Protocol adapter · 3 of 3
Non-standard transports. Still governed. Still receipted.
Not every tool speaks MCP or OpenAPI. @aarmos/adapter-deeplink covers the rest — macOS/iOS URL schemes, outbound webhooks, native app hand-offs, custom protocols. Same policy runtime, same AVAR receipt.
@aarmos/adapter-deeplink.Install
Nothing separate to install — the adapter ships inside the signed CLI artifact. Once the CLI is on your machine, @aarmos/adapter-deeplink is available to your policy.
How you get the software. Aarmos is distributed to authorized workspaces as signed artifacts. Signing in authorizes your workspace for evaluation automatically — no person to wait for — and the software is available the moment you choose to install it. Nothing downloads until you ask for it, and nothing is published to the public npm registry today. The open @avar-standard/* verifier packages are unaffected and remain publicly installable, so anyone can check a receipt without our software.
Wire it into policy
# policy.aarmos.toml
[[adapters.deeplink]]
name = "calendar"
scheme = "x-fantastical3"
scopes = ["create:event"]
gates.destructive = "confirm"
[[adapters.deeplink]]
name = "ops-webhook"
url = "https://ops.example.com/hooks/agent"
method = "POST"
scopes = ["notify:ops"]
rate.per_minute = 6Run
aarmos run my-agent
▸ tool: deeplink://calendar/create (adapter: deeplink) ✓ scoped, confirm
▸ tool: deeplink://ops-webhook/post (adapter: deeplink) ✓ scoped
✓ AVAR receipt: .aarmos/avar/…What the adapter enforces
- The resolved URL/payload is shown to the user before the OS hand-off or webhook fires.
- Every hand-off is recorded in the AVAR chain — the receipt names the scheme, the target, and the payload hash.
- Custom protocols slot in as adapter plugins without touching the runtime.
Enforcement runs in this device's runtime — tamper-evident, not tamper-resistant against a modified build. See the threat model.