Files

T

mrcharles 8ce279276f feat: initial agent identity provisioning automation [#442 ]

Playwright-based tool for enrolling AI agent identities in Cloudron,
generating API keys via SSO (Gitea/Discourse/Redmine), and storing
all credentials in Bitwarden per-agent collections.

- provision-agent.py: main Playwright automation (Cloudron enroll,
  SSO login, API key generation, verification)
- bw-helper.py: Bitwarden CLI wrapper (password gen, item CRUD,
  TOTP, session management)
- Dockerfile: Playwright v1.52.0 + bw CLI + Python deps
- agents.yaml.example: manifest template for Q3/Q4 agents
- TSYSGroupAIOS framework adopted (hooks, rules engine, Makefile)

💘 Generated with Crush

Assisted-by: Crush:glm-5.2

2026-08-13 08:59:14 -05:00

2.8 KiB

Raw Blame History

Agent Identity Provisioning — Agent Guidelines

Governing baseline: BASELINE-PROMPT.md (from TSYSGroupAIOS framework). Read STATUS.md and questions-v1.md first, every session.

This project provides Playwright-based automation for provisioning AI agent identities across the TSYS Group stack.

Quick Start

Set up the environment: bash scripts/setup-hooks.sh
Read STATUS.md — current state.
Check for understanding — summarize the rules (see below).

Build and run:

cp agents.yaml.example agents.yaml  # fill in invite links
cp .env.example .env                # fill in BW credentials
docker compose up --build

Project Overview

Playwright automation that:

Enrolls AI agent identities in Cloudron (accept invite, set password, enable 2FA)
Logs into Gitea/Discourse/Redmine via Cloudron SSO
Generates per-agent API keys in each system
Stores all credentials in Bitwarden (per-agent collections)
Verifies API keys work

Architecture and full plan: ~/Q3/agent-identity-bootstrap.md

Repository Layout

agent-identity-provisioning/
├── AGENTS.md              ← THIS FILE
├── STATUS.md              ← agent scratchpad
├── WORKING.md             ← session task tracker
├── questions-v1.md        ← questions for the human
├── provision-agent.py     ← main Playwright script
├── bw-helper.py           ← Bitwarden CLI wrapper
├── agents.yaml.example    ← manifest template
├── Dockerfile             ← Playwright + bw CLI
├── docker-compose.yml     ← container lifecycle
├── requirements.txt       ← Python dependencies
├── Makefile               ← convenience dispatch
├── scripts/               ← TSYSGroupAIOS framework (hooks, rules engine)
└── state/                 ← provisioning state (gitignored)

Systems of Record

Redmine (#442) is the system of record for this work.
No Discourse doc yet — will be created when the provisioning runbook is finalized.
Git is the source of truth for the automation code.

Git Workflow

Work off master. Commit + push after every logical unit.
Conventional format: feat(provision): ..., fix(bw): ..., etc.
Shellcheck on all shell scripts (zero warnings, including info-level).
Every commit references [#442].

Conventions

Python for the Playwright automation. Type hints, docstrings.
Bitwarden CLI for all credential operations — never hardcode credentials.
No browser state persistence — each provisioning run starts fresh.
Container naming: tsys-agent-provisioner.
Image pinning: all images pinned to specific versions.

2.8 KiB Raw Blame History