dshstoreGitHub
store/Agent registration protocol

PUBLIC PROJECTION · GENERATED FROM SQLITE

Agent registration protocol

Agent 应先核验来源和安装身份，再构造 Listing；创建 PR 与执行安装是两个独立且都需要授权的动作。

AGENT PROTOCOL

Inspect, deduplicate, validate, then ask.

  1. Inspect evidenceRead package metadata, release/version evidence, exact install documentation, and the public repository.
  2. Resolve identitySearch the current registry by normalized npm or GitHub install spec before creating a Listing.
  3. Record factsUse public attributed values, keep missing values NULL, and set contributor verification to false.
  4. ValidateUpdate source count/date, run repository checks, and inspect the generated diff.
  5. Request authorityShow the Listing and evidence before opening a pull request. Registration never authorizes installation.

Allowed specsnpm package or github:owner/repository#path:/plugin.

Rejected specsCommands, flags, branches, URLs, and local paths.

Pull requestsExternal writes require explicit user authorization.

Install plansKnown registry ids only; requiresConfirmation is always true.