@smilintux/skcapstone 0.1.0 → 0.2.3

package/docker/Dockerfile

@@ -0,0 +1,61 @@
+# Sovereign Agent Container Image
+#
+# Base image for skcapstone AI agent containers deployed by DockerProvider.
+# Each container runs an AI session (via claude CLI) with the full sovereign
+# stack wired in: skcapstone MCP, SKComm transport, soul blueprint.
+#
+# Build (from repo root):
+#   docker build -f skcapstone/docker/Dockerfile -t skcapstone-agent:latest .
+#
+# Environment variables expected at runtime:
+#   AGENT_NAME          — unique agent instance name
+#   TEAM_NAME           — parent team name
+#   AGENT_ROLE          — role (manager, worker, coder, …)
+#   AGENT_MODEL         — model name or tier (fast, code, reason, nuance)
+#   SOUL_BLUEPRINT      — path or slug of soul blueprint (optional)
+#   SKCAPSTONE_MCP_HOST — host:port of skcapstone MCP server (optional)
+#   SKCAPSTONE_MCP_SOCKET — unix socket path for MCP (optional)
+#   SKCOMM_HOME         — comms root directory (default: /skcomm)
+#
+# Volumes:
+#   /agent   — persistent agent state (config, memory, session state)
+#   /skcomm  — SKComm comms directory (bind-mount from host)
+
+FROM python:3.12-slim
+
+# --- System deps -----------------------------------------------------------
+RUN apt-get update && apt-get install -y --no-install-recommends \
+        curl \
+        git \
+        gnupg2 \
+        ca-certificates \
+    && rm -rf /var/lib/apt/lists/*
+
+# --- Node.js (for claude CLI) ----------------------------------------------
+RUN curl -fsSL https://deb.nodesource.com/setup_22.x | bash - \
+    && apt-get install -y --no-install-recommends nodejs \
+    && rm -rf /var/lib/apt/lists/*
+
+# --- Claude CLI ------------------------------------------------------------
+RUN npm install -g @anthropic-ai/claude-code
+
+# --- Python sovereign stack (local source) ----------------------------------
+COPY skcapstone /src/skcapstone
+COPY skcomm /src/skcomm
+
+RUN pip install --no-cache-dir pydantic pyyaml httpx \
+    && pip install --no-cache-dir -e '/src/skcapstone[all]' \
+    && pip install --no-cache-dir -e /src/skcomm
+
+# --- Directories -----------------------------------------------------------
+RUN mkdir -p /agent/memory /agent/scratch /skcomm /run/skcapstone
+
+VOLUME ["/agent", "/skcomm"]
+
+WORKDIR /agent
+
+# --- Entrypoint ------------------------------------------------------------
+COPY skcapstone/docker/entrypoint.sh /entrypoint.sh
+RUN chmod +x /entrypoint.sh
+
+ENTRYPOINT ["/entrypoint.sh"]

package/docker/compose-templates/dev-team.yml

@@ -0,0 +1,203 @@
+# Dev Squadron — Docker Compose Template
+#
+# A full software development team: architect (manager), two coders,
+# a reviewer, and a documentation writer.  Mirrors the dev-squadron
+# blueprint with Docker as the execution backend.
+#
+# Usage:
+#   cp dev-team.yml docker-compose.yml
+#   docker compose up -d
+#
+# Deploy order (enforced by depends_on):
+#   skcapstone-mcp → architect → coder-alpha, coder-beta
+#                             → reviewer (after both coders)
+#                             → scribe (after architect)
+
+version: "3.9"
+
+x-agent-defaults: &agent-defaults
+  image: skcapstone-agent:latest
+  restart: unless-stopped
+  networks:
+    - skcapstone
+  volumes:
+    - skcomm-data:/skcomm
+
+services:
+
+  # ── Sovereign MCP Server ─────────────────────────────────────────────
+  skcapstone-mcp:
+    image: skcapstone-agent:latest
+    container_name: dev-team-mcp
+    command: ["skcapstone", "mcp", "--stdio"]
+    restart: unless-stopped
+    networks:
+      - skcapstone
+    environment:
+      SKCAPSTONE_HOME: /agent/skcapstone
+    volumes:
+      - skcapstone-mcp-data:/agent/skcapstone
+    labels:
+      - "managed_by=skcapstone"
+      - "team=dev-team"
+      - "role=mcp-server"
+
+  # ── Architect (Manager) ───────────────────────────────────────────────
+  architect:
+    <<: *agent-defaults
+    container_name: dev-team-architect
+    depends_on:
+      - skcapstone-mcp
+    environment:
+      AGENT_NAME: dev-team-architect
+      TEAM_NAME: dev-team
+      AGENT_ROLE: manager
+      AGENT_MODEL: claude-opus-4-6
+      SOUL_BLUEPRINT: souls/architect.yaml
+      SKCAPSTONE_MCP_HOST: "skcapstone-mcp:8765"
+      SKCOMM_HOME: /skcomm
+    volumes:
+      - dev-team-architect-data:/agent
+      - skcomm-data:/skcomm
+    deploy:
+      resources:
+        limits:
+          cpus: "4"
+          memory: 8G
+    labels:
+      - "managed_by=skcapstone"
+      - "team=dev-team"
+      - "agent=dev-team-architect"
+      - "role=manager"
+
+  # ── Coder Alpha (Backend) ─────────────────────────────────────────────
+  coder-alpha:
+    <<: *agent-defaults
+    container_name: dev-team-coder-alpha
+    depends_on:
+      - skcapstone-mcp
+      - architect
+    environment:
+      AGENT_NAME: dev-team-coder-alpha
+      TEAM_NAME: dev-team
+      AGENT_ROLE: coder
+      AGENT_MODEL: claude-sonnet-4-6
+      SOUL_BLUEPRINT: souls/coder.yaml
+      SKCAPSTONE_MCP_HOST: "skcapstone-mcp:8765"
+      SKCOMM_HOME: /skcomm
+    volumes:
+      - dev-team-coder-alpha-data:/agent
+      - skcomm-data:/skcomm
+    deploy:
+      resources:
+        limits:
+          cpus: "2"
+          memory: 4G
+    labels:
+      - "managed_by=skcapstone"
+      - "team=dev-team"
+      - "agent=dev-team-coder-alpha"
+      - "role=coder"
+
+  # ── Coder Beta (Frontend) ─────────────────────────────────────────────
+  coder-beta:
+    <<: *agent-defaults
+    container_name: dev-team-coder-beta
+    depends_on:
+      - skcapstone-mcp
+      - architect
+    environment:
+      AGENT_NAME: dev-team-coder-beta
+      TEAM_NAME: dev-team
+      AGENT_ROLE: coder
+      AGENT_MODEL: claude-sonnet-4-6
+      SOUL_BLUEPRINT: souls/coder.yaml
+      SKCAPSTONE_MCP_HOST: "skcapstone-mcp:8765"
+      SKCOMM_HOME: /skcomm
+    volumes:
+      - dev-team-coder-beta-data:/agent
+      - skcomm-data:/skcomm
+    deploy:
+      resources:
+        limits:
+          cpus: "2"
+          memory: 4G
+    labels:
+      - "managed_by=skcapstone"
+      - "team=dev-team"
+      - "agent=dev-team-coder-beta"
+      - "role=coder"
+
+  # ── Reviewer ──────────────────────────────────────────────────────────
+  reviewer:
+    <<: *agent-defaults
+    container_name: dev-team-reviewer
+    depends_on:
+      - skcapstone-mcp
+      - coder-alpha
+      - coder-beta
+    environment:
+      AGENT_NAME: dev-team-reviewer
+      TEAM_NAME: dev-team
+      AGENT_ROLE: reviewer
+      AGENT_MODEL: claude-sonnet-4-6
+      SOUL_BLUEPRINT: souls/reviewer.yaml
+      SKCAPSTONE_MCP_HOST: "skcapstone-mcp:8765"
+      SKCOMM_HOME: /skcomm
+    volumes:
+      - dev-team-reviewer-data:/agent
+      - skcomm-data:/skcomm
+    deploy:
+      resources:
+        limits:
+          cpus: "1"
+          memory: 2G
+    labels:
+      - "managed_by=skcapstone"
+      - "team=dev-team"
+      - "agent=dev-team-reviewer"
+      - "role=reviewer"
+
+  # ── Scribe (Docs) ─────────────────────────────────────────────────────
+  scribe:
+    <<: *agent-defaults
+    container_name: dev-team-scribe
+    depends_on:
+      - skcapstone-mcp
+      - architect
+    environment:
+      AGENT_NAME: dev-team-scribe
+      TEAM_NAME: dev-team
+      AGENT_ROLE: documentarian
+      AGENT_MODEL: claude-haiku-4-5-20251001
+      SOUL_BLUEPRINT: souls/scribe.yaml
+      SKCAPSTONE_MCP_HOST: "skcapstone-mcp:8765"
+      SKCOMM_HOME: /skcomm
+    volumes:
+      - dev-team-scribe-data:/agent
+      - skcomm-data:/skcomm
+    deploy:
+      resources:
+        limits:
+          cpus: "1"
+          memory: 1G
+    labels:
+      - "managed_by=skcapstone"
+      - "team=dev-team"
+      - "agent=dev-team-scribe"
+      - "role=documentarian"
+
+# ── Volumes ──────────────────────────────────────────────────────────────
+volumes:
+  skcapstone-mcp-data: {}
+  skcomm-data: {}
+  dev-team-architect-data: {}
+  dev-team-coder-alpha-data: {}
+  dev-team-coder-beta-data: {}
+  dev-team-reviewer-data: {}
+  dev-team-scribe-data: {}
+
+# ── Networks ─────────────────────────────────────────────────────────────
+networks:
+  skcapstone:
+    driver: bridge

package/docker/compose-templates/mini-team.yml

@@ -0,0 +1,140 @@
+# Mini Team — Docker Compose Template
+#
+# A lightweight sovereign agent team: one manager + two workers.
+# Perfect for quick experiments, prototyping, and single-host deployments.
+#
+# Usage:
+#   cp mini-team.yml docker-compose.yml
+#   # Edit environment variables as needed
+#   docker compose up -d
+#
+# Customise:
+#   - AGENT_MODEL: override per-service for different model tiers
+#   - SOUL_BLUEPRINT: mount soul YAML files and set the path
+#   - Add ANTHROPIC_API_KEY or OPENAI_API_KEY to the environment
+#   - Increase resource limits in deploy.resources for heavier workloads
+
+version: "3.9"
+
+x-agent-defaults: &agent-defaults
+  image: skcapstone-agent:latest
+  restart: unless-stopped
+  networks:
+    - skcapstone
+  depends_on:
+    - skcapstone-mcp
+  environment:
+    SKCAPSTONE_MCP_HOST: "skcapstone-mcp:8765"
+    SKCOMM_HOME: /skcomm
+  volumes:
+    - skcomm-data:/skcomm
+
+services:
+
+  # ── Sovereign MCP Server ─────────────────────────────────────────────
+  skcapstone-mcp:
+    image: skcapstone-agent:latest
+    container_name: mini-team-mcp
+    command: ["skcapstone", "mcp", "--stdio"]
+    restart: unless-stopped
+    networks:
+      - skcapstone
+    environment:
+      SKCAPSTONE_HOME: /agent/skcapstone
+    volumes:
+      - skcapstone-mcp-data:/agent/skcapstone
+    labels:
+      - "managed_by=skcapstone"
+      - "team=mini-team"
+      - "role=mcp-server"
+
+  # ── Manager ──────────────────────────────────────────────────────────
+  manager:
+    <<: *agent-defaults
+    container_name: mini-team-manager
+    environment:
+      <<: *agent-defaults
+      AGENT_NAME: mini-team-manager
+      TEAM_NAME: mini-team
+      AGENT_ROLE: manager
+      AGENT_MODEL: claude-sonnet-4-6
+      SKCAPSTONE_MCP_HOST: "skcapstone-mcp:8765"
+      SKCOMM_HOME: /skcomm
+    volumes:
+      - mini-team-manager-data:/agent
+      - skcomm-data:/skcomm
+    deploy:
+      resources:
+        limits:
+          cpus: "2"
+          memory: 4G
+    labels:
+      - "managed_by=skcapstone"
+      - "team=mini-team"
+      - "agent=mini-team-manager"
+      - "role=manager"
+
+  # ── Worker Alpha ─────────────────────────────────────────────────────
+  worker-alpha:
+    <<: *agent-defaults
+    container_name: mini-team-worker-alpha
+    environment:
+      <<: *agent-defaults
+      AGENT_NAME: mini-team-worker-alpha
+      TEAM_NAME: mini-team
+      AGENT_ROLE: worker
+      AGENT_MODEL: claude-haiku-4-5-20251001
+      SKCAPSTONE_MCP_HOST: "skcapstone-mcp:8765"
+      SKCOMM_HOME: /skcomm
+    volumes:
+      - mini-team-worker-alpha-data:/agent
+      - skcomm-data:/skcomm
+    deploy:
+      resources:
+        limits:
+          cpus: "1"
+          memory: 2G
+    labels:
+      - "managed_by=skcapstone"
+      - "team=mini-team"
+      - "agent=mini-team-worker-alpha"
+      - "role=worker"
+
+  # ── Worker Beta ──────────────────────────────────────────────────────
+  worker-beta:
+    <<: *agent-defaults
+    container_name: mini-team-worker-beta
+    environment:
+      <<: *agent-defaults
+      AGENT_NAME: mini-team-worker-beta
+      TEAM_NAME: mini-team
+      AGENT_ROLE: worker
+      AGENT_MODEL: claude-haiku-4-5-20251001
+      SKCAPSTONE_MCP_HOST: "skcapstone-mcp:8765"
+      SKCOMM_HOME: /skcomm
+    volumes:
+      - mini-team-worker-beta-data:/agent
+      - skcomm-data:/skcomm
+    deploy:
+      resources:
+        limits:
+          cpus: "1"
+          memory: 2G
+    labels:
+      - "managed_by=skcapstone"
+      - "team=mini-team"
+      - "agent=mini-team-worker-beta"
+      - "role=worker"
+
+# ── Volumes ──────────────────────────────────────────────────────────────
+volumes:
+  skcapstone-mcp-data: {}
+  skcomm-data: {}
+  mini-team-manager-data: {}
+  mini-team-worker-alpha-data: {}
+  mini-team-worker-beta-data: {}
+
+# ── Networks ─────────────────────────────────────────────────────────────
+networks:
+  skcapstone:
+    driver: bridge

package/docker/compose-templates/ops-team.yml

@@ -0,0 +1,173 @@
+# Ops & Monitoring Team — Docker Compose Template
+#
+# Infrastructure operations team: an ops lead (manager), a security sentinel,
+# a monitor, and a self-healing ops agent.  Mirrors the ops-monitoring
+# blueprint with Docker containers and a shared sovereign MCP stack.
+#
+# Usage:
+#   cp ops-team.yml docker-compose.yml
+#   docker compose up -d
+#
+# Key points:
+#   - security-sentinel has read-only access to /skcomm for audit trails
+#   - monitor polls heartbeats every 30m via the MCP heartbeat tools
+#   - ops-agent handles restarts, rotations, and scaling via trustee_* tools
+
+version: "3.9"
+
+x-agent-defaults: &agent-defaults
+  image: skcapstone-agent:latest
+  restart: unless-stopped
+  networks:
+    - skcapstone
+
+services:
+
+  # ── Sovereign MCP Server ─────────────────────────────────────────────
+  skcapstone-mcp:
+    image: skcapstone-agent:latest
+    container_name: ops-team-mcp
+    command: ["skcapstone", "mcp", "--stdio"]
+    restart: unless-stopped
+    networks:
+      - skcapstone
+    environment:
+      SKCAPSTONE_HOME: /agent/skcapstone
+    volumes:
+      - skcapstone-mcp-data:/agent/skcapstone
+    labels:
+      - "managed_by=skcapstone"
+      - "team=ops-team"
+      - "role=mcp-server"
+
+  # ── Ops Lead (Manager) ────────────────────────────────────────────────
+  ops-lead:
+    <<: *agent-defaults
+    container_name: ops-team-ops-lead
+    depends_on:
+      - skcapstone-mcp
+    environment:
+      AGENT_NAME: ops-team-ops-lead
+      TEAM_NAME: ops-team
+      AGENT_ROLE: manager
+      AGENT_MODEL: claude-sonnet-4-6
+      SOUL_BLUEPRINT: souls/ops-lead.yaml
+      SKCAPSTONE_MCP_HOST: "skcapstone-mcp:8765"
+      SKCOMM_HOME: /skcomm
+    volumes:
+      - ops-team-ops-lead-data:/agent
+      - skcomm-data:/skcomm
+    deploy:
+      resources:
+        limits:
+          cpus: "2"
+          memory: 4G
+    labels:
+      - "managed_by=skcapstone"
+      - "team=ops-team"
+      - "agent=ops-team-ops-lead"
+      - "role=manager"
+
+  # ── Security Sentinel ─────────────────────────────────────────────────
+  security-sentinel:
+    <<: *agent-defaults
+    container_name: ops-team-security-sentinel
+    depends_on:
+      - skcapstone-mcp
+      - ops-lead
+    environment:
+      AGENT_NAME: ops-team-security-sentinel
+      TEAM_NAME: ops-team
+      AGENT_ROLE: security
+      AGENT_MODEL: claude-sonnet-4-6
+      SOUL_BLUEPRINT: souls/sentinel.yaml
+      SKCAPSTONE_MCP_HOST: "skcapstone-mcp:8765"
+      SKCOMM_HOME: /skcomm
+    volumes:
+      - ops-team-security-sentinel-data:/agent
+      - skcomm-data:/skcomm:ro
+    deploy:
+      resources:
+        limits:
+          cpus: "2"
+          memory: 4G
+    labels:
+      - "managed_by=skcapstone"
+      - "team=ops-team"
+      - "agent=ops-team-security-sentinel"
+      - "role=security"
+
+  # ── Monitor ───────────────────────────────────────────────────────────
+  monitor:
+    <<: *agent-defaults
+    container_name: ops-team-monitor
+    depends_on:
+      - skcapstone-mcp
+    environment:
+      AGENT_NAME: ops-team-monitor
+      TEAM_NAME: ops-team
+      AGENT_ROLE: ops
+      AGENT_MODEL: claude-haiku-4-5-20251001
+      SKCAPSTONE_MCP_HOST: "skcapstone-mcp:8765"
+      SKCOMM_HOME: /skcomm
+      # Poll interval for heartbeat checks (seconds)
+      MONITOR_INTERVAL: "1800"
+    volumes:
+      - ops-team-monitor-data:/agent
+      - skcomm-data:/skcomm
+    deploy:
+      resources:
+        limits:
+          cpus: "1"
+          memory: 1G
+    labels:
+      - "managed_by=skcapstone"
+      - "team=ops-team"
+      - "agent=ops-team-monitor"
+      - "role=ops"
+
+  # ── Ops Agent (Self-healing) ──────────────────────────────────────────
+  ops-agent:
+    <<: *agent-defaults
+    container_name: ops-team-ops-agent
+    depends_on:
+      - skcapstone-mcp
+      - ops-lead
+    environment:
+      AGENT_NAME: ops-team-ops-agent
+      TEAM_NAME: ops-team
+      AGENT_ROLE: ops
+      AGENT_MODEL: claude-haiku-4-5-20251001
+      SKCAPSTONE_MCP_HOST: "skcapstone-mcp:8765"
+      SKCOMM_HOME: /skcomm
+      # Docker socket for trustee operations (restart, rotate, scale)
+      DOCKER_HOST: "unix:///var/run/docker.sock"
+    volumes:
+      - ops-team-ops-agent-data:/agent
+      - skcomm-data:/skcomm
+      # Bind Docker socket so the ops agent can restart containers
+      - /var/run/docker.sock:/var/run/docker.sock:ro
+    deploy:
+      resources:
+        limits:
+          cpus: "1"
+          memory: 2G
+    labels:
+      - "managed_by=skcapstone"
+      - "team=ops-team"
+      - "agent=ops-team-ops-agent"
+      - "role=ops"
+
+# ── Volumes ──────────────────────────────────────────────────────────────
+volumes:
+  skcapstone-mcp-data: {}
+  skcomm-data: {}
+  ops-team-ops-lead-data: {}
+  ops-team-security-sentinel-data: {}
+  ops-team-monitor-data: {}
+  ops-team-ops-agent-data: {}
+
+# ── Networks ─────────────────────────────────────────────────────────────
+networks:
+  skcapstone:
+    driver: bridge