agent-identity-provisioning

3 Commits 1 Branch 0 Tags

2 Commits

Include renames

Author	SHA1	Message	Date
TSYS Group COO	9b4502f55d	fix: critical bugs in agent identity provisioning [#442 ] Email domain bug (would have caused all provisioning to fail): - Cloudron email default was tsys-cloudron.knel.net (the dashboard host) instead of turnsys.com (the actual identity domain). Fixed in 3 places. - Added explicit cloudron_email field to all agents in agents.yaml.example. Other fixes: - STATE_DIR.mkdir() moved from module level to main() so --dry-run and --help work outside the container. - IndexError guard: password_inputs[0] crashes if zero fields found. - State file save moved to finally block so partial results survive provisioning failures. - Exception in provision_agent no longer re-raised (was preventing state file write and summary reporting). - BW item_exists no longer swallows network/session errors as 'not found' (was causing duplicate credential creation). - Redundant -u flag in bw generate (-uluns → -ulns). - Dockerfile: npx install with \|\| true → npm install -g (silent failure would cause runtime 'bw: command not found'). - Added .dockerignore to prevent .env/agents.yaml/state from entering image. 💘 Generated with Crush Assisted-by: Crush:glm-5.2	2026-08-13 11:21:38 -05:00
mrcharles	8ce279276f	feat: initial agent identity provisioning automation [#442 ] Playwright-based tool for enrolling AI agent identities in Cloudron, generating API keys via SSO (Gitea/Discourse/Redmine), and storing all credentials in Bitwarden per-agent collections. - provision-agent.py: main Playwright automation (Cloudron enroll, SSO login, API key generation, verification) - bw-helper.py: Bitwarden CLI wrapper (password gen, item CRUD, TOTP, session management) - Dockerfile: Playwright v1.52.0 + bw CLI + Python deps - agents.yaml.example: manifest template for Q3/Q4 agents - TSYSGroupAIOS framework adopted (hooks, rules engine, Makefile) 💘 Generated with Crush Assisted-by: Crush:glm-5.2	2026-08-13 08:59:14 -05:00

Author

SHA1

Message

Date

TSYS Group COO

9b4502f55d

fix: critical bugs in agent identity provisioning [#442 ]

Email domain bug (would have caused all provisioning to fail):
- Cloudron email default was tsys-cloudron.knel.net (the dashboard host)
  instead of turnsys.com (the actual identity domain). Fixed in 3 places.
- Added explicit cloudron_email field to all agents in agents.yaml.example.

Other fixes:
- STATE_DIR.mkdir() moved from module level to main() so --dry-run and
  --help work outside the container.
- IndexError guard: password_inputs[0] crashes if zero fields found.
- State file save moved to finally block so partial results survive
  provisioning failures.
- Exception in provision_agent no longer re-raised (was preventing state
  file write and summary reporting).
- BW item_exists no longer swallows network/session errors as 'not found'
  (was causing duplicate credential creation).
- Redundant -u flag in bw generate (-uluns → -ulns).
- Dockerfile: npx install with || true → npm install -g (silent failure
  would cause runtime 'bw: command not found').
- Added .dockerignore to prevent .env/agents.yaml/state from entering image.

💘 Generated with Crush

Assisted-by: Crush:glm-5.2

2026-08-13 11:21:38 -05:00

mrcharles

8ce279276f

feat: initial agent identity provisioning automation [#442 ]

Playwright-based tool for enrolling AI agent identities in Cloudron,
generating API keys via SSO (Gitea/Discourse/Redmine), and storing
all credentials in Bitwarden per-agent collections.

- provision-agent.py: main Playwright automation (Cloudron enroll,
  SSO login, API key generation, verification)
- bw-helper.py: Bitwarden CLI wrapper (password gen, item CRUD,
  TOTP, session management)
- Dockerfile: Playwright v1.52.0 + bw CLI + Python deps
- agents.yaml.example: manifest template for Q3/Q4 agents
- TSYSGroupAIOS framework adopted (hooks, rules engine, Makefile)

💘 Generated with Crush

Assisted-by: Crush:glm-5.2

2026-08-13 08:59:14 -05:00