skopos-fleet 0.1.0__tar.gz

skopos_fleet-0.1.0/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Stats Fleet Center contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

skopos_fleet-0.1.0/PKG-INFO

@@ -0,0 +1,195 @@
+Metadata-Version: 2.4
+Name: skopos-fleet
+Version: 0.1.0
+Summary: SKOPOS (Σκοπός) — self-hosted nginx analytics and fleet security for the AICOM ecosystem.
+Author: AICOM (alexar76)
+License: MIT
+Keywords: nginx,analytics,security,streamlit,aimarket,aicom,fleet,ssh
+Classifier: Development Status :: 3 - Alpha
+Classifier: License :: OSI Approved :: MIT License
+Classifier: Programming Language :: Python :: 3.11
+Classifier: Programming Language :: Python :: 3.12
+Requires-Python: >=3.11
+Description-Content-Type: text/markdown
+License-File: LICENSE
+Requires-Dist: streamlit>=1.33
+Requires-Dist: pandas>=2.0
+Requires-Dist: plotly>=5.18
+Requires-Dist: pyyaml>=6.0
+Requires-Dist: paramiko>=3.4
+Requires-Dist: python-dotenv>=1.0
+Requires-Dist: httpx>=0.27
+Requires-Dist: geoip2>=4.8
+Provides-Extra: dev
+Requires-Dist: pytest>=8.0; extra == "dev"
+Provides-Extra: postgres
+Requires-Dist: psycopg[binary]>=3.2; extra == "postgres"
+Dynamic: license-file
+
+# SKOPOS — fleet observability satellite of the AICOM ecosystem
+
+<!-- aicom-readme-badges -->
+<p align="center">
+  <a href="https://github.com/alexar76/skopos/actions/workflows/ci.yml"><img src="https://img.shields.io/github/actions/workflow/status/alexar76/skopos/ci.yml?branch=main&label=CI" alt="CI" /></a>
+  <a href="https://github.com/alexar76/skopos/actions/workflows/pages.yml"><img src="https://img.shields.io/github/actions/workflow/status/alexar76/skopos/pages.yml?branch=main&label=Pages" alt="Pages deploy" /></a>
+  <a href="https://skopos.modelmarket.dev/"><img src="https://img.shields.io/badge/demo-live-brightgreen" alt="Live demo" /></a>
+  <a href="https://alexar76.github.io/skopos/"><img src="https://img.shields.io/badge/landing-cosmic-4de8ff" alt="Cosmic landing" /></a>
+  <img src="https://img.shields.io/badge/python-%3E%3D3.11-brightgreen.svg" alt="Python >=3.11" />
+  <img src="https://img.shields.io/badge/tests-226_passing-brightgreen" alt="226 tests passing" />
+  <img src="https://img.shields.io/badge/stack-Streamlit%20%2B%20PostgreSQL-6e40c9" alt="Streamlit + PostgreSQL" />
+  <a href="#testing--coverage"><img src="docs/badges/coverage.svg" alt="Test coverage" /></a>
+  <a href="LICENSE"><img src="https://img.shields.io/badge/License-MIT-blue.svg" alt="License: MIT" /></a>
+</p>
+<!-- /aicom-readme-badges -->
+
+
+
+> **Self-hosted nginx & Apache analytics and AI security for your server fleet** — GA-like HTTP dashboards, Security Center with 3D threat map, scan history, and an AI agent with voice input. No third-party trackers; data stays on your infrastructure.
+
+<p align="center">
+  <a href="https://skopos.modelmarket.dev/app/">
+    <img src="docs/screenshots/readme/hero-banner.png" alt="SKOPOS — Web Analytics and Security Center with 3D threat map" width="100%" />
+  </a>
+</p>
+
+<p align="center">
+  <strong><a href="https://skopos.modelmarket.dev">Live demo</a></strong>
+  ·
+  <strong><a href="https://alexar76.github.io/skopos/">Landing</a></strong>
+  ·
+  nine built-in themes
+</p>
+
+In Greek, **skopos** (σκοπός) means *watcher* or *scout*. **SKOPOS** is the fleet observability satellite of the [AICOM / AIMarket ecosystem](https://magic-ai-factory.com): nginx traffic over SSH, security posture across factory / metis / oracle hosts, and an LLM analyst in the sidebar.
+
+| | |
+|---|---|
+| **Role** | SSH log collection → SQLite/PostgreSQL analytics → Security Center + AI agent |
+| **Live demo** | [skopos.modelmarket.dev](https://skopos.modelmarket.dev) |
+| **Landing (GitHub Pages)** | [alexar76.github.io/skopos](https://alexar76.github.io/skopos/) |
+| **Monitors** | **nginx** access logs (primary), **Apache** combined, CPU/RAM/disk, ports, fail2ban, port knocks |
+| **Charter** | Read-only SSH probes · self-hosted data · optional dashboard password |
+
+### Features
+
+- **Analytics** — nginx access logs over SSH, SQLite, Streamlit charts, traffic globe
+- **Security** — CPU/RAM/disk/network, port audit, firewall, cyberpunk 3D threat map, consolidated **Security Report**
+- **Scan History** — score timeline, findings trends, snapshot comparison
+- **Auto-scan** — configurable background security scans (default every 60 min)
+- **AI Agent** — OpenRouter (default), DeepSeek, OpenAI, Anthropic, Ollama, LM Studio; sidebar chat with voice input
+- **i18n** — English (default), Russian, Spanish (`locales/`)
+
+### Quick start
+
+See [docs/quickstart.md](docs/quickstart.md).
+
+```bash
+cp servers.example.yaml servers.yaml
+cp agent.example.yaml agent.yaml
+export OPENROUTER_API_KEY=sk-or-...
+python skoposctl.py collect
+python skoposctl.py security-scan
+streamlit run dashboard.py
+```
+
+| Page | URL |
+|------|-----|
+| Analytics | `http://localhost:8501` |
+| Security | sidebar → **Security** |
+| Scan History | sidebar → **Scan History** |
+| Settings | sidebar → **Settings** |
+
+### Security
+
+- **Security Score** (0–100, grade A–F) in sidebar on every page
+- **Threat alerts** banner when critical/high issues exist
+- **Dashboard password** — set/change/regenerate in the admin panel; only a
+  salted PBKDF2 **hash** is stored in the DB (env `SKOPOS_DASHBOARD_PASSWORD`
+  still supported for bootstrap). A post-deploy modal prompts you to set one, and
+  passwords expire after 90 days with a Telegram reminder. See
+  [configuration → Dashboard password & rotation](docs/en/guide/configuration.md)
+- **SKOPOS_SSH_STRICT_HOST_KEYS=1** — verify SSH host keys (recommended)
+- See [docs/audit-findings.md](docs/audit-findings.md)
+
+### Documentation
+
+| Doc | Description |
+|-----|-------------|
+| **[In-app Documentation](http://localhost:8501/Documentation)** | Guides with screenshots (also in sidebar / top bar) |
+| [Quick Start](docs/quickstart.md) | 5-minute setup |
+| [User Guide](docs/user-guide.md) | Full UI reference |
+| [Use Cases](docs/use-cases.md) | Common workflows |
+| [Security Module](docs/security.md) | Architecture & extension |
+| [nginx scope](docs/en/guide/nginx.md) | **Analytics are nginx-only** — disclaimer & log format |
+| [CHANGELOG](CHANGELOG.md) | Release notes |
+
+> **Analytics scope:** traffic dashboards parse **nginx access logs** by default. **Apache combined** logs are supported when `apache.enabled: true`. Security probes are stack-agnostic.
+
+### Configure servers
+
+Edit `servers.yaml` — SSH host, nginx log paths. See `servers.example.yaml`.
+
+For per-domain analytics, include `$host` in nginx `log_format`.
+
+### AI agent
+
+Default provider: **OpenRouter** via `OPENROUTER_API_KEY`. Edit `agent.yaml` for DeepSeek, OpenAI, Anthropic, Ollama, or LM Studio.
+
+For a full prioritized remediation report, open **Security → Security Report**. The sidebar agent supports follow-up chat (including voice) on every page.
+
+### Docker
+
+```bash
+docker compose up -d --build
+```
+
+Open `http://localhost:8501`
+
+### License
+
+MIT — see [LICENSE](LICENSE).
+
+### Testing & coverage
+
+```bash
+pip install -r requirements.txt pytest pytest-cov
+bash scripts/ci_coverage_badge.sh -- tests/ -q --cov=skopos
+```
+
+**226** pytest cases · line coverage on `skopos/` tracked in [`docs/badges/coverage.svg`](docs/badges/coverage.svg) (regenerate with `bash scripts/ci_coverage_badge.sh`, verified by [CI](.github/workflows/ci.yml)).
+
+### Screenshots
+
+Captured from [skopos.modelmarket.dev](https://skopos.modelmarket.dev/app/) — Analytics page in six themes (sidebar **Theme** picker):
+
+<p align="center">
+  <img src="docs/screenshots/themes/analytics-light.png" alt="Light theme" width="48%" />
+  <img src="docs/screenshots/themes/analytics-premium.png" alt="Premium theme" width="48%" />
+</p>
+<p align="center"><sub>Light · Premium</sub></p>
+
+<p align="center">
+  <img src="docs/screenshots/themes/analytics-midnight.png" alt="Cosmos theme" width="48%" />
+  <img src="docs/screenshots/themes/analytics-ocean.png" alt="Ocean theme" width="48%" />
+</p>
+<p align="center"><sub>Cosmos (midnight) · Ocean</sub></p>
+
+<p align="center">
+  <img src="docs/screenshots/themes/analytics-aurora.png" alt="Aurora theme" width="48%" />
+  <img src="docs/screenshots/themes/analytics-slate.png" alt="Slate theme" width="48%" />
+</p>
+<p align="center"><sub>Aurora · Slate</sub></p>
+
+| View | Screenshot |
+|------|------------|
+| Security — 3D Threat Map | ![3D threat map](docs/screenshots/en/security-3d-map.png) |
+| Sidebar & navigation | ![Sidebar](docs/screenshots/en/sidebar-nav.png) |
+| Floating AI agent | ![Agent](docs/screenshots/en/floating-agent.png) |
+
+Regenerate hero + theme gallery from production:
+
+```bash
+export SKOPOS_DASHBOARD_PASSWORD='…'
+pip install playwright pillow && playwright install chromium
+python scripts/capture_readme_screenshots.py --base-url https://skopos.modelmarket.dev/app/
+```

skopos_fleet-0.1.0/README.md

@@ -0,0 +1,167 @@
+# SKOPOS — fleet observability satellite of the AICOM ecosystem
+
+<!-- aicom-readme-badges -->
+<p align="center">
+  <a href="https://github.com/alexar76/skopos/actions/workflows/ci.yml"><img src="https://img.shields.io/github/actions/workflow/status/alexar76/skopos/ci.yml?branch=main&label=CI" alt="CI" /></a>
+  <a href="https://github.com/alexar76/skopos/actions/workflows/pages.yml"><img src="https://img.shields.io/github/actions/workflow/status/alexar76/skopos/pages.yml?branch=main&label=Pages" alt="Pages deploy" /></a>
+  <a href="https://skopos.modelmarket.dev/"><img src="https://img.shields.io/badge/demo-live-brightgreen" alt="Live demo" /></a>
+  <a href="https://alexar76.github.io/skopos/"><img src="https://img.shields.io/badge/landing-cosmic-4de8ff" alt="Cosmic landing" /></a>
+  <img src="https://img.shields.io/badge/python-%3E%3D3.11-brightgreen.svg" alt="Python >=3.11" />
+  <img src="https://img.shields.io/badge/tests-226_passing-brightgreen" alt="226 tests passing" />
+  <img src="https://img.shields.io/badge/stack-Streamlit%20%2B%20PostgreSQL-6e40c9" alt="Streamlit + PostgreSQL" />
+  <a href="#testing--coverage"><img src="docs/badges/coverage.svg" alt="Test coverage" /></a>
+  <a href="LICENSE"><img src="https://img.shields.io/badge/License-MIT-blue.svg" alt="License: MIT" /></a>
+</p>
+<!-- /aicom-readme-badges -->
+
+
+
+> **Self-hosted nginx & Apache analytics and AI security for your server fleet** — GA-like HTTP dashboards, Security Center with 3D threat map, scan history, and an AI agent with voice input. No third-party trackers; data stays on your infrastructure.
+
+<p align="center">
+  <a href="https://skopos.modelmarket.dev/app/">
+    <img src="docs/screenshots/readme/hero-banner.png" alt="SKOPOS — Web Analytics and Security Center with 3D threat map" width="100%" />
+  </a>
+</p>
+
+<p align="center">
+  <strong><a href="https://skopos.modelmarket.dev">Live demo</a></strong>
+  ·
+  <strong><a href="https://alexar76.github.io/skopos/">Landing</a></strong>
+  ·
+  nine built-in themes
+</p>
+
+In Greek, **skopos** (σκοπός) means *watcher* or *scout*. **SKOPOS** is the fleet observability satellite of the [AICOM / AIMarket ecosystem](https://magic-ai-factory.com): nginx traffic over SSH, security posture across factory / metis / oracle hosts, and an LLM analyst in the sidebar.
+
+| | |
+|---|---|
+| **Role** | SSH log collection → SQLite/PostgreSQL analytics → Security Center + AI agent |
+| **Live demo** | [skopos.modelmarket.dev](https://skopos.modelmarket.dev) |
+| **Landing (GitHub Pages)** | [alexar76.github.io/skopos](https://alexar76.github.io/skopos/) |
+| **Monitors** | **nginx** access logs (primary), **Apache** combined, CPU/RAM/disk, ports, fail2ban, port knocks |
+| **Charter** | Read-only SSH probes · self-hosted data · optional dashboard password |
+
+### Features
+
+- **Analytics** — nginx access logs over SSH, SQLite, Streamlit charts, traffic globe
+- **Security** — CPU/RAM/disk/network, port audit, firewall, cyberpunk 3D threat map, consolidated **Security Report**
+- **Scan History** — score timeline, findings trends, snapshot comparison
+- **Auto-scan** — configurable background security scans (default every 60 min)
+- **AI Agent** — OpenRouter (default), DeepSeek, OpenAI, Anthropic, Ollama, LM Studio; sidebar chat with voice input
+- **i18n** — English (default), Russian, Spanish (`locales/`)
+
+### Quick start
+
+See [docs/quickstart.md](docs/quickstart.md).
+
+```bash
+cp servers.example.yaml servers.yaml
+cp agent.example.yaml agent.yaml
+export OPENROUTER_API_KEY=sk-or-...
+python skoposctl.py collect
+python skoposctl.py security-scan
+streamlit run dashboard.py
+```
+
+| Page | URL |
+|------|-----|
+| Analytics | `http://localhost:8501` |
+| Security | sidebar → **Security** |
+| Scan History | sidebar → **Scan History** |
+| Settings | sidebar → **Settings** |
+
+### Security
+
+- **Security Score** (0–100, grade A–F) in sidebar on every page
+- **Threat alerts** banner when critical/high issues exist
+- **Dashboard password** — set/change/regenerate in the admin panel; only a
+  salted PBKDF2 **hash** is stored in the DB (env `SKOPOS_DASHBOARD_PASSWORD`
+  still supported for bootstrap). A post-deploy modal prompts you to set one, and
+  passwords expire after 90 days with a Telegram reminder. See
+  [configuration → Dashboard password & rotation](docs/en/guide/configuration.md)
+- **SKOPOS_SSH_STRICT_HOST_KEYS=1** — verify SSH host keys (recommended)
+- See [docs/audit-findings.md](docs/audit-findings.md)
+
+### Documentation
+
+| Doc | Description |
+|-----|-------------|
+| **[In-app Documentation](http://localhost:8501/Documentation)** | Guides with screenshots (also in sidebar / top bar) |
+| [Quick Start](docs/quickstart.md) | 5-minute setup |
+| [User Guide](docs/user-guide.md) | Full UI reference |
+| [Use Cases](docs/use-cases.md) | Common workflows |
+| [Security Module](docs/security.md) | Architecture & extension |
+| [nginx scope](docs/en/guide/nginx.md) | **Analytics are nginx-only** — disclaimer & log format |
+| [CHANGELOG](CHANGELOG.md) | Release notes |
+
+> **Analytics scope:** traffic dashboards parse **nginx access logs** by default. **Apache combined** logs are supported when `apache.enabled: true`. Security probes are stack-agnostic.
+
+### Configure servers
+
+Edit `servers.yaml` — SSH host, nginx log paths. See `servers.example.yaml`.
+
+For per-domain analytics, include `$host` in nginx `log_format`.
+
+### AI agent
+
+Default provider: **OpenRouter** via `OPENROUTER_API_KEY`. Edit `agent.yaml` for DeepSeek, OpenAI, Anthropic, Ollama, or LM Studio.
+
+For a full prioritized remediation report, open **Security → Security Report**. The sidebar agent supports follow-up chat (including voice) on every page.
+
+### Docker
+
+```bash
+docker compose up -d --build
+```
+
+Open `http://localhost:8501`
+
+### License
+
+MIT — see [LICENSE](LICENSE).
+
+### Testing & coverage
+
+```bash
+pip install -r requirements.txt pytest pytest-cov
+bash scripts/ci_coverage_badge.sh -- tests/ -q --cov=skopos
+```
+
+**226** pytest cases · line coverage on `skopos/` tracked in [`docs/badges/coverage.svg`](docs/badges/coverage.svg) (regenerate with `bash scripts/ci_coverage_badge.sh`, verified by [CI](.github/workflows/ci.yml)).
+
+### Screenshots
+
+Captured from [skopos.modelmarket.dev](https://skopos.modelmarket.dev/app/) — Analytics page in six themes (sidebar **Theme** picker):
+
+<p align="center">
+  <img src="docs/screenshots/themes/analytics-light.png" alt="Light theme" width="48%" />
+  <img src="docs/screenshots/themes/analytics-premium.png" alt="Premium theme" width="48%" />
+</p>
+<p align="center"><sub>Light · Premium</sub></p>
+
+<p align="center">
+  <img src="docs/screenshots/themes/analytics-midnight.png" alt="Cosmos theme" width="48%" />
+  <img src="docs/screenshots/themes/analytics-ocean.png" alt="Ocean theme" width="48%" />
+</p>
+<p align="center"><sub>Cosmos (midnight) · Ocean</sub></p>
+
+<p align="center">
+  <img src="docs/screenshots/themes/analytics-aurora.png" alt="Aurora theme" width="48%" />
+  <img src="docs/screenshots/themes/analytics-slate.png" alt="Slate theme" width="48%" />
+</p>
+<p align="center"><sub>Aurora · Slate</sub></p>
+
+| View | Screenshot |
+|------|------------|
+| Security — 3D Threat Map | ![3D threat map](docs/screenshots/en/security-3d-map.png) |
+| Sidebar & navigation | ![Sidebar](docs/screenshots/en/sidebar-nav.png) |
+| Floating AI agent | ![Agent](docs/screenshots/en/floating-agent.png) |
+
+Regenerate hero + theme gallery from production:
+
+```bash
+export SKOPOS_DASHBOARD_PASSWORD='…'
+pip install playwright pillow && playwright install chromium
+python scripts/capture_readme_screenshots.py --base-url https://skopos.modelmarket.dev/app/
+```

skopos_fleet-0.1.0/pyproject.toml

@@ -0,0 +1,47 @@
+[build-system]
+requires = ["setuptools>=68", "wheel"]
+build-backend = "setuptools.build_meta"
+
+[project]
+name = "skopos-fleet"
+version = "0.1.0"
+description = "SKOPOS (Σκοπός) — self-hosted nginx analytics and fleet security for the AICOM ecosystem."
+readme = "README.md"
+license = { text = "MIT" }
+requires-python = ">=3.11"
+authors = [{ name = "AICOM (alexar76)" }]
+keywords = ["nginx", "analytics", "security", "streamlit", "aimarket", "aicom", "fleet", "ssh"]
+classifiers = [
+    "Development Status :: 3 - Alpha",
+    "License :: OSI Approved :: MIT License",
+    "Programming Language :: Python :: 3.11",
+    "Programming Language :: Python :: 3.12",
+]
+dependencies = [
+    "streamlit>=1.33",
+    "pandas>=2.0",
+    "plotly>=5.18",
+    "pyyaml>=6.0",
+    "paramiko>=3.4",
+    "python-dotenv>=1.0",
+    "httpx>=0.27",
+    "geoip2>=4.8",
+]
+
+[project.optional-dependencies]
+dev = ["pytest>=8.0"]
+postgres = ["psycopg[binary]>=3.2"]
+
+[project.scripts]
+skoposctl = "skoposctl:main"
+
+[tool.setuptools]
+py-modules = ["skoposctl"]
+
+[tool.setuptools.packages.find]
+where = ["."]
+include = ["skopos*"]
+
+[tool.pytest.ini_options]
+testpaths = ["tests"]
+pythonpath = ["."]

skopos_fleet-0.1.0/setup.cfg

@@ -0,0 +1,4 @@
+[egg_info]
+tag_build = 
+tag_date = 0
+

skopos_fleet-0.1.0/skopos/__init__.py

@@ -0,0 +1,2 @@
+__all__ = ["config", "db", "collector", "nginx", "ssh"]
+

skopos_fleet-0.1.0/skopos/agent/__init__.py

@@ -0,0 +1,18 @@
+from .analyst import AnalysisResult, chat_with_agent, chat_with_agent_stream, run_security_analysis
+from .config import AgentConfig, load_agent_config
+from .context import build_agent_context, build_server_context
+from .providers import ChatMessage, LLMProviderError, chat_completion
+
+__all__ = [
+    "AgentConfig",
+    "AnalysisResult",
+    "ChatMessage",
+    "LLMProviderError",
+    "build_agent_context",
+    "build_server_context",
+    "chat_completion",
+    "chat_with_agent",
+    "chat_with_agent_stream",
+    "load_agent_config",
+    "run_security_analysis",
+]

skopos_fleet-0.1.0/skopos/agent/analyst.py

@@ -0,0 +1,98 @@
+from __future__ import annotations
+
+from dataclasses import dataclass
+
+from ..config import AppConfig
+from ..db import connect_for_config, init_db
+from .config import AgentConfig, load_agent_config
+from .context import build_server_context
+from .providers import ChatMessage, chat_completion, chat_completion_stream
+
+
+@dataclass(frozen=True)
+class AnalysisResult:
+    provider: str
+    model: str
+    report: str
+
+
+ANALYSIS_PROMPT = """Perform a comprehensive security audit based on the server context below.
+
+Structure your report with:
+1. Executive summary (risk level: Critical/High/Medium/Low)
+2. Open ports & exposure analysis
+3. Resource health (CPU, memory, disk)
+4. Docker containers — role, ports, CPU/RAM per container, stopped vs running
+5. Authentication & SSH hardening
+6. HTTP attack surface from traffic logs
+7. Prioritized remediation checklist (numbered, actionable)
+
+Be specific to the actual data. Reference server names and ports."""
+
+
+def run_security_analysis(
+    app_cfg: AppConfig,
+    agent_cfg: AgentConfig,
+    *,
+    server_name: str | None = None,
+    provider_id: str | None = None,
+) -> AnalysisResult:
+    con = connect_for_config(app_cfg)
+    init_db(con)
+    try:
+        context = build_server_context(app_cfg, con, server_name=server_name)
+        context = context[: agent_cfg.max_context_chars]
+        prov_id = provider_id or agent_cfg.default_provider
+        prov = agent_cfg.providers[prov_id]
+        messages = [
+            ChatMessage(role="system", content=agent_cfg.system_prompt),
+            ChatMessage(
+                role="user",
+                content=f"{ANALYSIS_PROMPT}\n\n---\n\n{context}",
+            ),
+        ]
+        report = chat_completion(agent_cfg, messages, provider_id=prov_id)
+        return AnalysisResult(provider=prov_id, model=prov.model, report=report)
+    finally:
+        con.close()
+
+
+def chat_with_agent(
+    agent_cfg: AgentConfig,
+    history: list[ChatMessage],
+    user_message: str,
+    *,
+    context: str,
+    provider_id: str | None = None,
+) -> str:
+    messages = [
+        ChatMessage(role="system", content=agent_cfg.system_prompt),
+        ChatMessage(
+            role="user",
+            content=f"Server context (for reference):\n\n{context[: agent_cfg.max_context_chars]}",
+        ),
+        ChatMessage(role="assistant", content="Understood. I have the server context. How can I help?"),
+    ]
+    messages.extend(history)
+    messages.append(ChatMessage(role="user", content=user_message))
+    return chat_completion(agent_cfg, messages, provider_id=provider_id)
+
+
+def chat_with_agent_stream(
+    agent_cfg: AgentConfig,
+    history: list[ChatMessage],
+    user_message: str,
+    *,
+    context: str,
+    provider_id: str | None = None,
+):
+    messages = [
+        ChatMessage(role="system", content=agent_cfg.system_prompt),
+        ChatMessage(
+            role="user",
+            content=f"Server context (for reference):\n\n{context[: agent_cfg.max_context_chars]}",
+        ),
+    ]
+    messages.extend(history)
+    messages.append(ChatMessage(role="user", content=user_message))
+    yield from chat_completion_stream(agent_cfg, messages, provider_id=provider_id)

skopos_fleet-0.1.0/skopos/agent/config.py

@@ -0,0 +1,103 @@
+from __future__ import annotations
+
+import os
+from dataclasses import dataclass
+from pathlib import Path
+from typing import Any, Literal
+
+import yaml
+
+ProviderKind = Literal["openai_compatible", "anthropic_compatible", "ollama", "lmstudio"]
+
+
+@dataclass(frozen=True)
+class ProviderConfig:
+    id: str
+    kind: ProviderKind
+    base_url: str
+    model: str
+    api_key: str | None = None
+    api_key_env: str | None = None
+    extra_headers: dict[str, str] | None = None
+
+
+@dataclass(frozen=True)
+class AgentConfig:
+    default_provider: str
+    providers: dict[str, ProviderConfig]
+    system_prompt: str
+    max_context_chars: int = 120_000
+    briefing_provider: str | None = None
+    briefing_model: str | None = None
+
+
+def _resolve_api_key(raw: dict[str, Any]) -> str | None:
+    if raw.get("api_key"):
+        return str(raw["api_key"])
+    env_name = raw.get("api_key_env")
+    if env_name:
+        return os.environ.get(str(env_name))
+    return None
+
+
+def load_agent_config(path: str = "./agent.yaml") -> AgentConfig:
+    p = Path(path).expanduser()
+    if not p.exists():
+        p = Path(path.replace(".yaml", ".example.yaml")).expanduser()
+    if not p.exists():
+        raise FileNotFoundError(f"Agent config not found: {path}")
+
+    raw = yaml.safe_load(p.read_text(encoding="utf-8"))
+    if not isinstance(raw, dict):
+        raise ValueError("agent.yaml must be a mapping")
+
+    default = str(raw.get("default_provider", "deepseek"))
+    providers_raw = raw.get("providers") or {}
+    providers: dict[str, ProviderConfig] = {}
+    for pid, pr in providers_raw.items():
+        if not isinstance(pr, dict):
+            continue
+        providers[str(pid)] = ProviderConfig(
+            id=str(pid),
+            kind=str(pr.get("kind", "openai_compatible")),  # type: ignore[arg-type]
+            base_url=str(pr.get("base_url", "")),
+            model=str(pr.get("model", "")),
+            api_key=_resolve_api_key(pr),
+            api_key_env=str(pr["api_key_env"]) if pr.get("api_key_env") else None,
+            extra_headers=pr.get("extra_headers"),
+        )
+
+    return AgentConfig(
+        default_provider=default,
+        providers=providers,
+        system_prompt=str(
+            raw.get(
+                "system_prompt",
+                "You are a senior security analyst for production Linux servers.",
+            )
+        ),
+        max_context_chars=int(raw.get("max_context_chars", 120_000)),
+        briefing_provider=str(raw["briefing_provider"]).strip() if raw.get("briefing_provider") else None,
+        briefing_model=str(raw["briefing_model"]).strip() if raw.get("briefing_model") else None,
+    )
+
+
+def get_provider(cfg: AgentConfig, provider_id: str | None = None) -> ProviderConfig:
+    pid = provider_id or cfg.default_provider
+    if pid not in cfg.providers:
+        raise KeyError(f"Unknown provider '{pid}'. Available: {', '.join(cfg.providers)}")
+    prov = cfg.providers[pid]
+    if not prov.api_key and prov.kind in ("openai_compatible", "anthropic_compatible"):
+        if prov.api_key_env:
+            key = os.environ.get(prov.api_key_env)
+            if key:
+                return ProviderConfig(
+                    id=prov.id,
+                    kind=prov.kind,
+                    base_url=prov.base_url,
+                    model=prov.model,
+                    api_key=key,
+                    api_key_env=prov.api_key_env,
+                    extra_headers=prov.extra_headers,
+                )
+    return prov