feat: initial agent identity provisioning automation [#442]

Playwright-based tool for enrolling AI agent identities in Cloudron,
generating API keys via SSO (Gitea/Discourse/Redmine), and storing
all credentials in Bitwarden per-agent collections.

- provision-agent.py: main Playwright automation (Cloudron enroll,
  SSO login, API key generation, verification)
- bw-helper.py: Bitwarden CLI wrapper (password gen, item CRUD,
  TOTP, session management)
- Dockerfile: Playwright v1.52.0 + bw CLI + Python deps
- agents.yaml.example: manifest template for Q3/Q4 agents
- TSYSGroupAIOS framework adopted (hooks, rules engine, Makefile)

💘 Generated with Crush

Assisted-by: Crush:glm-5.2
This commit is contained in:
2026-08-13 08:59:14 -05:00
commit 8ce279276f
20 changed files with 1684 additions and 0 deletions
+7
View File
@@ -0,0 +1,7 @@
# Bitwarden credentials (machine-to-machine auth)
BW_CLIENTID=
BW_CLIENTSECRET=
BW_PASSWORD=
# Set to true for debugging (shows browser window — requires display)
HEADFUL=false