AGENTS.md@packages/capability-runtimeA
AGENTS.md@packages/capability-runtime from maomaochong-ai/open-astravia is an AGENTS.md file: the standing instructions coding agents read in that repo.
mdr add maomaochong-ai/open-astravia/packages/capability-runtime/AGENTS.md@git:20261001.0ce1911Pins git:20261001.0ce1911 in mdr.lock. Pin the fingerprint instead.
- Audit grade
- A, 14 of 14 checks passed
- Kind
- AGENTS.md file
- Repository
- maomaochong-ai/open-astravia
- Path
packages/capability-runtime/AGENTS.md- Versions recorded
- 5
- Latest version
- git:20261001.0ce1911, committed Oct 1, 2026
- First version recorded
- Aug 11, 2026
- Size
- 2,780 bytes
- Repository stars
- 39
- License
- Apache-2.0
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# Team: Capability 本文件适用于 `packages/capability-runtime/` 及其全部子目录。 ## 必读文档 修改 Registry、Hub、Provider binding、Access Controller、Constraint 或审计行为前，必须先阅读： - [`docs/registry-and-access.md`](docs/registry-and-access.md) - [`../../docs/capabilities/README.md`](../../docs/capabilities/README.md) ## 职责范围 本包执行 `@astravia-org/capability-sdk` 定义的合同，拥有 Foundation/Domain Registry、Hub、Provider 注册与替换、AccessSession、精确 Grant、通用 Constraint、取消和审计机制。它不定义产品能力，也不实现 Desktop、Plugin、Theme 或 Action 业务。 ## 边界规则 - 本包只能依赖 `@astravia-org/capability-sdk` 的通用合同，不得导入或根据 `desktop`、`plugin-sdk`、 `theme-sdk`、Action、trust level、manifest 或系统权限名称分支。 - Runtime 可以由 main、renderer、CLI 或测试宿主实例化；部署在 renderer 不等于可以依赖 DOM、React、 Jotai 或 Router。具体 UI/宿主行为必须由上层 Provider 实现。 - Main 与 Renderer 共享的 Runtime 路径使用 `globalThis.crypto`、`AbortSignal` 等标准 API；Node 专用模块 和兼容逻辑留在 Host/Provider，不得重新引入通用 Runtime 执行路径。 - Capability Token 和业务 Schema 属于 `capability-sdk`；Provider 实现和组合根属于宿主；本包只拥有 注册、路由、授权、约束求值、生命周期和调用执行机制。 - Registry 路由依据 Token 的显式 layer 和完整 ID；前缀只用于校验、检索和诊断，不得用于隐式授权。 - 新 Capability、Module 或 Provider 默认没有 Grant；不得按 publisher、domain、前缀或调用者类型自动扩权。 - Provider 注册、替换和卸载必须保持 owner 明确、原子提交、失败保留旧实现、在途调用取消和确定性释放。 …
Read the whole file at its exact version.
How to install
mdr add maomaochong-ai/open-astravia/packages/capability-runtime/AGENTS.md@sha256:08904a1482547eccThe line at the top of this page pins the label git:20261001.0ce1911, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_jdd6mqukoco2syoh)
2 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 5 versions of this file, between Aug 11, 2026 and Oct 1, 2026, about one every 13 days.
| version | committed | commit | size | audit | |
|---|---|---|---|---|---|
| git:20261001.0ce1911 latest | 2026-10-01 | 0ce1911 | 2,780 B | A | view · diff |
| git:20260914.0a9ccc6 | 2026-09-14 | 0a9ccc6 | 2,774 B | A | view · diff |
| git:20260818.995e8e1 | 2026-08-18 | 995e8e1 | 2,766 B | A | view · diff |
| git:20260811.89df0a9 | 2026-08-11 | 89df0a9 | 2,770 B | A | view · diff |
| git:20260811.fa7275c | 2026-08-11 | fa7275c | 2,553 B | A | view |
Audit of the latest version
- pass: Size between 200 bytes and 200 KB (2780 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
maomaochong-ai/open-astravia · 39 stars · license Apache-2.0 · pushed 2026-11-01 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_jdd6mqukoco2syoh GET https://markdownregistry.com/api/v1/resolve?ref=maomaochong-ai/open-astravia/packages/capability-runtime/AGENTS.md GET https://markdownregistry.com/api/v1/blob/08904a1482547ecc5db9fbfab71a5797256654c637603b0958c5e49115ca4324
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: how to write a good AGENTS.md · AGENTS.md vs CLAUDE.md · which agent file does what.