{"id":41234006,"url":"https://github.com/hyperpolymath/system-operating-theatre","last_synced_at":"2026-01-23T01:00:14.705Z","repository":{"id":329638396,"uuid":"1118370922","full_name":"hyperpolymath/system-operating-theatre","owner":"hyperpolymath","description":"System Operating Theatre - plan-first system management and hardening tool","archived":false,"fork":false,"pushed_at":"2026-01-17T00:27:55.000Z","size":250,"stargazers_count":1,"open_issues_count":2,"forks_count":0,"subscribers_count":0,"default_branch":"main","last_synced_at":"2026-01-17T12:56:55.531Z","etag":null,"topics":["automation","cli","hardening","hyperpolymath","integration","linux","macos","my-coolest-projects","operations","os-and-containers","palimpsest","reliability","security","system-tools","systems","tooling"],"latest_commit_sha":null,"homepage":null,"language":"D","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/hyperpolymath.png","metadata":{"files":{"readme":"README.adoc","changelog":null,"contributing":"CONTRIBUTING.adoc","funding":".github/FUNDING.yml","license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":"ROADMAP.adoc","authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null},"funding":{"github":["hyperpolymath"]}},"created_at":"2025-12-17T16:47:29.000Z","updated_at":"2026-01-17T00:27:59.000Z","dependencies_parsed_at":null,"dependency_job_id":null,"html_url":"https://github.com/hyperpolymath/system-operating-theatre","commit_stats":null,"previous_names":["hyperpolymath/big-up-sh","hyperpolymath/big-up","hyperpolymath/operating-room"],"tags_count":11,"template":false,"template_full_name":null,"purl":"pkg:github/hyperpolymath/system-operating-theatre","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hyperpolymath%2Fsystem-operating-theatre","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hyperpolymath%2Fsystem-operating-theatre/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hyperpolymath%2Fsystem-operating-theatre/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hyperpolymath%2Fsystem-operating-theatre/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hyperpolymath","download_url":"https://codeload.github.com/hyperpolymath/system-operating-theatre/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hyperpolymath%2Fsystem-operating-theatre/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":28676438,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-01-22T20:48:19.482Z","status":"ssl_error","status_checked_at":"2026-01-22T20:48:14.968Z","response_time":144,"last_error":"SSL_connect returned=1 errno=0 peeraddr=140.82.121.5:443 state=error: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["automation","cli","hardening","hyperpolymath","integration","linux","macos","my-coolest-projects","operations","os-and-containers","palimpsest","reliability","security","system-tools","systems","tooling"],"created_at":"2026-01-23T01:00:13.280Z","updated_at":"2026-01-23T01:00:14.560Z","avatar_url":"https://github.com/hyperpolymath.png","language":"D","funding_links":["https://github.com/sponsors/hyperpolymath"],"categories":[],"sub_categories":[],"readme":"// SPDX-License-Identifier: PMPL-1.0\n= System Operating Theatre\n:toc:\n:toclevels: 3\n:icons: font\n:source-highlighter: rouge\n\nimage:https://img.shields.io/badge/License-AGPL_3.0-blue.svg[PMPL-1.0,link=\"https://opensource.org/licenses/PMPL-1.0\"]\nimage:https://img.shields.io/badge/Philosophy-Palimpsest-purple.svg[Palimpsest,link=\"https://github.com/hyperpolymath/palimpsest-licence\"]\n\nA **plan-first** system management and hardening tool — designed as a free/open alternative to \"optimizer\" utilities that nag, exaggerate, or sell fear.\n\n[NOTE]\n====\n*Project status:* *Alpha - Core Implementation Complete*\n\nThe `sor` CLI implements the scan→plan→apply→undo→receipt workflow.\nRun `./sor help` for available commands.\n====\n\n== What it is\n\nOperating Theatre is the part of the AmbientOps ecosystem responsible for **making changes safely**:\n\n* **Scan**: collect evidence (no changes)\n* **Plan**: propose reversible steps with previews\n* **Apply**: execute only an approved plan\n* **Undo**: roll back where possible\n* **Receipt**: produce an auditable report of what was checked/changed\n\nIt is explicitly *anti-fearware*:\n\n* No fake \"error counts\"\n* No \"registry cleaning for performance\"\n* No dark patterns, countdowns, or scare copy\n* No silent downloads of third-party binaries\n\n== Design goals\n\n* **Trustworthy**: show evidence, not hype\n* **Reversible-first**: prefer actions that can be undone\n* **Least privilege**: elevation only when strictly necessary\n* **Modular**: features ship as packs, not a monolith\n* **Ecosystem**: integrates with Observatory, Emergency Room, Ward\n\n== Building\n\n=== Prerequisites\n\n* LDC2 (LLVM D Compiler) or DMD\n* dub (D package manager)\n\nOn Fedora Kinoite:\n[source,bash]\n----\ntoolbox create\ntoolbox enter\nsudo dnf install ldc ldc-libs\n----\n\n=== Compile\n\n[source,bash]\n----\ndub build --release\n----\n\nThe binary will be at `./sor`.\n\n== Usage\n\n=== Plan-first workflow\n\n[source,bash]\n----\n# Step 1: Collect evidence (no changes)\nsor scan system\n\n# Step 2: Generate plan from evidence\nsor plan system\n\n# Step 3: Preview what would happen\nsor apply --dry-run\n\n# Step 4: Execute the plan\nsor apply\n\n# If needed: Roll back\nsor undo\n\n# View history\nsor receipt\n----\n\n=== Quick mode\n\n[source,bash]\n----\n# Scan + plan + preview in one command\nsor quick system\n\n# Scan + plan + apply with auto-approve (use with caution)\nsor quick cleanup --yes\n----\n\n=== Available packs\n\n[cols=\"1,3\",options=\"header\"]\n|===\n| Pack | Description\n\n| `system`\n| System optimization (NVIDIA, firewall, journal, network BBR)\n\n| `cleanup`\n| Clean caches and temporary files\n\n| `repos`\n| Repository synchronization and status\n|===\n\n=== Options\n\n[source,bash]\n----\n--dry-run    Preview without making changes\n--yes        Auto-approve plan (use with caution)\n--all        Include all priorities (cleanup: include low)\n----\n\n== Architecture\n\n----\nsrc/\n├── main.d              # CLI entry point\n├── core/\n│   ├── types.d         # Evidence, Plan, Step, Receipt, UndoToken\n│   ├── engine.d        # Plan execution engine\n│   ├── security.d      # Input validation, secure file handling\n│   └── ecosystem.d     # AmbientOps integration\n└── packs/\n    ├── system.d        # System optimization pack\n    ├── cleanup.d       # Cache cleanup pack\n    └── repos.d         # Repository management pack\n----\n\n== Ecosystem integration\n\n----\n┌─────────────────────────────────────────────────────┐\n│                AmbientOps Ecosystem                  │\n├─────────────────────────────────────────────────────┤\n│                                                      │\n│  ┌─────────────┐      ┌─────────────────────┐       │\n│  │ Observatory │◄─────│ Operating Theatre   │       │\n│  │ (monitors)  │      │ (YOU ARE HERE)      │       │\n│  └─────────────┘      └──────────┬──────────┘       │\n│         │                        │                   │\n│         ▼                        ▼                   │\n│  ┌─────────────┐      ┌─────────────────────┐       │\n│  │    Ward     │      │   Emergency Room    │       │\n│  │ (displays)  │      │    (recovers)       │       │\n│  └─────────────┘      └─────────────────────┘       │\n│                                                      │\n└─────────────────────────────────────────────────────┘\n----\n\n* **Operating Theatre** → performs operations, generates run bundles\n* **Observatory** → ingests run bundles, correlates, forecasts\n* **Emergency Room** → receives crisis handoffs, executes recovery\n* **Ward** → displays system weather/health status\n\n== Documentation\n\n* link:docs/SEAMS-ANALYSIS.adoc[Seams Analysis] - Integration seam assessment\n* link:docs/MOSCOW-ECOSYSTEM.adoc[MoSCoW Analysis] - Prioritized requirements\n* link:ROADMAP.adoc[Roadmap] - Development phases\n\n== Security requirements\n\n* No MD5/SHA1 for cryptographic purposes\n* HTTPS only (no HTTP URLs)\n* No hardcoded secrets\n* Secure file permissions on cache and run directories\n* Dependencies must be pinned/locked\n* Every change produces a receipt (scan and apply)\n\n== License\n\nPMPL-1.0-or-later (plus Palimpsest where indicated).\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fhyperpolymath%2Fsystem-operating-theatre","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fhyperpolymath%2Fsystem-operating-theatre","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fhyperpolymath%2Fsystem-operating-theatre/lists"}