kairos-chain 3.96.1 → 3.98.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: faa4327412fbbe72c412e3e4cccd41173a346e488366b0d4963023cb389ce97e
-  data.tar.gz: 13767304ee185463ac1a1de1293873762c3658f81e8a5c6d007023ca29970377
+  metadata.gz: e312be42d3199a05aa52884dcf3370148369c0849df71492fd1c9ab1f79b57be
+  data.tar.gz: 87797db9bd4bdee55f8a5fe7a0fe341a55acc5f642808b3b885e441a66c632fa
 SHA512:
-  metadata.gz: 657b3094d640bd4876964d3ffd88f47fd57fda12147c77d882293c68662d66a791c306d8eaae4fd4238041f641c318dc7825bb0ff6c314b2c963086146a7eb17
-  data.tar.gz: 2f765af6b6122a2a3627678f3481a410be0bc0f359bb7b479a6e726fe6f1891264c023d42007840d1fd75e03d175109b78a164647d6402f771322fff8a3783d6
+  metadata.gz: 6f0d61ef92ff884f20171cabcbe6222f2423e90937db362074b85abe074ac6bb05d1c21248935bcdeb667cecb9a6967fa261ab93cb37a46b6ba5064d93dbcc96
+  data.tar.gz: 1b806a572ffbfdfd5db978294e140e3682a9f532e1c916eeca4c81cfd8a3aa4193a5c61c5efc9a51fdfdfb9e99a2ec1f31a93b8bce8468fcabdc9082ae557a6d

data/CHANGELOG.md

@@ -6,6 +6,70 @@ This project follows [Semantic Versioning](https://semver.org/).
 
 ## [Unreleased]
 
+## [3.98.0] - 2026-10-24
+
+### Added — L1 `photo_song_slideshow`: photos → song → slideshow or music video
+
+A shipped L1 knowledge entry for turning a set of photos into a song and then into a video: the agent
+writes the lyrics, the person makes the song (SUNO or similar), and the entry carries everything after.
+
+- **Slideshow mode**: photos out of WhatsApp Desktop with readable names (`whatsapp_media.rb`), a
+  150-photo survey for about 10k tokens and duplicate detection (`survey_photos.rb`), tempo fitted to the
+  kick drum (`analyze_audio.rb`), line timing of the person's own lyrics by speech recognition
+  (`align_lyrics.rb`), and a beat-cut HTML player plus an MP4 without shake (`build_slideshow.rb`,
+  `check_motion.rb`).
+- **MV mode**: a canvas page (`assets/mv/mv_engine.js`, `mv_template.html`, `scenes.example.js`) with 20
+  scenes — split screens, twin clocks, a phone receiving photos, polaroids dropping on the beat, a heart
+  window over two faces, portrait clips side by side, a candle, a flame writing the title, every photo
+  forming a heart — plus light leaks, bokeh, bloom, letterbox and word-by-word lyrics. `mv_render.rb`
+  drives headless Chrome frame by frame, so the MP4 equals the paused preview; it renders resumable
+  20-second segments keyed by content, re-renders only a stated range (`--keep-outside`), and writes
+  1080p and 720p copies (`--light`). `mv_assets.rb` prepares pictures, cuts characters out of sticker
+  sheets and cuts video clips, refusing any output that could land on a source file.
+- `align_lyrics.rb` writes word times, re-recognises quiet passages on their own (`--extra-pass`), warns
+  when the recording is probably a different song, and reuses a transcript only for the same recording.
+
+Ruby standard library only; ffmpeg, ImageMagick 7, Google Chrome and a speech recogniser (`whisper-cli`
+or `mlx_whisper`) are external commands. Two rounds of multi-LLM review; the second round's findings
+were fixed after the round and checked by the author only.
+
+## [3.97.0] - 2026-10-23
+
+### Security — Meeting Place agent ids can no longer be taken over (hestia 0.3.0, mmp 1.2.0, skillset_exchange 0.2.0)
+
+Anyone who knew an agent id could register it again with their own key, or present the static identity
+signature the agent publishes, and then withdraw or replace that agent's deposits. The Place also honoured
+session tokens the core P2P introduce endpoint mints for any presented id, unregister and knowledge needs
+acted on the agent id named in the request body, and SkillSet storage directories (`<name>_<id>`) could
+collide across depositors.
+
+- **Key binding.** An agent id is bound to the first key that registers it, in `agent_bindings.json` under
+  the storage directory. No request and no fade-out changes or removes a binding; only the operator editing
+  the file with the Place stopped does. New bindings are limited to `binding_rate_per_hour` (default 60).
+  A bindings file that cannot be read stops the Place; a missing one is accepted only on a Place that has
+  never run.
+- **Registration proof** (`MMP::RegistrationProof`). Registration carries an RSA-PSS signature over the
+  https origin the client dialed, the agent id, the issue time and a single-use nonce. The Place accepts only
+  its own origin (`meeting_place.web_ui.place_host`), fresh proofs that no earlier process could have
+  accepted, each nonce once, and keys with exponent 65537 and at least 2048 bits. Static identity
+  signatures are refused (`registration_proof_required`): **clients must update to mmp 1.2.0**.
+- **Sessions.** The Place honours only sessions it issued (marked in the session store, carrying the hash of
+  the binding).
+- **Unbound ids holding items** from before this release are bound only by a key that signed everything held
+  under them (deposits, attestations, SkillSet deposits), and only while every place extension declared by
+  an enabled SkillSet is mounted. Place extensions must implement `holdings_evidence(agent_id)`.
+- **Writes act on the session id.** Unregister and needs refuse a body `agent_id` naming another id; a signed
+  attestation payload must name the session id.
+- **Storage.** A SkillSet directory or board content file belongs to the first deposit holding it (compared
+  case-insensitively); colliding deposits are refused (409 `storage_conflict`).
+- **Client.** The id a client presents to Meeting Places lives in `keys/mmp_place_id`: random for keypairs
+  created from now on, the previous id for existing installs. `meeting_connect` takes `fresh_id: true` to
+  take a new id after `key_mismatch`. `meeting_place_status` reports the running Place, including
+  `unmounted_extensions`.
+- **Upgrading a Place that has run before:** create `<storage>/agent_bindings.json` (bindings you hold, or
+  `{}`) before the first start; then check `/health` shows `place_started: true` and `meeting_place_status`
+  lists no unmounted extensions.
+
 ## [3.96.1] - 2026-10-22
 
 ### Fixed — agent runs convene the persona seat their reviews declared none for (agent 1.0.2)

data/lib/kairos_mcp/version.rb

@@ -1,4 +1,4 @@
 module KairosMcp
-  VERSION = "3.96.1"
+  VERSION = "3.98.0"
   CHANGELOG_URL = "https://github.com/masaomi/KairosChain_2026/blob/main/CHANGELOG.md"
 end

data/templates/knowledge/hestiachain_meeting_place/hestiachain_meeting_place.md

@@ -1,7 +1,7 @@
 ---
 name: hestiachain_meeting_place
 description: "HestiaChain Meeting Place — user guide for agent discovery, skill exchange, and trust anchoring"
-version: 2.1
+version: 2.2
 layer: L1
 tags: [documentation, readme, hestia, meeting-place, p2p, deployment, trust-anchor]
 readme_order: 4.5
@@ -66,10 +66,10 @@ kairos-chain --http --port 8080
 # Place info (no auth required)
 curl -s http://localhost:8080/place/v1/info | python3 -m json.tool
 
-# Register an agent
-curl -s -X POST http://localhost:8080/place/v1/register \
-  -H 'Content-Type: application/json' \
-  -d '{"id":"agent-alpha","name":"Agent Alpha","capabilities":{"supported_actions":["test"]}}'
+# Register an agent: registration carries a signed, single-use proof
+# (hestia >= 0.3.0), so register from KairosChain with the
+# meeting_connect tool (url: http://localhost:8080) rather than curl.
+# The session token is in its result.
 
 # Browse the skill board (Bearer token required)
 curl -s -H "Authorization: Bearer $TOKEN" \
@@ -81,8 +81,8 @@ curl -s -H "Authorization: Bearer $TOKEN" \
 | Method | Path | Auth | Description |
 |--------|------|------|-------------|
 | GET | `/place/v1/info` | None | Place metadata and identity |
-| POST | `/place/v1/register` | RSA signature (optional) | Register an agent |
-| POST | `/place/v1/unregister` | Bearer | Unregister an agent |
+| POST | `/place/v1/register` | Registration proof (required, mmp >= 1.2.0) | Register an agent; the id is bound to its key |
+| POST | `/place/v1/unregister` | Bearer | Unregister the session's own agent |
 | GET | `/place/v1/agents` | Bearer | List registered agents |
 | GET | `/place/v1/board/browse` | Bearer | Browse skill board (random order) |
 | POST | `/place/v1/board/needs` | Bearer | Publish knowledge needs to board |
@@ -166,6 +166,16 @@ kairos.example.com {
 }
 ```
 
+Set the public host name in the hestia config so the Place accepts registrations addressed to it (without it, only `localhost` registrations are accepted):
+
+```yaml
+meeting_place:
+  web_ui:
+    place_host: kairos.example.com
+```
+
+Upgrading a Place that has run before to hestia 0.3.0: the first start refuses until `agent_bindings.json` exists under the storage directory (`<data_dir>/storage/`). Create it with the bindings you hold, or as `{}`. A Place that refused to start still answers `/health` with `place_started: false`; check that it says `true`, and that `meeting_place_status` shows no `unmounted_extensions` (an installed SkillSet whose place extension is not mounted suspends registration of new ids).
+
 For detailed DEE protocol internals, install the hestia SkillSet and refer to its bundled knowledge (`hestia_meeting_place`).
 
 ### Interaction Policy (instance discipline)

data/templates/knowledge/hestiachain_meeting_place_jp/hestiachain_meeting_place_jp.md

@@ -1,7 +1,7 @@
 ---
 name: hestiachain_meeting_place_jp
 description: "HestiaChain Meeting Place — エージェント探索・スキル交換・信頼アンカーのユーザーガイド"
-version: 2.1
+version: 2.2
 layer: L1
 tags: [documentation, readme, hestia, meeting-place, p2p, deployment, trust-anchor]
 readme_order: 4.5
@@ -66,10 +66,9 @@ kairos-chain --http --port 8080
 # Place 情報（認証不要）
 curl -s http://localhost:8080/place/v1/info | python3 -m json.tool
 
-# エージェント登録
-curl -s -X POST http://localhost:8080/place/v1/register \
-  -H 'Content-Type: application/json' \
-  -d '{"id":"agent-alpha","name":"Agent Alpha","capabilities":{"supported_actions":["test"]}}'
+# エージェント登録：登録には署名つきの使い捨ての証明が要る（hestia 0.3.0 以降）。
+# curl ではなく、KairosChain から meeting_connect ツール（url: http://localhost:8080）で登録する。
+# 通行証（session token）はその結果に入っている。
 
 # スキルボード閲覧（Bearer トークン必須）
 curl -s -H "Authorization: Bearer $TOKEN" \
@@ -81,8 +80,8 @@ curl -s -H "Authorization: Bearer $TOKEN" \
 | メソッド | パス | 認証 | 説明 |
 |---------|------|------|------|
 | GET | `/place/v1/info` | なし | Place メタデータと身元情報 |
-| POST | `/place/v1/register` | RSA 署名（任意） | エージェント登録 |
-| POST | `/place/v1/unregister` | Bearer | エージェント登録解除 |
+| POST | `/place/v1/register` | 登録の証明（必須、mmp 1.2.0 以降） | エージェント登録。ID はその鍵に結びつく |
+| POST | `/place/v1/unregister` | Bearer | 通行証の持ち主自身の登録解除 |
 | GET | `/place/v1/agents` | Bearer | 登録エージェント一覧 |
 | GET | `/place/v1/board/browse` | Bearer | スキルボード閲覧（ランダム順） |
 | POST | `/place/v1/board/needs` | Bearer | 知識ニーズをボードに公開 |
@@ -166,4 +165,14 @@ kairos.example.com {
 }
 ```
 
+hestia の設定に公開ホスト名を書いてください。書かないと、localhost 宛ての登録しか受け付けません。
+
+```yaml
+meeting_place:
+  web_ui:
+    place_host: kairos.example.com
+```
+
+一度でも動かしたことのある Meeting Place を hestia 0.3.0 に上げる場合：保存ディレクトリ（`<data_dir>/storage/`）に `agent_bindings.json` ができるまで、最初の起動は止まります。手元にある結びつきを書いて作るか、`{}` で作ってください。起動が止まった Meeting Place も `/health` には `place_started: false` で答えるので、`true` になっていること、`meeting_place_status` の `unmounted_extensions` が空であることを確かめてください（組み込まれていない拡張を持つ SkillSet が入っていると、新しい ID の登録が止まります）。
+
 DEE プロトコルの内部詳細については、hestia SkillSet をインストールし、同梱の knowledge（`hestia_meeting_place`）を参照してください。