Saucebox Registry
← Browse

@danielwpz/a2ui-author

A

Generate, validate, and interpret static A2UI v0.8 JSON for interactive UI surfaces. Use when an agent needs to call publish_a2ui, author A2UI messages, check whether generated A2UI JSON is valid, or handle normalized userAction replies from interactive UI callbacks.

skillclaude

Install

agr install @danielwpz/a2ui-author --target claude

Writes 2 files into .claude/skills/, pinned to git-dc17dda9.

  • .claude/skills/a2ui-author/SKILL.md
  • .claude/skills/a2ui-author/package.json

Document

name: a2ui-author description: Generate, validate, and interpret static A2UI v0.8 JSON for interactive UI surfaces. Use when an agent needs to call publish_a2ui, author A2UI messages, check whether generated A2UI JSON is valid, or handle normalized userAction replies from interactive UI callbacks.

A2UI Author

Use this skill to work with the static A2UI v0.8 subset supported by the current renderer.

Workflow

  1. Author A2UI server messages, not raw channel card JSON.
  2. Read references/protocol.md for message structure, supported components, bindings, and current renderer adaptations.
  3. Use references/examples.md for compact examples.
  4. Validate generated JSON with the bundled script. Resolve <skill-dir> to this skill directory before running the command:
node <skill-dir>/scripts/validate-a2ui.js --version v0_8 path/to/a2ui.messages.json
  1. For user replies, reason from A2UI userAction events. Do not expose raw channel callback payloads to application logic or an LLM.

Static Content Rule

Generate only static A2UI server messages: dataModelUpdate, surfaceUpdate, beginRendering, and deleteSurface. Do not emit messages or components outside the supported static subset documented in this skill.

Trustgrade A

  • passBody integrity

    Whether the stored document is plausibly the kind of file the artifact declares, rather than something fetched by mistake.

  • passType matchnot applicable to this artifact type

    Whether the artifact is really the kind of thing its metadata claims it is.

  • passFreshness

    How long since the source repository was last pushed to.

  • passPrompt injection

    Scans the artifact's own text for instructions aimed at your agent rather than at you.

  • passLicense

    Whether the source repository declares an SPDX license permissive enough to redistribute.

How the grade is calculated

Each check contributes 0 points when it passes, 1 when it warns, and 2 when it fails. The total maps to a letter:

  • Aevery check passed
  • Bone warning
  • Ctwo warnings
  • Dprompt injection or body integrity failed, or three warnings
  • Fone of those failed, and something else is wrong

These are automated hygiene checks, not a security audit, and not a dependency or vulnerability scan. A grade of A means nothing was flagged — not that the artifact is safe.

Versions

  • git-dc17dda9ccc12026-07-31