Skip to main content

skdashboard

The SKWorld operator dashboard (coord board + ITIL + kanban + CMDB), extracted from skcapstone (CR-4.3). Serves the :7778 web UI + JSON API, bound to 127.0.0.1 only. Maturity tier: T0 - N/A (no key material), a non-crypto repo; the authorization decision belongs to capauth, see SECURITY.md.

Docs: SOP.md (run it, deploy it, debug it) · SECURITY.md (what is actually enforced) · CONTRIBUTING.md · CHANGELOG.md · CODE_OF_CONDUCT.md

Dependency direction

Coordination access goes through skcoord directly (skcoord.card, skcoord.card_store, skcoord.coordination, skcoord.itil, skcoord.cmdb).

The CMDB operator page at /cmdb reads the canonical event-sourced inventory and checksum-verified reconciliation artifacts. It shows fleet coverage, collector completeness, stale or unreachable evidence, reconciliation history, CI provenance and impact, linked ITIL records, and bounded search filters. Discovery is preview-first. The plan endpoint never writes, and apply remains behind the dashboard capability gate. There are no skcapstone.coordination / skcapstone.card_store imports (CI grep gate). The richer agent / runtime / doctor / trust / model panels reach back into skcapstone at runtime via lazy imports, so skdashboard depends on both but has no import-time cycle (the dashboard is launched on demand, after skcapstone is up).

Launch

This package provides skdashboard-read-only for named read-only listeners. The legacy operator dashboard still has no unit of its own; its deployed unit is skcapstone-dashboard.service, whose ExecStart is ~/.skenv/bin/skcapstone dashboard --port 7778; that CLI resolves skcapstone.dashboard to this package through a transparent alias shim (which lives in skcapstone), so routes are byte-identical to the pre-split dashboard. Full deploy and rollback: SOP.md section 5.

Test

~/.skenv/bin/python -m pytest tests/ -q

Read-only control-plane client and MCP resources

skdashboard.control_plane_client.ControlPlaneClient discovers the canonical same-origin API from /.well-known/skworld-module.json, accepts a caller-owned short-lived bearer, allowlists the frozen V1.1 read and insight-query routes, and validates every successful response against packaged copies of the published JSON Schemas. It supports conditional reads, bounded opaque-cursor pagination, event resume, saved-scope reads, metric-family selection, exact report snapshots, insight proposals, and evidence-reference extraction.

For development without production state, use skdashboard.control_plane_fixture.create_fixture_app() with httpx.ASGITransport. The fixture is public synthetic, deterministic, and contains deliberate model abstention rather than live inference.

skdashboard-control-plane-mcp publishes fixed read-only MCP resources and one hash-addressed report template. It publishes no MCP tools, command preview, authorization, shell, filesystem, connector, or arbitrary endpoint access. The bearer file must be mode 0600 and is never returned in resource metadata.

skdashboard-control-plane-mcp \
  --discovery-url https://DASHBOARD/.well-known/skworld-module.json \
  --bearer-file /run/user/$(id -u)/skdashboard-read.cap

The frozen contract currently advertises insight query while a deployed runtime may not yet serve it, and older overview projections may use scope fields outside the frozen V1.1 schema. The client intentionally fails closed in either case instead of accepting an unvalidated response.

Report delivery simulation

skdashboard.report_delivery.ReportDeliveryService is an offline, disabled-by-default development simulation over immutable report snapshots. Drafts do not create an outbox message. Activation requires an exact report hash, audience, destination, classification, source-rights reference, purpose, retention period, redaction profile, unexpired destination verification, unexpired approval, and a caller-injected policy allow decision for skdashboard.reports.deliver.simulate.

The service stores only bounded delivery metadata, transactional outbox state, content-free simulation receipts, and append-only audit references in a local mode 0600 SQLite database. Only the built-in deterministic SimulationDestination is accepted. There is no HTTP, UI, MCP, network, connector, production destination, account, or deployment surface. Protected Tenant or Matter reports fail closed and remain in the SKLegal external-action state machine.

ATLAS operator cockpit

/cockpit includes a read-only operator plane backed by GET /api/operator/overview. It projects typed conditions and evidence age, the fleet freeze, action lifecycle and verification definitions, execution cooldowns/circuits, watchdog freshness, CMDB scope/completeness, and skbrain health/citation counts. Missing or malformed evidence is shown as unknown; an unreadable freeze source is shown as frozen. Rendering never invokes ATLAS.

Inputs default below ~/.skcapstone/fleet/atlas. Staged deployments may use SKFLEET_ROOT, SKATLAS_ROOT, SKATLAS_BRIEF_JSON, SKATLAS_ACTION_LEDGER, SKATLAS_CMDB_STATUS, SK_WATCHDOG_DIR, and SKBRAIN_OPERATOR_HEALTH to select immutable projection artifacts.

Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

skdashboard-0.1.89.tar.gz (2.5 MB view details)

Uploaded Source

Built Distribution

If you're not sure about the file name format, learn more about wheel file names.

skdashboard-0.1.89-py3-none-any.whl (365.4 kB view details)

Uploaded Python 3

File details

Details for the file skdashboard-0.1.89.tar.gz.

File metadata

  • Download URL: skdashboard-0.1.89.tar.gz
  • Upload date:
  • Size: 2.5 MB
  • Tags: Source
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: twine/7.0.0 CPython/3.13.14

File hashes

Hashes for skdashboard-0.1.89.tar.gz
Algorithm Hash digest
SHA256 907afc7af80d933fa54598c48c4ebe80ec0301d0a4fa8ce8802b6f4feff1e0e8
MD5 e93f845f3f3982835ead407f85a7fff6
BLAKE2b-256 05e3b1cfab8b96a6e3b94e103f0a413c1f12bbb3fa8ad8c9f0e415123cf14077

See more details on using hashes here.

Provenance

The following attestation bundles were made for skdashboard-0.1.89.tar.gz:

Publisher: publish.yml on smilinTux/skdashboard

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

File details

Details for the file skdashboard-0.1.89-py3-none-any.whl.

File metadata

  • Download URL: skdashboard-0.1.89-py3-none-any.whl
  • Upload date:
  • Size: 365.4 kB
  • Tags: Python 3
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: twine/7.0.0 CPython/3.13.14

File hashes

Hashes for skdashboard-0.1.89-py3-none-any.whl
Algorithm Hash digest
SHA256 2c32d2bd03a11f666dd739b1d125c23f1b66afeb213f511d6651ee9e010ac567
MD5 e545830ce45ae26fd465af300d8ecc15
BLAKE2b-256 9dee897838c4ae37135f0f7b8fda4c782730934d19da2f697fd1c9abc92bd4e0

See more details on using hashes here.

Provenance

The following attestation bundles were made for skdashboard-0.1.89-py3-none-any.whl:

Publisher: publish.yml on smilinTux/skdashboard

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

Release history Release notifications | RSS feed

0.1.95

2 files

0.1.94

2 files

0.1.93

2 files

0.1.92

2 files

0.1.91

2 files

0.1.90

2 files

This release

0.1.89 This release

2 files

0.1.88

2 files

0.1.87

2 files

0.1.86

2 files

0.1.85

2 files

0.1.84

2 files

0.1.83

2 files

0.1.78

2 files

0.1.77

2 files

0.1.76

2 files

0.1.75

2 files

0.1.74

2 files

0.1.73

2 files

0.1.72

2 files

0.1.71

2 files

0.1.70

2 files

0.1.69

2 files

0.1.68

2 files

0.1.67

2 files

0.1.66

2 files

0.1.65

2 files

0.1.64

2 files

0.1.63

2 files

0.1.62

2 files

0.1.61

2 files

0.1.60

2 files

0.1.59

2 files

0.1.58

2 files

0.1.57

2 files

0.1.56

2 files

0.1.55

2 files

0.1.54

2 files

0.1.53

2 files

0.1.52

2 files

0.1.51

2 files

0.1.50

2 files

0.1.49

2 files

0.1.48

2 files

0.1.47

2 files

0.1.46

2 files

0.1.45

2 files

0.1.44

2 files

0.1.43

2 files

0.1.42

2 files

0.1.41

2 files

0.1.40

2 files

0.1.39

2 files

0.1.38

2 files

0.1.37

2 files

0.1.36

2 files

0.1.35

2 files

0.1.34

2 files

0.1.33

2 files

0.1.32

2 files

0.1.31

2 files

0.1.30

2 files

0.1.29

2 files

0.1.28

2 files

0.1.27

2 files

0.1.26

2 files

0.1.25

2 files

0.1.24

2 files

0.1.23

2 files

0.1.22

2 files

0.1.21

2 files

0.1.20

2 files

0.1.19

2 files

0.1.18

2 files

0.1.17

2 files

0.1.16

2 files

0.1.15

2 files

0.1.14

2 files

0.1.13

2 files

0.1.12

2 files

0.1.11

2 files

0.1.10

2 files

0.1.9

2 files

0.1.8

2 files

0.1.7

2 files

0.1.6

2 files

0.1.5

2 files

0.1.4

2 files

0.1.3

2 files

0.1.2

2 files

0.1.1

2 files

0.1.0

2 files

0.0.2

2 files

Anthropic, PBC Visionary sponsor Bloomberg Visionary sponsor Hudson River Trading Visionary sponsor Meta Visionary sponsor NVIDIA Visionary sponsor Microsoft Sustainability sponsor Depot Continuous Integration AWS Cloud computing and Security Sponsor Datadog Monitoring Fastly CDN Google Download Analytics Sentry Error logging StatusPage Status page