codehava-agent-kit 1.0.0 → 2.0.0

package/templates/.agent/skills/hosted-agents/SKILL.md

@@ -0,0 +1,283 @@
+---
+name: hosted-agents
+description: Build background agents in sandboxed environments. Use for hosted coding agents, sandboxed VMs, Modal sandboxes, and remote coding environments.
+risk: unknown
+source: community
+---
+
+# Hosted Agent Infrastructure
+
+Hosted agents run in remote sandboxed environments rather than on local machines. When designed well, they provide unlimited concurrency, consistent execution environments, and multiplayer collaboration. The critical insight is that session speed should be limited only by model provider time-to-first-token, with all infrastructure setup completed before the user starts their session.
+
+## When to Use
+Activate this skill when:
+- Building background coding agents that run independently of user devices
+- Designing sandboxed execution environments for agent workloads
+- Implementing multiplayer agent sessions with shared state
+- Creating multi-client agent interfaces (Slack, Web, Chrome extensions)
+- Scaling agent infrastructure beyond local machine constraints
+- Building systems where agents spawn sub-agents for parallel work
+
+## Core Concepts
+
+Hosted agents address the fundamental limitation of local agent execution: resource contention, environment inconsistency, and single-user constraints. By moving agent execution to remote sandboxed environments, teams gain unlimited concurrency, reproducible environments, and collaborative workflows.
+
+The architecture consists of three layers: sandbox infrastructure for isolated execution, API layer for state management and client coordination, and client interfaces for user interaction across platforms. Each layer has specific design requirements that enable the system to scale.
+
+## Detailed Topics
+
+### Sandbox Infrastructure
+
+**The Core Challenge**
+Spinning up full development environments quickly is the primary technical challenge. Users expect near-instant session starts, but development environments require cloning repositories, installing dependencies, and running build steps.
+
+**Image Registry Pattern**
+Pre-build environment images on a regular cadence (every 30 minutes works well). Each image contains:
+- Cloned repository at a known commit
+- All runtime dependencies installed
+- Initial setup and build commands completed
+- Cached files from running app and test suite once
+
+When starting a session, spin up a sandbox from the most recent image. The repository is at most 30 minutes out of date, making synchronization with the latest code much faster.
+
+**Snapshot and Restore**
+Take filesystem snapshots at key points:
+- After initial image build (base snapshot)
+- When agent finishes making changes (session snapshot)
+- Before sandbox exit for potential follow-up
+
+This enables instant restoration for follow-up prompts without re-running setup.
+
+**Git Configuration for Background Agents**
+Since git operations are not tied to a specific user during image builds:
+- Generate GitHub app installation tokens for repository access during clone
+- Update git config's `user.name` and `user.email` when committing and pushing changes
+- Use the prompting user's identity for commits, not the app identity
+
+**Warm Pool Strategy**
+Maintain a pool of pre-warmed sandboxes for high-volume repositories:
+- Sandboxes are ready before users start sessions
+- Expire and recreate pool entries as new image builds complete
+- Start warming sandbox as soon as user begins typing (predictive warm-up)
+
+### Agent Framework Selection
+
+**Server-First Architecture**
+Choose an agent framework structured as a server first, with TUI and desktop apps as clients. This enables:
+- Multiple custom clients without duplicating agent logic
+- Consistent behavior across all interaction surfaces
+- Plugin systems for extending functionality
+- Event-driven architectures for real-time updates
+
+**Code as Source of Truth**
+Select frameworks where the agent can read its own source code to understand behavior. This is underrated in AI development: having the code as source of truth prevents hallucination about the agent's own capabilities.
+
+**Plugin System Requirements**
+The framework should support plugins that:
+- Listen to tool execution events (e.g., `tool.execute.before`)
+- Block or modify tool calls conditionally
+- Inject context or state at runtime
+
+### Speed Optimizations
+
+**Predictive Warm-Up**
+Start warming the sandbox as soon as a user begins typing their prompt:
+- Clone latest changes in parallel with user typing
+- Run initial setup before user hits enter
+- For fast spin-up, sandbox can be ready before user finishes typing
+
+**Parallel File Reading**
+Allow the agent to start reading files immediately, even if sync from latest base branch is not complete:
+- In large repositories, incoming prompts rarely modify recently-changed files
+- Agent can research immediately without waiting for git sync
+- Block file edits (not reads) until synchronization completes
+
+**Maximize Build-Time Work**
+Move everything possible to the image build step:
+- Full dependency installation
+- Database schema setup
+- Initial app and test suite runs (populates caches)
+- Build-time duration is invisible to users
+
+### Self-Spawning Agents
+
+**Agent-Spawned Sessions**
+Create tools that allow agents to spawn new sessions:
+- Research tasks across different repositories
+- Parallel subtask execution for large changes
+- Multiple smaller PRs from one major task
+
+Frontier models are capable of containing themselves. The tools should:
+- Start a new session with specified parameters
+- Read status of any session (check-in capability)
+- Continue main work while sub-sessions run in parallel
+
+**Prompt Engineering for Self-Spawning**
+Engineer prompts to guide when agents spawn sub-sessions:
+- Research tasks that require cross-repository exploration
+- Breaking monolithic changes into smaller PRs
+- Parallel exploration of different approaches
+
+### API Layer
+
+**Per-Session State Isolation**
+Each session requires its own isolated state storage:
+- Dedicated database per session (SQLite per session works well)
+- No session can impact another's performance
+- Handles hundreds of concurrent sessions
+
+**Real-Time Streaming**
+Agent work involves high-frequency updates:
+- Token streaming from model providers
+- Tool execution status updates
+- File change notifications
+
+WebSocket connections with hibernation APIs reduce compute costs during idle periods while maintaining open connections.
+
+**Synchronization Across Clients**
+Build a single state system that synchronizes across:
+- Chat interfaces
+- Slack bots
+- Chrome extensions
+- Web interfaces
+- VS Code instances
+
+All changes sync to the session state, enabling seamless client switching.
+
+### Multiplayer Support
+
+**Why Multiplayer Matters**
+Multiplayer enables:
+- Teaching non-engineers to use AI effectively
+- Live QA sessions with multiple team members
+- Real-time PR review with immediate changes
+- Collaborative debugging sessions
+
+**Implementation Requirements**
+- Data model must not tie sessions to single authors
+- Pass authorship info to each prompt
+- Attribute code changes to the prompting user
+- Share session links for instant collaboration
+
+With proper synchronization architecture, multiplayer support is nearly free to add.
+
+### Authentication and Authorization
+
+**User-Based Commits**
+Use GitHub authentication to:
+- Obtain user tokens for PR creation
+- Open PRs on behalf of the user (not the app)
+- Prevent users from approving their own changes
+
+**Sandbox-to-API Flow**
+1. Sandbox pushes changes (updating git user config)
+2. Sandbox sends event to API with branch name and session ID
+3. API uses user's GitHub token to create PR
+4. GitHub webhooks notify API of PR events
+
+### Client Implementations
+
+**Slack Integration**
+The most effective distribution channel for internal adoption:
+- Creates virality loop as team members see others using it
+- No syntax required, natural chat interface
+- Classify repository from message, thread context, and channel name
+
+Build a classifier to determine which repository to work in:
+- Fast model with descriptions of available repositories
+- Include hints for common repositories
+- Allow "unknown" option for ambiguous cases
+
+**Web Interface**
+Core features:
+- Works on desktop and mobile
+- Real-time streaming of agent work
+- Hosted VS Code instance running inside sandbox
+- Streamed desktop view for visual verification
+- Before/after screenshots for PRs
+
+Statistics page showing:
+- Sessions resulting in merged PRs (primary metric)
+- Usage over time
+- Live "humans prompting" count (prompts in last 5 minutes)
+
+**Chrome Extension**
+For non-engineering users:
+- Sidebar chat interface with screenshot tool
+- DOM and React internals extraction instead of raw images
+- Reduces token usage while maintaining precision
+- Distribute via managed device policy (bypasses Chrome Web Store)
+
+## Practical Guidance
+
+### Follow-Up Message Handling
+
+Decide how to handle messages sent during execution:
+- **Queue approach**: Messages wait until current prompt completes
+- **Insert approach**: Messages are processed immediately
+
+Queueing is simpler to manage and lets users send thoughts on next steps while agent works. Build mechanism to stop agent mid-execution when needed.
+
+### Metrics That Matter
+
+Track metrics that indicate real value:
+- Sessions resulting in merged PRs (primary success metric)
+- Time from session start to first model response
+- PR approval rate and revision count
+- Agent-written code percentage across repositories
+
+### Adoption Strategy
+
+Internal adoption patterns that work:
+- Work in public spaces (Slack channels) for visibility
+- Let the product create virality loops
+- Don't force usage over existing tools
+- Build to people's needs, not hypothetical requirements
+
+## Guidelines
+
+1. Pre-build environment images on regular cadence (30 minutes is a good default)
+2. Start warming sandboxes when users begin typing, not when they submit
+3. Allow file reads before git sync completes; block only writes
+4. Structure agent framework as server-first with clients as thin wrappers
+5. Isolate state per session to prevent cross-session interference
+6. Attribute commits to the user who prompted, not the app
+7. Track merged PRs as primary success metric
+8. Build for multiplayer from the start; it is nearly free with proper sync architecture
+
+## Integration
+
+This skill builds on multi-agent-patterns for agent coordination and tool-design for agent-tool interfaces. It connects to:
+
+- multi-agent-patterns - Self-spawning agents follow supervisor patterns
+- tool-design - Building tools for agent spawning and status checking
+- context-optimization - Managing context across distributed sessions
+- filesystem-context - Using filesystem for session state and artifacts
+
+## References
+
+Internal reference:
+- Infrastructure Patterns - Detailed implementation patterns
+
+Related skills in this collection:
+- multi-agent-patterns - Coordination patterns for self-spawning agents
+- tool-design - Designing tools for hosted environments
+- context-optimization - Managing context in distributed systems
+
+External resources:
+- [Ramp](https://builders.ramp.com/post/why-we-built-our-background-agent) - Why We Built Our Own Background Agent
+- [Modal Sandboxes](https://modal.com/docs/guide/sandbox) - Cloud sandbox infrastructure
+- [Cloudflare Durable Objects](https://developers.cloudflare.com/durable-objects/) - Per-session state management
+- [OpenCode](https://github.com/sst/opencode) - Server-first agent framework
+
+---
+
+## Skill Metadata
+
+**Created**: 2026-01-12
+**Last Updated**: 2026-01-12
+**Author**: Agent Skills for Context Engineering Contributors
+**Version**: 1.0.0
+
+## When to Use
+Use this skill when tackling tasks related to its primary domain or functionality as described above.

package/templates/.agent/skills/hosted-agents-v2-py/SKILL.md

@@ -0,0 +1,326 @@
+---
+name: hosted-agents-v2-py
+description: "Build hosted agents using Azure AI Projects SDK with ImageBasedHostedAgentDefinition. Use when creating container-based agents in Azure AI Foundry."
+risk: unknown
+source: community
+date_added: "2026-02-27"
+---
+
+# Azure AI Hosted Agents (Python)
+
+Build container-based hosted agents using `ImageBasedHostedAgentDefinition` from the Azure AI Projects SDK.
+
+## Installation
+
+```bash
+pip install azure-ai-projects>=2.0.0b3 azure-identity
+```
+
+**Minimum SDK Version:** `2.0.0b3` or later required for hosted agent support.
+
+## Environment Variables
+
+```bash
+AZURE_AI_PROJECT_ENDPOINT=https://<resource>.services.ai.azure.com/api/projects/<project>
+```
+
+## Prerequisites
+
+Before creating hosted agents:
+
+1. **Container Image** - Build and push to Azure Container Registry (ACR)
+2. **ACR Pull Permissions** - Grant your project's managed identity `AcrPull` role on the ACR
+3. **Capability Host** - Account-level capability host with `enablePublicHostingEnvironment=true`
+4. **SDK Version** - Ensure `azure-ai-projects>=2.0.0b3`
+
+## Authentication
+
+Always use `DefaultAzureCredential`:
+
+```python
+from azure.identity import DefaultAzureCredential
+from azure.ai.projects import AIProjectClient
+
+credential = DefaultAzureCredential()
+client = AIProjectClient(
+    endpoint=os.environ["AZURE_AI_PROJECT_ENDPOINT"],
+    credential=credential
+)
+```
+
+## Core Workflow
+
+### 1. Imports
+
+```python
+import os
+from azure.identity import DefaultAzureCredential
+from azure.ai.projects import AIProjectClient
+from azure.ai.projects.models import (
+    ImageBasedHostedAgentDefinition,
+    ProtocolVersionRecord,
+    AgentProtocol,
+)
+```
+
+### 2. Create Hosted Agent
+
+```python
+client = AIProjectClient(
+    endpoint=os.environ["AZURE_AI_PROJECT_ENDPOINT"],
+    credential=DefaultAzureCredential()
+)
+
+agent = client.agents.create_version(
+    agent_name="my-hosted-agent",
+    definition=ImageBasedHostedAgentDefinition(
+        container_protocol_versions=[
+            ProtocolVersionRecord(protocol=AgentProtocol.RESPONSES, version="v1")
+        ],
+        cpu="1",
+        memory="2Gi",
+        image="myregistry.azurecr.io/my-agent:latest",
+        tools=[{"type": "code_interpreter"}],
+        environment_variables={
+            "AZURE_AI_PROJECT_ENDPOINT": os.environ["AZURE_AI_PROJECT_ENDPOINT"],
+            "MODEL_NAME": "gpt-4o-mini"
+        }
+    )
+)
+
+print(f"Created agent: {agent.name} (version: {agent.version})")
+```
+
+### 3. List Agent Versions
+
+```python
+versions = client.agents.list_versions(agent_name="my-hosted-agent")
+for version in versions:
+    print(f"Version: {version.version}, State: {version.state}")
+```
+
+### 4. Delete Agent Version
+
+```python
+client.agents.delete_version(
+    agent_name="my-hosted-agent",
+    version=agent.version
+)
+```
+
+## ImageBasedHostedAgentDefinition Parameters
+
+| Parameter | Type | Required | Description |
+|-----------|------|----------|-------------|
+| `container_protocol_versions` | `list[ProtocolVersionRecord]` | Yes | Protocol versions the agent supports |
+| `image` | `str` | Yes | Full container image path (registry/image:tag) |
+| `cpu` | `str` | No | CPU allocation (e.g., "1", "2") |
+| `memory` | `str` | No | Memory allocation (e.g., "2Gi", "4Gi") |
+| `tools` | `list[dict]` | No | Tools available to the agent |
+| `environment_variables` | `dict[str, str]` | No | Environment variables for the container |
+
+## Protocol Versions
+
+The `container_protocol_versions` parameter specifies which protocols your agent supports:
+
+```python
+from azure.ai.projects.models import ProtocolVersionRecord, AgentProtocol
+
+# RESPONSES protocol - standard agent responses
+container_protocol_versions=[
+    ProtocolVersionRecord(protocol=AgentProtocol.RESPONSES, version="v1")
+]
+```
+
+**Available Protocols:**
+| Protocol | Description |
+|----------|-------------|
+| `AgentProtocol.RESPONSES` | Standard response protocol for agent interactions |
+
+## Resource Allocation
+
+Specify CPU and memory for your container:
+
+```python
+definition=ImageBasedHostedAgentDefinition(
+    container_protocol_versions=[...],
+    image="myregistry.azurecr.io/my-agent:latest",
+    cpu="2",      # 2 CPU cores
+    memory="4Gi"  # 4 GiB memory
+)
+```
+
+**Resource Limits:**
+| Resource | Min | Max | Default |
+|----------|-----|-----|---------|
+| CPU | 0.5 | 4 | 1 |
+| Memory | 1Gi | 8Gi | 2Gi |
+
+## Tools Configuration
+
+Add tools to your hosted agent:
+
+### Code Interpreter
+
+```python
+tools=[{"type": "code_interpreter"}]
+```
+
+### MCP Tools
+
+```python
+tools=[
+    {"type": "code_interpreter"},
+    {
+        "type": "mcp",
+        "server_label": "my-mcp-server",
+        "server_url": "https://my-mcp-server.example.com"
+    }
+]
+```
+
+### Multiple Tools
+
+```python
+tools=[
+    {"type": "code_interpreter"},
+    {"type": "file_search"},
+    {
+        "type": "mcp",
+        "server_label": "custom-tool",
+        "server_url": "https://custom-tool.example.com"
+    }
+]
+```
+
+## Environment Variables
+
+Pass configuration to your container:
+
+```python
+environment_variables={
+    "AZURE_AI_PROJECT_ENDPOINT": os.environ["AZURE_AI_PROJECT_ENDPOINT"],
+    "MODEL_NAME": "gpt-4o-mini",
+    "LOG_LEVEL": "INFO",
+    "CUSTOM_CONFIG": "value"
+}
+```
+
+**Best Practice:** Never hardcode secrets. Use environment variables or Azure Key Vault.
+
+## Complete Example
+
+```python
+import os
+from azure.identity import DefaultAzureCredential
+from azure.ai.projects import AIProjectClient
+from azure.ai.projects.models import (
+    ImageBasedHostedAgentDefinition,
+    ProtocolVersionRecord,
+    AgentProtocol,
+)
+
+def create_hosted_agent():
+    """Create a hosted agent with custom container image."""
+    
+    client = AIProjectClient(
+        endpoint=os.environ["AZURE_AI_PROJECT_ENDPOINT"],
+        credential=DefaultAzureCredential()
+    )
+    
+    agent = client.agents.create_version(
+        agent_name="data-processor-agent",
+        definition=ImageBasedHostedAgentDefinition(
+            container_protocol_versions=[
+                ProtocolVersionRecord(
+                    protocol=AgentProtocol.RESPONSES,
+                    version="v1"
+                )
+            ],
+            image="myregistry.azurecr.io/data-processor:v1.0",
+            cpu="2",
+            memory="4Gi",
+            tools=[
+                {"type": "code_interpreter"},
+                {"type": "file_search"}
+            ],
+            environment_variables={
+                "AZURE_AI_PROJECT_ENDPOINT": os.environ["AZURE_AI_PROJECT_ENDPOINT"],
+                "MODEL_NAME": "gpt-4o-mini",
+                "MAX_RETRIES": "3"
+            }
+        )
+    )
+    
+    print(f"Created hosted agent: {agent.name}")
+    print(f"Version: {agent.version}")
+    print(f"State: {agent.state}")
+    
+    return agent
+
+if __name__ == "__main__":
+    create_hosted_agent()
+```
+
+## Async Pattern
+
+```python
+import os
+from azure.identity.aio import DefaultAzureCredential
+from azure.ai.projects.aio import AIProjectClient
+from azure.ai.projects.models import (
+    ImageBasedHostedAgentDefinition,
+    ProtocolVersionRecord,
+    AgentProtocol,
+)
+
+async def create_hosted_agent_async():
+    """Create a hosted agent asynchronously."""
+    
+    async with DefaultAzureCredential() as credential:
+        async with AIProjectClient(
+            endpoint=os.environ["AZURE_AI_PROJECT_ENDPOINT"],
+            credential=credential
+        ) as client:
+            agent = await client.agents.create_version(
+                agent_name="async-agent",
+                definition=ImageBasedHostedAgentDefinition(
+                    container_protocol_versions=[
+                        ProtocolVersionRecord(
+                            protocol=AgentProtocol.RESPONSES,
+                            version="v1"
+                        )
+                    ],
+                    image="myregistry.azurecr.io/async-agent:latest",
+                    cpu="1",
+                    memory="2Gi"
+                )
+            )
+            return agent
+```
+
+## Common Errors
+
+| Error | Cause | Solution |
+|-------|-------|----------|
+| `ImagePullBackOff` | ACR pull permission denied | Grant `AcrPull` role to project's managed identity |
+| `InvalidContainerImage` | Image not found | Verify image path and tag exist in ACR |
+| `CapabilityHostNotFound` | No capability host configured | Create account-level capability host |
+| `ProtocolVersionNotSupported` | Invalid protocol version | Use `AgentProtocol.RESPONSES` with version `"v1"` |
+
+## Best Practices
+
+1. **Version Your Images** - Use specific tags, not `latest` in production
+2. **Minimal Resources** - Start with minimum CPU/memory, scale up as needed
+3. **Environment Variables** - Use for all configuration, never hardcode
+4. **Error Handling** - Wrap agent creation in try/except blocks
+5. **Cleanup** - Delete unused agent versions to free resources
+
+## Reference Links
+
+- [Azure AI Projects SDK](https://pypi.org/project/azure-ai-projects/)
+- [Hosted Agents Documentation](https://learn.microsoft.com/azure/ai-services/agents/how-to/hosted-agents)
+- [Azure Container Registry](https://learn.microsoft.com/azure/container-registry/)
+
+## When to Use
+This skill is applicable to execute the workflow or actions described in the overview.