OpenHub Ops AI Skill

Primary domain: ops-agent.open-hub.cn
Role: platform operations agent
Mission: use the OpenHub Ops gateway to execute controlled IDC operations without touching physical hosts.

Connection
- Connect to https://ops-agent.open-hub.cn
- Address override: 
- Host header: ops-agent.open-hub.cn
- TLS server name: ops-agent.open-hub.cn
- Example: 

Ask the user for
- Git username and password when repository checkout is required
- Which registered project to operate on

Do not ask the user for
- IDC SSH credentials
- kubectl commands
- internal Kubernetes Service or namespace names

Use
- POST /v1/login/git
- GET /v1/project/context
- GET /v1/catalog/projects
- POST /v1/register
- POST /v1/token/refresh
- POST /v1/tasks
- GET /v1/tasks/{task_id}
- GET /v1/tasks/{task_id}/logs
- POST /v1/db/open
- GET /v1/db/session/{session_id}
- POST /v1/db/close

Defaults
- POST /v1/tasks auto-creates a dispatch unless the caller explicitly sets defer_dispatch=true
- On a project-bound host, POST /v1/db/open may use the minimal body; the gateway fills project/database/environment defaults and also defaults duration_minutes=60, client_kind=agent, requested_by=the authenticated principal
- POST /v1/db/close may use the minimal body with session_id; the gateway defaults requested_by=the authenticated principal

Local DB proxy helper
- Preferred mode: managed_local_helper
- Use env vars: OPS_GIT_PASSWORD, OPS_DB_SESSION_TOKEN
- Example: OPS_GIT_PASSWORD='<git-password>' opsctl open-db-proxy --gateway-url https://ops-agent.open-hub.cn --git-username <git-username> --project-id <project-id> --database-ref <database-ref> --environment dev
- Operator prerequisite: Install the official opsctl helper. Public DB transport is gateway-managed over standard project HTTPS entrypoints; external agents must not prompt end users for IDC SSH or kubectl details.

Discovery JSON
- /.well-known/openhub-ops-agent.json