aegis-warroom.vercel.app

{
  "name": "drain_pod_traffic",
  "kind": "act",
  "impl": "imperative",
  "description": "Immediately halts ingress to the auth-service pods and activates circuit breaker fallback.",
  "inputSchema": {
    "type": "object",
    "properties": {
      "gracePeriodSeconds": {
        "type": "integer",
        "default": 5
      }
    }
  }
}

{
  "name": "inspect_thread_dump",
  "kind": "act",
  "impl": "imperative",
  "description": "Extracts real-time JVM / Go heap dumps to identify deadlocks and cryptographic salt hashing bottlenecks.",
  "inputSchema": {
    "type": "object",
    "properties": {
      "depth": {
        "type": "string",
        "enum": [
          "SUMMARY",
          "FULL_STACK"
        ],
        "default": "SUMMARY"
      }
    }
  }
}

{
  "name": "emergencySubnetQuarantine",
  "kind": "act",
  "impl": "imperative",
  "description": "Immediately quarantines compromised cloud subnet, severs ingress connections, and activates cold-standby infrastructure.",
  "inputSchema": {
    "type": "object",
    "properties": {
      "subnetId": {
        "type": "string",
        "description": "Exact cluster or subnet identifier to isolate (e.g. auth-ingress-us-east-1)"
      },
      "drainPercent": {
        "type": "number",
        "description": "Percentage of ingress traffic to drop or redirect"
      },
      "failoverRegion": {
        "type": "string",
        "enum": [
          "eu-central-1",
          "ap-south-1"
        ],
        "description": "Destination cloud region designated to absorb redirected workloads"
      },
      "authSignature": {
        "type": "string",
        "description": "High-privilege emergency operator token"
      }
    },
    "required": [
      "subnetId",
      "drainPercent",
      "failoverRegion",
      "authSignature"
    ]
  }
}

{
  "name": "inspect_telemetry_metrics",
  "kind": "answer",
  "impl": "imperative",
  "description": "Retrieves real-time telemetry metrics, P99 latency, RPS volume, and error rates across all infrastructure tiers.",
  "inputSchema": {
    "type": "object",
    "properties": {
      "targetTier": {
        "type": "string",
        "enum": [
          "all",
          "tier0_edge",
          "tier1_ingress",
          "tier2_services",
          "tier3_storage"
        ],
        "description": "The specific infrastructure tier to query"
      },
      "metricWindowSeconds": {
        "type": "integer",
        "minimum": 5,
        "maximum": 300,
        "default": 30,
        "description": "Lookback window in seconds"
      }
    },
    "required": [
      "targetTier"
    ]
  }
}

{
  "name": "trace_network_packets",
  "kind": "act",
  "impl": "imperative",
  "description": "Sniffs and filters ingress network packets across Anycast edge scrubbing nodes to identify malicious payloads, ASNs, and HTTP/2 reset bursts.",
  "inputSchema": {
    "type": "object",
    "properties": {
      "protocol": {
        "type": "string",
        "enum": [
          "HTTP2",
          "HTTP3",
          "TCP_SYN",
          "UDP_FRAG",
          "GRPC"
        ],
        "description": "Network protocol to inspect"
      },
      "sampleSize": {
        "type": "integer",
        "minimum": 100,
        "maximum": 10000,
        "default": 2500,
        "description": "Number of sample packets to trace"
      }
    },
    "required": [
      "protocol"
    ]
  }
}

{
  "name": "deploy_waf_defense_rule",
  "kind": "act",
  "impl": "imperative",
  "description": "Synthesizes and deploys an automated edge WAF firewall rule to Cloudflare Workers and Envoy gateways.",
  "inputSchema": {
    "type": "object",
    "properties": {
      "ruleName": {
        "type": "string",
        "maxLength": 64,
        "description": "Descriptive identifier for the rule"
      },
      "targetVector": {
        "type": "string",
        "enum": [
          "IP_RATE_LIMIT",
          "ASN_CHALLENGE",
          "URI_REGEX",
          "HEADER_ANOMALY"
        ]
      },
      "expression": {
        "type": "string",
        "description": "Firewall expression logic"
      },
      "action": {
        "type": "string",
        "enum": [
          "BLOCK",
          "MANAGED_CHALLENGE",
          "JS_CHALLENGE",
          "LOG_ONLY"
        ]
      }
    },
    "required": [
      "ruleName",
      "targetVector",
      "expression",
      "action"
    ]
  }
}

{
  "name": "rebalance_traffic_load",
  "kind": "act",
  "impl": "imperative",
  "description": "Dynamically shifts global ingress traffic weight from degraded/attacked regions to healthy standby regions.",
  "inputSchema": {
    "type": "object",
    "properties": {
      "sourceRegion": {
        "type": "string",
        "enum": [
          "us-east-1",
          "eu-central-1",
          "ap-south-1"
        ]
      },
      "targetRegion": {
        "type": "string",
        "enum": [
          "us-east-1",
          "eu-central-1",
          "ap-south-1"
        ]
      },
      "shiftPercentage": {
        "type": "number",
        "minimum": 10,
        "maximum": 100,
        "description": "Traffic percentage to shift"
      }
    },
    "required": [
      "sourceRegion",
      "targetRegion",
      "shiftPercentage"
    ]
  }
}

{
  "name": "simulate_failover_latency",
  "kind": "act",
  "impl": "imperative",
  "description": "Executes a 10,000-packet Monte Carlo streaming simulation of network failover dynamics with real-time AbortSignal cancellation support.",
  "inputSchema": {
    "type": "object",
    "properties": {
      "sourceRegion": {
        "type": "string",
        "default": "us-east-1"
      },
      "targetRegion": {
        "type": "string",
        "default": "eu-central-1"
      },
      "iterations": {
        "type": "integer",
        "default": 10000
      }
    }
  }
}

{
  "name": "synthesize_incident_brief",
  "kind": "act",
  "impl": "imperative",
  "description": "Produces a formal root-cause analysis, timeline, and mitigation summary for executive incident review.",
  "inputSchema": {
    "type": "object",
    "properties": {
      "format": {
        "type": "string",
        "enum": [
          "MARKDOWN",
          "JSON"
        ],
        "default": "MARKDOWN"
      }
    }
  }
}

{
  "name": "emergencySubnetQuarantine",
  "kind": "act",
  "impl": "declarative",
  "description": "Immediately quarantines compromised cloud subnet, severs ingress connections, and activates cold-standby infrastructure.",
  "inputSchema": {
    "type": "object",
    "properties": {
      "subnetId": {
        "type": "string"
      },
      "drainPercent": {
        "type": "number"
      },
      "failoverRegion": {
        "type": "string",
        "enum": [
          "eu-central-1",
          "ap-south-1"
        ]
      },
      "authSignature": {
        "type": "string"
      }
    },
    "required": [
      "subnetId",
      "drainPercent",
      "failoverRegion",
      "authSignature"
    ]
  }
}