nexus-agentd 0.2.1 → 0.2.3

package/README.md

@@ -97,8 +97,12 @@ npm install -g \
   pi-acp
 ```
 
-`command`、`args`、`inheritEnv` 和 `env` 是仅可在本机配置文件修改的高级字段，WebUI 不接受这些
-字段。Workspace 在启动进程前经过 `realpath` 边界校验。
+`command`、`args`、`inheritEnv` 和 `env` 是仅可在本机配置文件修改的高级字段，WebUI 不接受这些
+字段。Workspace 在启动进程前经过 `realpath` 边界校验。
+
+ACP 权限策略支持 `ask`（询问）、`allow`（始终允许）和 `deny`（拒绝）。`allow` 会优先选择
+Agent 提供的 `allow_once`，不创建待确认请求；它适合管理员明确授权、工作区边界可信的自动化 Agent。
+默认仍为 `ask`。
 
 ### A2A
 

package/dist/acp/runtime.d.ts

@@ -14,6 +14,8 @@ export declare class AcpProcessRuntime {
     private readonly promptTimeoutMs;
     private promptCapabilities;
     private inputDirectory?;
+    private workspace?;
+    private promptOutput;
     constructor(driver: AgentDriver, sink: AcpSessionSink, maxStderrChunkChars?: number, promptTimeoutMs?: number);
     start(workspace: string): Promise<void>;
     prompt(message: string, attachments?: AgentdInputAttachment[]): Promise<void>;
@@ -27,6 +29,7 @@ export declare class AcpProcessRuntime {
     private sessionUpdate;
     private captureToolArtifacts;
     private captureArtifact;
+    private captureMediaMarkers;
     private captureStderr;
     private onProcessFailure;
     private requireSessionId;

package/dist/acp/runtime.js

@@ -1,11 +1,12 @@
 import { randomUUID } from 'node:crypto';
-import { mkdir, rm, writeFile } from 'node:fs/promises';
+import { mkdir, readFile, realpath, rm, stat, writeFile } from 'node:fs/promises';
 import path from 'node:path';
 import { Readable, Writable } from 'node:stream';
-import { pathToFileURL } from 'node:url';
+import { fileURLToPath, pathToFileURL } from 'node:url';
 import * as acp from '@agentclientprotocol/sdk';
 import { terminateProcessTree } from '../process-tree.js';
 import { TURN_COMPLETION_CONTRACT } from '../completion-contract.js';
+const MAX_MEDIA_MARKER_FILE_BYTES = 32 * 1024 * 1024;
 export class AcpProcessRuntime {
     driver;
     sink;
@@ -19,6 +20,8 @@ export class AcpProcessRuntime {
     promptTimeoutMs;
     promptCapabilities = {};
     inputDirectory;
+    workspace;
+    promptOutput = '';
     constructor(driver, sink, maxStderrChunkChars = 16 * 1024, promptTimeoutMs = 30 * 60 * 1000) {
         this.driver = driver;
         this.sink = sink;
@@ -31,6 +34,7 @@ export class AcpProcessRuntime {
     async start(workspace) {
         if (this.process)
             throw new Error('ACP runtime is already started');
+        this.workspace = workspace;
         this.inputDirectory = path.join(workspace, '.nexus-inputs', this.sink.id);
         const child = this.driver.spawn(workspace);
         this.process = child;
@@ -62,7 +66,7 @@ export class AcpProcessRuntime {
             },
             clientInfo: {
                 name: 'nexus-agentd',
-                version: '0.2.1'
+                version: '0.2.2'
             }
         });
         if (initialize.protocolVersion !== acp.PROTOCOL_VERSION) {
@@ -86,6 +90,7 @@ export class AcpProcessRuntime {
             throw new Error('ACP session is already processing a prompt');
         const sessionId = this.requireSessionId();
         this.prompting = true;
+        this.promptOutput = '';
         this.sink.clearPending();
         this.sink.setState('running');
         try {
@@ -98,6 +103,7 @@ export class AcpProcessRuntime {
             }
             switch (response.stopReason) {
                 case 'end_turn':
+                    await this.captureMediaMarkers();
                     this.sink.completeTurn({
                         source: 'acp_prompt_response',
                         stopReason: response.stopReason
@@ -249,6 +255,18 @@ export class AcpProcessRuntime {
                 }
                 : { outcome: { outcome: 'cancelled' } };
         }
+        if (this.driver.permissionPolicy === 'allow') {
+            const allow = params.options.find((option) => option.kind.toLowerCase() === 'allow_once') ||
+                params.options.find((option) => option.kind.toLowerCase().startsWith('allow'));
+            return allow
+                ? {
+                    outcome: {
+                        outcome: 'selected',
+                        optionId: allow.optionId
+                    }
+                }
+                : { outcome: { outcome: 'cancelled' } };
+        }
         if (this.pending) {
             return { outcome: { outcome: 'cancelled' } };
         }
@@ -344,6 +362,7 @@ export class AcpProcessRuntime {
         switch (update.sessionUpdate) {
             case 'agent_message_chunk':
                 if (update.content.type === 'text') {
+                    this.promptOutput += update.content.text;
                     this.sink.appendOutput(update.content.text);
                     this.sink.emit('assistant_chunk', {
                         messageId: update.messageId,
@@ -398,6 +417,29 @@ export class AcpProcessRuntime {
         if (artifact)
             this.sink.addArtifact(artifact);
     }
+    async captureMediaMarkers() {
+        const markers = mediaMarkers(this.promptOutput);
+        if (!markers.length)
+            return;
+        this.sink.replaceOutput(withoutMediaMarkers(this.promptOutput));
+        const seen = new Set();
+        for (const marker of markers) {
+            if (seen.has(marker))
+                continue;
+            seen.add(marker);
+            try {
+                const artifact = await artifactFromMediaMarker(marker, `media:${randomUUID()}`, this.workspace);
+                this.sink.addArtifact(artifact);
+                this.sink.emit('artifact', artifact);
+            }
+            catch (error) {
+                this.sink.emit('terminal_output', {
+                    stream: 'system',
+                    text: `Could not attach MEDIA artifact ${safeMarkerName(marker)}: ${error instanceof Error ? error.message : String(error)}`
+                });
+            }
+        }
+    }
     captureStderr(child) {
         let buffer = '';
         let flushed = false;
@@ -607,6 +649,93 @@ function filenameFromValue(value) {
 function usableUrl(value) {
     return value && /^(?:https?|file):/i.test(value) ? value : undefined;
 }
+function mediaMarkers(output) {
+    return output
+        .split(/\r?\n/)
+        .map((line) => line.match(/^\s*MEDIA:\s*(.+?)\s*$/i)?.[1]?.trim())
+        .filter((value) => Boolean(value));
+}
+function withoutMediaMarkers(output) {
+    return output
+        .split(/\r?\n/)
+        .filter((line) => !/^\s*MEDIA:\s*(.+?)\s*$/i.test(line))
+        .join('\n')
+        .trim();
+}
+async function artifactFromMediaMarker(marker, id, workspace) {
+    if (/^https?:\/\//i.test(marker)) {
+        const filename = artifactFilename(marker, undefined, 'resource', undefined);
+        return {
+            id,
+            name: filename,
+            filename,
+            url: marker,
+            metadata: { source: 'acp_media_marker' }
+        };
+    }
+    const localPath = marker.startsWith('file:')
+        ? fileURLToPath(marker)
+        : marker;
+    const resolved = await realpath(path.isAbsolute(localPath)
+        ? localPath
+        : path.resolve(workspace || process.cwd(), localPath));
+    const details = await stat(resolved);
+    if (!details.isFile()) {
+        throw new Error('declared path is not a regular file');
+    }
+    if (details.size > MAX_MEDIA_MARKER_FILE_BYTES) {
+        throw new Error(`declared file exceeds the ${MAX_MEDIA_MARKER_FILE_BYTES} byte limit`);
+    }
+    const filename = path.basename(resolved);
+    return {
+        id,
+        name: filename,
+        filename,
+        mediaType: mediaTypeForPath(filename),
+        bytesBase64: (await readFile(resolved)).toString('base64'),
+        metadata: {
+            source: 'acp_media_marker',
+            size: details.size
+        }
+    };
+}
+function safeMarkerName(marker) {
+    try {
+        return path.basename(marker.startsWith('file:') ? fileURLToPath(marker) : marker);
+    }
+    catch {
+        return 'declared artifact';
+    }
+}
+function mediaTypeForPath(value) {
+    switch (path.extname(value).toLowerCase()) {
+        case '.pptx':
+            return 'application/vnd.openxmlformats-officedocument.presentationml.presentation';
+        case '.docx':
+            return 'application/vnd.openxmlformats-officedocument.wordprocessingml.document';
+        case '.xlsx':
+            return 'application/vnd.openxmlformats-officedocument.spreadsheetml.sheet';
+        case '.pdf':
+            return 'application/pdf';
+        case '.png':
+            return 'image/png';
+        case '.jpg':
+        case '.jpeg':
+            return 'image/jpeg';
+        case '.gif':
+            return 'image/gif';
+        case '.webp':
+            return 'image/webp';
+        case '.mp3':
+            return 'audio/mpeg';
+        case '.wav':
+            return 'audio/wav';
+        case '.mp4':
+            return 'video/mp4';
+        default:
+            return 'application/octet-stream';
+    }
+}
 function artifactIndex(id) {
     return id.split(':').pop() || 'output';
 }

package/dist/completion-contract.js

@@ -4,6 +4,6 @@ export const TURN_COMPLETION_CONTRACT = [
     'If you need user input or permission, use the protocol input/permission request and wait for the response.',
     'Before ending the turn, verify the requested work and provide a non-empty final response.',
     'The final response must summarize the outcome, verification performed, and workspace-relative paths for generated files.',
-    'Attach generated resources or artifacts through the protocol when supported.',
+    'Attach generated resources or artifacts through the protocol when supported. If the runtime only reports a local deliverable path, put each requested file on its own final line as MEDIA:<path>; Agent Nexus will snapshot that explicitly declared file as an artifact before the turn completes.',
     '</agent_nexus_completion_contract>'
 ].join('\n');

package/dist/config.js

@@ -134,7 +134,9 @@ function parseAgent(id, value) {
         throw new Error(`Unsupported nexus-agentd driver: ${driver || id}`);
     }
     const permissionPolicy = optionalString(input.permissionPolicy, `agents.${id}.permissionPolicy`) || 'ask';
-    if (permissionPolicy !== 'ask' && permissionPolicy !== 'deny') {
+    if (permissionPolicy !== 'ask' &&
+        permissionPolicy !== 'allow' &&
+        permissionPolicy !== 'deny') {
         throw new Error(`Invalid permissionPolicy for ${id}`);
     }
     const result = {

package/dist/control-plane.js

@@ -501,8 +501,9 @@ function validateUpdate(update) {
     }
     if (update.permissionPolicy !== undefined &&
         update.permissionPolicy !== 'ask' &&
+        update.permissionPolicy !== 'allow' &&
         update.permissionPolicy !== 'deny') {
-        throw new ControlPlaneError(400, 'permissionPolicy must be ask or deny');
+        throw new ControlPlaneError(400, 'permissionPolicy must be ask, allow, or deny');
     }
     if (update.preferredTransport !== undefined &&
         !['auto', 'jsonrpc', 'http-json'].includes(update.preferredTransport)) {

package/dist/session-contract.d.ts

@@ -7,6 +7,7 @@ export interface AgentSessionSink {
     setState(state: AgentdSessionState, error?: string): void;
     completeTurn(proof: AgentdTurnCompletionProof): boolean;
     appendOutput(text: string): void;
+    replaceOutput(text: string): void;
     addArtifact(artifact: AgentdArtifact): void;
     setPending(request: AgentdPendingRequest): void;
     clearPending(): void;

package/dist/session.d.ts

@@ -34,6 +34,7 @@ export declare class ManagedSession implements AgentSessionSink, AcpSessionSink
     setState(state: AgentdSessionState, error?: string): void;
     completeTurn(proof: AgentdTurnCompletionProof): boolean;
     appendOutput(text: string): void;
+    replaceOutput(text: string): void;
     addArtifact(artifact: AgentdArtifact): void;
     publishFile(filePath: string): Promise<AgentdArtifact>;
     setPending(request: AgentdPendingRequest): void;

package/dist/session.js

@@ -130,6 +130,11 @@ export class ManagedSession {
         this.updatedAt = Date.now();
         this.syncRun({ output: this.output });
     }
+    replaceOutput(text) {
+        this.output = String(text || '').slice(0, this.maxOutputChars);
+        this.updatedAt = Date.now();
+        this.syncRun({ output: this.output || undefined });
+    }
     addArtifact(artifact) {
         const next = structuredClone(artifact);
         const existingIndex = next.id

package/dist/types.d.ts

@@ -1,6 +1,6 @@
 export type AgentdSessionState = 'created' | 'running' | 'input_required' | 'permission_required' | 'completed' | 'failed' | 'canceled';
 export type AgentdProtocol = 'acp' | 'a2a';
-export type PermissionPolicy = 'ask' | 'deny';
+export type PermissionPolicy = 'ask' | 'allow' | 'deny';
 export type AgentdTurnCompletionSource = 'acp_prompt_response' | 'a2a_task_status' | 'a2a_message_stream';
 export interface AgentdTurnCompletionProof {
     source: AgentdTurnCompletionSource;

package/dist/webui/app.js

@@ -441,9 +441,10 @@ export const app = String.raw `
       '</div></td><td><span class="badge">' + escapeHtml(agent.protocol.toUpperCase()) + '</span></td><td>' + escapeHtml(agent.driver || '—') + '</td><td>' + statusMarkup(statusAgent) + '</td><td>' + escapeHtml(agent.workspace || '—') + '</td><td>' + escapeHtml(permissionLabel(agent.permissionPolicy)) + '</td><td><div class="row-actions"><button class="button small" data-agent-edit="' + escapeHtml(agent.id) + '">编辑</button><button class="button small danger" data-agent-delete="' + escapeHtml(agent.id) + '">删除</button></div></td></tr>'
   }
 
-  function permissionLabel(value) {
-    if (value === 'ask') return '询问'
-    if (value === 'deny') return '拒绝'
+  function permissionLabel(value) {
+    if (value === 'ask') return '询问'
+    if (value === 'allow') return '始终允许'
+    if (value === 'deny') return '拒绝'
     return value || '—'
   }
 
@@ -545,7 +546,7 @@ export const app = String.raw `
       '<div class="field-row"><label>协议<select name="protocol"><option value="acp"' + selected(current.protocol, 'acp') + '>ACP</option><option value="a2a"' + selected(current.protocol, 'a2a') + '>A2A</option></select></label><label class="checkbox"><input name="enabled" type="checkbox"' + checked(current.enabled) + '>启用</label></div>' +
       '<label>名称<input name="name" value="' + escapeHtml(current.name || '') + '" required></label>' +
       '<label>描述<textarea name="description">' + escapeHtml(current.description || '') + '</textarea></label>' +
-      '<div data-protocol-section="acp"><label>驱动<select name="driver">' + drivers + '</select></label><label>工作区<input name="workspace" list="workspace-roots" value="' + escapeHtml(current.workspace || state.config.workspaceRoots[0] || '') + '" required><datalist id="workspace-roots">' + roots + '</datalist></label><div class="field-row"><label>权限策略<select name="permissionPolicy"><option value="ask"' + selected(current.permissionPolicy, 'ask') + '>询问</option><option value="deny"' + selected(current.permissionPolicy, 'deny') + '>拒绝</option></select></label><label>权限确认超时（秒）<input name="permissionTimeoutMs" type="number" min="1" max="86400" step="1" value="' + escapeHtml(permissionTimeoutSeconds) + '"><small class="field-help">单位：秒；默认 900 秒，最长 24 小时。</small></label></div></div>' +
+      '<div data-protocol-section="acp"><label>驱动<select name="driver">' + drivers + '</select></label><label>工作区<input name="workspace" list="workspace-roots" value="' + escapeHtml(current.workspace || state.config.workspaceRoots[0] || '') + '" required><datalist id="workspace-roots">' + roots + '</datalist></label><div class="field-row"><label>权限策略<select name="permissionPolicy"><option value="ask"' + selected(current.permissionPolicy, 'ask') + '>询问</option><option value="allow"' + selected(current.permissionPolicy, 'allow') + '>始终允许</option><option value="deny"' + selected(current.permissionPolicy, 'deny') + '>拒绝</option></select></label><label>权限确认超时（秒）<input name="permissionTimeoutMs" type="number" min="1" max="86400" step="1" value="' + escapeHtml(permissionTimeoutSeconds) + '"><small class="field-help">单位：秒；默认 900 秒，最长 24 小时；“始终允许”不会等待确认。</small></label></div></div>' +
       '<div data-protocol-section="a2a"><label>Agent Card URL<input name="agentCardUrl" type="url" value="' + escapeHtml(current.agentCardUrl || '') + '" placeholder="http://agent.local:8080/.well-known/agent-card.json" required><small class="field-help">填写完整的 Agent Card JSON 地址；调用地址和能力将从 Card 自动发现。</small></label><div class="field-row"><label>首选传输<select name="preferredTransport"><option value="auto"' + selected(current.preferredTransport || 'auto', 'auto') + '>自动（按 Card）</option><option value="jsonrpc"' + selected(current.preferredTransport, 'jsonrpc') + '>JSON-RPC</option><option value="http-json"' + selected(current.preferredTransport, 'http-json') + '>HTTP+JSON</option></select></label><label>认证方式<select name="authType"><option value="none"' + selected(current.auth && current.auth.type || 'none', 'none') + '>无认证</option><option value="bearer"' + selected(current.auth && current.auth.type, 'bearer') + '>Bearer Token</option><option value="header"' + selected(current.auth && current.auth.type, 'header') + '>自定义请求头</option></select></label></div><label data-auth-header>请求头名称<input name="authHeaderName" value="' + escapeHtml(current.auth && current.auth.headerName || '') + '" placeholder="X-API-Key"></label><label data-auth-value><span data-auth-value-label>认证凭据</span><input name="authValue" type="password" autocomplete="off" placeholder="' + (editing && current.auth && current.auth.configured ? '留空以保留当前凭据' : '') + '"></label><label>请求超时（秒）<input name="timeoutMs" type="number" min="1" max="1800" step="1" value="' + escapeHtml(requestTimeoutSeconds) + '"><small class="field-help">单位：秒；默认 60 秒；用于限制这个 A2A Agent 的单次请求，最大 1800 秒（30 分钟）。</small></label></div>'
     openDrawer(editing ? '编辑智能体' : '添加智能体', body, editing ? '保存修改' : '添加智能体', async (form) => {
       const data = new FormData(form)

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "nexus-agentd",
-  "version": "0.2.1",
+  "version": "0.2.3",
   "description": "Local Nexus Gateway daemon that exposes allowlisted Coding Agents through HTTP/SSE and ACP",
   "type": "module",
   "main": "dist/index.js",