agent-first-data 0.33.0

A naming convention that lets AI agents understand your data without being told what it means, plus a CLI and library for reading Markdown structure and safely editing structured JSON, TOML, YAML, dotenv, and INI documents.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36

{
  "$schema": "https://cmn.dev/schemas/v1/spore-core.json",
  "id": "agent-first-data",
  "name": "Agent-First Data",
  "version": "0.33.0",
  "domain": "agentfirstkit.com",
  "key": "ed25519.BwbSzqdDYyMN1pPW5snRk3afrJAovHn8aueMvDpfNKVw",
  "synopsis": "A naming convention that lets AI agents understand your data without being told what it means, plus a CLI and library for reading Markdown structure and safely editing structured JSON, TOML, YAML, dotenv, and INI documents.",
  "intent": [
    "Encode all semantic information in the field name itself so agents parse structured data without external schemas, documentation, or type systems — _ms/_s/_epoch_ms for time, _msats/_sats/_usd_cents for currency, _bytes for size, _secret for auto-redaction",
    "Define a JSONL output protocol where every line carries a kind discriminator (result, error, progress, or log), a payload field named after that kind, and a trace object for execution context (duration, token counts, cost, data source) — same structure whether the transport is CLI stdout, HTTP response body, MCP tool result, or SSE stream",
    "Provide three output formats via --output json|yaml|plain: JSON is the canonical lossless format, YAML preserves structure with quoted strings and --- separators, plain applies suffix-driven human formatting (epoch_ms → RFC 3339, _bytes → human-readable, _secret → ***, _ms ≥ 1000 → seconds)"
  ],
  "license": "MIT",
  "mutations": [
    "Add an `afdata guard` subcommand that validates a value against a destructive-verb operand type (path, tmp_path, cwd_path) and prints its normalized absolute path as raw bytes, failing closed to empty stdout so a rejection cannot become a wrong target",
    "Derive tmp_path's containment root from platform-fixed structure or a system API rather than TMPDIR/TMP/TEMP, so a redirected environment cannot make the guard structurally trust the wrong directory",
    "Add --under ROOT, an additional containment root that intersects with the operand type, for a target anchored to a directory the type vocabulary cannot name",
    "Decide containment on a final symlink's target while still printing the link itself, and canonicalize $HOME in the reject set so a home reached through a symlink is no longer silently dropped",
    "Add afdata_remove and afdata_trash to the Bash kit (API version 2), which put the guard's exit status in a command position where set -e acts on it, unlike the inline substitution that rm -f silently swallows",
    "Give afdata_trash a Windows entry point that drives IFileOperation and refuses up front every condition under which Windows would delete permanently while reporting success, never falling back to deletion",
    "Print the drive-form path on Windows instead of canonicalization's \\\\?\\ verbatim spelling, which the shell's own item API and .NET refuse",
    "Extend the Bash skill reference with the rules the dogfood rounds produced: the containment root belongs to the call site, and the guard goes ahead of the first command that touches the filesystem"
  ],
  "bonds": [],
  "tree": {
    "algorithm": "blob_tree_blake3_nfc",
    "exclude_names": [
      ".git",
      ".cmn"
    ],
    "follow_rules": [
      ".gitignore"
    ]
  }
}