The Agent-Native SDK · 10.03
Extensions: Agent-Authored Operations
agentis.extension.* creates, tests, and resolves sandboxed operations — extension.test dry-runs with sample inputs and catches contract failures before wiring.
Prove it before you wire it in
extension.create authors a new sandboxed operation; extension.test dry-runs it against sample inputs specifically to catch a contract failure — a wrong return shape, a missing declared permission, an unhandled input — before that extension is ever wired into a live workflow node. Extensions run through the same sandbox tiers as everything else agent-authored: least-privilege permissions declared explicitly, not assumed.
Use Component v2 for portable Python or Node packages
Component v2 is the multi-file path for Python 3.12 and Node 20 code with pinned dependency locks, content hashes, resource limits, declared permissions, and optional SBOM and healthcheck metadata. Its component_task workflow node runs the verified package revision in the container runtime. Installation, network fail-closed behavior, and the exact trust boundary are documented in The Extension Sandbox.
Continue
Agents compose behavior as async JavaScript against a single agentis.* object — dramatically fewer round-trips and far less drift than multi-tool JSON choreography.
Provider-pluggable image, audio, speech, and video generation, plus vision, transcription, and document extraction feeding the same content-addressed asset store.