AGPK software

AGPK — AgentOS X software install system

AGPK is the software lifecycle standard on AgentOS X: discover, human choose, install, upgrade, remove, verify. It pairs with AGIN (who acts) and AHCP (how deep agents use software after install).

Who this page is for. Builders, vendors, operators, and agent developers on AgentOS X—read the sections below. “Contract downloads” at the bottom are for CI/machines, not the primary human entry.

Model: install vs use-depth

Only two channels: preinstall and agent_package. apt is an agent-friendly CLI shape, not a third channel.

Vs system updates: apps and optional capabilities use AGPK here; the system body on installed disks updates via signed version patch (Settings → System Update / agentx upgrade) — see Downloads · Version patches (system update) and software installs. The two paths do not substitute for each other.

Human approval (no sensitivity tiers)

1. Model proposes options → agent presents a structured list
2. Human chooses (no high/medium/low sensitivity gates)
3. Install/upgrade/remove need confirmation—session first; desktop dialog or TTY fallback
4. Unsigned packages need explicit y / “I understand”

Agent-first (usable after install)

A valid AGPK package is finished when an agent can discover → install → use → uninstall it—not when a binary merely sits on disk.

Installing software ≠ reinstalling the OS. The platform hosts discover/install/invoke; the package supplies the command face and engine. Human review of results uses projection.*—GUI is not the agent primary path.

Industrial edge and automation devices (IoT / PLC)

AgentOS X extends through AGPK to industrial automation controllers and edge devices: after installing official or compliant device packages, people and agents can read/write and manage access under permission and approval rules—not only office apps.

Field wiring, safety interlocks, and authorization stay with the customer environment. Docs cover package install and command faces; they do not replace electrical safety codes. Release notes: marketing changelog.

agentx agpk list-options --query siemens
# or --query s7 / edge
agentx agpk install org.agentnet.edge.siemens-s7-1500 --approve -y
agentx agpk list-commands --package-id org.agentnet.edge.siemens-s7-1500
# agentx agpk invoke <command_id> --args '{...}'

Install, list commands, invoke (on AgentOS X)

agentx agpk list-options --query budget
agentx agpk install org.actualbudget.Actual.agent --approve -y
agentx agpk list-commands --package-id org.actualbudget.Actual.agent
agentx agpk invoke actual.budget.upload --args '{}'
agentx agpk list
agentx agpk remove org.actualbudget.Actual.agent --approve

Build standard

Required: agpk.json, payload/, agent-commands.json, usage guide, DIGESTS, INSTALL/UNINSTALL, signature or ahcp.signed: false. Recommended: surface.json. Missing command face or usage guide cannot stay healthy on the market.

agentx agpk install org.agentnet.agpk.sdk --approve -y
# or: agentx agpk scaffold ./my-pkg --id com.you.app --name "My App"
agentx agpk pack ./my-pkg
agentx agpk validate ./my-pkg
# host tarball on HTTPS → register download_uri + sha256 below

Full builder standard

SDK

Public market package org.agentnet.agpk.sdk 1.2.0: scaffold/pack/validate with command-face checks. Runtime install stays on AgentOS X.

SDK guide · Download: AGPK-MARKET agpk-sdk-v1.2.0

AgentNet official market packages (installable · not preinstall)

Complete list of AgentNet-maintained installable AGPK packages. Machine-readable: firstparty-catalog.json. Live API: GET https://api.agentnet.ink/share/v1/agpk/sources.

Boundary: Office suite and IM are system preinstall products—not AGPK market packages and not listed above. Paid plans unlock preinstalled Office capabilities; they do not block ISO download.

Software source registry (share · metadata only)

Same philosophy as MCP registration: register only, no approval. Share never stores install packages—only name, summary, vendor, download URL, hash. AgentOS X discovers via GET https://api.agentnet.ink/share/v1/agpk/sources, then downloads from the listed URI on the machine.

• Web form: anyone may POST /api/agpk/sources → marked elevated risk · unknown provider.
• Tool: logged-in users only POST /api/agpk/sources/tool (agpk.source.register).
• Always-on worker: probe (HTTPS + sha256) → command-face gate → open-source scan → healthy or rejected/discarded. When a package_id becomes healthy, other live rows for that id are auto-superseded. Live sources are re-probed on a schedule; dead links or hash drift leave the discoverable list.
• High risk: account users get reject + system mail; anonymous entries are discarded without mail.
• List ordering: healthy first, known provider before anonymous, lower risk first, then recency.

curl -sS -X POST https://www.aiagentnet.cloud/api/agpk/sources \
  -H 'content-type: application/json' \
  -d '{"package_id":"com.example.tool","name":"Example Tool","version":"1.0.0","summary":"demo","vendor_name":"Example Co","download_uri":"https://example.com/tool-1.0.0.tar.gz","sha256":"<64-hex>"}'

Minimal deliverables (cheat sheet)

agpk.json · payload/ · DIGESTS · INSTALL · UNINSTALL · signature or unsigned flag · recommended surface.json

Contract downloads (machines / CI)