Add opt-in Agent Guild extension for Pi - #186
Merged
Merged
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Adds an opt-in Pi extension so an operator can request endpoint observations immediately before delegating to a remote agent or MCP service. It exposes
guild_preflight,guild_checkand/guild; paid operations return a quote and stop. Optional session scanning is advisory, and the disabled-by-default gate can warn or block only the exact endpoint associated with a recent failed observation.Public-address screening rejects credentials, queries, fragments, private addresses and mixed DNS answers before disclosure. Observations expire and clear at session boundaries; incomplete, malformed and mismatched replies cannot become cached verdicts. The package uses the deployed service's actual verdict names and explains that observations are not proof of competence or authority.
Validation: 21 offline tests pass and the maintainer live test is skipped. Claude separately loaded the exact extension in Pi 0.85.1 through RPC and SDK modes, verified tool/command/event registration and exercised both tools and the exact-URL gate against local fixtures without a model call or payment. A dedicated workflow runs the offline suite on source changes. The production MCP transport fix is deployed and live-verified.
The public source and package metadata use AgentTanuki. npm publication remains pending publisher account access, and the README says so. The diagnostic runtime harness remains in the local review artifacts; only reproducible offline tests are included here.