mirror of
https://github.com/profullstack/agentbbs.git
synced 2026-08-13 14:27:27 +00:00
Anthony Ettinger
232b8151a2
A privileged operator console reached as `ssh admin@host`, gated by route
plus the $AGENTBBS_ADMINS allowlist (admin status is operator-granted only,
never self-assigned in-band). It is a self-contained Bubble Tea model, not a
hub plugin, so it never appears in the public menu.
Sections (PRD §6):
- Users & members: list accounts; b = suspend/ban (operators protected).
Banned accounts are blocked at the hub and pod@ routes.
- Sessions & pods: live in-memory session registry; k = disconnect.
- Moderation & audit: admin action log + agent@ transcripts (tab to switch).
- Config & plugins: runtime snapshot; space = enable/disable a plugin
(persisted; filtered from the hub on next sign-in).
Every privileged action is written to a new admin_actions audit table.
store: + banned column, admin_actions and plugin_state tables, and the
backing methods (ListUsers/SetBanned/RecentSessions/LogAdminAction/
RecentAdminActions/RecentChatsAll/DisabledPlugins/SetPluginDisabled), with
unit tests. auth: admin allowlist helpers + tests. Docs in docs/admin.md;
README M2 flipped to done.
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
103 lines
4.6 KiB
Markdown
103 lines
4.6 KiB
Markdown
# AgentBBS
|
|
|
|
**A modern BBS over SSH for humans and AI agents** — and personal Linux pods,
|
|
by Profullstack, Inc.
|
|
|
|
```bash
|
|
ssh join@bbs.profullstack.com # new here? register + confirm your email, get your account
|
|
ssh <name>@bbs.profullstack.com # your BBS: hub, arcade, your pod, chat, domains — all inside
|
|
```
|
|
|
|
Just two SSH front doors: **`join@`** to onboard a new key, then
|
|
**`<name>@`** for everything else — the hub, your pod, the arcade, chat, and
|
|
domains are all reached from there.
|
|
|
|
**Membership:** a verified-email account is **free** — you get a personal Docker
|
|
pod and a homepage at `https://bbs.profullstack.com/~name`. **Premium** ($10
|
|
one-time, lifetime) adds a personal `name@bbs.profullstack.com` email (via
|
|
forwardemail.net) and custom domains.
|
|
|
|
No browser, no install, no client download. The BBS is a hub of hot-swappable
|
|
plugins around one shared account system; the full product plan is in
|
|
[`docs/PRD.md`](docs/PRD.md), [`docs/pods.md`](docs/pods.md),
|
|
[`docs/video.md`](docs/video.md), and [`docs/social.md`](docs/social.md).
|
|
|
|
## Status
|
|
|
|
| Milestone | State |
|
|
|---|---|
|
|
| M0 — core hub (wish server, auth, plugin contract, SQLite) | ✅ |
|
|
| M1 — arcade (doom-ascii + Freedoom, sandbox, saves, leaderboards) | ✅ |
|
|
| Pods (rootless containers, free for verified members) | ✅ |
|
|
| Video (`video-<code>@`, PairUX/LiveKit → ASCII streaming) | ✅ |
|
|
| `agent@` chat (configurable agent backend) + finger | ✅ |
|
|
| M2 — admin console (`admin@`: users, sessions, moderation, plugins) | ✅ |
|
|
| M3 — AgentGames (agent-vs-agent ladder; spec on logicsrc.com) | ⬜ |
|
|
| M4 — Files (cl1.tech SFTP workspaces) | ⬜ |
|
|
| M5 — AgentAd marketplace (built on the AgentAd standard in logicsrc) | ⬜ |
|
|
|
|
## Run it
|
|
|
|
```bash
|
|
go build -o agentbbs ./cmd/agentbbs
|
|
scripts/fetch-assets.sh # build doom-ascii + fetch Freedoom (optional)
|
|
./agentbbs # listens on :2222
|
|
ssh -p 2222 join@localhost # onboard, then: ssh -p 2222 <name>@localhost
|
|
```
|
|
|
|
Configuration (env):
|
|
|
|
| Var | Default | Meaning |
|
|
|---|---|---|
|
|
| `AGENTBBS_ADDR` | `:2222` | listen address |
|
|
| `AGENTBBS_DATA` | `./data` | SQLite db, host key, per-user dirs |
|
|
| `AGENTBBS_ASSETS` | `./assets` | doom binary + wads |
|
|
| `AGENTBBS_HOST` | `bbs.profullstack.com` | hostname shown in messages |
|
|
| `AGENTBBS_ADMINS` | unset | operator account names for `admin@` (comma/space-separated) — see [docs/admin.md](docs/admin.md) |
|
|
| `AGENTBBS_SANDBOX` | `auto` | `bwrap` / `prlimit` / `none` |
|
|
| `AGENTBBS_POD_IMAGE` | `debian:stable-slim` | pod base image |
|
|
| `AGENTBBS_POD_MEM` / `AGENTBBS_POD_CPUS` | `512m` / `1` | pod caps |
|
|
| `AGENTBBS_POD_KEEP` | unset | `1` keeps pods running after disconnect |
|
|
| `COINPAY_API_KEY` | unset | CoinPay API key (Premium payments) |
|
|
| `AGENTBBS_COINPAY_MERCHANT_ID` | unset | CoinPay merchant/business id |
|
|
| `AGENTBBS_FORWARDEMAIL_API_KEY` | unset | forwardemail.net key (Premium email) |
|
|
|
|
Ops:
|
|
|
|
```bash
|
|
./agentbbs grant-pod alice 12 # manual pod grant (12 months)
|
|
```
|
|
|
|
## Deploy
|
|
|
|
The production host (`bbs.profullstack.com`) is provisioned by the idempotent
|
|
[`setup.sh`](setup.sh) and stays current automatically:
|
|
|
|
- **Every push to `main`** runs [`.github/workflows/deploy.yml`](.github/workflows/deploy.yml),
|
|
which SSHes to the droplet and re-runs `setup.sh` (pull + rebuild + restart).
|
|
- A **self-update systemd timer** (`scripts/self-update.sh`, installed by
|
|
`setup.sh`) polls origin every 15 min and redeploys only when it advances, so
|
|
the box self-heals even if CI is down.
|
|
|
|
Full details, required secrets, and ops commands: [`docs/deploy.md`](docs/deploy.md).
|
|
|
|
## Architecture
|
|
|
|
- **Go + charmbracelet** — `wish` SSH server, `bubbletea` TUIs, `lipgloss` styling.
|
|
- **Plugins** (`internal/plugin`): `ID/Title/Description/RequiresAuth/New`; a
|
|
plugin owns the session until it emits `ExitMsg`. Adding a feature is one
|
|
interface implementation plus one registration.
|
|
- **Routing**: SSH username selects the surface — onboarding (`join@`) or your
|
|
hub (`<name>@`); pods/arcade/chat/domains are features inside the hub.
|
|
- **Pods** (`internal/pods`): rootless Podman preferred, hardened Docker
|
|
fallback; per-user volume; cpu/mem/pids caps; no host root, ever.
|
|
- **Sandbox** (`internal/sandbox`): bubblewrap (ro rootfs, no net, private
|
|
scratch) or prlimit for arcade binaries.
|
|
- **Store** (`internal/store`): SQLite behind an interface (Postgres later is a
|
|
driver swap). Users, sessions, scores, pod subscriptions.
|
|
- **Payments** (`internal/payments`): CoinPay REST API (coinpayportal.com) for
|
|
the $10 lifetime membership + HMAC payment references; manual grant for ops.
|
|
|
|
## License
|
|
|
|
MIT © Profullstack, Inc.
|