원클릭으로
orchestrator-ref
Quick reference for Elasticsearch indices, event types, Docker patterns, and pipeline flows
Codex 또는 Claude로 설치 이 Prompt를 복사해 Codex, Claude 또는 다른 어시스턴트에 붙여 넣으면 Skill 페이지를 검토하고 설치를 진행할 수 있습니다.
메뉴
Quick reference for Elasticsearch indices, event types, Docker patterns, and pipeline flows
Codex 또는 Claude로 설치 이 Prompt를 복사해 Codex, Claude 또는 다른 어시스턴트에 붙여 넣으면 Skill 페이지를 검토하고 설치를 진행할 수 있습니다.
SOC 직업 분류 기준
Reference for correctly querying GitHub issue state - board status, parent/child links, sub-issues. Use these patterns instead of `gh issue view --json projectItems` which does not reliably return status field values.
Analyze recommendations from pipeline run analyses — filter by priority, target (orchestrator/project), pipeline run ID, or project
Deep-dive into agent execution - Docker logs, Claude stream events, tool calls, errors
Search and analyze Claude Code live execution logs captured in Elasticsearch - tool calls, tool results, API usage, and errors for a specific task or pipeline run
Investigate a pipeline run - timeline, Docker logs, decision events, root cause analysis
Comprehensive system health check - all components, queue, circuit breakers, active work, errors
| name | orchestrator-ref |
| description | Quick reference for Elasticsearch indices, event types, Docker patterns, and pipeline flows |
| user_invocable | true |
You are providing reference data for the Claude Code Agent Orchestrator. Print the requested sections or all sections if no specific topic is requested.
6 indices, all date-partitioned (*-YYYY-MM-DD), 7-day retention via ILM, accessible at localhost:9200.
| Index Pattern | Purpose | Key Fields | Source |
|---|---|---|---|
decision-events-* | Orchestrator decisions: routing, progression, review/repair cycles, errors, queue ops, branch mgmt | timestamp, event_type, event_category, agent, task_id, project, pipeline_run_id, decision_category, selected_agent, from_status, to_status, iteration, feedback_source | monitoring/observability.py |
agent-events-* | Agent lifecycle: initialized, started, completed, failed | timestamp, agent_name, project, task_id, event_type, event_category, duration_ms, context_tokens, success, error_message, issue_number, board, pipeline_type, pipeline_run_id | services/pattern_detection_schema.py |
logs-claude.otel-default | Claude Code execution: tool results, API requests, API errors — OTEL data stream | @timestamp, resource.attributes.task_id, resource.attributes.pipeline_run_id, resource.attributes.agent, event_name, attributes.tool_name, attributes.success, attributes.tool_parameters | OTEL collector → ES |
pipeline-runs-* | Pipeline run tracking | id, issue_number, issue_title, issue_url, project, board, started_at, ended_at, status, duration_ms | services/pattern_detection_schema.py |
agent-logs-* | Legacy combined agent logs (tool calls, results, all events) | timestamp, session_id, agent_name, project, task_id, event_type, event_category, tool_name, duration_ms, success, error_message, pipeline_run_id | services/pattern_detection_schema.py |
orchestrator-task-metrics-* | Task execution metrics | @timestamp, agent, duration, success | monitoring/ |
Source: monitoring/observability.py EventType enum.
task_received, agent_initialized, agent_started, agent_completed, agent_failedprompt_constructed, claude_api_call_started, claude_api_call_completed, claude_api_call_failedcontainer_launch_started, container_launch_succeeded, container_launch_failedcontainer_execution_started, container_execution_completed, container_execution_failedresponse_chunk_received, response_processing_started, response_processing_completedtool_execution_started, tool_execution_completedperformance_metric, token_usageNote: agent_initialized, agent_started, agent_completed, agent_failed also go to agent-events-* index.
decision-events-*)Feedback Monitoring: feedback_detected, feedback_listening_started, feedback_listening_stopped, feedback_ignored
Agent Routing: agent_routing_decision, agent_selected, workspace_routing_decision
Pipeline Progression: status_progression_started, status_progression_completed, status_progression_failed, pipeline_stage_transition
Pipeline Runs: pipeline_run_started, pipeline_run_completed, pipeline_run_failed
Review Cycles: review_cycle_started, review_cycle_iteration, review_cycle_maker_selected, review_cycle_reviewer_selected, review_cycle_escalated, review_cycle_completed
Repair Cycles: repair_cycle_started, repair_cycle_iteration, repair_cycle_test_cycle_started/completed, repair_cycle_test_execution_started/completed, repair_cycle_fix_cycle_started/completed, repair_cycle_file_fix_started/completed/failed, repair_cycle_warning_review_started/completed/failed, repair_cycle_completed
Repair Containers: repair_cycle_container_started, repair_cycle_container_checkpoint_updated, repair_cycle_container_recovered, repair_cycle_container_killed, repair_cycle_container_completed
Conversational: conversational_loop_started, conversational_question_routed, conversational_loop_paused, conversational_loop_resumed
Errors: error_encountered, error_recovered, circuit_breaker_opened, circuit_breaker_closed, retry_attempted
Result Persistence: result_persistence_failed, fallback_storage_used, output_validation_failed, empty_output_detected, container_result_recovered
Task Queue: task_queued, task_dequeued, task_priority_changed, task_cancelled
Branch Management: branch_selected, branch_created, branch_reused, branch_conflict_detected, branch_stale_detected, branch_selection_escalated
claude-agent-{project}-{task_id} (sanitized, see claude/docker_runner.py:340)docker ps --filter "name=claude-agent-"docker logs <container_name> 2>&1Development (senior_software_engineer)
→ Code Review (review cycle: senior_software_engineer + code_reviewer, max 5 iterations, escalate at 1 blocking)
→ Testing (repair cycle: senior_software_engineer, max 100 agent calls, checkpoint every 5)
→ Staged (senior_software_engineer)
Board columns: Backlog → Development → Code Review → Testing → Staged → Done
Research (idea_researcher, conversational)
→ Requirements (business_analyst, conversational)
→ Design (software_architect, conversational)
→ Work Breakdown (work_breakdown_agent, conversational)
→ In Development (tracking)
→ In Review (pr_review_agent)
→ Documentation (technical_writer)
→ Documentation Review (documentation_editor, review cycle max 3 iterations)
In Progress (dev_environment_setup)
→ Verification (dev_environment_verifier)
curl -s "http://localhost:9200/pipeline-runs-*/_search" -H 'Content-Type: application/json' -d '{
"query": {"term": {"id": "<RUN_ID>"}},
"size": 1
}' | jq '.hits.hits[]._source'
curl -s "http://localhost:9200/decision-events-*/_search" -H 'Content-Type: application/json' -d '{
"query": {"term": {"pipeline_run_id": "<RUN_ID>"}},
"sort": [{"timestamp": "asc"}],
"size": 500
}' | jq '.hits.hits[]._source'
curl -s "http://localhost:9200/agent-events-*/_search" -H 'Content-Type: application/json' -d '{
"query": {"term": {"pipeline_run_id": "<RUN_ID>"}},
"sort": [{"timestamp": "asc"}],
"size": 100
}' | jq '.hits.hits[]._source'
curl -s "http://localhost:9200/logs-claude.otel-default/_search" -H 'Content-Type: application/json' -d '{
"query": {"term": {"resource.attributes.task_id.keyword": "<TASK_ID>"}},
"sort": [{"@timestamp": "asc"}],
"size": 500
}' | jq '.hits.hits[]._source | {"@timestamp", event_name, "tool_name": .attributes.tool_name, "success": .attributes.success}'
curl -s "http://localhost:9200/decision-events-*/_search" -H 'Content-Type: application/json' -d '{
"query": {
"bool": {
"must": [
{"terms": {"event_type": ["error_encountered", "agent_failed", "circuit_breaker_opened", "pipeline_run_failed"]}},
{"range": {"timestamp": {"gte": "now-1h"}}}
]
}
},
"sort": [{"timestamp": "desc"}],
"size": 50
}' | jq '.hits.hits[]._source'
curl -s "http://localhost:9200/pipeline-runs-*/_search" -H 'Content-Type: application/json' -d '{
"query": {"match_all": {}},
"sort": [{"started_at": "desc"}],
"size": 10
}' | jq '.hits.hits[]._source'
curl -s "http://localhost:9200/agent-events-*/_search" -H 'Content-Type: application/json' -d '{
"query": {
"bool": {
"must": [
{"term": {"pipeline_run_id": "<RUN_ID>"}},
{"term": {"event_type": "agent_initialized"}}
]
}
},
"size": 50
}' | jq '.hits.hits[]._source | {agent_name, task_id, timestamp}'
curl -s "http://localhost:9200/_cat/indices?v&s=index" | grep -E "(logs-claude|metrics-claude|decision-events|agent-events|pipeline-runs|agent-logs|task-metrics)"
| Service | URL | Notes |
|---|---|---|
| Elasticsearch | localhost:9200 | Direct curl queries |
| Observability API | localhost:5001 | Health, agents, history, pipeline runs |
| Redis | localhost:6379 | Task queue, pub/sub events |
| Web UI | localhost:3000 | Visual dashboard |
All run via docker-compose exec orchestrator python scripts/<script>:
inspect_pipeline_timeline.py <RUN_ID> [--verbose] [--json] - Pipeline execution timelineinspect_task_health.py [--show-all] [--project <name>] [--json] - Task queue healthinspect_checkpoint.py [<RUN_ID>] [--verify-recovery] - Pipeline checkpoint stateinspect_circuit_breakers.py - Circuit breaker states