Adds catalog with Maestro/Pulso/Trilho etc., agent_threads/messages bus, inbox and context window API, and complete Desk Agentic Ops panel for human operators to read, reply, and chat with agents. Co-authored-by: Cursor <cursoragent@cursor.com>
4 KiB
4 KiB
Spec 029 — Agentic Ops Runbooks (T0 → T1)
Criado: 2026-06-20
Solicitado por: Roger
Status: Homologação staging (branch 029-agentic-ops-runbooks)
Prioridade: P1 (backlog AG-1)
Sistemas: VM122 (orquestração) · VM123 (Ollama LLM) · VM112/104/Proxmox/pfSense (alvos)
Resumo
Camada Agentic Ops para vigilância 24/7, checks determinísticos (T0), advisor LLM local (T1), e-mail em findings críticos, e copiloto contextual no Desk.
| Tier | Motor | Onde |
|---|---|---|
| T0 | Checks HTTP/SQLite + fallback texto | VM122 API + worker |
| T1 | Ollama qwen2.5:7b-instruct + RAG specs |
VM123 :11434 |
Produção Desk: 8080 / 8091 — não alterado nesta entrega.
Staging homologação: 8180 / 8192 — stack isolada (docker-compose.agentic-staging.yml).
Agentes lógicos (implementação 029)
Documento completo: agents-roster.md
| ID | Nome | Codename | Inbox humano |
|---|---|---|---|
| A0 | Maestro | orchestrator | agentic_operator |
| A1 | Pulso | node_health | ops_lead |
| A2 | Trilho | infra_mail | devops |
| A3 | Carta | deliverability | seo / technician |
| A4 | Escudo Mail | security_mail | security_analyst |
| A5 | Sentinela SOC | wazuh_soc | security_analyst |
| A6 | Copiloto | support_copilot | technician |
| A7 | Remediador | remediation | agentic_operator |
| — | Vigia | sentinel | ops (findings T0) |
| — | Curador | curator | — (RAG interno) |
Mensagens: tabelas agent_threads + agent_messages. UI: Inbox + Janela de contexto no Desk.
Cenários (registry.yaml)
desk.api.health— Desk VM122wizard.vm112.bundle— VM112 API + portalpfsense.api.system— pfSense via Traefikfunnel.stuck.onboarding— tickets >24hintegration.webhook.gap— gap VM112→122proxmox.cluster— VMs 112/122/123/104ollama.vm123.health— LLM backendvm123.finance.stack— FOSS + Odoovm123.openpanel.bridge— bridge hosting
API (/api/v1/agents/*)
| Método | Path | Auth |
|---|---|---|
| GET | /roster |
ops view — catálogo A0–A7 |
| GET | /inbox |
ops view — mensagens pendentes |
| GET | /threads |
ops view |
| GET | /threads/{id}/messages |
ops view |
| POST | /threads/{id}/reply |
ops view — humano responde |
| POST | /messages/{id}/ack |
ops view — arquivar inbox |
| GET | /health |
público |
| GET | /scenarios |
ops view |
| GET | /findings |
ops view |
| POST | /findings/{id}/ack |
ops view |
| GET | /action-log |
ops view |
| POST | /runs/{scenario_id} |
super_admin, ops_lead, agentic_operator |
| POST | /chat |
ops view (T1 copiloto) |
| POST | /internal/tick |
token interno / cron worker |
Worker
AGENTIC_INTERVAL_SEC=300(5 min)POST /api/v1/agents/internal/tickviaOPS_INTERNAL_TOKEN
Notificações
- E-mail: findings
high/critical→DESK_ROOT_NOTIFY_EMAIL - ntfy: opcional via
DESK_OPS_NTFY_TOPIC
Variáveis .env
AGENTIC_LLM_ENABLED=true
OLLAMA_BASE_URL=http://10.10.10.123:11434
AGENTIC_LLM_MODEL=qwen2.5:7b-instruct
AGENTIC_EMBED_MODEL=nomic-embed-text
AGENTIC_INTERVAL_SEC=300
AGENTIC_SPECS_ROOT=/opt/ligbox-ops-platform/specs
AGENTIC_CRITICAL_VMIDS=112,122,123,104
VM123_IP=10.10.10.123
OPENPANEL_BRIDGE_URL=http://10.10.10.123:18087
Homologação
# Staging VM122 (portas isoladas)
cd /opt/ligbox-ops-platform-staging
docker compose -f docker-compose.agentic-staging.yml up -d --build
curl -s http://10.10.10.122:8180/api/v1/agents/health
curl -s -X POST http://10.10.10.122:8180/api/v1/agents/internal/tick \
-H "X-Ops-Internal-Token: $OPS_INTERNAL_TOKEN"
Promover para produção apenas após checklist quickstart.md.
Documentos relacionados
- Spec 027 — RBAC
agentic_operator, A0–A7 governança - Spec 019 — Console, políticas R0–R3
contracts/agent-platform-api.mdquickstart.md