feat(node2): wire calendar-service and core automation tools in router
This commit is contained in:
Apple
64
config/nodes_registry.yml
Normal file
64
config/nodes_registry.yml
Normal file
@@ -0,0 +1,64 @@
|
||||
defaults:
|
||||
health_timeout_sec: 10
|
||||
tools_timeout_sec: 30
|
||||
# Per-node timeout defaults (overridable per-node)
|
||||
gateway_timeout_ms: 2500 # ms for gateway health/agent fetch
|
||||
apply_timeout_ms: 10000 # ms for apply POST
|
||||
get_retry: 1 # max retries for GET (health check)
|
||||
post_retry: 0 # no retry for mutating calls
|
||||
nodes:
|
||||
NODA1:
|
||||
label: Production (NODA1)
|
||||
node_role: prod # prod = always-on, higher timeouts
|
||||
gateway_timeout_ms: 2500
|
||||
apply_timeout_ms: 10000
|
||||
router_url: http://144.76.224.179:9102
|
||||
gateway_url: http://144.76.224.179:9300
|
||||
monitor_url: http://144.76.224.179:9102
|
||||
supervisor_url: ''
|
||||
ssh:
|
||||
host: 144.76.224.179
|
||||
ipv6: 2a01:4f8:201:2a6::2
|
||||
port: 22
|
||||
user: root
|
||||
auth:
|
||||
password_env: NODES_NODA1_SSH_PASSWORD
|
||||
host_keys:
|
||||
- type: rsa
|
||||
bits: 3072
|
||||
sha256: OzbVMM7CC4SatdE2CSoxh5qgJdCyYO22MLjchXXBIro
|
||||
- type: ecdsa
|
||||
bits: 256
|
||||
sha256: YPQUigtDm3HiEp4MYYeREE+M3ig/2CrZXy2ozr4OWQw
|
||||
- type: ed25519
|
||||
bits: 256
|
||||
sha256: 79LG0tKQ1B1DsdVZ/BhLYSX2v08eCWqqWihHtn+Y8FU
|
||||
NODA2:
|
||||
label: Control Plane (NODA2 · MacBook)
|
||||
node_role: dev # dev = optional, short timeout, canary-default
|
||||
gateway_timeout_ms: 1000 # fast timeout — dev laptop may sleep/NAT
|
||||
apply_timeout_ms: 5000
|
||||
get_retry: 1
|
||||
post_retry: 0
|
||||
router_url: http://127.0.0.1:9102
|
||||
gateway_url: http://127.0.0.1:9300
|
||||
monitor_url: http://127.0.0.1:9102
|
||||
supervisor_url: http://127.0.0.1:8084
|
||||
NODA3:
|
||||
label: AI/ML Experiments (NODA3)
|
||||
node_role: dev
|
||||
gateway_timeout_ms: 800
|
||||
router_url: ''
|
||||
gateway_url: ''
|
||||
monitor_url: ''
|
||||
supervisor_url: ''
|
||||
enabled: false
|
||||
NODA4:
|
||||
label: Reserve Node (NODA4)
|
||||
node_role: dev
|
||||
gateway_timeout_ms: 1500
|
||||
router_url: http://10.0.0.44:9102
|
||||
gateway_url: http://10.0.0.44:9300
|
||||
monitor_url: http://10.0.0.44:9102
|
||||
supervisor_url: ''
|
||||
enabled: false
|
||||
507
config/rbac_tools_matrix.yml
Normal file
507
config/rbac_tools_matrix.yml
Normal file
@@ -0,0 +1,507 @@
|
||||
# RBAC Tools Matrix
|
||||
# Maps tool → action → entitlements required
|
||||
# Enforced by tool_governance.py in gateway dispatch
|
||||
#
|
||||
# Entitlement format: tools.<tool_short>.<scope>
|
||||
# Agents/users must have ALL listed entitlements to perform an action.
|
||||
|
||||
tools:
|
||||
|
||||
repo_tool:
|
||||
actions:
|
||||
tree:
|
||||
entitlements: ["tools.repo.read"]
|
||||
read:
|
||||
entitlements: ["tools.repo.read"]
|
||||
search:
|
||||
entitlements: ["tools.repo.read"]
|
||||
metadata:
|
||||
entitlements: ["tools.repo.read"]
|
||||
|
||||
kb_tool:
|
||||
actions:
|
||||
search:
|
||||
entitlements: ["tools.kb.read"]
|
||||
snippets:
|
||||
entitlements: ["tools.kb.read"]
|
||||
open:
|
||||
entitlements: ["tools.kb.read"]
|
||||
sources:
|
||||
entitlements: ["tools.kb.read"]
|
||||
|
||||
oncall_tool:
|
||||
actions:
|
||||
services_list:
|
||||
entitlements: ["tools.oncall.read"]
|
||||
service_health:
|
||||
entitlements: ["tools.oncall.read"]
|
||||
service_status:
|
||||
entitlements: ["tools.oncall.read"]
|
||||
runbook_search:
|
||||
entitlements: ["tools.oncall.read"]
|
||||
runbook_read:
|
||||
entitlements: ["tools.oncall.read"]
|
||||
deployments_recent:
|
||||
entitlements: ["tools.oncall.read"]
|
||||
incident_list:
|
||||
entitlements: ["tools.oncall.read"]
|
||||
incident_get:
|
||||
entitlements: ["tools.oncall.read"]
|
||||
incident_create:
|
||||
entitlements: ["tools.oncall.incident_write"]
|
||||
incident_close:
|
||||
entitlements: ["tools.oncall.incident_write"]
|
||||
incident_append_event:
|
||||
entitlements: ["tools.oncall.incident_write"]
|
||||
incident_attach_artifact:
|
||||
entitlements: ["tools.oncall.incident_write"]
|
||||
incident_followups_summary:
|
||||
entitlements: ["tools.oncall.read"]
|
||||
alert_to_incident:
|
||||
entitlements: ["tools.oncall.incident_write", "tools.alerts.read", "tools.alerts.ack"]
|
||||
|
||||
incident_escalation_tool:
|
||||
actions:
|
||||
evaluate:
|
||||
entitlements: ["tools.oncall.incident_write"]
|
||||
auto_resolve_candidates:
|
||||
entitlements: ["tools.oncall.incident_write"]
|
||||
|
||||
risk_engine_tool:
|
||||
actions:
|
||||
service:
|
||||
entitlements: ["tools.risk.read"]
|
||||
dashboard:
|
||||
entitlements: ["tools.risk.read"]
|
||||
policy:
|
||||
entitlements: ["tools.risk.read"]
|
||||
|
||||
risk_history_tool:
|
||||
actions:
|
||||
snapshot:
|
||||
entitlements: ["tools.risk.write"]
|
||||
cleanup:
|
||||
entitlements: ["tools.risk.write"]
|
||||
series:
|
||||
entitlements: ["tools.risk.read"]
|
||||
digest:
|
||||
entitlements: ["tools.risk.write"]
|
||||
|
||||
backlog_tool:
|
||||
actions:
|
||||
list:
|
||||
entitlements: ["tools.backlog.read"]
|
||||
get:
|
||||
entitlements: ["tools.backlog.read"]
|
||||
dashboard:
|
||||
entitlements: ["tools.backlog.read"]
|
||||
create:
|
||||
entitlements: ["tools.backlog.write"]
|
||||
upsert:
|
||||
entitlements: ["tools.backlog.write"]
|
||||
set_status:
|
||||
entitlements: ["tools.backlog.write"]
|
||||
add_comment:
|
||||
entitlements: ["tools.backlog.write"]
|
||||
close:
|
||||
entitlements: ["tools.backlog.write"]
|
||||
auto_generate_weekly:
|
||||
entitlements: ["tools.backlog.admin"]
|
||||
cleanup:
|
||||
entitlements: ["tools.backlog.admin"]
|
||||
|
||||
architecture_pressure_tool:
|
||||
actions:
|
||||
service:
|
||||
entitlements: ["tools.pressure.read"]
|
||||
dashboard:
|
||||
entitlements: ["tools.pressure.read"]
|
||||
digest:
|
||||
entitlements: ["tools.pressure.write"]
|
||||
|
||||
incident_intelligence_tool:
|
||||
actions:
|
||||
correlate:
|
||||
entitlements: ["tools.oncall.read"]
|
||||
recurrence:
|
||||
entitlements: ["tools.oncall.read"]
|
||||
buckets:
|
||||
entitlements: ["tools.oncall.read"]
|
||||
weekly_digest:
|
||||
entitlements: ["tools.oncall.incident_write"] # writes FS artifacts + autofollowups
|
||||
|
||||
alert_ingest_tool:
|
||||
actions:
|
||||
ingest:
|
||||
entitlements: ["tools.alerts.ingest"]
|
||||
list:
|
||||
entitlements: ["tools.alerts.read"]
|
||||
get:
|
||||
entitlements: ["tools.alerts.read"]
|
||||
ack:
|
||||
entitlements: ["tools.alerts.ack"]
|
||||
claim:
|
||||
entitlements: ["tools.alerts.claim"]
|
||||
fail:
|
||||
entitlements: ["tools.alerts.ack"]
|
||||
|
||||
observability_tool:
|
||||
actions:
|
||||
metrics_query:
|
||||
entitlements: ["tools.observability.read"]
|
||||
metrics_range:
|
||||
entitlements: ["tools.observability.read"]
|
||||
logs_query:
|
||||
entitlements: ["tools.observability.read"]
|
||||
traces_query:
|
||||
entitlements: ["tools.observability.traces"]
|
||||
service_overview:
|
||||
entitlements: ["tools.observability.read"]
|
||||
slo_snapshot:
|
||||
entitlements: ["tools.observability.read"]
|
||||
|
||||
monitor_tool:
|
||||
actions:
|
||||
status:
|
||||
entitlements: ["tools.monitor.read"]
|
||||
|
||||
pr_reviewer_tool:
|
||||
actions:
|
||||
review:
|
||||
entitlements: ["tools.pr_review.use"]
|
||||
gate:
|
||||
entitlements: ["tools.pr_review.gate"]
|
||||
|
||||
contract_tool:
|
||||
actions:
|
||||
lint_openapi:
|
||||
entitlements: ["tools.contract.use"]
|
||||
diff_openapi:
|
||||
entitlements: ["tools.contract.use"]
|
||||
generate_client_stub:
|
||||
entitlements: ["tools.contract.use"]
|
||||
gate:
|
||||
entitlements: ["tools.contract.gate"]
|
||||
|
||||
config_linter_tool:
|
||||
actions:
|
||||
lint:
|
||||
entitlements: ["tools.config_lint.use"]
|
||||
gate:
|
||||
entitlements: ["tools.config_lint.gate"]
|
||||
|
||||
threatmodel_tool:
|
||||
actions:
|
||||
analyze_service:
|
||||
entitlements: ["tools.threatmodel.use"]
|
||||
analyze_diff:
|
||||
entitlements: ["tools.threatmodel.use"]
|
||||
generate_checklist:
|
||||
entitlements: ["tools.threatmodel.use"]
|
||||
gate:
|
||||
entitlements: ["tools.threatmodel.gate"]
|
||||
|
||||
job_orchestrator_tool:
|
||||
actions:
|
||||
list_tasks:
|
||||
entitlements: ["tools.jobs.use"]
|
||||
start_task:
|
||||
entitlements: ["tools.jobs.use"]
|
||||
get_job:
|
||||
entitlements: ["tools.jobs.use"]
|
||||
cancel_job:
|
||||
entitlements: ["tools.jobs.cancel"]
|
||||
|
||||
memory_search:
|
||||
actions:
|
||||
_default:
|
||||
entitlements: ["tools.memory.read"]
|
||||
|
||||
graph_query:
|
||||
actions:
|
||||
_default:
|
||||
entitlements: ["tools.memory.read"]
|
||||
|
||||
remember_fact:
|
||||
actions:
|
||||
_default:
|
||||
entitlements: ["tools.memory.write"]
|
||||
|
||||
web_search:
|
||||
actions:
|
||||
_default:
|
||||
entitlements: ["tools.web.read"]
|
||||
|
||||
web_extract:
|
||||
actions:
|
||||
_default:
|
||||
entitlements: ["tools.web.read"]
|
||||
|
||||
crawl4ai_scrape:
|
||||
actions:
|
||||
_default:
|
||||
entitlements: ["tools.web.read"]
|
||||
|
||||
image_generate:
|
||||
actions:
|
||||
_default:
|
||||
entitlements: ["tools.media.generate"]
|
||||
|
||||
comfy_generate_image:
|
||||
actions:
|
||||
_default:
|
||||
entitlements: ["tools.media.generate"]
|
||||
|
||||
comfy_generate_video:
|
||||
actions:
|
||||
_default:
|
||||
entitlements: ["tools.media.generate"]
|
||||
|
||||
tts_speak:
|
||||
actions:
|
||||
_default:
|
||||
entitlements: ["tools.media.generate"]
|
||||
|
||||
presentation_create:
|
||||
actions:
|
||||
_default:
|
||||
entitlements: ["tools.docs.create"]
|
||||
|
||||
presentation_status:
|
||||
actions:
|
||||
_default:
|
||||
entitlements: ["tools.docs.create"]
|
||||
|
||||
presentation_download:
|
||||
actions:
|
||||
_default:
|
||||
entitlements: ["tools.docs.create"]
|
||||
|
||||
file_tool:
|
||||
actions:
|
||||
_default:
|
||||
entitlements: ["tools.docs.create"]
|
||||
|
||||
market_data:
|
||||
actions:
|
||||
_default:
|
||||
entitlements: ["tools.market.read"]
|
||||
|
||||
data_governance_tool:
|
||||
actions:
|
||||
digest_audit:
|
||||
entitlements: ["tools.data_gov.read"]
|
||||
scan_repo:
|
||||
entitlements: ["tools.data_gov.read"]
|
||||
scan_audit:
|
||||
entitlements: ["tools.data_gov.read"]
|
||||
retention_check:
|
||||
entitlements: ["tools.data_gov.read"]
|
||||
policy:
|
||||
entitlements: ["tools.data_gov.read"]
|
||||
gate:
|
||||
entitlements: ["tools.data_gov.gate"]
|
||||
|
||||
cost_analyzer_tool:
|
||||
actions:
|
||||
digest:
|
||||
entitlements: ["tools.cost.read"]
|
||||
report:
|
||||
entitlements: ["tools.cost.read"]
|
||||
top:
|
||||
entitlements: ["tools.cost.read"]
|
||||
anomalies:
|
||||
entitlements: ["tools.cost.read"]
|
||||
weights:
|
||||
entitlements: ["tools.cost.read"]
|
||||
gate:
|
||||
entitlements: ["tools.cost.gate"]
|
||||
|
||||
dependency_scanner_tool:
|
||||
actions:
|
||||
scan:
|
||||
entitlements: ["tools.deps.read"]
|
||||
gate:
|
||||
entitlements: ["tools.deps.gate"]
|
||||
|
||||
drift_analyzer_tool:
|
||||
actions:
|
||||
analyze:
|
||||
entitlements: ["tools.drift.read"]
|
||||
gate:
|
||||
entitlements: ["tools.drift.gate"]
|
||||
|
||||
calendar_tool:
|
||||
actions:
|
||||
connect:
|
||||
entitlements: ["tools.calendar.use"]
|
||||
list_calendars:
|
||||
entitlements: ["tools.calendar.use"]
|
||||
list_events:
|
||||
entitlements: ["tools.calendar.use"]
|
||||
get_event:
|
||||
entitlements: ["tools.calendar.use"]
|
||||
create_event:
|
||||
entitlements: ["tools.calendar.use"]
|
||||
update_event:
|
||||
entitlements: ["tools.calendar.use"]
|
||||
delete_event:
|
||||
entitlements: ["tools.calendar.use"]
|
||||
set_reminder:
|
||||
entitlements: ["tools.calendar.use"]
|
||||
|
||||
agent_email_tool:
|
||||
actions:
|
||||
create_inbox:
|
||||
entitlements: ["tools.email.use"]
|
||||
list_inboxes:
|
||||
entitlements: ["tools.email.use"]
|
||||
delete_inbox:
|
||||
entitlements: ["tools.email.use"]
|
||||
send:
|
||||
entitlements: ["tools.email.use"]
|
||||
receive:
|
||||
entitlements: ["tools.email.use"]
|
||||
analyze_email:
|
||||
entitlements: ["tools.email.use"]
|
||||
|
||||
browser_tool:
|
||||
actions:
|
||||
_default:
|
||||
entitlements: ["tools.browser.use"]
|
||||
|
||||
safe_code_executor_tool:
|
||||
actions:
|
||||
_default:
|
||||
entitlements: ["tools.exec.safe"]
|
||||
|
||||
secure_vault_tool:
|
||||
actions:
|
||||
_default:
|
||||
entitlements: ["tools.vault.manage"]
|
||||
|
||||
# ─── Role → Entitlements ─────────────────────────────────────────────────────
|
||||
# Lists which entitlements each role has.
|
||||
# Used by tool_governance.py to resolve agent role → entitlement set.
|
||||
|
||||
role_entitlements:
|
||||
agent_default:
|
||||
- tools.repo.read
|
||||
- tools.kb.read
|
||||
- tools.oncall.read
|
||||
- tools.observability.read
|
||||
- tools.memory.read
|
||||
- tools.memory.write
|
||||
- tools.web.read
|
||||
- tools.media.generate
|
||||
- tools.docs.create
|
||||
- tools.jobs.use
|
||||
|
||||
agent_cto:
|
||||
- tools.repo.read
|
||||
- tools.kb.read
|
||||
- tools.oncall.read
|
||||
- tools.oncall.incident_write
|
||||
- tools.alerts.ingest
|
||||
- tools.alerts.read
|
||||
- tools.alerts.ack
|
||||
- tools.alerts.claim
|
||||
- tools.observability.read
|
||||
- tools.observability.traces
|
||||
- tools.monitor.read
|
||||
- tools.memory.read
|
||||
- tools.memory.write
|
||||
- tools.web.read
|
||||
- tools.media.generate
|
||||
- tools.docs.create
|
||||
- tools.pr_review.use
|
||||
- tools.pr_review.gate
|
||||
- tools.contract.use
|
||||
- tools.contract.gate
|
||||
- tools.config_lint.use
|
||||
- tools.config_lint.gate
|
||||
- tools.threatmodel.use
|
||||
- tools.threatmodel.gate
|
||||
- tools.jobs.use
|
||||
- tools.jobs.cancel
|
||||
- tools.jobs.run.smoke
|
||||
- tools.jobs.run.drift
|
||||
- tools.jobs.run.backup
|
||||
- tools.jobs.run.migrate
|
||||
- tools.jobs.run.deploy
|
||||
- tools.jobs.run.ops
|
||||
- tools.deps.read
|
||||
- tools.deps.gate
|
||||
- tools.cost.read
|
||||
- tools.cost.gate
|
||||
- tools.data_gov.read
|
||||
- tools.data_gov.gate
|
||||
- tools.drift.read
|
||||
- tools.drift.gate
|
||||
- tools.risk.read
|
||||
- tools.risk.write
|
||||
- tools.pressure.read
|
||||
- tools.pressure.write
|
||||
- tools.backlog.read
|
||||
- tools.backlog.write
|
||||
- tools.backlog.admin
|
||||
- tools.calendar.use
|
||||
- tools.email.use
|
||||
- tools.browser.use
|
||||
- tools.exec.safe
|
||||
- tools.vault.manage
|
||||
|
||||
agent_oncall:
|
||||
- tools.repo.read
|
||||
- tools.kb.read
|
||||
- tools.oncall.read
|
||||
- tools.oncall.incident_write
|
||||
- tools.alerts.read
|
||||
- tools.alerts.ack
|
||||
- tools.alerts.claim
|
||||
- tools.observability.read
|
||||
- tools.monitor.read
|
||||
- tools.memory.read
|
||||
- tools.web.read
|
||||
- tools.jobs.use
|
||||
- tools.jobs.run.smoke
|
||||
- tools.jobs.run.drift
|
||||
- tools.jobs.run.ops
|
||||
- tools.deps.read
|
||||
- tools.drift.read
|
||||
- tools.cost.read
|
||||
- tools.data_gov.read
|
||||
- tools.risk.read
|
||||
- tools.risk.write
|
||||
- tools.pressure.read
|
||||
- tools.backlog.read
|
||||
- tools.backlog.write
|
||||
|
||||
agent_media:
|
||||
- tools.repo.read
|
||||
- tools.kb.read
|
||||
- tools.oncall.read
|
||||
- tools.observability.read
|
||||
- tools.memory.read
|
||||
- tools.memory.write
|
||||
- tools.web.read
|
||||
- tools.media.generate
|
||||
- tools.docs.create
|
||||
- tools.jobs.use
|
||||
|
||||
agent_monitor:
|
||||
# Read-only: observability, health, KB — no incident write, no jobs
|
||||
# Can INGEST alerts (detect → alert), but NOT create incidents
|
||||
- tools.oncall.read
|
||||
- tools.observability.read
|
||||
- tools.monitor.read
|
||||
- tools.kb.read
|
||||
- tools.alerts.ingest
|
||||
- tools.risk.read
|
||||
|
||||
agent_interface:
|
||||
# Minimal: KB + incident list/get + alert list/get + backlog read (read-only)
|
||||
- tools.kb.read
|
||||
- tools.oncall.read
|
||||
- tools.alerts.read
|
||||
- tools.backlog.read
|
||||
339
config/tool_limits.yml
Normal file
339
config/tool_limits.yml
Normal file
@@ -0,0 +1,339 @@
|
||||
# Tool Safety Limits Configuration
|
||||
# Controls per-tool: timeout, input/output sizes, rate limits, concurrency.
|
||||
# Applied by tool_governance.py middleware before dispatch.
|
||||
|
||||
# ─── Global Defaults ─────────────────────────────────────────────────────────
|
||||
defaults:
|
||||
timeout_ms: 30000 # 30s
|
||||
max_chars_in: 200000 # 200KB input
|
||||
max_bytes_out: 524288 # 512KB output
|
||||
rate_limit_rpm: 60 # 60 req/min per agent
|
||||
concurrency: 5 # max parallel calls per agent
|
||||
|
||||
# ─── Per-Tool Overrides ───────────────────────────────────────────────────────
|
||||
tools:
|
||||
|
||||
repo_tool:
|
||||
timeout_ms: 10000
|
||||
max_chars_in: 10000 # path + params only, not file content input
|
||||
max_bytes_out: 524288 # 512KB (file read result)
|
||||
rate_limit_rpm: 120
|
||||
|
||||
kb_tool:
|
||||
timeout_ms: 15000
|
||||
max_chars_in: 5000
|
||||
max_bytes_out: 262144 # 256KB
|
||||
rate_limit_rpm: 60
|
||||
|
||||
oncall_tool:
|
||||
timeout_ms: 10000
|
||||
max_chars_in: 10000
|
||||
max_bytes_out: 131072 # 128KB
|
||||
rate_limit_rpm: 30
|
||||
concurrency: 3
|
||||
actions:
|
||||
incident_followups_summary:
|
||||
timeout_ms: 10000
|
||||
rate_limit_rpm: 10
|
||||
|
||||
incident_escalation_tool:
|
||||
timeout_ms: 30000
|
||||
max_bytes_out: 524288
|
||||
rate_limit_rpm: 10
|
||||
|
||||
risk_engine_tool:
|
||||
actions:
|
||||
service:
|
||||
timeout_seconds: 10
|
||||
rpm: 20
|
||||
dashboard:
|
||||
timeout_seconds: 20
|
||||
rpm: 5
|
||||
policy:
|
||||
timeout_seconds: 2
|
||||
rpm: 60
|
||||
|
||||
risk_history_tool:
|
||||
actions:
|
||||
snapshot:
|
||||
timeout_seconds: 60
|
||||
rpm: 1
|
||||
cleanup:
|
||||
timeout_seconds: 30
|
||||
rpm: 2
|
||||
series:
|
||||
timeout_seconds: 5
|
||||
rpm: 30
|
||||
digest:
|
||||
timeout_seconds: 30
|
||||
rpm: 2
|
||||
|
||||
incident_intelligence_tool:
|
||||
timeout_ms: 30000
|
||||
max_bytes_out: 524288 # 512KB (digests can be large)
|
||||
rate_limit_rpm: 5
|
||||
actions:
|
||||
correlate:
|
||||
timeout_ms: 10000
|
||||
rate_limit_rpm: 10
|
||||
recurrence:
|
||||
timeout_ms: 15000
|
||||
rate_limit_rpm: 5
|
||||
buckets:
|
||||
timeout_ms: 15000
|
||||
rate_limit_rpm: 5
|
||||
weekly_digest:
|
||||
timeout_ms: 30000 # longer: writes artifacts + autofollowups
|
||||
rate_limit_rpm: 2
|
||||
|
||||
alert_ingest_tool:
|
||||
timeout_ms: 5000
|
||||
max_chars_in: 32768 # 32KB — alert payload cap
|
||||
max_bytes_out: 65536 # 64KB
|
||||
rate_limit_rpm: 60 # monitor can send up to 60 alerts/min
|
||||
concurrency: 5
|
||||
actions:
|
||||
ingest:
|
||||
rate_limit_rpm: 60 # monitor rate: 1/s
|
||||
list:
|
||||
rate_limit_rpm: 30
|
||||
timeout_ms: 5000
|
||||
ack:
|
||||
rate_limit_rpm: 20
|
||||
claim:
|
||||
rate_limit_rpm: 10
|
||||
timeout_ms: 5000
|
||||
fail:
|
||||
rate_limit_rpm: 20
|
||||
|
||||
observability_tool:
|
||||
timeout_ms: 15000
|
||||
max_chars_in: 5000
|
||||
max_bytes_out: 524288 # 512KB (metrics can be large)
|
||||
rate_limit_rpm: 30
|
||||
concurrency: 3
|
||||
actions:
|
||||
slo_snapshot:
|
||||
timeout_ms: 10000
|
||||
rate_limit_rpm: 30
|
||||
|
||||
pr_reviewer_tool:
|
||||
timeout_ms: 60000 # 60s (diff analysis can be slow)
|
||||
max_chars_in: 409600 # 400KB (diff text)
|
||||
max_bytes_out: 262144 # 256KB
|
||||
rate_limit_rpm: 10
|
||||
concurrency: 2
|
||||
|
||||
contract_tool:
|
||||
timeout_ms: 30000
|
||||
max_chars_in: 819200 # 800KB (openapi specs)
|
||||
max_bytes_out: 262144
|
||||
rate_limit_rpm: 20
|
||||
|
||||
config_linter_tool:
|
||||
timeout_ms: 30000
|
||||
max_chars_in: 409600 # 400KB
|
||||
max_bytes_out: 131072
|
||||
rate_limit_rpm: 20
|
||||
|
||||
threatmodel_tool:
|
||||
timeout_ms: 30000
|
||||
max_chars_in: 614400 # 600KB
|
||||
max_bytes_out: 262144
|
||||
rate_limit_rpm: 10
|
||||
|
||||
job_orchestrator_tool:
|
||||
timeout_ms: 600000 # 10 min (job execution)
|
||||
max_chars_in: 10000
|
||||
max_bytes_out: 131072
|
||||
rate_limit_rpm: 10
|
||||
concurrency: 2
|
||||
|
||||
memory_search:
|
||||
timeout_ms: 5000
|
||||
max_chars_in: 2000
|
||||
max_bytes_out: 65536
|
||||
rate_limit_rpm: 120
|
||||
|
||||
graph_query:
|
||||
timeout_ms: 5000
|
||||
max_chars_in: 2000
|
||||
max_bytes_out: 65536
|
||||
rate_limit_rpm: 60
|
||||
|
||||
web_search:
|
||||
timeout_ms: 15000
|
||||
max_chars_in: 500
|
||||
max_bytes_out: 131072
|
||||
rate_limit_rpm: 30
|
||||
|
||||
web_extract:
|
||||
timeout_ms: 30000
|
||||
max_chars_in: 2000
|
||||
max_bytes_out: 524288
|
||||
rate_limit_rpm: 20
|
||||
|
||||
crawl4ai_scrape:
|
||||
timeout_ms: 60000
|
||||
max_chars_in: 2000
|
||||
max_bytes_out: 1048576 # 1MB
|
||||
rate_limit_rpm: 10
|
||||
|
||||
image_generate:
|
||||
timeout_ms: 60000
|
||||
max_chars_in: 5000
|
||||
max_bytes_out: 5242880 # 5MB (base64 image)
|
||||
rate_limit_rpm: 5
|
||||
concurrency: 1
|
||||
|
||||
comfy_generate_image:
|
||||
timeout_ms: 120000
|
||||
max_chars_in: 5000
|
||||
max_bytes_out: 10485760 # 10MB
|
||||
rate_limit_rpm: 3
|
||||
concurrency: 1
|
||||
|
||||
comfy_generate_video:
|
||||
timeout_ms: 300000
|
||||
max_chars_in: 5000
|
||||
max_bytes_out: 52428800 # 50MB
|
||||
rate_limit_rpm: 1
|
||||
concurrency: 1
|
||||
|
||||
tts_speak:
|
||||
timeout_ms: 30000
|
||||
max_chars_in: 5000
|
||||
max_bytes_out: 5242880
|
||||
rate_limit_rpm: 10
|
||||
|
||||
presentation_create:
|
||||
timeout_ms: 120000
|
||||
max_chars_in: 100000
|
||||
max_bytes_out: 20971520 # 20MB
|
||||
rate_limit_rpm: 5
|
||||
|
||||
file_tool:
|
||||
timeout_ms: 60000
|
||||
max_chars_in: 524288
|
||||
max_bytes_out: 20971520
|
||||
rate_limit_rpm: 10
|
||||
|
||||
data_governance_tool:
|
||||
timeout_ms: 30000 # 30s (file I/O + regex scanning)
|
||||
max_chars_in: 3000 # params only
|
||||
max_bytes_out: 1048576 # 1MB (findings list can be verbose)
|
||||
rate_limit_rpm: 5 # read-heavy, limit frequency
|
||||
concurrency: 1 # serial: filesystem-bound
|
||||
actions:
|
||||
digest_audit:
|
||||
timeout_ms: 20000
|
||||
rate_limit_rpm: 5
|
||||
|
||||
cost_analyzer_tool:
|
||||
timeout_ms: 30000 # raised: Postgres queries may take longer
|
||||
max_chars_in: 2000 # params only
|
||||
max_bytes_out: 1048576 # 1MB (report may include many breakdowns)
|
||||
rate_limit_rpm: 10 # light reads, allow more
|
||||
concurrency: 2
|
||||
actions:
|
||||
digest:
|
||||
timeout_ms: 20000
|
||||
rate_limit_rpm: 5
|
||||
|
||||
dependency_scanner_tool:
|
||||
timeout_ms: 45000 # 45s (online mode may need more time)
|
||||
max_chars_in: 3000 # params only
|
||||
max_bytes_out: 1048576 # 1MB (vuln list can be verbose)
|
||||
rate_limit_rpm: 5 # expensive scan
|
||||
concurrency: 1 # serial: avoids hammering OSV API
|
||||
|
||||
drift_analyzer_tool:
|
||||
timeout_ms: 30000 # 30s (reads many files)
|
||||
max_chars_in: 5000 # params only, no large input
|
||||
max_bytes_out: 524288 # 512KB (findings can be verbose)
|
||||
rate_limit_rpm: 5 # expensive — limit calls
|
||||
concurrency: 1
|
||||
|
||||
market_data:
|
||||
timeout_ms: 10000
|
||||
max_chars_in: 1000
|
||||
max_bytes_out: 65536
|
||||
rate_limit_rpm: 60
|
||||
|
||||
architecture_pressure_tool:
|
||||
service:
|
||||
timeout_ms: 10000
|
||||
rate_limit_rpm: 30
|
||||
dashboard:
|
||||
timeout_ms: 20000
|
||||
rate_limit_rpm: 10
|
||||
digest:
|
||||
timeout_ms: 30000
|
||||
rate_limit_rpm: 2
|
||||
|
||||
backlog_tool:
|
||||
list:
|
||||
timeout_ms: 10000
|
||||
rate_limit_rpm: 30
|
||||
get:
|
||||
timeout_ms: 5000
|
||||
rate_limit_rpm: 60
|
||||
dashboard:
|
||||
timeout_ms: 10000
|
||||
rate_limit_rpm: 20
|
||||
create:
|
||||
timeout_ms: 20000
|
||||
rate_limit_rpm: 5
|
||||
upsert:
|
||||
timeout_ms: 20000
|
||||
rate_limit_rpm: 5
|
||||
set_status:
|
||||
timeout_ms: 10000
|
||||
rate_limit_rpm: 10
|
||||
add_comment:
|
||||
timeout_ms: 5000
|
||||
rate_limit_rpm: 20
|
||||
close:
|
||||
timeout_ms: 10000
|
||||
rate_limit_rpm: 5
|
||||
auto_generate_weekly:
|
||||
timeout_ms: 30000
|
||||
rate_limit_rpm: 2
|
||||
cleanup:
|
||||
timeout_ms: 30000
|
||||
rate_limit_rpm: 2
|
||||
|
||||
calendar_tool:
|
||||
timeout_ms: 30000
|
||||
max_chars_in: 12000
|
||||
max_bytes_out: 262144
|
||||
rate_limit_rpm: 20
|
||||
concurrency: 2
|
||||
|
||||
agent_email_tool:
|
||||
timeout_ms: 30000
|
||||
max_chars_in: 10000
|
||||
max_bytes_out: 262144
|
||||
rate_limit_rpm: 10
|
||||
concurrency: 1
|
||||
|
||||
browser_tool:
|
||||
timeout_ms: 60000
|
||||
max_chars_in: 8000
|
||||
max_bytes_out: 262144
|
||||
rate_limit_rpm: 8
|
||||
concurrency: 1
|
||||
|
||||
safe_code_executor_tool:
|
||||
timeout_ms: 10000
|
||||
max_chars_in: 12000
|
||||
max_bytes_out: 131072
|
||||
rate_limit_rpm: 12
|
||||
concurrency: 2
|
||||
|
||||
secure_vault_tool:
|
||||
timeout_ms: 15000
|
||||
max_chars_in: 4000
|
||||
max_bytes_out: 65536
|
||||
rate_limit_rpm: 20
|
||||
concurrency: 2
|
||||
118
config/tools_rollout.yml
Normal file
118
config/tools_rollout.yml
Normal file
@@ -0,0 +1,118 @@
|
||||
# Tool Rollout Configuration
|
||||
# Defines default tool groups and role → tools mapping
|
||||
# Used by agent_tools_config.py for automatic merge policy
|
||||
#
|
||||
# Syntax:
|
||||
# - @group_name → expands to all tools in that group
|
||||
# - tool_name → literal tool name
|
||||
|
||||
# ─── Tool Groups ────────────────────────────────────────────────────────────
|
||||
|
||||
default_tools_read:
|
||||
- repo_tool
|
||||
- kb_tool
|
||||
- oncall_tool
|
||||
- observability_tool
|
||||
- memory_search
|
||||
- graph_query
|
||||
- web_search
|
||||
- web_extract
|
||||
- remember_fact
|
||||
|
||||
cto_tools:
|
||||
- pr_reviewer_tool
|
||||
- contract_tool
|
||||
- config_linter_tool
|
||||
- threatmodel_tool
|
||||
- job_orchestrator_tool
|
||||
- dependency_scanner_tool
|
||||
- drift_analyzer_tool
|
||||
- cost_analyzer_tool
|
||||
- data_governance_tool
|
||||
- calendar_tool
|
||||
- agent_email_tool
|
||||
- browser_tool
|
||||
- safe_code_executor_tool
|
||||
- secure_vault_tool
|
||||
|
||||
content_tools:
|
||||
- image_generate
|
||||
- tts_speak
|
||||
- presentation_create
|
||||
- presentation_status
|
||||
- presentation_download
|
||||
- file_tool
|
||||
- crawl4ai_scrape
|
||||
|
||||
media_tools:
|
||||
- comfy_generate_image
|
||||
- comfy_generate_video
|
||||
|
||||
# ─── Role Map ────────────────────────────────────────────────────────────────
|
||||
# Maps role → list of tool groups/tools
|
||||
# Agents inherit tools from their role automatically.
|
||||
# agent_specific tools are additive on top of role tools.
|
||||
|
||||
role_map:
|
||||
agent_default:
|
||||
# All agents get read + content tools by default
|
||||
tools:
|
||||
- "@default_tools_read"
|
||||
- "@content_tools"
|
||||
|
||||
agent_cto:
|
||||
# CTO-role agents (sofiia, yaromir) get everything
|
||||
tools:
|
||||
- "@default_tools_read"
|
||||
- "@cto_tools"
|
||||
- "@content_tools"
|
||||
- "@media_tools"
|
||||
|
||||
agent_oncall:
|
||||
# Oncall agents: read + job orchestration
|
||||
tools:
|
||||
- "@default_tools_read"
|
||||
- job_orchestrator_tool
|
||||
|
||||
agent_media:
|
||||
# Media/content agents: read + all media
|
||||
tools:
|
||||
- "@default_tools_read"
|
||||
- "@content_tools"
|
||||
- "@media_tools"
|
||||
|
||||
agent_monitor:
|
||||
# Monitor agents (per-node): read-only observability + health + KB
|
||||
tools:
|
||||
- observability_tool
|
||||
- oncall_tool
|
||||
- kb_tool
|
||||
|
||||
agent_interface:
|
||||
# Interface agents (AISTALK): minimal read + incident list
|
||||
tools:
|
||||
- kb_tool
|
||||
- oncall_tool
|
||||
|
||||
# ─── Agent → Role Assignment ─────────────────────────────────────────────────
|
||||
agent_roles:
|
||||
sofiia: agent_cto
|
||||
admin: agent_cto
|
||||
yaromir: agent_cto
|
||||
helion: agent_oncall
|
||||
alateya: agent_media
|
||||
nutra: agent_media
|
||||
agromatrix: agent_media
|
||||
greenfood: agent_media
|
||||
druid: agent_media
|
||||
daarwizz: agent_default
|
||||
clan: agent_default
|
||||
eonarch: agent_media
|
||||
senpai: agent_default
|
||||
soul: agent_media
|
||||
daarion: agent_media
|
||||
oneok: agent_default
|
||||
# Infrastructure / monitoring agents
|
||||
monitor: agent_monitor
|
||||
aistalk: agent_interface
|
||||
# Fallback: unknown agents get agent_default
|
||||
Reference in New Issue
Block a user