மாற்று பதிவேடு
என்ன புதிது.
அது கப்பல்கள் போல், தளத்தில் ஒவ்வொரு மேம்பாடு.
· MCPGatewayService
Tool descriptors, schema builder and validator, registry
A pattern in a tool's schema is untrusted input: ext_* tools carry their org MCP server's own schema. One Java cannot compile is left to the upstream (and refused on a Kamo tool at start-up); a match is cut off after 100 ms so a backtracking pattern cannot hold a gateway thread. A null array item is checked, not skipped (ruling SP05-T5).
· KlusterServices
MCP bridge from the Tool Plane to computer-use-linux
Streamable HTTP on 9811 (JSON answers only, GET 405, Origin 403, per-wake bearer 401, take-over 409) in front of one stdio computer-use-linux child per session. Only tools/call counts as activity for the idle clock. Beyond the plan text: a failed initialize hands out no session and stops the child; a spawn failure of any kind is a 503; request ids must be strings or integers (rmcp drops others unanswered); closing or replacing a session answers what still waits on it at once, with pending requests keyed per child; the child's output is read in bounded lines and junk (too long, not JSON, nested too deep, unhashable tool names) is skipped without killing the reader; every child is reaped and its pipes closed; a caller that hangs up is one log line, not a traceback.
· kamo-shared-library
Shared routing types for the Kamo AI Router
· kamo-marketing
KamoUniverse launch countdown
Counts down to Monday, September 28 at 12:00 PM Pacific. - Homepage section under the hero: flip-card countdown, warp-speed starfield, the thirteen products orbiting the KamoUniverse logo (tap one for fireworks), click-anywhere fireworks, hold-to-hyperdrive with a jump counter, launch readiness bar, launch time in Pacific and the reader's own zone, and a calendar reminder (.ics or Google Calendar). - The final ten seconds take over the section; at zero it flips to "KamoUniverse is live" with a fireworks finale and a link in. - Site-wide banner countdown on every page, linking to the section, then to KamoUniverse once live. Below 1100px the article link steps aside. - Both retire on their own a week after launch. Animation runs outside React on a canvas, starts from the idle queue, pauses off screen and in hidden tabs, and is a still frame under prefers-reduced-motion.
· kamo-internal
Typed section fields, schedule and hours editors, job-description and brief previews
· MCPGatewayService
*** session auth, caller context and AI standing
· kamo-shared-library
Item DTO, value type and section validation
Validation returns what the columns will hold (ruling SP03-T5): role refs as UUID.toString(), member/note/market ids as plain longs, at most 4 decimal places for NUMERIC(18,4), package_ref within VARCHAR(300), and strict HH:mm so 24:00 is refused rather than read as midnight.
· SecurityService
Supervisors watch, take over and hand back an AI's computer
· KlusterServices
AI workstation agent module — renderers, MCP token, lease, VNC passwords
The guest half of SP11's AI profile: the files the profile writes (LightDM autologin at 1280x800, kiosk, x11vnc and ydotoold units, Chrome wrapper and managed policy), the per-wake MCP bearer store, the keep-awake hold lease, the rotating x11vnc password file, and the software-kit and sign-in link validators. Beyond the plan text: every validator uses fullmatch (Python's $ accepts a trailing newline, Java's matches() does not); the sign-in link's next is judged decoded, as ComputeService's LoginUrls.onSitePath does (%2F/, /%2F and %2F%5C were accepted); a token's expiresAt must be a finite number (json.loads reads Infinity and NaN); releasing a hold that already ran out keeps when it ended for the idle clock.
· kamo-internal
BFF routes for charter, previews, voices and briefs
· kamo-internal
Watch, Take over and Hand back controls, and the AI workstation panel
· kamo-shared-library
RRULE subset for scheduled responsibilities
The normal form has one spelling per rule (plain decimal numbers, lists without spaces, empty or repeated values), since the stored text feeds the charter stamp, ical4j and RRuleText.
· KlusterServices
AI workstation profile label, VNC and MCP ports, network island
· kamo-shared-library
Streamable HTTP transport and MCP server tool metadata
· DaemonService
Tool Plane audit retention and org MCP server refresh jobs
· KlusterServices
Svc_mcpgateway may publish rt.org for the Tool Plane
· SecurityService
VNC links, AI state reads and a supervisor-session pause for AI workstations
· MCPGatewayService
Tool plane audit table and federation columns
· kamo-shared-library
AI workstation profile, token and take-over columns
HostedComputerProfile {STANDARD, AI_WORKSTATION} (STRING, lenient parse to STANDARD); HostedComputer gains profile, ai_primary, the MCP token triple (cipher @JsonIgnore), the take-over holder and the software-kit stamp; the platform config gains ai_image_version; member-scoped and per-org profile finders; AccessLogEventType appends AI_WORKSTATION_WATCH, _TAKEOVER and _HANDBACK after SP02's KamoAI group. AiEnumAdditionsTest now pins where SP02's group starts (right after DEV_MACHINE_TERMINAL) instead of requiring it to end the enum, so later appends no longer break it.
· kamo-internal
Charter types, section catalogue, validation mirror, schedule and hours helpers, API client
· kamo-shared-library
Section, limit-key and action-class catalogues
· kamo-internal
Client calls for watching, taking over and handing back an AI workstation
· kamo-shared-library
Arive's loan_create_failed — the Create Loan Zap now reports a refusal
Arive fires no new_loan for a loan created through its API, so the Create Loan Zap's post-back is the only thing that can link the lead, and a refusal inside the Zap was visible only in Zapier's task history. The Zap now wraps Create Loan in an error handler that posts loan_created or loan_create_failed (with Arive's message); this is the event key for the second.
· KlusterServices
The PBX speaks through Kamo Speech — kamo_tts.agi, Piper norman at 8 kHz, key from a secret volume
· KlusterServices
Mirror GitHub kamouniverse main to Forgejo so a merge deploys
The KamoUniverse marketing site is now edited on GitHub GitHub, and PRs merge there. But the site deploys from Forgejo (kamo/kamouniverse-marketing), whose workflow builds and rolls out on push. git-sync-kamouniverse-marketing bridges the two: every two minutes it fast-forwards Forgejo main to GitHub main. That is an ordinary push, so the normal build and deploy follow. It never forces. If Forgejo has a commit that GitHub lacks, the job fails with a message saying so and leaves both untouched. Credentials are two SSH deploy keys generated on k1m1 straight into the Secret: read-only on the GitHub repo, write on the Forgejo repo only. Host keys are pinned (StrictHostKeyChecking=yes). Applied by hand, not by deploy-services.yml: a new step there is a .forgejo/ change, which forces a full-cluster reconcile. See git-sync/README.md.
· EmailService
Dovecot push authoritative for KamoMail; NEW_EMAIL no longer self-raisable
POST /api/notifications/self is removed with SELF_RAISABLE: NEW_EMAIL is raised by NewMailAnnouncer and CHAT_MESSAGE by MediaService, so a browser has nothing left to raise for itself (SP08 spec E9, case B). The removal is pinned by **************** SP09's self-raise tests go with their subject.
· KlusterServices
Certificate and disruption budget for dev.kamouniverse.com
dev.kamouniverse.com is the new KamoUniverse marketing site (repo kamouniverse-marketing; it carries its own Host() IngressRoute in namespace kamo). The kamouniverse.com apex allowance would already let auto-cert mint the cert dynamically, but only after a request for the host shows up in the 5-minute Traefik access-log window, so a STATIC_DOMAINS entry makes sure the cert exists before anyone visits. The site runs two replicas, so it gets a maxUnavailable: 1 budget next to signpink's.
· SecurityService
Hire-step owner URLs and sweep tuning in the SecurityService ConfigMap
· KlusterServices
Dovecot pushes mail events to EmailService (Lua push_notification); stop logging secrets
· DaemonService
Tick KBService's due-task sweep every minute
உங்கள் உலகம் காத்திருக்கிறது.
நிமிடங்களில் இலவசமாகத் தொடங்கவும். நீங்கள் தயாராக இருக்கும் போது பொருட்களை சேர்க்கவும் - எந்த மாற்றமும் இல்லை, புதிய உள்நுழைவுகள் இல்லை.
எப்பொழுதும் இலவசம் — கடன் அட்டை தேவையில்லை