] || (place_host && "https://#{place_host}")
+
+      WebRouter.new(
+        skill_board: @skill_board,
+        agent_registry: @registry,
+        config: {
+          'name' => place_config['name'] || 'KairosChain Meeting Place',
+          'place_host' => place_host,
+          'place_url' => place_url
+        }.compact,
+        anchor_read: build_anchor_read
+      )
+    rescue LoadError => e
+      warn "[PlaceRouter] Public web UI not mounted (missing dependency): #{e.message}"
+      nil
+    end
+
+    # Build the Synoptis-owned public read handle the WebRouter presents through
+    # (AHM-1). nil when anchoring is disabled (@anchor_log unset), in which case
+    # the anchor routes 404. The write-side handles (@anchor_log/@anchor_board)
+    # stay owned here for the authenticated deposit path (design §4.3).
+    def build_anchor_read
+      return nil unless @anchor_log
+
+      Synoptis::Anchoring::PublicRead.new(log: @anchor_log, board: @anchor_board)
+    end
+
+    # Build the anchor store (ANC-1 log + BRD deposit board + ANC-9 write budget)
+    # when the operator enables anchoring. Returns [nil, nil] when disabled, in
+    # which case the WebRouter serves the catalog but the /place/web/verify and
+    # /place/web/anchor/* routes 404 (the capability is simply not present).
+    #
+    # The operator identity (@self_id) is the ANC-5/ANC-8 control boundary: it is
+    # the only identity permitted to withdraw any entry and the one against which
+    # same-party vs foreign is derived.
+    def build_anchor_store(place_config, default_storage)
+      anchor_config = place_config['anchoring'] || {}
+      return [nil, nil] unless anchor_config['enabled']
+
+      require 'synoptis'
+
+      log = Synoptis::Anchoring::Log.new(
+        storage_path: anchor_config['log_path'] || "#{default_storage}hestia_anchor_log.json",
+        operator_id: @self_id
+      )
+      budget = Synoptis::Anchoring::WriteBudget.new(
+        per_identity: anchor_config['per_identity'] || Synoptis::Anchoring::WriteBudget::DEFAULT_PER_IDENTITY,
+        aggregate: anchor_config['aggregate'] || Synoptis::Anchoring::WriteBudget::DEFAULT_AGGREGATE,
+        window_seconds: anchor_config['window_seconds'] || Synoptis::Anchoring::WriteBudget::DEFAULT_WINDOW_SECONDS,
+        operator_id: @self_id
+      )
+      board = Synoptis::Anchoring::DepositBoard.new(
+        log: log,
+        attestation_store_path: anchor_config['attestation_store_path'] ||
+          "#{default_storage}hestia_anchor_attestations.json",
+        budget: budget
+      )
+      [log, board]
+    end
+
     # Rack-compatible call method.
     def call(env)
       unless @started
@@ -147,6 +246,16 @@ module Hestia
       request_method = env['REQUEST_METHOD']
       path = env['PATH_INFO']
 
+      # Public, unauthenticated, read-only web surface (ANC-7 verification view,
+      # skill catalog, JSON API). Delegated before the auth flow — same position
+      # as the other unauthenticated endpoints below. The WebRouter enforces
+      # GET-only, IP rate limiting, and HTML escaping internally.
+      if @web_router &&
+         (path == '/place/web' || path.start_with?('/place/web/') ||
+          path.start_with?('/place/api/v1/'))
+        return @web_router.call(env)
+      end
+
       # Unauthenticated endpoints
       if request_method == 'GET' && path == '/place/v1/info'
         return handle_info

data/templates/skillsets/hestia/lib/hestia/public_presenter.rb

@@ -0,0 +1,86 @@
+# frozen_string_literal: true
+
+module Hestia
+  # Shared presenter for public data — used by both JSON API and HTML views.
+  # Truncates IDs and strips content to prevent information leakage.
+  class PublicPresenter
+    ID_TRUNCATE_LENGTH = 12
+
+    def catalog_entry(entry, auditor = nil)
+      deposit_id = make_deposit_id(entry)
+      {
+        deposit_id: deposit_id,
+        skill_id: entry[:skill_id],
+        name: entry[:name],
+        description: truncate(entry[:description], 500),
+        tags: entry[:tags] || [],
+        format: entry[:format],
+        type: entry[:type],
+        size_bytes: entry[:size_bytes],
+        content_hash: entry[:content_hash]&.slice(0, 16),
+        deposited_at: entry[:deposited_at],
+        depositor_id: truncate_id(entry[:agent_id] || entry[:depositor_id]),
+        summary: truncate(entry[:summary], 500),
+        version: entry[:version],
+        license: entry[:license],
+        attestation_count: entry[:attestations]&.size || 0,
+        audit_status: auditor ? auditor.audit_status(deposit_id)[:status] : nil
+      }
+    end
+
+    def skill_detail(skill, auditor = nil)
+      base = catalog_entry(skill, auditor)
+      base.merge(
+        sections: skill[:sections],
+        first_lines: skill[:first_lines],
+        input_output: skill[:input_output],
+        attestations: present_attestations(skill[:attestations]),
+        trust_notice: skill[:trust_notice],
+        audit_detail: auditor ? auditor.audit_status(make_deposit_id(skill)) : nil
+      )
+    end
+
+    def agent_profile(agent)
+      id = agent.respond_to?(:id) ? agent.id : agent[:id]
+      {
+        agent_id: truncate_id(id),
+        name: agent.respond_to?(:name) ? agent.name : agent[:name],
+        description: agent.respond_to?(:description) ? agent.description : agent[:description],
+        registered_at: agent.respond_to?(:registered_at) ? agent.registered_at : agent[:registered_at]
+      }
+    end
+
+    def make_deposit_id(entry)
+      agent = entry[:agent_id] || entry[:depositor_id]
+      skill = entry[:skill_id]
+      "#{agent}__#{skill}" if agent && skill
+    end
+
+    private
+
+    def present_attestations(attestations)
+      return [] unless attestations
+
+      attestations.map do |a|
+        {
+          claim: a[:claim],
+          attester_id: truncate_id(a[:attester_id]),
+          attester_name: a[:attester_name],
+          actor_role: a[:actor_role],
+          has_signature: a[:has_signature],
+          deposited_at: a[:deposited_at]
+        }
+      end
+    end
+
+    def truncate_id(id)
+      return nil unless id
+      id.length > ID_TRUNCATE_LENGTH ? "#{id[0, ID_TRUNCATE_LENGTH]}..." : id
+    end
+
+    def truncate(text, max)
+      return nil unless text
+      text.length > max ? "#{text[0, max]}..." : text
+    end
+  end
+end

data/templates/skillsets/hestia/lib/hestia/public_rate_limiter.rb

@@ -0,0 +1,47 @@
+# frozen_string_literal: true
+
+module Hestia
+  # IP-based rate limiter for public web/API endpoints.
+  # Bounded memory: TTL eviction + max tracked IPs.
+  class PublicRateLimiter
+    MAX_REQUESTS_PER_MINUTE = 30
+    MAX_TRACKED_IPS = 10_000
+    CLEANUP_INTERVAL = 1000
+    STALE_SECONDS = 300
+
+    def initialize(max_rpm: MAX_REQUESTS_PER_MINUTE)
+      @max_rpm = max_rpm
+      @requests = {}
+      @mutex = Mutex.new
+      @total_requests = 0
+    end
+
+    def allow?(ip)
+      @mutex.synchronize do
+        @total_requests += 1
+        cleanup! if (@total_requests % CLEANUP_INTERVAL).zero?
+
+        now = Time.now.to_f
+        @requests[ip] = (@requests[ip] || []).select { |t| now - t < 60 }
+
+        return false if @requests[ip].size >= @max_rpm
+
+        @requests[ip] << now
+        true
+      end
+    end
+
+    private
+
+    def cleanup!
+      now = Time.now.to_f
+      @requests.delete_if { |_ip, timestamps| timestamps.all? { |t| now - t >= STALE_SECONDS } }
+
+      return unless @requests.size > MAX_TRACKED_IPS
+
+      sorted = @requests.sort_by { |_ip, ts| ts.last || 0 }
+      excess = @requests.size - MAX_TRACKED_IPS
+      sorted.first(excess).each { |ip, _| @requests.delete(ip) }
+    end
+  end
+end