agentmods.dev

IMPLEMENTATION

A durable Markdown note summarising the current implementation of Rosetta, an open-source instruction platform with a Python server, command-line tool, and documentation.

In plain words
What is it for?
Use it when maintaining or contributing to Rosetta and need an overview of its server, command-line, documentation, deployment, authentication, and analytics work.
Why use it?
It gives developers a compact reference to the system's current state without requiring them to reconstruct it from a work log.

Agent

341 3d ago C scan 0 tokens original Apache-2.0
View the source file griddynamics/rosetta
Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add agents/griddynamics/rosetta/implementation
Clone the repo
git clone --depth 1 https://github.com/griddynamics/rosetta
Per session 0 Only the description is in the session, so the agent can decide to use it. The body loads when it is invoked.
When invoked 16,267 The whole file, excluding the scripts and references it only reads on demand.
Security scan C 2 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.00000 $0.16267
Opus 5 $0.00000 $0.08134
Sonnet 5 $0.00000 $0.03253
Haiku 4.5 $0.00000 $0.01627

Measured yesterday against content hash 8a8004c06690, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade C, and why

IMPLEMENTATION scanned grade C with 2 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Downloads and executes remote codehighSupply chain

curl | sh runs whatever the server returns today, which is not necessarily what it returned when this was reviewed.

- **`curl | sh` reclassified to `hard-deny`**: supply-chain execution is treated as catastrophic, not self-approvable.

Makes network callslowCapability

Not a fault in itself. Listed so you know the mod talks to something, and to what.

- **Dockerfile (E0/E1):** Added `ENV PYTHONFAULTHANDLER=1` and `HEALTHCHECK` using Python stdlib urllib.
agents/IMPLEMENTATION.md · 282 lines

How it starts

The opening of the file, as written. The whole thing — 282 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Rosetta Implementation Summary

This file is a durable summary of the current implementation state. It is intentionally concise and should not be used as a chronological work log.

For detailed change history, use git history and PRs instead of expanding this file.

Current State

  • Rosetta is an OSS instruction platform with:
    • a Python MCP server in src/rosetta-mcp-server/
    • a Python CLI in src/rosetta-cli/
    • public documentation in docs/ and docs/web/
    • deployment examples under deployment/
  • The MCP server supports both stdio and HTTP transports.
  • HTTP mode supports OAuth-based authentication, session storage, and policy-based authorization.
  • The CLI supports publish, verify, list, parse, cleanup, and related packaging flows.
  • The repository contains both user-facing OSS docs and contributor-oriented implementation notes.

Major Implemented Workstreams

MCP Server

  • Refactored into a modular package structure with dedicated config, context, services, tools, auth, and analytics modules.
  • PostHog analytics parity restored in rosetta_mcp/analytics/tracker.py: added $referring_domain, $screen_name, $title, error_type/error_message on soft errors, $pageview and $web_vitals events, error_status_code on HTTP exceptions, $browser/$browser_version in exception context, on_error logging on Posthog constructor, inner try/except isolating analytics failures from tool results; all exception sites use logger.warning. Fixed feedback.py distinct_id to call_ctx.username (was composite username@repository). 18 new test cases added covering all acceptance criteria including boundary conditions.
  • All RAGFlow HTTP calls honour ROSETTA_RAGFLOW_HTTP_TIMEOUT, including the v1 document-download fallback and the legacy-compatibility bootstrap.
  • Core MCP tools are implemented, including:
    • get_context_instructions
    • query_instructions
    • list_instructions
    • submit_feedback
    • query_project_context
    • store_project_context
    • discover_projects
    • plan_manager
  • Added HTTP transport support on top of the existing stdio mode.
  • Added Redis-backed session and plan storage with in-memory fallbacks for local development.
  • Added OAuth/OIDC integration for HTTP deployments, including introspection-based validation and offline-refresh handling.
  • Added a FastMCP loopback redirect compatibility patch so CIMD-based OAuth clients using ephemeral localhost callback ports can complete HTTP authentication.
  • Added origin validation and cross-tool hardening around invalid inputs, malformed requests, and wrapper failures.
  • Added response-shape and schema cleanup so tool contracts are more predictable for coding agents.
  • MCP dataset lookup caches dataset objects as well as name/id mappings, avoiding repeated dataset-open calls during instruction/resource/project tool execution.
  • Analytics repository detection caches MCP roots per HTTP session and uses a fixed singleton cache key for STDIO/local transports.

Read the full file on GitHub · 282 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. yesterday First seen · 282 lines · 0 tokens per session scan C 8a8004c06690

Subscribe to this mod's changes

IMPLEMENTATION is an agent published in the GitHub repository griddynamics/rosetta (341 stars, last pushed 3d ago), licensed Apache-2.0. It costs nothing until one of its globs matches a file; then it loads 16,267 tokens. A static security scan graded it C with 2 findings (downloads and executes remote code, makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

Analytics and metricsDevOps and cloudWriting and docsclaude-codecodexcopilotcursordeveloper-toolsmcp-server
Related

Other agents, from other repositories

builder

Turn shot-plan.json into one renderable HyperFrames composition (compositions/index.html). Everything stays in the HF ecosystem — HTML is the source of truth; a single paused GSAP timeline carries all motion; the engine seeks it. Category-specific build rules live in categories/ /module.md; this file is the shared…

calesthio/OpenMontage · 0 tokens

test

Give your AI agent n8n superpowers. 537 nodes with full schemas, 7,700+ templates, Git-like sync, and TypeScript workflows.

EtienneLescot/n8n-as-code · not measured

clawteam-dev-manager

Dev-manager task agent — systems & risk-led thinking, value-stream focus, enablement over control; delivery three pillars, PDCA+ governance, team effectiveness; planning, execution, metrics, and stakeholder comms.

deepelementlab/jupyter-studio · 49 tokens

clawteam-rnd-frontend

Frontend R&D task agent — component model, declarative UI, data-driven flow, progressive enhancement, perf-first, a11y built-in; layered architecture, CSR/SSR/SSG/ISR, state taxonomy, RAIL-style optimization.

deepelementlab/jupyter-studio · 57 tokens

clawteam-system-architect

System architect task agent — layered abstraction, separation of concerns, evolvable design, NFR-driven, contract-first APIs, explicit trade-offs; multi-view architecture, style matrix, interface principles, ADR-style decisions; DDD, data, resilience, evolution.

deepelementlab/jupyter-studio · 59 tokens

designteam-interaction-designer

IXD task agent — path enumeration, cognitive de-entropy, feedback loops, physical metaphors, forgiveness; Fitts, Hick, Gestalt, mental-model fit, Tesler, peak-end, Occam, isolation; flows, states, rules, motion, spec for dev.

deepelementlab/jupyter-studio · 64 tokens