Visitar URL original
How Magpie fits together | Apache Magpie

How Magpie fits together

Skills describe the work. Tools connect that work to your agent, services, and project conventions.

79 skills

The workflows: what to check, prepare, and bring back for approval.

23 capabilities

The interfaces skills need: 15 capability contracts, such as reading an issue or drafting mail, and 8 low-level capabilities.

65 tools

The implementations for your tracker, model, or other service; 36 already implemented.

Choose your tools without rewriting the workflow

Skills ask for a capability rather than a named vendor. Tools implement each capability for a backend, so your project can change its tracker, mail, model or agent while keeping the workflow. Neutrality holds on six independent axes; a choice on one never constrains the others.

12 of 15 capability contracts (80%) have at least 2 backends or are neutral by construction. 79 of 79 skills are vendor-neutral, and 32 of 32 low-level tools work with any agent.

ContractBackendsCoverage
trackerAtlassian, Forgejo / Gitea, Fossil, GitHub, GitLab, SourceHut6 backends
source-controlForgejo / Gitea, Fossil, Git, GitHub, GitLab, SourceHut, Subversion7 backends
change-requestAtlassian, Forgejo / Gitea, GitHub, GitLab, email5 backends
mail-archiveASF, Google, SourceHut3 backends
chatDiscord, Slack2 backends
mail-sourceASF, Google, Maildir3 backends
mail-createGoogle, Maildir2 backends
cve-authorityCVE.org, Vulnogram2 backends
report-relayAny backendNeutral by construction
scan-formatAny backendNeutral by construction
project-metadataASFSingle organization (ASF)
release-stagingNexus Repository Manager (ASF-hosted)1 backend; needs another
security-cross-refOSV.dev1 backend; needs another
typed-decisionTypeSafe1 backend; needs another
peopleAtlassian, GitHub2 backends

Keep your project’s conventions

Most tool choices are the same for every project under one governing organization: every ASF project allocates CVEs the same way, reads the same mail archive and gates on PMC membership. An organization profile holds those shared defaults once: its governance vocabulary, the backend each capability uses, and its identity. A project names its organization and inherits the rest; its own configuration still wins, then the organization, then the framework default. The same skill runs unchanged for an ASF project and an independent one; the organization carries the difference.

Apache Software Foundation

8 organization-specific tools, 16 skills, and the contributor growth and release management skill families.

Independent (no formal organization)

The baseline for projects without a formal organization: no extra vocabulary, framework defaults throughout.

Any foundation, company or collective can add its own: contribute it to the framework so its projects and others reuse it, keep it in the organization’s own repository, or keep one locally in a project’s overrides.

Explore the reference

The capability and tool definitions below come from the framework. Implementation status and supported vendors are available in the tools directory.

Capability contracts
trackerIssue / board / label backend.
source-controlBranch / commit / diff / push (VCS).
change-requestProposed-change review + merge gate (pull request / merge request / Gerrit change).
mail-archiveMailing-list / forum archive reads.
chatProject chat reads — public channels only (Slack, Discord). Read-only; never posts.
mail-sourceInbound-mail ingestion (mbox / IMAP / …).
mail-createOutbound mail composition. Always produces an editable draft; sending is a separate human-approved step on that draft (draft mode = default and the only mode implemented today; send mode declared but unimplemented — no autonomous send).
cve-authorityCVE allocation / record management / publication.
report-relayInbound security-report relay detection.
scan-formatSecurity-scanner report parsing.
project-metadataGovernance rosters / people / releases.
release-stagingRelease-staging repository reads (ASF Nexus at `repository.apache.org`). Read-only — never closes, drops, or promotes.
security-cross-refVulnerability database / cross-reference alias lookup (OSV.dev / NVD).
typed-decisionProvider-agnostic typed decision backend (Choice / Score / Noul).
peopleForge / tracker accounts: profile lookup, repository collaborators, team membership (one confirmed write). Distinct from `contract:project-metadata`, which reads an organization's governance rosters.
Low-level capabilities
analyticsRead-only metrics / dashboards / renderers.
sandboxAgent isolation, egress control, settings audit.
action-guardDeterministic pre-tool-use command guards.
privacyPII redaction / approved-LLM gating.
framework-devBuild / validate / eval the framework itself.
releaseRelease-artefact helpers an adopter's release process runs: reproducible-archive build, lint and comparison; maven-artifact-verify for staged JVM artefacts; release-config loading and pre-flight checks; release-verify checks of a staged release candidate.
setupAdopter-side setup state an agent resolves at runtime rather than at development time: lock parsing, floor comparison, reconciliation fingerprints.
reviewA second model's read of a change before it is published: other models' CLIs run read-only, findings merged.
Suggest a change