Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 2 additions & 0 deletions CHANGELOG.md
Original file line number Diff line number Diff line change
Expand Up @@ -25,6 +25,8 @@ release tags and PEP 440 for the Python package.
- Trusted in-process Runtime Extension API v0.1 with entry-point discovery, manifest and collision
validation, capability-limited service factories, explicit enablement, lifecycle health, and
fail-closed Music Studio integration.
- Independent AgentMesh Extension Starter reference repository proving two-distribution discovery
with a deterministic Daily Brief service, API, workspace, health probe, tests, and free CI.

## 0.1.0-alpha.1 — 2026-07-27

Expand Down
3 changes: 3 additions & 0 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -219,6 +219,9 @@ set it to an empty value to disable every installed extension. Inspect effective
required Features/Credentials, permissions, workspaces, and health at `GET /api/v1/extensions`.
Third-party trusted Python packages can publish the `agentmesh.runtime_extensions` entry-point
group. See the [Runtime Extension Protocol](docs/architecture/modules/runtime-extension-protocol.md).
The independent
[AgentMesh Extension Starter](https://github.com/0YHR0/AgentMesh-Extension-Starter) provides a
tested Daily Brief scenario and a minimal repository template for extension authors.

The same gates expose the built-in **Market Intelligence Studio** in the Admin Console's
**Company** tab. Previewing it shows all 32 resource mutations, permissions, credentials, and the
Expand Down
2 changes: 2 additions & 0 deletions README.zh-CN.md
Original file line number Diff line number Diff line change
Expand Up @@ -148,6 +148,8 @@ Music Studio 现在通过受信任的进程内 Runtime Extension API 加载,
默认配置为 `AGENTMESH_RUNTIME_EXTENSIONS=agentmesh.music-studio`;将其设为空可禁用全部已安装
扩展。`GET /api/v1/extensions` 可以查看版本、健康状态、所需 Feature/API Key、权限和工作区。
扩展开发说明见 [Runtime Extension Protocol](docs/architecture/modules/runtime-extension-protocol.md)。
独立仓库 [AgentMesh Extension Starter](https://github.com/0YHR0/AgentMesh-Extension-Starter)
提供了已通过 CI 的 Daily Brief 场景,可直接作为第三方扩展项目模板。

Identity/RBAC 在所有内置 Profile 中都保持关闭,必须由部署者显式配置凭据后开启。

Expand Down
14 changes: 12 additions & 2 deletions docs/architecture/modules/runtime-extension-protocol.md
Original file line number Diff line number Diff line change
Expand Up @@ -82,6 +82,15 @@ generic runtime supplies its required services, and its registrar preserves thes
Its Company Template is also projected into `PackCatalog`, so declarative installation and
executable runtime discovery come from one scenario definition.

## External repository proof

[AgentMesh Extension Starter](https://github.com/0YHR0/AgentMesh-Extension-Starter) is maintained
as an independent repository and Python distribution. Its `community.daily-brief` extension
provides a deterministic service, API, workspace, static assets, and health probe without changing
AgentMesh source code. Its CI checks out AgentMesh, installs both distributions, runs extension
tests and lint, and builds the wheel. Installing that wheel makes the existing entry-point registry
discover both Music Studio and Daily Brief in the same process.

## Deliberate v0.1 limits

- extensions run in the AgentMesh API process and have the privileges of that process;
Expand All @@ -90,5 +99,6 @@ executable runtime discovery come from one scenario definition.
- signed bundles, registry trust policy, dependency resolution, hot reload, process isolation, and
remote A2A extensions remain later protocol versions.

The next security step should be a signed installation/preflight model. Process isolation should
only follow after the in-process contract is proven by a second independently maintained scenario.
The next security step should be a signed installation/preflight model. Process isolation can now
follow the independently maintained Daily Brief proof instead of being designed against only a
built-in scenario.
11 changes: 11 additions & 0 deletions docs/implementation-status.md
Original file line number Diff line number Diff line change
Expand Up @@ -207,6 +207,17 @@ Runtime Extension API v0.1 on 2026-08-03 additionally:
- kept installed Python extensions explicitly trusted and deferred signatures, sandboxing, hot
reload, extension migrations, and remote execution to later protocol revisions.

External Runtime Extension proof on 2026-08-03 additionally:

- published the independent `AgentMesh-Extension-Starter` repository with the
`community.daily-brief` scenario;
- proved wheel metadata discovery through `agentmesh.runtime_extensions` without modifying the
AgentMesh source tree;
- verified Music Studio and Daily Brief can coexist in one registry without route, workspace, or
asset collisions;
- added free GitHub CI covering lint, extension tests, integration against AgentMesh, and wheel
construction.

Market Intelligence Studio baseline verification on 2026-07-30 additionally:

- passed 390 non-PostgreSQL tests at 82.71% line coverage (gate: 80%);
Expand Down