@yeaft/webchat-agent 1.0.409 → 1.0.410

package/connection/message-router.js

@@ -26,11 +26,11 @@ import { sendToServer, flushMessageBuffer } from './buffer.js';
 import { sendAgentMetricsSnapshot } from '../metrics.js';
 import { handleRestartAgent, handleUpgradeAgent } from './upgrade.js';
 import { loadMcpServers, updateMcpConfig } from '../mcp.js';
-import { getLlmConfig, updateLlmConfig, getYeaftSettings, updateYeaftSettings, getTelemetrySettings, updateTelemetrySettings, getSearchSettings, updateSearchSettings, fetchTavilyUsage } from '../yeaft/config-api.js';
+import { getLlmConfig, updateLlmConfig, getYeaftSettings, updateYeaftSettings, getPluginConfig, updatePluginConfig, getTelemetrySettings, updateTelemetrySettings, getSearchSettings, updateSearchSettings, fetchTavilyUsage } from '../yeaft/config-api.js';
 import { loadConfig } from '../yeaft/config.js';
 import { discoverLlmModels } from '../llm-model-discovery.js';
 import { fetchModelsDev } from '../yeaft/llm/models-dev.js';
-import { handleYeaftSessionSend, handleYeaftAskUserAnswer, handleYeaftSubAgentPrompt, handleYeaftTaskCancel, handleYeaftModeSwitch, handleYeaftModelSwitch, resetYeaftSession, refreshLiveSessionConfig, handleYeaftLoadHistory, handleYeaftLoadHistoryOutline, handleYeaftSearchHistory, handleYeaftLoadHistoryWindow, handleYeaftLoadMoreHistory, handleYeaftAbortThread, handleYeaftAbortAll, handleYeaftAbortTurn, handleYeaftVpSubscribe, handleYeaftVpCreate, handleYeaftVpUpdate, handleYeaftVpDelete, handleYeaftVpRead, handleYeaftListSessions, handleYeaftProjectContextSync, handleYeaftProjectMutation, handleYeaftCreateSession, handleYeaftRenameSession, handleYeaftUpdateSession, handleYeaftUpdateSessionConfig, handleYeaftArchiveSession, handleYeaftDeleteSession, handleYeaftSessionAddMember, handleYeaftSessionRemoveMember, handleYeaftSessionSetDefaultVp, handleYeaftScanWorkdirSessions, handleYeaftRestoreSession, handleYeaftDreamTrigger, handleYeaftFetchToolStats, handleYeaftFetchDebugHistory, handleYeaftMcpList, handleYeaftMcpAdd, handleYeaftMcpRemove, handleYeaftMcpReload, broadcastLanguageChange, broadcastYeaftSessionSnapshotEager, broadcastYeaftVpSnapshotEager, preloadYeaftSkillSlashCommands } from '../yeaft/web-bridge.js';
+import { handleYeaftSessionSend, handleYeaftAskUserAnswer, handleYeaftSubAgentPrompt, handleYeaftTaskCancel, handleYeaftModeSwitch, handleYeaftModelSwitch, resetYeaftSession, refreshLiveSessionConfig, handleYeaftLoadHistory, handleYeaftLoadHistoryOutline, handleYeaftSearchHistory, handleYeaftLoadHistoryWindow, handleYeaftLoadMoreHistory, handleYeaftAbortThread, handleYeaftAbortAll, handleYeaftAbortTurn, handleYeaftVpSubscribe, handleYeaftVpCreate, handleYeaftVpUpdate, handleYeaftVpDelete, handleYeaftVpRead, handleYeaftListSessions, handleYeaftProjectContextSync, handleYeaftProjectMutation, handleYeaftCreateSession, handleYeaftRenameSession, handleYeaftUpdateSession, handleYeaftUpdateSessionConfig, handleYeaftArchiveSession, handleYeaftDeleteSession, handleYeaftSessionAddMember, handleYeaftSessionRemoveMember, handleYeaftSessionSetDefaultVp, handleYeaftScanWorkdirSessions, handleYeaftRestoreSession, handleYeaftDreamTrigger, handleYeaftFetchToolStats, handleYeaftFetchDebugHistory, handleYeaftMcpList, handleYeaftMcpAdd, handleYeaftMcpRemove, handleYeaftMcpReload, handleYeaftPluginCatalog, broadcastLanguageChange, broadcastYeaftSessionSnapshotEager, broadcastYeaftVpSnapshotEager, preloadYeaftSkillSlashCommands } from '../yeaft/web-bridge.js';
 import { startYeaftStatusRefresh, forceRefreshYeaftStatus } from '../yeaft/status-cache.js';
 import { handleWorkCenterRequest } from '../yeaft/work-center/bridge.js';
 
@@ -434,6 +434,24 @@ export async function handleMessage(msg) {
       break;
     }
 
+    case 'get_yeaft_plugins': {
+      const result = getPluginConfig(ctx.CONFIG?.yeaftDir);
+      sendToServer({ type: 'yeaft_plugins', requestId: msg.requestId || null, ...result });
+      break;
+    }
+
+    case 'update_yeaft_plugins': {
+      const hasPlugins = Object.prototype.hasOwnProperty.call(msg, 'plugins');
+      const hasConfig = Object.prototype.hasOwnProperty.call(msg, 'config');
+      const payload = hasPlugins ? msg.plugins : (hasConfig ? msg.config : {});
+      const result = updatePluginConfig(payload, ctx.CONFIG?.yeaftDir);
+      if (!result.error) {
+        try { await refreshLiveSessionConfig(); } catch { /* next runtime load still sees disk config */ }
+      }
+      sendToServer({ type: 'yeaft_plugins_updated', requestId: msg.requestId || null, ...result });
+      break;
+    }
+
     case 'update_yeaft_settings':
     case 'update_unify_settings': {
       const result = updateYeaftSettings(msg.settings || msg.config || {}, ctx.CONFIG?.yeaftDir);
@@ -611,6 +629,10 @@ export async function handleMessage(msg) {
     // All four reply via `vp_crud_result`; VpLoader's rescan emits the
     // authoritative `vp_updated` / `vp_removed` events so the store stays
     // in sync without a bespoke ack path.
+    case 'yeaft_plugin_catalog':
+      handleYeaftPluginCatalog(msg);
+      break;
+
     case 'yeaft_vp_create':
     case 'unify_vp_create':
       handleYeaftVpCreate(msg);

package/llm-config-cli.js

@@ -1,6 +1,7 @@
 import { existsSync, readFileSync, writeFileSync, mkdirSync } from 'fs';
 import { dirname, join } from 'path';
 import { homedir } from 'os';
+import { normalizePluginConfig } from './yeaft/plugins.js';
 import {
   discoverGitHubCopilotModels,
   discoverOpenAICompatibleModels,
@@ -21,17 +22,49 @@ export function getDefaultYeaftConfigPath() {
 export function readLocalLlmConfig(configPath = getDefaultYeaftConfigPath()) {
   if (!existsSync(configPath)) return {};
   const raw = readFileSync(configPath, 'utf8');
-  if (!raw.trim()) return {};
+  if (!raw.trim()) {
+    throw new Error(`Invalid config file: expected JSON object at ${configPath}`);
+  }
   const parsed = JSON.parse(raw);
-  if (!parsed || typeof parsed !== 'object' || Array.isArray(parsed)) {
+  if (!parsed || typeof parsed !== 'object' || Array.isArray(parsed)
+    || Object.getPrototypeOf(parsed) !== Object.prototype) {
     throw new Error(`Invalid config file: expected JSON object at ${configPath}`);
   }
+  if (Object.prototype.hasOwnProperty.call(parsed, 'plugins')) {
+    try {
+      normalizePluginConfig(parsed.plugins);
+    } catch (err) {
+      throw new Error(`Invalid config file: ${err?.message || err}`);
+    }
+  }
   return parsed;
 }
 
 export function writeLocalLlmConfig(config, configPath = getDefaultYeaftConfigPath()) {
+  // The CLI exposes this writer publicly, so do not rely on callers having
+  // already used readLocalLlmConfig(). An existing invalid Plugins policy must
+  // remain on disk and keep runtime fail-closed until the user repairs it.
+  const existing = existsSync(configPath) ? readLocalLlmConfig(configPath) : null;
+  if (!config || typeof config !== 'object' || Array.isArray(config)
+    || Object.getPrototypeOf(config) !== Object.prototype) {
+    throw new Error(`Invalid config file: expected JSON object at ${configPath}`);
+  }
+  const next = { ...config };
+  if (next.plugins === undefined
+    && Object.prototype.hasOwnProperty.call(existing || {}, 'plugins')) {
+    // LLM commands change provider/model fields. They must not remove a
+    // separately-managed Plugin allowlist merely because their payload omits it.
+    next.plugins = existing.plugins;
+  }
+  if (next.plugins !== undefined) {
+    try {
+      normalizePluginConfig(next.plugins);
+    } catch (err) {
+      throw new Error(`Invalid config file: ${err?.message || err}`);
+    }
+  }
   mkdirSync(dirname(configPath), { recursive: true });
-  writeFileSync(configPath, `${JSON.stringify(config, null, 2)}\n`, 'utf8');
+  writeFileSync(configPath, `${JSON.stringify(next, null, 2)}\n`, 'utf8');
 }
 
 export function parseModelsCsv(value) {

package/local-runtime/server/handlers/agent-output.js

@@ -865,6 +865,20 @@ export async function handleAgentOutput(agentId, agent, msg) {
       }
       break;
 
+    case 'yeaft_plugin_catalog_result': {
+      const targetClient = msg._requestClientId ? webClients.get(msg._requestClientId) : null;
+      if (targetClient?.authenticated && (CONFIG.skipAuth || targetClient.userId === agent.ownerId)) {
+        await sendToWebClient(targetClient, {
+          type: 'yeaft_plugin_catalog_result',
+          agentId,
+          requestId: msg.requestId || null,
+          catalog: msg.catalog || { tools: [], skills: [], mcpServers: [] },
+          error: msg.error || null,
+        });
+      }
+      break;
+    }
+
     case 'yeaft_tool_stats':
       // 2026-05-13: relay tool-call counters from the agent to the web
       // client that requested them. Whitelist `snapshot`/`registered`/

package/local-runtime/server/handlers/agent-sync.js

@@ -356,10 +356,14 @@ export async function handleAgentSync(agentId, agent, msg) {
       break;
     }
 
+    // Agent-level plugin selection. The Agent owns config.json; the server
+    // only stamps ownership and relays request-scoped replies to the UI.
+    case 'yeaft_plugins':
+    case 'yeaft_plugins_updated':
     // Local telemetry settings relay. Only bounded config is forwarded;
     // trace payloads stay on the Agent.
     case 'telemetry_settings':
-    case 'telemetry_settings_updated':
+    case 'telemetry_settings_updated': {
       for (const [, client] of webClients) {
         if (client.authenticated && (CONFIG.skipAuth ||
           (agent.ownerId && client.userId === agent.ownerId) ||
@@ -369,6 +373,7 @@ export async function handleAgentSync(agentId, agent, msg) {
         }
       }
       break;
+    }
 
     // Search settings + Tavily usage relays. We pass the whole msg
     // through (minus agentId, which we set ourselves) — the payload

package/local-runtime/server/handlers/client-conversation.js

@@ -1651,6 +1651,10 @@ export async function handleClientConversation(clientId, client, msg, checkAgent
         // router is the authoritative consumer of the payload shape.
         const { agentId: _discard, ...rest } = msg;
         rest.type = relayType;
+        // Direct catalog replies are request-scoped. Carry the browser client
+        // identity through the Agent so another owner tab cannot accidentally
+        // consume a response for this picker request.
+        if (relayType === 'yeaft_plugin_catalog') rest._requestClientId = clientId;
         if (rest.type === 'yeaft_session_send' || rest.type === 'yeaft_session_chat') {
           trackUserTurn(client.userId, Buffer.byteLength(JSON.stringify(msg)));
           const sessionId = typeof rest.sessionId === 'string' ? rest.sessionId.trim() : '';

package/local-runtime/server/handlers/client-misc.js

@@ -183,6 +183,33 @@ export async function handleClientMisc(clientId, client, msg, checkAgentAccess)
       break;
     }
 
+    case 'get_yeaft_plugins': {
+      const targetAgentId = msg.agentId || client.currentAgent;
+      if (!targetAgentId) break;
+      if (!await checkAgentAccess(targetAgentId)) break;
+      await forwardToAgent(targetAgentId, {
+        type: 'get_yeaft_plugins',
+        requestId: msg.requestId || null,
+      });
+      break;
+    }
+
+    case 'update_yeaft_plugins': {
+      const targetAgentId = msg.agentId || client.currentAgent;
+      if (!targetAgentId) break;
+      if (!await checkAgentAccess(targetAgentId)) break;
+      const hasPlugins = Object.prototype.hasOwnProperty.call(msg, 'plugins');
+      const hasConfig = Object.prototype.hasOwnProperty.call(msg, 'config');
+      await forwardToAgent(targetAgentId, {
+        type: 'update_yeaft_plugins',
+        requestId: msg.requestId || null,
+        // Preserve explicit falsy values so Agent-side schema validation can
+        // reject them. Only an absent payload is the legacy empty selection.
+        plugins: hasPlugins ? msg.plugins : (hasConfig ? msg.config : {}),
+      });
+      break;
+    }
+
     case 'update_yeaft_settings': {
       const targetAgentId = msg.agentId || client.currentAgent;
       if (!targetAgentId) break;

package/local-runtime/version.json

@@ -1 +1 @@
-{"version":"1.0.409"}
+{"version":"1.0.410"}