@synadia-ai/agent-fabric-pi 0.1.0

package/skill/scratchpad/bin/BUILD.json

@@ -0,0 +1,367 @@
+{
+  "schema": 1,
+  "config": {
+    "schema": 1,
+    "release": "sp-v0.1.6",
+    "source_commit": "5e518519d1f9af47364cdf5ab01d518c8a195d33",
+    "go_version": "go1.26.7",
+    "targets": [
+      "darwin/arm64",
+      "darwin/amd64",
+      "linux/arm64",
+      "linux/amd64"
+    ]
+  },
+  "distribution_repository": "synadia-ai/agent-fabric-sdk",
+  "license": "Apache-2.0",
+  "files": {
+    "sp-darwin-arm64": {
+      "sha256": "c4d85f758490a50271b581a42cc78fd9318f7c2393cc97cbd4525773c3107bfe",
+      "bytes": 6968994
+    },
+    "sp-darwin-amd64": {
+      "sha256": "3d84751719e555218c4f977cdd5b9a5ef149d26421fc7dc6c6ec7b54586d4915",
+      "bytes": 7599504
+    },
+    "sp-linux-arm64": {
+      "sha256": "41e2ae7dfdc614ba3fa8a17ef51da5b8e02d29d4a36b718f428274c6804f9eb3",
+      "bytes": 6881442
+    },
+    "sp-linux-amd64": {
+      "sha256": "d03dde699244a13ef24675189dd3452805732d331b92505c120fad0da391b23e",
+      "bytes": 7454882
+    }
+  },
+  "build_info": {
+    "darwin/arm64": {
+      "Deps": [
+        {
+          "Path": "github.com/klauspost/compress",
+          "Sum": "h1:hMRETovs/pu/dVWN7zIT1PGG8t509MwT6bO7XSi26R8=",
+          "Version": "v1.19.2"
+        },
+        {
+          "Path": "github.com/nats-io/nats.go",
+          "Replace": {
+            "Path": "./third_party/nats-go",
+            "Version": "(devel)"
+          },
+          "Version": "v1.53.1"
+        },
+        {
+          "Path": "github.com/nats-io/nkeys",
+          "Sum": "h1:rd5oAuLOb8mnAycB0xleuEBNS1pVVnN0fv/FF34Eypg=",
+          "Version": "v0.4.16"
+        },
+        {
+          "Path": "github.com/nats-io/nuid",
+          "Sum": "h1:5iA8DT8V7q8WK2EScv2padNa/rTESc1KdnPw4TC2paw=",
+          "Version": "v1.0.1"
+        },
+        {
+          "Path": "golang.org/x/crypto",
+          "Sum": "h1:+KWHjbgOaAQ66dh/YlkZKHlz9ZUlq61AFirAR9ntP8M=",
+          "Version": "v0.55.0"
+        },
+        {
+          "Path": "golang.org/x/sys",
+          "Sum": "h1:o7XGOvZQCADBQQ4Y7VNq2dRWQR7JmOUW8Kxx4ZsNgWs=",
+          "Version": "v0.47.0"
+        },
+        {
+          "Path": "golang.org/x/text",
+          "Sum": "h1:vz/seA0lnX87Othu2f/0L24RcgrXD9/YFTSuGjj3rH8=",
+          "Version": "v0.41.0"
+        }
+      ],
+      "GoVersion": "go1.26.7",
+      "Main": {
+        "Path": "github.com/synadia-ai/agent-fabric-sdk/sp",
+        "Version": "(devel)"
+      },
+      "Path": "github.com/synadia-ai/agent-fabric-sdk/sp/cmd/sp",
+      "Settings": [
+        {
+          "Key": "-buildmode",
+          "Value": "exe"
+        },
+        {
+          "Key": "-compiler",
+          "Value": "gc"
+        },
+        {
+          "Key": "-trimpath",
+          "Value": "true"
+        },
+        {
+          "Key": "CGO_ENABLED",
+          "Value": "0"
+        },
+        {
+          "Key": "GOARCH",
+          "Value": "arm64"
+        },
+        {
+          "Key": "GOOS",
+          "Value": "darwin"
+        },
+        {
+          "Key": "GOARM64",
+          "Value": "v8.0"
+        }
+      ]
+    },
+    "darwin/amd64": {
+      "Deps": [
+        {
+          "Path": "github.com/klauspost/compress",
+          "Sum": "h1:hMRETovs/pu/dVWN7zIT1PGG8t509MwT6bO7XSi26R8=",
+          "Version": "v1.19.2"
+        },
+        {
+          "Path": "github.com/nats-io/nats.go",
+          "Replace": {
+            "Path": "./third_party/nats-go",
+            "Version": "(devel)"
+          },
+          "Version": "v1.53.1"
+        },
+        {
+          "Path": "github.com/nats-io/nkeys",
+          "Sum": "h1:rd5oAuLOb8mnAycB0xleuEBNS1pVVnN0fv/FF34Eypg=",
+          "Version": "v0.4.16"
+        },
+        {
+          "Path": "github.com/nats-io/nuid",
+          "Sum": "h1:5iA8DT8V7q8WK2EScv2padNa/rTESc1KdnPw4TC2paw=",
+          "Version": "v1.0.1"
+        },
+        {
+          "Path": "golang.org/x/crypto",
+          "Sum": "h1:+KWHjbgOaAQ66dh/YlkZKHlz9ZUlq61AFirAR9ntP8M=",
+          "Version": "v0.55.0"
+        },
+        {
+          "Path": "golang.org/x/sys",
+          "Sum": "h1:o7XGOvZQCADBQQ4Y7VNq2dRWQR7JmOUW8Kxx4ZsNgWs=",
+          "Version": "v0.47.0"
+        },
+        {
+          "Path": "golang.org/x/text",
+          "Sum": "h1:vz/seA0lnX87Othu2f/0L24RcgrXD9/YFTSuGjj3rH8=",
+          "Version": "v0.41.0"
+        }
+      ],
+      "GoVersion": "go1.26.7",
+      "Main": {
+        "Path": "github.com/synadia-ai/agent-fabric-sdk/sp",
+        "Version": "(devel)"
+      },
+      "Path": "github.com/synadia-ai/agent-fabric-sdk/sp/cmd/sp",
+      "Settings": [
+        {
+          "Key": "-buildmode",
+          "Value": "exe"
+        },
+        {
+          "Key": "-compiler",
+          "Value": "gc"
+        },
+        {
+          "Key": "-trimpath",
+          "Value": "true"
+        },
+        {
+          "Key": "CGO_ENABLED",
+          "Value": "0"
+        },
+        {
+          "Key": "GOARCH",
+          "Value": "amd64"
+        },
+        {
+          "Key": "GOOS",
+          "Value": "darwin"
+        },
+        {
+          "Key": "GOAMD64",
+          "Value": "v1"
+        }
+      ]
+    },
+    "linux/arm64": {
+      "Deps": [
+        {
+          "Path": "github.com/klauspost/compress",
+          "Sum": "h1:hMRETovs/pu/dVWN7zIT1PGG8t509MwT6bO7XSi26R8=",
+          "Version": "v1.19.2"
+        },
+        {
+          "Path": "github.com/nats-io/nats.go",
+          "Replace": {
+            "Path": "./third_party/nats-go",
+            "Version": "(devel)"
+          },
+          "Version": "v1.53.1"
+        },
+        {
+          "Path": "github.com/nats-io/nkeys",
+          "Sum": "h1:rd5oAuLOb8mnAycB0xleuEBNS1pVVnN0fv/FF34Eypg=",
+          "Version": "v0.4.16"
+        },
+        {
+          "Path": "github.com/nats-io/nuid",
+          "Sum": "h1:5iA8DT8V7q8WK2EScv2padNa/rTESc1KdnPw4TC2paw=",
+          "Version": "v1.0.1"
+        },
+        {
+          "Path": "golang.org/x/crypto",
+          "Sum": "h1:+KWHjbgOaAQ66dh/YlkZKHlz9ZUlq61AFirAR9ntP8M=",
+          "Version": "v0.55.0"
+        },
+        {
+          "Path": "golang.org/x/sys",
+          "Sum": "h1:o7XGOvZQCADBQQ4Y7VNq2dRWQR7JmOUW8Kxx4ZsNgWs=",
+          "Version": "v0.47.0"
+        },
+        {
+          "Path": "golang.org/x/text",
+          "Sum": "h1:vz/seA0lnX87Othu2f/0L24RcgrXD9/YFTSuGjj3rH8=",
+          "Version": "v0.41.0"
+        }
+      ],
+      "GoVersion": "go1.26.7",
+      "Main": {
+        "Path": "github.com/synadia-ai/agent-fabric-sdk/sp",
+        "Version": "(devel)"
+      },
+      "Path": "github.com/synadia-ai/agent-fabric-sdk/sp/cmd/sp",
+      "Settings": [
+        {
+          "Key": "-buildmode",
+          "Value": "exe"
+        },
+        {
+          "Key": "-compiler",
+          "Value": "gc"
+        },
+        {
+          "Key": "-trimpath",
+          "Value": "true"
+        },
+        {
+          "Key": "CGO_ENABLED",
+          "Value": "0"
+        },
+        {
+          "Key": "GOARCH",
+          "Value": "arm64"
+        },
+        {
+          "Key": "GOOS",
+          "Value": "linux"
+        },
+        {
+          "Key": "GOARM64",
+          "Value": "v8.0"
+        }
+      ]
+    },
+    "linux/amd64": {
+      "Deps": [
+        {
+          "Path": "github.com/klauspost/compress",
+          "Sum": "h1:hMRETovs/pu/dVWN7zIT1PGG8t509MwT6bO7XSi26R8=",
+          "Version": "v1.19.2"
+        },
+        {
+          "Path": "github.com/nats-io/nats.go",
+          "Replace": {
+            "Path": "./third_party/nats-go",
+            "Version": "(devel)"
+          },
+          "Version": "v1.53.1"
+        },
+        {
+          "Path": "github.com/nats-io/nkeys",
+          "Sum": "h1:rd5oAuLOb8mnAycB0xleuEBNS1pVVnN0fv/FF34Eypg=",
+          "Version": "v0.4.16"
+        },
+        {
+          "Path": "github.com/nats-io/nuid",
+          "Sum": "h1:5iA8DT8V7q8WK2EScv2padNa/rTESc1KdnPw4TC2paw=",
+          "Version": "v1.0.1"
+        },
+        {
+          "Path": "golang.org/x/crypto",
+          "Sum": "h1:+KWHjbgOaAQ66dh/YlkZKHlz9ZUlq61AFirAR9ntP8M=",
+          "Version": "v0.55.0"
+        },
+        {
+          "Path": "golang.org/x/sys",
+          "Sum": "h1:o7XGOvZQCADBQQ4Y7VNq2dRWQR7JmOUW8Kxx4ZsNgWs=",
+          "Version": "v0.47.0"
+        },
+        {
+          "Path": "golang.org/x/text",
+          "Sum": "h1:vz/seA0lnX87Othu2f/0L24RcgrXD9/YFTSuGjj3rH8=",
+          "Version": "v0.41.0"
+        }
+      ],
+      "GoVersion": "go1.26.7",
+      "Main": {
+        "Path": "github.com/synadia-ai/agent-fabric-sdk/sp",
+        "Version": "(devel)"
+      },
+      "Path": "github.com/synadia-ai/agent-fabric-sdk/sp/cmd/sp",
+      "Settings": [
+        {
+          "Key": "-buildmode",
+          "Value": "exe"
+        },
+        {
+          "Key": "-compiler",
+          "Value": "gc"
+        },
+        {
+          "Key": "-trimpath",
+          "Value": "true"
+        },
+        {
+          "Key": "CGO_ENABLED",
+          "Value": "0"
+        },
+        {
+          "Key": "GOARCH",
+          "Value": "amd64"
+        },
+        {
+          "Key": "GOOS",
+          "Value": "linux"
+        },
+        {
+          "Key": "GOAMD64",
+          "Value": "v1"
+        }
+      ]
+    }
+  },
+  "archives": {
+    "darwin/amd64": {
+      "archive_sha256": "45061077fd8cd50133b309b0ea49126de938de71f710a6da49e9b236154cd343",
+      "binary_sha256": "3d84751719e555218c4f977cdd5b9a5ef149d26421fc7dc6c6ec7b54586d4915"
+    },
+    "darwin/arm64": {
+      "archive_sha256": "995664f10144c170d7ffeb806aef7cfd7110bc2a79c500624028c9122602af2c",
+      "binary_sha256": "c4d85f758490a50271b581a42cc78fd9318f7c2393cc97cbd4525773c3107bfe"
+    },
+    "linux/amd64": {
+      "archive_sha256": "cbfd1a6b00c6925edbdda6ea2d62343c86061b5b1412912422850438e390f5e6",
+      "binary_sha256": "d03dde699244a13ef24675189dd3452805732d331b92505c120fad0da391b23e"
+    },
+    "linux/arm64": {
+      "archive_sha256": "ad5beca53e15339e9b4505285273a6260730bc52e9dd82c9f01665348432a9d7",
+      "binary_sha256": "41e2ae7dfdc614ba3fa8a17ef51da5b8e02d29d4a36b718f428274c6804f9eb3"
+    }
+  }
+}

package/skill/scratchpad/bin/COMMIT

@@ -0,0 +1 @@
+5e518519d1f9af47364cdf5ab01d518c8a195d33

package/skill/scratchpad/scripts/sp

@@ -0,0 +1,231 @@
+#!/bin/sh
+# scripts/sp: the sp command line for an agent on the fabric
+# (`docs/plugins.md` §9.1 in agent-fabric-sdk).
+#
+# Picks the sp binary for this machine from ../bin (`uname -s`, `uname -m`),
+# or takes SCRATCHPAD_BIN, and runs it with what the model must not handle,
+# from the environment the add-on set up at start:
+#
+#   --url "$SP_NATS_URL" --creds "$SP_NATS_CREDS"   every call
+#   --dir "$SCRATCHPAD_DIR"                   every call, when set
+#   --volume "$SCRATCHPAD_VOLUME"             `init` only: `read` and `hydrate`
+#                                             refuse a volume other than the
+#                                             reference's
+#   --thread-id "$SP_THREAD_ID"               every call, when both are set:
+#   --root-id "$SP_ROOT_ID"                   the prompt being served
+#   --creator "$SP_CREATOR"                   `publish-file`, when set
+#   --grantee-account "$SP_CALLER_ACCOUNT"    `grant`: the agent whose prompt
+#   --grantee-user "$SP_CALLER_USER"          is being served, and no other
+#
+# A call that passes any of these flags itself is refused, and so is a
+# `grant` with no caller to grant to. Refusals have sp's own shape and exit
+# code: one JSON error on stderr, exit 2, no request sent. Otherwise this
+# runs sp, so sp's exit codes and output pass through.
+#
+# One exception: a `publish-file` while a prompt with a verified caller is
+# served also grants that caller read on what it published, first-hand, as
+# an SDK-built agent grants the caller its reply. The grant's operation id
+# is the publication's with `-caller`, its expiry the publication's. The
+# result is the publication's JSON with `granted_to_caller` (the grant's
+# result) or `caller_grant_error` (sp's error) added; the exit code is the
+# publication's.
+#
+# Every grant this makes and sp confirms, that one or a `grant` of the
+# model's, is recorded in SP_GRANTS_FILE, when set, as one line:
+# `<expires_at> <account> <user> <reference>`. The add-on reads the file
+# when another agent asks it for a grant on this agent's content: the caller
+# granted here may have one more agent granted, as an SDK-built agent's
+# caller may (`grant-request.ts` in the fabric package).
+#
+# Where the add-on cannot set the shell tool's environment (Claude Code's,
+# whose Bash tool is no child of the add-on's process), it writes these
+# variables to a file instead, and SP_ENV_FILE names it: `NAME=value` lines,
+# read on every call, the names above and no others. When the file exists
+# it is the truth: a served prompt's variable it does not name is unset.
+
+refuse() {
+  msg=$(printf '%s' "$1" | sed 's/\\/\\\\/g; s/"/\\"/g')
+  printf '{"error":{"code":"usage","message":"scripts/sp: %s","unknown":false}}\n' "$msg" >&2
+  exit 2
+}
+
+# The command: the first argument that is not a flag or a flag's value, as
+# sp itself finds it. Every sp flag but --apply and --help takes a value.
+# On the way, the operation id and the expiry, for the caller's grant after
+# a publication, and the reference, for the record of a grant.
+command=
+operation=
+ttl=600
+given_ref=
+skip=
+for arg in "$@"; do
+  if [ -n "$skip" ]; then
+    case $skip in
+      operation-id) operation=$arg ;;
+      ttl-seconds) ttl=$arg ;;
+      ref) given_ref=$arg ;;
+    esac
+    skip=
+    continue
+  fi
+  case $arg in
+    --) break ;;
+    -apply | --apply | -help | --help | -h) ;;
+    -*=*)
+      name=${arg%%=*}
+      case ${name#-} in
+        -operation-id | operation-id) operation=${arg#*=} ;;
+        -ttl-seconds | ttl-seconds) ttl=${arg#*=} ;;
+        -ref | ref) given_ref=${arg#*=} ;;
+      esac
+      ;;
+    -*) skip=${arg#-}; skip=${skip#-} ;;
+    *) [ -z "$command" ] && command=$arg ;;
+  esac
+done
+
+for arg in "$@"; do
+  case $arg in
+    --) break ;;
+  esac
+  name=${arg%%=*}
+  name=${name#-}
+  name=${name#-}
+  case $arg in
+    -*)
+      case $name in
+        url | creds | dir | volume | thread-id | root-id | tool-call-id | creator | grantee-account | grantee-user)
+          refuse "--$name is set by the agent, not passed; run the command without it" ;;
+      esac
+      ;;
+  esac
+done
+
+if [ -n "${SP_ENV_FILE:-}" ] && [ -f "$SP_ENV_FILE" ]; then
+  unset SP_THREAD_ID SP_ROOT_ID SP_CALLER_ACCOUNT SP_CALLER_USER
+  while IFS= read -r line || [ -n "$line" ]; do
+    case $line in
+      *=*)
+        case ${line%%=*} in
+          SP_NATS_URL | SP_NATS_CREDS | SCRATCHPAD_DIR | SCRATCHPAD_VOLUME | SP_CREATOR | \
+            SP_THREAD_ID | SP_ROOT_ID | SP_CALLER_ACCOUNT | SP_CALLER_USER | SP_GRANTS_FILE)
+            # The name is one of these; the value is assigned as it is.
+            eval "${line%%=*}=\${line#*=}"
+            ;;
+        esac
+        ;;
+    esac
+  done <"$SP_ENV_FILE"
+fi
+
+if [ -n "${SCRATCHPAD_BIN:-}" ]; then
+  bin=$SCRATCHPAD_BIN
+else
+  case $(uname -s) in
+    Darwin) os=darwin ;;
+    Linux) os=linux ;;
+    *) refuse "unsupported platform $(uname -s) $(uname -m); sp is built for darwin and linux on arm64 and amd64" ;;
+  esac
+  case $(uname -m) in
+    arm64 | aarch64) arch=arm64 ;;
+    x86_64 | amd64) arch=amd64 ;;
+    *) refuse "unsupported platform $(uname -s) $(uname -m); sp is built for darwin and linux on arm64 and amd64" ;;
+  esac
+  here=$(CDPATH= cd -- "$(dirname -- "$0")" && pwd) || refuse "cannot find the skill directory"
+  bin=$here/../bin/sp-$os-$arch
+fi
+[ -x "$bin" ] || refuse "no sp binary at $bin; the add-on package ships one per platform (npm run build:sp)"
+
+if [ -z "${SP_NATS_URL:-}" ] || [ -z "${SP_NATS_CREDS:-}" ]; then
+  refuse "ScratchPad is not configured for this agent: SP_NATS_URL and SP_NATS_CREDS are unset"
+fi
+
+set -- --url "$SP_NATS_URL" --creds "$SP_NATS_CREDS" "$@"
+if [ -n "${SCRATCHPAD_DIR:-}" ]; then
+  set -- --dir "$SCRATCHPAD_DIR" "$@"
+fi
+if [ -n "${SP_THREAD_ID:-}" ] && [ -n "${SP_ROOT_ID:-}" ]; then
+  set -- --thread-id "$SP_THREAD_ID" --root-id "$SP_ROOT_ID" "$@"
+fi
+
+case $command in
+  init)
+    [ -n "${SCRATCHPAD_VOLUME:-}" ] || refuse "ScratchPad has no volume for this agent: SCRATCHPAD_VOLUME is unset"
+    set -- --volume "$SCRATCHPAD_VOLUME" "$@"
+    ;;
+  publish-file)
+    if [ -n "${SP_CREATOR:-}" ]; then
+      set -- --creator "$SP_CREATOR" "$@"
+    fi
+    ;;
+  grant)
+    if [ -z "${SP_CALLER_ACCOUNT:-}" ] || [ -z "${SP_CALLER_USER:-}" ]; then
+      refuse "grant goes only to the agent whose prompt is being served, and no prompt with a verified caller is"
+    fi
+    set -- --grantee-account "$SP_CALLER_ACCOUNT" --grantee-user "$SP_CALLER_USER" "$@"
+    ;;
+esac
+
+# Records a grant sp confirmed: $1 the reference, $2 sp's result. A
+# reference that is not one token, or a result without its expiry, is not
+# recorded; nor is anything when the file cannot be written.
+record() {
+  [ -n "${SP_GRANTS_FILE:-}" ] || return 0
+  case $1 in
+    sp-ref:*[!A-Za-z0-9_-]* | sp-ref: | sp-r1:*[!A-Za-z0-9_-]* | sp-r1:) return 0 ;;
+    sp-ref:* | sp-r1:*) ;;
+    *) return 0 ;;
+  esac
+  expires=$(printf '%s' "$2" | sed -n 's/.*"expires_at":\([0-9][0-9]*\).*/\1/p')
+  [ -n "$expires" ] || return 0
+  { printf '%s %s %s %s\n' "$expires" "$SP_CALLER_ACCOUNT" "$SP_CALLER_USER" "$1" \
+    >>"$SP_GRANTS_FILE"; } 2>/dev/null || true
+}
+
+if [ "$command" = grant ] && [ -n "${SP_GRANTS_FILE:-}" ]; then
+  out=$("$bin" "$@")
+  status=$?
+  [ -n "$out" ] && printf '%s\n' "$out"
+  [ $status -eq 0 ] && record "$given_ref" "$out"
+  exit $status
+fi
+
+if [ "$command" != publish-file ] || [ -z "${SP_CALLER_ACCOUNT:-}" ] || [ -z "${SP_CALLER_USER:-}" ]; then
+  exec "$bin" "$@"
+fi
+
+# Publish, then grant the served prompt's caller read on it.
+out=$("$bin" "$@")
+status=$?
+if [ $status -ne 0 ]; then
+  [ -n "$out" ] && printf '%s\n' "$out"
+  exit $status
+fi
+ref=$(printf '%s' "$out" | sed -En 's/.*"reference":"(sp-(ref|r1):[A-Za-z0-9_-]+)".*/\1/p')
+if [ -z "$ref" ]; then
+  printf '%s\n' "$out"
+  exit 0
+fi
+set -- --url "$SP_NATS_URL" --creds "$SP_NATS_CREDS"
+if [ -n "${SCRATCHPAD_DIR:-}" ]; then
+  set -- "$@" --dir "$SCRATCHPAD_DIR"
+fi
+if [ -n "${SP_THREAD_ID:-}" ] && [ -n "${SP_ROOT_ID:-}" ]; then
+  set -- "$@" --thread-id "$SP_THREAD_ID" --root-id "$SP_ROOT_ID"
+fi
+errfile=$(mktemp "${TMPDIR:-/tmp}/sp-grant.XXXXXX")
+granted=$("$bin" "$@" grant --ref "$ref" \
+  --grantee-account "$SP_CALLER_ACCOUNT" --grantee-user "$SP_CALLER_USER" \
+  --operation-id "${operation:-publication}-caller" --ttl-seconds "$ttl" 2>"$errfile")
+gstatus=$?
+gerr=$(cat "$errfile")
+rm -f "$errfile"
+head=$(printf '%s' "$out" | sed 's/}[[:space:]]*$//')
+if [ $gstatus -eq 0 ] && [ -n "$granted" ]; then
+  record "$ref" "$granted"
+  printf '%s,"granted_to_caller":%s}\n' "$head" "$granted"
+else
+  [ -n "$gerr" ] || gerr='{"error":{"code":"unknown","message":"the grant printed nothing","unknown":true}}'
+  printf '%s,"caller_grant_error":%s}\n' "$head" "$gerr"
+fi
+exit 0