Arandu HTTP

What it does

When your agent uses it

• The request is to add a route
• Add an endpoint
• Publish/approve/cancel a record
• Validate this form

Example prompts

• “add a route”
• “add an endpoint”
• “add an action”
• “/arandu-http”

Workflow steps

5 steps, taken from the first numbered list in SKILL.md.

1. 1Pick the shape. CRUD on a record is a resource. A record reached
2. 2Generate it. aru make:module writes the resource controller with the
3. 3Write the action thin: read who is asking, bind the input, call the
4. 4Write the request's rules in Validate, and leave calling it to the
5. 5Register the route in the custom block, behind its guard, and give it a

What it can do on your machine

Read from SKILL.md and the folder at commit b8a4273. It shows what the files ask for, not the result of running them.

• Tool permissions

  Pre-approves nothing: there is no allowed-tools line, so your agent's usual permission prompts apply.

  From allowed-tools in the SKILL.md frontmatter.

• Runs code

  Shell commands in SKILL.md call:

  • go
  • bash

  From the folder's file list and the shell code blocks in SKILL.md.

• Network

  No URLs in SKILL.md.

  From URLs in SKILL.md, links to its own repository left out.

• Credentials

  Names no API keys, tokens, secrets or passwords.

  From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.

Context cost

Arandu HTTP loads about 2.5k tokens when it runs. Until then it costs about 176 tokens; SKILL.md has 975 words of instructions outside code blocks.

Always · name and description, kept in context so the agent knows when to use it

~176

When it runs · the whole SKILL.md, loaded when a task matches

~2.5k

Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.

Safety

Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); files beside SKILL.md are not scanned.

SKILL.md

The full file from arandu-io/arandu at commit b8a4273, republished under its MIT licence (© arandu-io). 975 words, ~2,547 tokens.

name

arandu-http

description

Controllers, requests and routes of an Arandu (Go) application -- the seven resource actions, a resource nested under another, a singleton, a single-action (invokable) controller, a named action such as publish or approve, the request struct and its validation, route guards and route names. Use when the request is to "add a route", "add an endpoint", "add an action", "publish/approve/cancel a record", "nest X under Y", "validate this form", "who can reach this page", or when ctx.Bind, ctx.User, r.Resource, r.ResourceAction, r.Singleton or r.Invokable is involved. Covers aru make:controller (--resource, --singleton, --invokable, --parent, --action), make:request and make:middleware.

license

MIT

package example

import (
	fhttp "github.com/arandu-io/framework/http"
	"github.com/arandu-io/framework/http/middleware"
	"github.com/arandu-io/framework/security"
	hhttp "github.com/arandu-io/hesape/http"

	controllers "<module>/app/Http/Controllers"
	services "<module>/app/Services"
)

// PublishNote is one operation with one address: an invokable controller.
type PublishNote struct {
	notes *services.NoteService
}

// NewPublishNote takes the service it calls, built in bootstrap/app.go.
func NewPublishNote(notes *services.NoteService) *PublishNote {
	return &PublishNote{notes: notes}
}

var _ fhttp.Invoker = (*PublishNote)(nil)

// Invoke publishes the note the form names in its path.
func (c *PublishNote) Invoke(ctx *hhttp.Context) error {
	who, _ := ctx.User()
	published, err := c.notes.Publish(ctx.Ctx(), who, ctx.Param("id"))
	if err != nil {
		return err
	}
	return ctx.RedirectRoute("notes.show", published.ID)
}

// Routes registers each shape behind the sign-in guard.
func Routes(r *fhttp.Router, sessions *security.SessionStore, note *controllers.NoteController,
	comment *controllers.CommentController, publish *PublishNote) {
	signedIn := r.Group("", middleware.RequireAuth(sessions))
	signedIn.Resource("notes", note)
	signedIn.ResourceAction("POST", "notes", "publish", note.Publish)
	signedIn.Resource("notes.comments", comment)
	signedIn.Invokable("POST", "/notes/{id}/publish-now", publish).Name("notes.publish-now")
}

export GOWORK=off
aru model:build --check
aru view:build
gofmt -l $(find . -name '*.go' -not -path '*/testdata/*' -not -name '*.kyse.go')
go vet ./...
bash tests/test-layout-guard.sh
go test -race ./...
go build ./...
aru doctor

<!-- arandu:begin custom -->

<!-- arandu:end custom -->

© arandu-io, MIT. Rendered from Markdown: HTML in the file is shown as text, images as links, and headings moved down two levels. Raw file

Files

Just SKILL.md in .agents/skills/arandu-http of arandu-io/arandu.

Open the folder on GitHubat commit b8a4273