2a5273201b
Adds catalog with Maestro/Pulso/Trilho etc., agent_threads/messages bus, inbox and context window API, and complete Desk Agentic Ops panel for human operators to read, reply, and chat with agents. Co-authored-by: Cursor <cursoragent@cursor.com>
131 lines
4 KiB
Markdown
131 lines
4 KiB
Markdown
# Spec 029 — Agentic Ops Runbooks (T0 → T1)
|
||
|
||
**Criado:** 2026-06-20
|
||
**Solicitado por:** Roger
|
||
**Status:** Homologação staging (branch `029-agentic-ops-runbooks`)
|
||
**Prioridade:** P1 (backlog AG-1)
|
||
**Sistemas:** VM122 (orquestração) · VM123 (Ollama LLM) · VM112/104/Proxmox/pfSense (alvos)
|
||
|
||
---
|
||
|
||
## Resumo
|
||
|
||
Camada **Agentic Ops** para vigilância 24/7, checks determinísticos (T0), advisor LLM local (T1), e-mail em findings críticos, e copiloto contextual no Desk.
|
||
|
||
| Tier | Motor | Onde |
|
||
|------|-------|------|
|
||
| **T0** | Checks HTTP/SQLite + fallback texto | VM122 API + worker |
|
||
| **T1** | Ollama `qwen2.5:7b-instruct` + RAG specs | VM123 `:11434` |
|
||
|
||
**Produção Desk:** `8080` / `8091` — **não alterado** nesta entrega.
|
||
**Staging homologação:** `8180` / `8192` — stack isolada (`docker-compose.agentic-staging.yml`).
|
||
|
||
---
|
||
|
||
## Agentes lógicos (implementação 029)
|
||
|
||
**Documento completo:** [`agents-roster.md`](agents-roster.md)
|
||
|
||
| ID | Nome | Codename | Inbox humano |
|
||
|----|------|----------|--------------|
|
||
| A0 | Maestro | orchestrator | agentic_operator |
|
||
| A1 | Pulso | node_health | ops_lead |
|
||
| A2 | Trilho | infra_mail | devops |
|
||
| A3 | Carta | deliverability | seo / technician |
|
||
| A4 | Escudo Mail | security_mail | security_analyst |
|
||
| A5 | Sentinela SOC | wazuh_soc | security_analyst |
|
||
| A6 | Copiloto | support_copilot | technician |
|
||
| A7 | Remediador | remediation | agentic_operator |
|
||
| — | Vigia | sentinel | ops (findings T0) |
|
||
| — | Curador | curator | — (RAG interno) |
|
||
|
||
Mensagens: tabelas `agent_threads` + `agent_messages`. UI: Inbox + Janela de contexto no Desk.
|
||
|
||
---
|
||
|
||
## Cenários (registry.yaml)
|
||
|
||
1. `desk.api.health` — Desk VM122
|
||
2. `wizard.vm112.bundle` — VM112 API + portal
|
||
3. `pfsense.api.system` — pfSense via Traefik
|
||
4. `funnel.stuck.onboarding` — tickets >24h
|
||
5. `integration.webhook.gap` — gap VM112→122
|
||
6. `proxmox.cluster` — VMs 112/122/123/104
|
||
7. `ollama.vm123.health` — LLM backend
|
||
8. `vm123.finance.stack` — FOSS + Odoo
|
||
9. `vm123.openpanel.bridge` — bridge hosting
|
||
|
||
---
|
||
|
||
## API (`/api/v1/agents/*`)
|
||
|
||
| Método | Path | Auth |
|
||
|--------|------|------|
|
||
| GET | `/roster` | ops view — catálogo A0–A7 |
|
||
| GET | `/inbox` | ops view — mensagens pendentes |
|
||
| GET | `/threads` | ops view |
|
||
| GET | `/threads/{id}/messages` | ops view |
|
||
| POST | `/threads/{id}/reply` | ops view — humano responde |
|
||
| POST | `/messages/{id}/ack` | ops view — arquivar inbox |
|
||
| GET | `/health` | público |
|
||
| GET | `/scenarios` | ops view |
|
||
| GET | `/findings` | ops view |
|
||
| POST | `/findings/{id}/ack` | ops view |
|
||
| GET | `/action-log` | ops view |
|
||
| POST | `/runs/{scenario_id}` | super_admin, ops_lead, agentic_operator |
|
||
| POST | `/chat` | ops view (T1 copiloto) |
|
||
| POST | `/internal/tick` | token interno / cron worker |
|
||
|
||
---
|
||
|
||
## Worker
|
||
|
||
- `AGENTIC_INTERVAL_SEC=300` (5 min)
|
||
- `POST /api/v1/agents/internal/tick` via `OPS_INTERNAL_TOKEN`
|
||
|
||
---
|
||
|
||
## Notificações
|
||
|
||
- **E-mail:** findings `high`/`critical` → `DESK_ROOT_NOTIFY_EMAIL`
|
||
- **ntfy:** opcional via `DESK_OPS_NTFY_TOPIC`
|
||
|
||
---
|
||
|
||
## Variáveis `.env`
|
||
|
||
```bash
|
||
AGENTIC_LLM_ENABLED=true
|
||
OLLAMA_BASE_URL=http://10.10.10.123:11434
|
||
AGENTIC_LLM_MODEL=qwen2.5:7b-instruct
|
||
AGENTIC_EMBED_MODEL=nomic-embed-text
|
||
AGENTIC_INTERVAL_SEC=300
|
||
AGENTIC_SPECS_ROOT=/opt/ligbox-ops-platform/specs
|
||
AGENTIC_CRITICAL_VMIDS=112,122,123,104
|
||
VM123_IP=10.10.10.123
|
||
OPENPANEL_BRIDGE_URL=http://10.10.10.123:18087
|
||
```
|
||
|
||
---
|
||
|
||
## Homologação
|
||
|
||
```bash
|
||
# Staging VM122 (portas isoladas)
|
||
cd /opt/ligbox-ops-platform-staging
|
||
docker compose -f docker-compose.agentic-staging.yml up -d --build
|
||
curl -s http://10.10.10.122:8180/api/v1/agents/health
|
||
curl -s -X POST http://10.10.10.122:8180/api/v1/agents/internal/tick \
|
||
-H "X-Ops-Internal-Token: $OPS_INTERNAL_TOKEN"
|
||
```
|
||
|
||
Promover para produção apenas após checklist `quickstart.md`.
|
||
|
||
---
|
||
|
||
## Documentos relacionados
|
||
|
||
- Spec **027** — RBAC `agentic_operator`, A0–A7 governança
|
||
- Spec **019** — Console, políticas R0–R3
|
||
- `contracts/agent-platform-api.md`
|
||
- `quickstart.md`
|