jj.wang
6dc7e72ac8
agentd webhook-serve (agentd/webhook.py, stdlib): verifies X-Plane-Signature
(HMAC-SHA256 hex of the body, constant-time; 401 on missing/bad), routes by
data.project to a configured tenant (others 202), coalesces deliveries within
3 s into one tick, runs one more tick when deliveries arrive during a tick,
and retries every 15 s for up to 2 min while the lock is held (tick command
exit 75: flock -E 75 in the cron scripts, cli tick on Busy). Ticks run in a
systemd scope so restarting the receiver never kills one. Log:
<log_dir>/webhook.log; GET /healthz.
Config: webhook section (key names only, PLANE_WEBHOOK_SECRET scrubbed from
child envs like the Plane tokens), notify: {kind: none} as a no-op hook
called on every state move; the unused per-project webhook_secret_key is
gone (Plane webhooks are workspace-level). systemd unit for the LXC and
tools/plane-webhook.py to create/rotate the Plane webhook as the workspace
admin (secret straight into the Vault, never printed).
plane-agentd
Plane 看板驱动的通用 agent 调度服务：在 Plane 建工作项并指派给某个终端，agentd 在该终端起对应的 CLI agent（Codex / Claude Code / 脚本）执行，把结果贴回工作项并流转状态。调度是确定性代码；模型只出现在执行器和总指挥里。
- 设计：
docs/design.md（架构、契约、失败策略、配置、阶段） - 首个租户：GWENT 项目（看板 https://plane.kappiee.com/kappiee/projects/79cb5a60-aa4f-4138-9864-1dd70426e665/issues/ ）
- 凭据全部经 Agent Vault 注入内存，仓库和配置里只有键名。
使用
- 契约与扩展：
docs/executor-contract.md；安装、cron、日志、故障：docs/runbook.md；LXC 部署（调度器 2026-10-21 起跑在agentd-01）：docs/deploy-lxc.md - 入口：
cli/agentd tick|new|show|comment|state|assign|smoke|check-config（在agent-access.py exec --secret-env …下运行） - 测试：
python3 -m unittest（离线，不访问 Plane/win10）