# Spec 029 — Agentic Ops Runbooks (T0 → T1)

**Criado:** 2026-06-20  
**Solicitado por:** Roger  
**Status:** Homologação staging (branch `029-agentic-ops-runbooks`)  
**Prioridade:** P1 (backlog AG-1)  
**Sistemas:** VM122 (orquestração) · VM123 (Ollama LLM) · VM112/104/Proxmox/pfSense (alvos)

---

## Resumo

Camada **Agentic Ops** para vigilância 24/7, checks determinísticos (T0), advisor LLM local (T1), e-mail em findings críticos, e copiloto contextual no Desk.

| Tier | Motor | Onde |
|------|-------|------|
| **T0** | Checks HTTP/SQLite + fallback texto | VM122 API + worker |
| **T1** | Ollama `qwen2.5:7b-instruct` + RAG specs | VM123 `:11434` |

**Produção Desk:** `8080` / `8091` — **não alterado** nesta entrega.  
**Staging homologação:** `8180` / `8192` — stack isolada (`docker-compose.agentic-staging.yml`).

---

## Agentes lógicos (implementação 029)

**Documento completo:** [`agents-roster.md`](agents-roster.md)

| ID | Nome | Codename | Inbox humano |
|----|------|----------|--------------|
| A0 | Maestro | orchestrator | agentic_operator |
| A1 | Pulso | node_health | ops_lead |
| A2 | Trilho | infra_mail | devops |
| A3 | Carta | deliverability | seo / technician |
| A4 | Escudo Mail | security_mail | security_analyst |
| A5 | Sentinela SOC | wazuh_soc | security_analyst |
| A6 | Copiloto | support_copilot | technician |
| A7 | Remediador | remediation | agentic_operator |
| — | Vigia | sentinel | ops (findings T0) |
| — | Curador | curator | — (RAG interno) |

Mensagens: tabelas `agent_threads` + `agent_messages`. UI: Inbox + Janela de contexto no Desk.

---

## Cenários (registry.yaml)

1. `desk.api.health` — Desk VM122  
2. `wizard.vm112.bundle` — VM112 API + portal  
3. `pfsense.api.system` — pfSense via Traefik  
4. `funnel.stuck.onboarding` — tickets >24h  
5. `integration.webhook.gap` — gap VM112→122  
6. `proxmox.cluster` — VMs 112/122/123/104  
7. `ollama.vm123.health` — LLM backend  
8. `vm123.finance.stack` — FOSS + Odoo  
9. `vm123.openpanel.bridge` — bridge hosting  

---

## API (`/api/v1/agents/*`)

| Método | Path | Auth |
|--------|------|------|
| GET | `/roster` | ops view — catálogo A0–A7 |
| GET | `/inbox` | ops view — mensagens pendentes |
| GET | `/threads` | ops view |
| GET | `/threads/{id}/messages` | ops view |
| POST | `/threads/{id}/reply` | ops view — humano responde |
| POST | `/messages/{id}/ack` | ops view — arquivar inbox |
| GET | `/health` | público |
| GET | `/scenarios` | ops view |
| GET | `/findings` | ops view |
| POST | `/findings/{id}/ack` | ops view |
| GET | `/action-log` | ops view |
| POST | `/runs/{scenario_id}` | super_admin, ops_lead, agentic_operator |
| POST | `/chat` | ops view (T1 copiloto) |
| POST | `/internal/tick` | token interno / cron worker |

---

## Worker

- `AGENTIC_INTERVAL_SEC=300` (5 min)  
- `POST /api/v1/agents/internal/tick` via `OPS_INTERNAL_TOKEN`

---

## Notificações

- **E-mail:** findings `high`/`critical` → `DESK_ROOT_NOTIFY_EMAIL`  
- **ntfy:** opcional via `DESK_OPS_NTFY_TOPIC`

---

## Variáveis `.env`

```bash
AGENTIC_LLM_ENABLED=true
OLLAMA_BASE_URL=http://10.10.10.123:11434
AGENTIC_LLM_MODEL=qwen2.5:7b-instruct
AGENTIC_EMBED_MODEL=nomic-embed-text
AGENTIC_INTERVAL_SEC=300
AGENTIC_SPECS_ROOT=/opt/ligbox-ops-platform/specs
AGENTIC_CRITICAL_VMIDS=112,122,123,104
VM123_IP=10.10.10.123
OPENPANEL_BRIDGE_URL=http://10.10.10.123:18087
```

---

## Homologação

```bash
# Staging VM122 (portas isoladas)
cd /opt/ligbox-ops-platform-staging
docker compose -f docker-compose.agentic-staging.yml up -d --build
curl -s http://10.10.10.122:8180/api/v1/agents/health
curl -s -X POST http://10.10.10.122:8180/api/v1/agents/internal/tick \
  -H "X-Ops-Internal-Token: $OPS_INTERNAL_TOKEN"
```

Promover para produção apenas após checklist `quickstart.md`.

---

## Documentos relacionados

- Spec **027** — RBAC `agentic_operator`, A0–A7 governança  
- Spec **019** — Console, políticas R0–R3  
- `contracts/agent-platform-api.md`  
- `quickstart.md`