Yichen Jiang
716e2e2683
Add registry and fallbackRegistries to the manager Config, ask them in order from inspect and installBundle with --registry, and move on only for failures another registry can change: unreachable, timed out, or a copy the registry lacks. A git or tarball spec's own host is never retried through a registry, and a registry outside the configured set is asked alone. The lookup runs without pnpm's retries so a dead registry is reported within inspectTimeoutMs; the install keeps pnpm's defaults. Results carry the registries asked, the install-state event names each attempt, and the plugin_manager tool takes a registry.
80 lines
5.3 KiB
TypeScript
80 lines
5.3 KiB
TypeScript
/** Agent-facing current-profile management using the same service as Web controls. */
|
|
import { assertNever } from '@deepseek-ai/dsh-util-values'
|
|
import type { Context } from '@deepseek-ai/cordis'
|
|
import type {} from './index.ts'
|
|
import type {} from '@deepseek-ai/dsh-sandbox-policy'
|
|
import type {} from '@deepseek-ai/dsh-user-approval'
|
|
import { approveEscalation } from '@deepseek-ai/dsh-sandbox'
|
|
import type { PluginEntryId } from './types.ts'
|
|
import { defineTool } from '@deepseek-ai/dsh-tools'
|
|
|
|
/** Required services for the management tool. */
|
|
export const inject = ['tools', 'pluginManager', 'sandboxPolicy']
|
|
|
|
/** Register one management tool for discovery and the four persistent actions.
|
|
* @param ctx Agent-scoped tool registration context.
|
|
*/
|
|
export function apply(ctx: Context): void {
|
|
ctx.tools.register(defineTool({
|
|
name: 'plugin_manager',
|
|
description: 'List plugins or bundles in the current profile, enable or disable them, install a bundle, or remove an installed bundle. Every action requires danger-full-access permission or approval for this call. Approval does not change the session permission mode. Changes affect every session in this profile. List first to obtain exact identifiers. Package installation can execute allowed build scripts. Live profiles apply changes immediately; startup profiles require restart.',
|
|
parameters: {
|
|
action: { type: 'string', required: true, enum: ['list_plugins', 'list_bundles', 'set_plugin', 'set_bundle', 'install_bundle', 'remove_bundle'], description: 'Management operation.' },
|
|
target: { type: 'string', description: 'Plugin entry id, bundle package name, or installation spec, according to action.' },
|
|
enabled: { type: 'boolean', description: 'Required for set operations; defaults to true for installation.' },
|
|
approvedBuilds: { type: 'array', items: { type: 'string' }, description: 'For install_bundle: pass names from pendingBuilds only after the user explicitly approves running their install scripts in the conversation. This grants persistent permission for this profile.' },
|
|
registry: { type: 'string', description: 'For install_bundle: the npm registry URL asked first, when the user names one; otherwise the configured registry is asked, and its configured fallbacks while a registry is unreachable.' },
|
|
offset: { type: 'number', description: 'Zero-based list offset; defaults to 0.' },
|
|
limit: { type: 'number', description: 'List page size, from 1 to 100; defaults to 25.' },
|
|
},
|
|
output: {
|
|
schema: { type: 'string' },
|
|
render: (_args, value) => [{ type: 'text', text: value }],
|
|
},
|
|
async execute(args, exec) {
|
|
const policy = ctx.sandboxPolicy.resolve(exec.agent === undefined ? {} : { session: exec.agent.session })
|
|
await approveEscalation({
|
|
requestedMode: 'danger-full-access', effectiveMode: policy.mode, subject: 'plugin management operation',
|
|
justification: `plugin_manager ${JSON.stringify(args)}. Profile changes persist across sessions; installed Host code runs outside the workspace sandbox.`,
|
|
}, { approver: ctx.get('approval'), agent: exec.agent, callId: exec.callId,
|
|
toolName: 'plugin_manager', signal: exec.signal })
|
|
exec.signal.throwIfAborted()
|
|
const manager = ctx.pluginManager
|
|
switch (args.action) {
|
|
case 'list_plugins':
|
|
case 'list_bundles': {
|
|
const offset = args.offset ?? 0
|
|
const limit = args.limit ?? 25
|
|
if (!Number.isInteger(offset) || offset < 0 || !Number.isInteger(limit) || limit < 1 || limit > 100) {
|
|
throw new Error('offset must be a non-negative integer and limit must be an integer from 1 to 100')
|
|
}
|
|
const rows = args.action === 'list_plugins' ? await manager.listPlugins() : await manager.listBundles()
|
|
const entries = rows.slice(offset, offset + limit)
|
|
return JSON.stringify({ entries, total: rows.length,
|
|
nextOffset: offset + entries.length < rows.length ? offset + entries.length : null })
|
|
}
|
|
case 'set_plugin':
|
|
case 'set_bundle': {
|
|
if (args.target === undefined || args.enabled === undefined) throw new Error('target and enabled are required')
|
|
return JSON.stringify(await (args.action === 'set_plugin'
|
|
? manager.setPluginEnabled(args.target as PluginEntryId, args.enabled)
|
|
: manager.setBundleEnabled(args.target, args.enabled)))
|
|
}
|
|
case 'install_bundle':
|
|
if (args.target === undefined) throw new Error('target package spec is required')
|
|
return JSON.stringify(await manager.installBundle(args.target, {
|
|
...args.enabled === undefined ? {} : { enabled: args.enabled },
|
|
...args.approvedBuilds === undefined ? {} : { approvedBuilds: args.approvedBuilds },
|
|
...args.registry === undefined ? {} : { registry: args.registry },
|
|
}))
|
|
case 'remove_bundle':
|
|
if (args.target === undefined) throw new Error('target bundle name is required')
|
|
return JSON.stringify(await manager.removeBundle(args.target))
|
|
/* v8 ignore next -- tool JSON validation rejects actions outside the declared enum */
|
|
default: return assertNever(args.action)
|
|
}
|
|
},
|
|
presentCall: args => ({ card: 'generic', title: 'Manage profile plugins', kind: args.action.startsWith('list_') ? 'read' : 'other', rawInput: args }),
|
|
}))
|
|
}
|