@aryacode/dsh-plugin-arya-computer-use 1.0.0 → 1.0.2

package/README.md

@@ -97,6 +97,17 @@ node mcp/browser-launcher.mjs          # → agent-browser mcp --tools core [--p
 
 So sign-in reuse and attaching to your own Chrome are settings, not hand-edited rows. Web-lane changes land on the next MCP restart; the settings page says so.
 
+## Plugin market
+
+Installing from Plugins -> Arya Plugin Market needs no manual source: on first run the plugin registers
+`https://cdn.jsdelivr.net/gh/KonnectSuite/dsh-arya-computer-use@main/index.json`
+with the market (existing sources are kept) and every npm release shows up there as an update. Releases go
+through npm staged publishing, so a publish is visible in the market once the version is approved on npmjs.com.
+
+The plugin manager blocks dependency build scripts by default. The engines (`agent-desktop`, `agent-browser`)
+fetch their native binary in a postinstall script; approve those two builds when installing, or let 1.0.1+
+repair them itself at start-up - the status route reports the outcome under `mcp.engines`.
+
 ## Tool presets
 
 - `lite` (default) — all 16 desktop tools listed up front.

package/index.js

@@ -18,8 +18,10 @@
 
 import z from '@deepseek-ai/schemastery';
 import os from 'node:os';
-import { readFile, readFileSync, readdirSync } from 'node:fs';
+import { readFile, readFileSync, readdirSync, statSync } from 'node:fs';
+import { execFileSync } from 'node:child_process';
 import { dirname, join } from 'node:path';
+import { createRequire } from 'node:module';
 import { fileURLToPath, pathToFileURL } from 'node:url';
 import { DEFAULT_SETTINGS, normalizeSettings, STOP_SHORTCUT_PATTERN, repairStaleSettings } from './mcp/settings.mjs';
 import { TakeoverControl, atomicJson } from './mcp/takeover.mjs';
@@ -34,6 +36,11 @@ const SKILL_FILE = join(SKILL_DIR, 'SKILL.md');
 const PROVIDER_NAME = 'arya-computer-use';
 const RANK = 350;
 const STATUS_PATH = '/plugins/arya/status';
+// Market index that lists this plugin. The market ships no default source, so the
+// plugin registers its own on first apply: users then see "Arya Computer Use" in
+// Plugins -> Arya Plugin Market without pasting a URL, and every release published
+// to npm shows up there as an update.
+const MARKET_INDEX_URL = 'https://cdn.jsdelivr.net/gh/KonnectSuite/dsh-arya-computer-use@main/index.json';
 const PLUGIN_VERSION = (() => {
   try { return JSON.parse(readFileSync(join(HERE, 'package.json'), 'utf8')).version ?? '0.0.0'; }
   catch { return '0.0.0'; }
@@ -84,6 +91,68 @@ async function loadMcpBridge() {
   return { bridge: null, resolveErrors };
 }
 
+// ---------------------------------------------------------------------------
+// Engine binaries.
+//
+// agent-desktop and agent-browser ship their native binary through a
+// postinstall script. pnpm (and therefore the plugin manager) refuses to run
+// dependency build scripts unless they are approved, so a market install can
+// leave both engines without a binary. Rather than fail with an opaque spawn
+// error much later, run the vendor's own postinstall once, ourselves, and
+// report what happened in the status route.
+// ---------------------------------------------------------------------------
+
+const ENGINE_PACKAGES = ['agent-desktop', 'agent-browser'];
+
+function engineRoot(pkg) {
+  try {
+    return dirname(createRequire(import.meta.url).resolve(`${pkg}/package.json`));
+  } catch {
+    return null;
+  }
+}
+
+function engineBinaryReady(root) {
+  const binDir = join(root, 'bin');
+  const token = `${process.platform}-${process.arch}`;
+  const wantSuffix = process.platform === 'win32' ? '.exe' : '';
+  try {
+    return readdirSync(binDir).some(name => {
+      if (name.endsWith('.sha256') || !name.includes(token)) return false;
+      return name.slice(name.indexOf(token) + token.length) === wantSuffix;
+    });
+  } catch {
+    return false;
+  }
+}
+
+async function ensureEngine(pkg) {
+  const root = engineRoot(pkg);
+  if (!root) return { package: pkg, ok: false, reason: 'not-installed' };
+  if (engineBinaryReady(root)) return { package: pkg, ok: true, binary: 'present' };
+  const script = join(root, 'scripts', 'postinstall.js');
+  try {
+    if (!statSync(script).isFile()) return { package: pkg, ok: false, reason: 'no-postinstall' };
+  } catch {
+    return { package: pkg, ok: false, reason: 'no-postinstall' };
+  }
+  try {
+    execFileSync(process.execPath, [script], { cwd: root, stdio: 'ignore', timeout: 600000, windowsHide: true });
+  } catch (error) {
+    return { package: pkg, ok: false, reason: 'postinstall-failed', message: error?.message ?? String(error) };
+  }
+  return { package: pkg, ok: engineBinaryReady(root), binary: 'downloaded' };
+}
+
+async function ensureEngines() {
+  const results = [];
+  for (const pkg of ENGINE_PACKAGES) results.push(await ensureEngine(pkg));
+  return results;
+}
+
+// Internal hook so a diagnostic can exercise the repair without a host.
+export { ensureEngines as ensureEngineBinaries };
+
 // One in-process mcp-client per lane. stdio transport with our own files, so
 // the same code path serves a checkout and a registry install.
 async function mountMcpServers(ctx) {
@@ -192,11 +261,59 @@ Object.defineProperty(Config, '~standard', { value: { ...validation, validate(in
   return result;
 } } });
 
+// Register this plugin's market index with the plugin market, once, so the
+// market lists Arya Computer Use without the user adding a source by hand.
+// setIndexes keeps any source the user already configured.
+function ensureMarketSource(ctx) {
+  const canonical = (url) => {
+    try { return new URL(url).href; }
+    catch { return url; }
+  };
+  try {
+    ctx.inject(['pluginMarket'], (scope) => {
+      void (async () => {
+        try {
+          const market = scope.pluginMarket ?? scope.get('pluginMarket');
+          if (!market || typeof market.listIndexes !== 'function' || typeof market.setIndexes !== 'function') return;
+          const sources = market.listIndexes() ?? [];
+          const urls = sources.map(entry => entry?.url).filter(url => typeof url === 'string');
+          if (urls.some(url => canonical(url) === canonical(MARKET_INDEX_URL))) return;
+          await market.setIndexes([...urls, MARKET_INDEX_URL]);
+          ctx.logger.info('dsh-arya-computer-use: registered its market index source');
+        } catch (error) {
+          ctx.logger.warn('dsh-arya-computer-use: could not register the market index source: %s', error?.message ?? String(error));
+        }
+      })();
+    });
+  } catch (error) {
+    ctx.logger?.warn?.('dsh-arya-computer-use: plugin market is unavailable: %s', error?.message ?? String(error));
+  }
+}
+
+// Internal hook so a diagnostic can exercise the market registration.
+export { ensureMarketSource as __ensureMarketSource };
+
 /* -------------------------------------------------------------------- main */
 
 export async function apply(ctx, config) {
   registerSkillProvider(ctx);
-  void mountMcpServers(ctx);
+  ensureMarketSource(ctx);
+  void (async () => {
+    try {
+      const engines = await ensureEngines();
+      mcpStatus = { ...mcpStatus, engines };
+      const broken = engines.filter(engine => !engine.ok);
+      if (broken.length) {
+        ctx.logger.warn(
+          'dsh-arya-computer-use: engine binaries are missing: %s (run the vendor postinstall, or approve dependency build scripts in the profile)',
+          broken.map(engine => `${engine.package}${engine.reason ? ` (${engine.reason})` : ''}`).join(', '),
+        );
+      }
+    } catch (error) {
+      ctx.logger.warn('dsh-arya-computer-use: could not prepare engine binaries: %s', error?.message ?? String(error));
+    }
+    await mountMcpServers(ctx);
+  })();
 
   const root = controlDir();
   const runtime = { configFile: join(root, 'settings.json'), stateFile: join(root, 'state.json'), activityFile: join(root, 'activity.json'), layoutFile: join(root, 'overlay-layout.json'), targetFile: join(root, 'target.json') };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aryacode/dsh-plugin-arya-computer-use",
-  "version": "1.0.0",
+  "version": "1.0.2",
   "description": "Computer use for DSH/AryaCode: agent-desktop UIA engine, agent-browser web lane, takeover UI with a ghost cursor",
   "license": "MIT",
   "type": "module",