@abot-ai/runtime 1.7.0 → 1.8.1

package/plugins/json-inspector/README.md

@@ -0,0 +1,18 @@
+# JSON Inspector
+
+Validates one UTF-8 JSON file and returns a bounded structural summary on Linux,
+macOS and native Windows. Relative paths use the configured agent work directory;
+`workspace/...` uses configured workspace sources. Absolute paths must stay
+inside an authorized root. Request path restrictions still apply.
+
+The shared limits remain 2 MiB of source, six levels of depth, 200 visited nodes
+and 8,000 output characters. Invalid JSON is reported as a syntax observation;
+invalid UTF-8, oversized files and unsafe paths fail without a partial summary.
+The tool does not change the file.
+
+## Windows requirements
+
+The SDK uses built-in Windows PowerShell and its C# reader. No Companion,
+WSL, Docker, elevation or execution-policy bypass is required. A blocked
+reader reports `json_safe_read_unavailable` and tells the model not to retry
+or bypass the restriction. Request cancellation stops the reader.

package/plugins/json-inspector/plugin.json

@@ -2,8 +2,9 @@
   "$schema": "https://agent-plugins.org/schemas/1.0.0/plugin.schema.json",
   "name": "json-inspector",
   "version": "0.3.1",
-  "description": "Validate a JSON file and return a bounded structural summary.",
+  "description": "Validate JSON files and inspect their structure.",
   "extensions": {
+    "ai.abot.compatibility": { "version": 1, "runtimePlatforms": ["linux", "darwin", "win32"] },
     "ai.abot.runtime": {
       "version": 1,
       "entrypoint": "./src/index.cjs",

package/plugins/json-inspector/source/index.ts

@@ -13,6 +13,7 @@ import {
 } from "../../../src/plugin-sdk/index.js";
 
 import { parseJsonErrorPosition, summarizeJsonShape } from "./shape.js";
+import { jsonReadFailure } from "./read-failure.js";
 
 const MAX_FILE_BYTES = 2 * 1024 * 1024;
 const MAX_DEPTH = 6;
@@ -32,7 +33,8 @@ export default defineRuntimePlugin((context) => {
         const pathContext = {
           ...context,
           runtimePathResolver:
-            executionContext?.runtimePathResolver ?? context.runtimePathResolver,
+            executionContext?.runtimePathResolver ??
+            context.runtimePathResolver,
         };
         try {
           const requestedPath = readRequiredString(params.path, "path");
@@ -43,25 +45,9 @@ export default defineRuntimePlugin((context) => {
           const file = await readBoundedRegularFile(target.absolutePath, {
             maxBytes: MAX_FILE_BYTES,
             rootPath: target.rootPath,
+            signal: executionContext?.abortSignal,
           });
-          if (!file.ok && file.reason === "not_regular_file") {
-            return failureResult({
-              errorCode: "json_target_not_file",
-              message: "The requested JSON target is not a regular file.",
-            });
-          }
-          if (!file.ok && file.reason === "too_large") {
-            return failureResult({
-              errorCode: "json_file_too_large",
-              message: `The requested file exceeds the ${MAX_FILE_BYTES}-byte JSON inspection limit.`,
-            });
-          }
-          if (!file.ok) {
-            return failureResult({
-              errorCode: "json_file_changed",
-              message: "The requested JSON file changed while it was read.",
-            });
-          }
+          if (!file.ok) return jsonReadFailure(file, MAX_FILE_BYTES);
           let source: string;
           try {
             source = new TextDecoder("utf-8", { fatal: true }).decode(
@@ -138,6 +124,17 @@ export default defineRuntimePlugin((context) => {
             },
           });
         } catch (error) {
+          const readWasAborted =
+            executionContext?.abortSignal?.aborted &&
+            error instanceof Error &&
+            error.name === "AbortError";
+          if (readWasAborted) {
+            return failureResult({
+              errorCode: "json_inspection_cancelled",
+              message: "JSON inspection was cancelled.",
+              interruption: "aborted",
+            });
+          }
           return failureFromError(error, {
             fallbackCode: "json_inspection_failed",
             fallbackMessage: "JSON inspection failed.",

package/plugins/json-inspector/source/read-failure.ts

@@ -0,0 +1,42 @@
+import {
+  failureResult,
+  type BoundedRegularFileReadFailure,
+} from "../../../src/plugin-sdk/index.js";
+
+export function jsonReadFailure(
+  file: BoundedRegularFileReadFailure,
+  maxBytes: number,
+) {
+  switch (file.reason) {
+    case "not_regular_file":
+      return failureResult({
+        errorCode: "json_target_not_file",
+        message: "The requested JSON target is not a regular file.",
+      });
+    case "too_large":
+      return failureResult({
+        errorCode: "json_file_too_large",
+        message:
+          "The requested file exceeds the " +
+          maxBytes +
+          "-byte JSON inspection limit.",
+      });
+    case "outside_root":
+      return failureResult({
+        errorCode: "json_outside_root",
+        message:
+          "The requested file resolves outside its authorized root. Do not retry this target or bypass the path restriction.",
+      });
+    case "safe_open_unsupported":
+      return failureResult({
+        errorCode: "json_safe_read_unavailable",
+        message:
+          "Safe file reading is unavailable on this system. On Windows, computer policy may block the required PowerShell/C# helper. Do not retry or bypass this restriction with another tool; ask the user to check the system requirements or contact their administrator.",
+      });
+    case "changed_during_read":
+      return failureResult({
+        errorCode: "json_file_changed",
+        message: "The requested JSON file changed while it was read.",
+      });
+  }
+}