From 6c7994037a66f947f663e8989ccef6e858842ad1 Mon Sep 17 00:00:00 2001 From: 0YHR0 <97868579@qq.com> Date: Mon, 3 Aug 2026 16:09:29 +0800 Subject: [PATCH] Document external extension reference --- CHANGELOG.md | 2 ++ README.md | 3 +++ README.zh-CN.md | 2 ++ .../modules/runtime-extension-protocol.md | 14 ++++++++++++-- docs/implementation-status.md | 11 +++++++++++ 5 files changed, 30 insertions(+), 2 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index fb24843..efc2a58 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -25,6 +25,8 @@ release tags and PEP 440 for the Python package. - Trusted in-process Runtime Extension API v0.1 with entry-point discovery, manifest and collision validation, capability-limited service factories, explicit enablement, lifecycle health, and fail-closed Music Studio integration. +- Independent AgentMesh Extension Starter reference repository proving two-distribution discovery + with a deterministic Daily Brief service, API, workspace, health probe, tests, and free CI. ## 0.1.0-alpha.1 — 2026-07-27 diff --git a/README.md b/README.md index 7045027..d962aed 100644 --- a/README.md +++ b/README.md @@ -219,6 +219,9 @@ set it to an empty value to disable every installed extension. Inspect effective required Features/Credentials, permissions, workspaces, and health at `GET /api/v1/extensions`. Third-party trusted Python packages can publish the `agentmesh.runtime_extensions` entry-point group. See the [Runtime Extension Protocol](docs/architecture/modules/runtime-extension-protocol.md). +The independent +[AgentMesh Extension Starter](https://github.com/0YHR0/AgentMesh-Extension-Starter) provides a +tested Daily Brief scenario and a minimal repository template for extension authors. The same gates expose the built-in **Market Intelligence Studio** in the Admin Console's **Company** tab. Previewing it shows all 32 resource mutations, permissions, credentials, and the diff --git a/README.zh-CN.md b/README.zh-CN.md index b7d60b1..c05ca28 100644 --- a/README.zh-CN.md +++ b/README.zh-CN.md @@ -148,6 +148,8 @@ Music Studio 现在通过受信任的进程内 Runtime Extension API 加载， 默认配置为 `AGENTMESH_RUNTIME_EXTENSIONS=agentmesh.music-studio`；将其设为空可禁用全部已安装 扩展。`GET /api/v1/extensions` 可以查看版本、健康状态、所需 Feature/API Key、权限和工作区。 扩展开发说明见 [Runtime Extension Protocol](docs/architecture/modules/runtime-extension-protocol.md)。 +独立仓库 [AgentMesh Extension Starter](https://github.com/0YHR0/AgentMesh-Extension-Starter) +提供了已通过 CI 的 Daily Brief 场景，可直接作为第三方扩展项目模板。 Identity/RBAC 在所有内置 Profile 中都保持关闭，必须由部署者显式配置凭据后开启。 diff --git a/docs/architecture/modules/runtime-extension-protocol.md b/docs/architecture/modules/runtime-extension-protocol.md index a727aa0..66d4a1a 100644 --- a/docs/architecture/modules/runtime-extension-protocol.md +++ b/docs/architecture/modules/runtime-extension-protocol.md @@ -82,6 +82,15 @@ generic runtime supplies its required services, and its registrar preserves thes Its Company Template is also projected into `PackCatalog`, so declarative installation and executable runtime discovery come from one scenario definition. +## External repository proof + +[AgentMesh Extension Starter](https://github.com/0YHR0/AgentMesh-Extension-Starter) is maintained +as an independent repository and Python distribution. Its `community.daily-brief` extension +provides a deterministic service, API, workspace, static assets, and health probe without changing +AgentMesh source code. Its CI checks out AgentMesh, installs both distributions, runs extension +tests and lint, and builds the wheel. Installing that wheel makes the existing entry-point registry +discover both Music Studio and Daily Brief in the same process. + ## Deliberate v0.1 limits - extensions run in the AgentMesh API process and have the privileges of that process; @@ -90,5 +99,6 @@ executable runtime discovery come from one scenario definition. - signed bundles, registry trust policy, dependency resolution, hot reload, process isolation, and remote A2A extensions remain later protocol versions. -The next security step should be a signed installation/preflight model. Process isolation should -only follow after the in-process contract is proven by a second independently maintained scenario. +The next security step should be a signed installation/preflight model. Process isolation can now +follow the independently maintained Daily Brief proof instead of being designed against only a +built-in scenario. diff --git a/docs/implementation-status.md b/docs/implementation-status.md index 90a3d8b..3ccd9ec 100644 --- a/docs/implementation-status.md +++ b/docs/implementation-status.md @@ -207,6 +207,17 @@ Runtime Extension API v0.1 on 2026-08-03 additionally: - kept installed Python extensions explicitly trusted and deferred signatures, sandboxing, hot reload, extension migrations, and remote execution to later protocol revisions. +External Runtime Extension proof on 2026-08-03 additionally: + +- published the independent `AgentMesh-Extension-Starter` repository with the + `community.daily-brief` scenario; +- proved wheel metadata discovery through `agentmesh.runtime_extensions` without modifying the + AgentMesh source tree; +- verified Music Studio and Daily Brief can coexist in one registry without route, workspace, or + asset collisions; +- added free GitHub CI covering lint, extension tests, integration against AgentMesh, and wheel + construction. + Market Intelligence Studio baseline verification on 2026-07-30 additionally: - passed 390 non-PostgreSQL tests at 82.71% line coverage (gate: 80%);