AG
cb5e5dacef
- package: manifest v1.0 (schema, package_id, layers: odoo_modules/agents/docs/config/brain) - agents: 4 neutral cards + prompts (sellers-recruiter, test-operator, closer, compliance) no script.run in v0.1.0; odoo.* + file.* primitives only - modules: aura_business_core + hitridge_venture_o1 stubs (menus, ACLs, models) - docs: playbook, test-checklist, price-guide-starter, agreement-template.odt - config: channels (olx-bg/forums-local), pricing-rules (BGN, A/B/C/reject, drop ladder) - brain: empty-seed capability contract + seeds README (memories never ship) - toolchain: depo-sign.sh (ed25519, PEM+raw), validate-depo.sh (schema/files/cards/tools/ secrets/sig gates -> writes VALIDATE), tool-registry.json - install.sh: target-side verify (hash + ed25519 + layer files); install is phase 2 - public-keys/depo-signing.pub committed (private key stays out of repo) - VALIDATE: PASS (signed + verified, tamper-rejection tested)
24 lines
1.3 KiB
JSON
24 lines
1.3 KiB
JSON
{
|
|
"schema_version": "1.0",
|
|
"description": "Reference tool registry for depo packages. validate-depo.sh refuses agent cards that reference tools absent from this registry (principle of least privilege — targets grant exactly this surface).",
|
|
"tools": {
|
|
"odoo.search_records": "search + read fields (read)",
|
|
"odoo.read_record": "read one record by id (read)",
|
|
"odoo.read_records": "read multiple records (read)",
|
|
"odoo.create_record": "create one record (write)",
|
|
"odoo.write_record": "write values to one record (write)",
|
|
"odoo.call_method": "call an arbitrary method on an Odoo model (runtime-gated)",
|
|
"odoo.launch_campaign": "create + launch a hitridge.campaign (irreversible — campaign gate)",
|
|
"file.read": "read a file from the package or target workspace",
|
|
"file.write": "write a file in the package or target workspace",
|
|
"file.overwrite": "overwrite an existing package file",
|
|
"script.run": "run a package script — REQUIRES explicit per-package allowlist; refused by default",
|
|
"memory.store": "brain.py store (namespace-scoped)",
|
|
"memory.search": "brain.py search (namespace-scoped)",
|
|
"memory.clear": "brain.py clear (namespace-scoped)"
|
|
},
|
|
"runtime_grants": {
|
|
"note": "targets grant ONLY tools listed in each agent card, drawn from this registry. script.run is never granted implicitly."
|
|
}
|
|
}
|