{ "generated_from": "site/diagrams/from_code.py", "note": "Static source extraction with fixed wiring templates; not complete control-flow analysis.", "source_sha": "af275efb1732d9bc1fcb9ea624e55a2ced58032c", "source_dirty": false, "cli": [ "state-migrate", "state-enable-windows-resources", "state-status", "version", "rulepack", "scan", "admit", "import-skill", "pubkey", "verify", "serve", "ui", "teardown", "setup", "init", "stop", "stop-request", "start", "service-login", "launch-agent-status", "task-xml", "task-unregister", "task-stop", "task-runtime", "task-start", "task-register", "task-presence", "task-query", "task-prepare", "launch-agent-load", "launch-agent-start", "launch-agent-stop", "launch-agent-unregister", "launch-agent-register", "launch-agent-prepare", "launch-agent-plist", "service-unit", "client-upgrade-check", "service-rollback", "service-upgrade", "client-install", "client-stage", "service-unregister", "service-register", "service-prepare", "status", "pair", "inventory", "export", "sync", "policy-exec", "hook", "skill-context", "adapter", "grant", "openshell", "release-manifest", "manifest-verify", "incomplete" ], "http_routes": [ "/v1/raw-task-content/status", "/v1/raw-task-content/activation", "/v1/raw-task-content/grants", "/v1/raw-task-content/grants/", "/v1/raw-task-content/capture-permits", "/v1/raw-task-content/captures", "/v1/raw-task-content/native-captures", "/v1/raw-task-content/records/search", "/v1/raw-task-content/records/", "/v1/raw-task-content/purge-expired", "/v1/skill-installations/update-plans/", "/v1/skill-installations/updates", "/v1/skill-installations/updates/", "/v1/skill-installations/plans", "/v1/skill-installation-targets", "/v1/skill-installations/plans/", "/v1/skill-installations/apply", "/v1/skill-installations/operations", "/v1/skill-installations/operations/", "/v1/skill-installations/grants/", "/v1/skill-imports", "/v1/skill-imports/remote", "/v1/skill-imports/git", "/v1/skill-imports/", "/v1/runtime-identities", "/v1/runtime-identities/", "/v1/runtime-sessions", "/v1/skill-contexts", "/v1/skill-contexts/management", "/v1/skill-contexts/", "/v1/runtime-checks/preview", "/v1/runtime-checks", "/v1/runtime-checks/start", "/v1/runtime-checks/attach", "/v1/runtime-checks/", "/v1/tasks/", "/v1/network-observations", "/v1/file-observation-recoveries", "/v1/file-observations", "/v1/file-observations/", "/v1/effect-observers", "/v1/effect-observers/", "/v1/effect-evidence", "/v1/tool-effect-reports", "/v1/effect-evidence/", "/v1/actions/", "/v1/provenance-issuers", "/v1/provenance-issuers/", "/v1/provenance-assertions", "/v1/provenance-assertions/import", "/v1/provenance-resolve", "/v1/provenance-reports", "/v1/provenance-select", "/v1/intents", "/v1/context-assertions", "/v1/context-assertions/", "/v1/intents/", "/v1/intent-bindings", "/v1/intent-bindings/", "/v1/status", "/v1/decide", "/v1/observe", "/v1/confirmations", "/v1/confirmations/", "/v1/hold-status", "/v1/hold-executions/reserve", "/v1/hold-executions/status", "/v1/hold-executions/reconcile", "/v1/hold/", "/v1/task-activities/", "/v1/task-activities/search", "/v1/task-activities", "/v1/receipts", "/v1/admit", "/v1/admissions", "/v1/admissions/", "/v1/inventory", "/v1/discovery", "/v1/discovery/preview", "/v1/discovery/scan", "/v1/adapter/diagnostics", "/v1/grant-scenarios", "/v1/grants", "/v1/grants/instance-drafts", "/v1/grants/", "/v1/config", "/v1/adapter/status", "/v1/adapter/instances", "/v1/adapter/preview", "/v1/adapter/recover", "/v1/adapter/install", "/v1/adapter/uninstall", "/v1/openshell/probe", "/v1/openshell/doctor", "/v1/openshell/apply", "/v1/openshell/drift-check", "/v1/openshell/session-executions", "/v1/openshell/session-executions/preview", "/v1/openshell/session-executions/rollback", "/v1/openshell/task-executions", "/v1/openshell/task-executions/preview", "/v1/openshell/task-executions/status", "/v1/openshell/task-executions/stop", "/v1/openshell/task-executions/reconcile", "/v1/openshell/task-executions/read", "/v1/assets", "/v1/assets/", "/v1/permissions", "/v1/findings", "/v1/findings/", "/v1/audit", "/v1/export", "/v1/pair", "/healthz", "/v1/service-control/challenge", "/v1/service-control/stop", "/healthz/instance", "/v1/session/restore", "/v1/session/logout", "/v1/session/pairing", "/ui-config.json", "/", "/" ], "packages": [ "acltest", "adapterinstall", "adapters", "admission", "canon", "clientrelease", "completion", "contractvectors", "controlsync", "display", "effectevidence", "export", "fileopen", "grant", "hermeshome", "importsource", "intent", "inventory", "ledger", "localcontrol", "notify", "openshell", "pending", "perfbaseline", "privatefs", "product", "provenance", "rawcontent", "receipt", "rulepack", "runtimeaction", "runtimeauthz", "runtimecheck", "runtimeidentity", "runtimepath", "server", "signing", "skillcontext", "skillimport", "skillinstall", "skillmanifest", "state", "stateformat", "statefs", "threat", "trustedcontext", "ui", "workbuddycorrelation" ], "package_imports": [ { "from": "adapterinstall", "to": "adapters" }, { "from": "adapterinstall", "to": "canon" }, { "from": "adapterinstall", "to": "hermeshome" }, { "from": "adapterinstall", "to": "privatefs" }, { "from": "adapterinstall", "to": "product" }, { "from": "adapterinstall", "to": "runtimeaction" }, { "from": "adapterinstall", "to": "runtimepath" }, { "from": "adapterinstall", "to": "state" }, { "from": "adapterinstall", "to": "stateformat" }, { "from": "adapterinstall", "to": "statefs" }, { "from": "adapters", "to": "admission" }, { "from": "adapters", "to": "hermeshome" }, { "from": "adapters", "to": "pending" }, { "from": "adapters", "to": "product" }, { "from": "adapters", "to": "receipt" }, { "from": "adapters", "to": "rulepack" }, { "from": "adapters", "to": "runtimeidentity" }, { "from": "adapters", "to": "signing" }, { "from": "admission", "to": "canon" }, { "from": "admission", "to": "display" }, { "from": "admission", "to": "fileopen" }, { "from": "admission", "to": "rulepack" }, { "from": "admission", "to": "signing" }, { "from": "admission", "to": "threat" }, { "from": "clientrelease", "to": "skillmanifest" }, { "from": "clientrelease", "to": "state" }, { "from": "clientrelease", "to": "stateformat" }, { "from": "clientrelease", "to": "statefs" }, { "from": "completion", "to": "effectevidence" }, { "from": "completion", "to": "runtimeaction" }, { "from": "controlsync", "to": "admission" }, { "from": "controlsync", "to": "canon" }, { "from": "controlsync", "to": "inventory" }, { "from": "controlsync", "to": "signing" }, { "from": "effectevidence", "to": "canon" }, { "from": "effectevidence", "to": "fileopen" }, { "from": "effectevidence", "to": "provenance" }, { "from": "effectevidence", "to": "runtimeaction" }, { "from": "effectevidence", "to": "runtimepath" }, { "from": "effectevidence", "to": "signing" }, { "from": "effectevidence", "to": "stateformat" }, { "from": "effectevidence", "to": "statefs" }, { "from": "export", "to": "canon" }, { "from": "export", "to": "completion" }, { "from": "export", "to": "display" }, { "from": "export", "to": "effectevidence" }, { "from": "export", "to": "intent" }, { "from": "export", "to": "ledger" }, { "from": "export", "to": "receipt" }, { "from": "export", "to": "signing" }, { "from": "export", "to": "state" }, { "from": "fileopen", "to": "statefs" }, { "from": "grant", "to": "admission" }, { "from": "grant", "to": "canon" }, { "from": "grant", "to": "importsource" }, { "from": "grant", "to": "runtimeaction" }, { "from": "grant", "to": "runtimepath" }, { "from": "grant", "to": "signing" }, { "from": "hermeshome", "to": "stateformat" }, { "from": "hermeshome", "to": "statefs" }, { "from": "importsource", "to": "admission" }, { "from": "importsource", "to": "canon" }, { "from": "importsource", "to": "signing" }, { "from": "intent", "to": "admission" }, { "from": "intent", "to": "canon" }, { "from": "intent", "to": "completion" }, { "from": "intent", "to": "grant" }, { "from": "intent", "to": "importsource" }, { "from": "intent", "to": "provenance" }, { "from": "intent", "to": "runtimeaction" }, { "from": "intent", "to": "signing" }, { "from": "intent", "to": "stateformat" }, { "from": "intent", "to": "statefs" }, { "from": "intent", "to": "trustedcontext" }, { "from": "inventory", "to": "admission" }, { "from": "inventory", "to": "canon" }, { "from": "inventory", "to": "hermeshome" }, { "from": "inventory", "to": "product" }, { "from": "inventory", "to": "runtimepath" }, { "from": "inventory", "to": "signing" }, { "from": "inventory", "to": "stateformat" }, { "from": "inventory", "to": "statefs" }, { "from": "ledger", "to": "admission" }, { "from": "ledger", "to": "canon" }, { "from": "ledger", "to": "grant" }, { "from": "ledger", "to": "inventory" }, { "from": "ledger", "to": "receipt" }, { "from": "ledger", "to": "signing" }, { "from": "ledger", "to": "state" }, { "from": "localcontrol", "to": "canon" }, { "from": "localcontrol", "to": "signing" }, { "from": "openshell", "to": "canon" }, { "from": "openshell", "to": "statefs" }, { "from": "pending", "to": "statefs" }, { "from": "perfbaseline", "to": "export" }, { "from": "perfbaseline", "to": "intent" }, { "from": "perfbaseline", "to": "ledger" }, { "from": "perfbaseline", "to": "receipt" }, { "from": "perfbaseline", "to": "signing" }, { "from": "perfbaseline", "to": "statefs" }, { "from": "provenance", "to": "canon" }, { "from": "provenance", "to": "runtimeaction" }, { "from": "provenance", "to": "signing" }, { "from": "provenance", "to": "statefs" }, { "from": "rawcontent", "to": "fileopen" }, { "from": "rawcontent", "to": "signing" }, { "from": "rawcontent", "to": "statefs" }, { "from": "receipt", "to": "canon" }, { "from": "receipt", "to": "effectevidence" }, { "from": "receipt", "to": "grant" }, { "from": "receipt", "to": "importsource" }, { "from": "receipt", "to": "intent" }, { "from": "receipt", "to": "pending" }, { "from": "receipt", "to": "provenance" }, { "from": "receipt", "to": "rulepack" }, { "from": "receipt", "to": "runtimeaction" }, { "from": "receipt", "to": "runtimeauthz" }, { "from": "receipt", "to": "runtimepath" }, { "from": "receipt", "to": "signing" }, { "from": "receipt", "to": "statefs" }, { "from": "receipt", "to": "threat" }, { "from": "receipt", "to": "trustedcontext" }, { "from": "rulepack", "to": "canon" }, { "from": "rulepack", "to": "statefs" }, { "from": "runtimeaction", "to": "canon" }, { "from": "runtimecheck", "to": "adapterinstall" }, { "from": "runtimecheck", "to": "admission" }, { "from": "runtimecheck", "to": "canon" }, { "from": "runtimecheck", "to": "grant" }, { "from": "runtimecheck", "to": "intent" }, { "from": "runtimecheck", "to": "privatefs" }, { "from": "runtimecheck", "to": "product" }, { "from": "runtimecheck", "to": "receipt" }, { "from": "runtimecheck", "to": "rulepack" }, { "from": "runtimecheck", "to": "runtimeaction" }, { "from": "runtimecheck", "to": "runtimepath" }, { "from": "runtimecheck", "to": "signing" }, { "from": "runtimecheck", "to": "state" }, { "from": "runtimecheck", "to": "stateformat" }, { "from": "runtimecheck", "to": "statefs" }, { "from": "runtimeidentity", "to": "canon" }, { "from": "runtimeidentity", "to": "grant" }, { "from": "runtimeidentity", "to": "intent" }, { "from": "runtimeidentity", "to": "runtimeaction" }, { "from": "runtimeidentity", "to": "runtimepath" }, { "from": "runtimeidentity", "to": "signing" }, { "from": "runtimeidentity", "to": "stateformat" }, { "from": "runtimeidentity", "to": "statefs" }, { "from": "runtimepath", "to": "canon" }, { "from": "runtimepath", "to": "runtimeaction" }, { "from": "server", "to": "adapterinstall" }, { "from": "server", "to": "adapters" }, { "from": "server", "to": "admission" }, { "from": "server", "to": "canon" }, { "from": "server", "to": "completion" }, { "from": "server", "to": "effectevidence" }, { "from": "server", "to": "export" }, { "from": "server", "to": "grant" }, { "from": "server", "to": "hermeshome" }, { "from": "server", "to": "importsource" }, { "from": "server", "to": "intent" }, { "from": "server", "to": "inventory" }, { "from": "server", "to": "ledger" }, { "from": "server", "to": "localcontrol" }, { "from": "server", "to": "openshell" }, { "from": "server", "to": "pending" }, { "from": "server", "to": "product" }, { "from": "server", "to": "provenance" }, { "from": "server", "to": "rawcontent" }, { "from": "server", "to": "receipt" }, { "from": "server", "to": "rulepack" }, { "from": "server", "to": "runtimeaction" }, { "from": "server", "to": "runtimecheck" }, { "from": "server", "to": "runtimeidentity" }, { "from": "server", "to": "runtimepath" }, { "from": "server", "to": "signing" }, { "from": "server", "to": "skillcontext" }, { "from": "server", "to": "skillimport" }, { "from": "server", "to": "skillinstall" }, { "from": "server", "to": "state" }, { "from": "server", "to": "stateformat" }, { "from": "server", "to": "trustedcontext" }, { "from": "signing", "to": "canon" }, { "from": "signing", "to": "product" }, { "from": "signing", "to": "stateformat" }, { "from": "signing", "to": "statefs" }, { "from": "skillcontext", "to": "canon" }, { "from": "skillcontext", "to": "grant" }, { "from": "skillcontext", "to": "importsource" }, { "from": "skillcontext", "to": "receipt" }, { "from": "skillcontext", "to": "runtimeidentity" }, { "from": "skillcontext", "to": "signing" }, { "from": "skillcontext", "to": "skillinstall" }, { "from": "skillcontext", "to": "statefs" }, { "from": "skillcontext", "to": "trustedcontext" }, { "from": "skillimport", "to": "admission" }, { "from": "skillimport", "to": "canon" }, { "from": "skillimport", "to": "fileopen" }, { "from": "skillimport", "to": "importsource" }, { "from": "skillimport", "to": "rulepack" }, { "from": "skillimport", "to": "signing" }, { "from": "skillimport", "to": "stateformat" }, { "from": "skillimport", "to": "statefs" }, { "from": "skillinstall", "to": "admission" }, { "from": "skillinstall", "to": "canon" }, { "from": "skillinstall", "to": "fileopen" }, { "from": "skillinstall", "to": "grant" }, { "from": "skillinstall", "to": "importsource" }, { "from": "skillinstall", "to": "runtimeaction" }, { "from": "skillinstall", "to": "runtimepath" }, { "from": "skillinstall", "to": "signing" }, { "from": "skillinstall", "to": "skillimport" }, { "from": "skillinstall", "to": "state" }, { "from": "skillinstall", "to": "stateformat" }, { "from": "skillinstall", "to": "statefs" }, { "from": "skillmanifest", "to": "admission" }, { "from": "skillmanifest", "to": "canon" }, { "from": "skillmanifest", "to": "product" }, { "from": "skillmanifest", "to": "rulepack" }, { "from": "skillmanifest", "to": "signing" }, { "from": "skillmanifest", "to": "stateformat" }, { "from": "skillmanifest", "to": "statefs" }, { "from": "state", "to": "admission" }, { "from": "state", "to": "canon" }, { "from": "state", "to": "grant" }, { "from": "state", "to": "importsource" }, { "from": "state", "to": "intent" }, { "from": "state", "to": "localcontrol" }, { "from": "state", "to": "privatefs" }, { "from": "state", "to": "product" }, { "from": "state", "to": "receipt" }, { "from": "state", "to": "signing" }, { "from": "state", "to": "stateformat" }, { "from": "state", "to": "statefs" }, { "from": "stateformat", "to": "privatefs" }, { "from": "statefs", "to": "privatefs" }, { "from": "statefs", "to": "stateformat" }, { "from": "threat", "to": "rulepack" }, { "from": "trustedcontext", "to": "canon" }, { "from": "trustedcontext", "to": "runtimeaction" }, { "from": "trustedcontext", "to": "signing" }, { "from": "workbuddycorrelation", "to": "adapters" }, { "from": "workbuddycorrelation", "to": "receipt" }, { "from": "workbuddycorrelation", "to": "runtimeidentity" }, { "from": "workbuddycorrelation", "to": "statefs" } ], "grant_transitions": [ { "from": "draft", "to": "pending_approval" }, { "from": "draft", "to": "rejected" }, { "from": "draft", "to": "revoked" }, { "from": "pending_approval", "to": "approved" }, { "from": "pending_approval", "to": "rejected" }, { "from": "pending_approval", "to": "revoked" }, { "from": "approved", "to": "deployed" }, { "from": "approved", "to": "revoked" }, { "from": "deployed", "to": "effective" }, { "from": "deployed", "to": "revoked" }, { "from": "effective", "to": "revoked" } ], "decide_returns": [], "enforcement_modes_in_decide": [], "policy_exec": [ { "verdict": "admit", "decision": "allow" }, { "verdict": "admit_with_conditions", "decision": "warn" }, { "verdict": "quarantine", "decision": "block" } ], "adapters": [ "hermes-agentshield", "openclaw-agentshield", "workbuddy-agentshield" ], "diagrams": [ { "id": "runtime", "title": "本仓目录怎么接到本机程序", "file": "runtime.mmd", "sources": [ "apps/agentshield/cmd/agentshield/main.go", "adapters/runtime/" ] }, { "id": "packages", "title": "Go internal 包依赖（import）", "file": "packages.mmd", "sources": [ "apps/agentshield/internal/*/" ] }, { "id": "cli-http", "title": "CLI 子命令与 HTTP 路由", "file": "cli-http.mmd", "sources": [ "apps/agentshield/cmd/agentshield/main.go", "apps/agentshield/internal/server/server.go" ] }, { "id": "admission", "title": "admit 结论与 policy-exec 映射", "file": "admission.mmd", "sources": [ "apps/agentshield/internal/admission/admission.go", "apps/agentshield/internal/adapters/adapters.go" ] }, { "id": "decide", "title": "Decide / evaluate 返回路径", "file": "decide.mmd", "sources": [ "apps/agentshield/internal/receipt/engine.go" ] }, { "id": "grant", "title": "grant.transitions 状态机", "file": "grant.mmd", "sources": [ "apps/agentshield/internal/grant/grant.go" ] } ] }