vis-agent 0.2.52.dev7755__tar.gz → 0.2.53__tar.gz

{vis_agent-0.2.52.dev7755 → vis_agent-0.2.53}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: vis-agent
-Version: 0.2.52.dev7755
+Version: 0.2.53
 Summary: The Vis Python SDK — author extensions and control local or remote engines.
 Project-URL: Homepage, https://vis.blockether.com
 Project-URL: Documentation, https://vis.blockether.com

{vis_agent-0.2.52.dev7755 → vis_agent-0.2.53}/contracts/schema/agents.json

@@ -38,16 +38,13 @@
           "maxItems": 64,
           "uniqueItems": true
         },
+        "files": {
+          "$ref": "#/$defs/files"
+        },
         "key": {
           "type": "string",
           "minLength": 1,
           "maxLength": 256
-        },
-        "context": {
-          "enum": [
-            "full",
-            "task"
-          ]
         }
       },
       "required": [
@@ -119,6 +116,43 @@
       ],
       "additionalProperties": false
     },
+    "grant": {
+      "$comment": "Add file rules to the grant of a subagent. A child without write rules writes only the granted rules after a write grant.",
+      "type": "object",
+      "properties": {
+        "session_id": {
+          "type": "string",
+          "minLength": 1
+        },
+        "files": {
+          "$ref": "#/$defs/files"
+        }
+      },
+      "required": [
+        "session_id",
+        "files"
+      ],
+      "additionalProperties": false
+    },
+    "ask_files": {
+      "type": "object",
+      "properties": {
+        "files": {
+          "$ref": "#/$defs/files"
+        },
+        "reason": {
+          "type": "string",
+          "minLength": 1,
+          "maxLength": 2000,
+          "pattern": "\\S"
+        }
+      },
+      "required": [
+        "files",
+        "reason"
+      ],
+      "additionalProperties": false
+    },
     "resume": {
       "type": "object",
       "properties": {
@@ -176,6 +210,35 @@
       ],
       "additionalProperties": false
     },
+    "files": {
+      "$comment": "A subagent file grant. Each rule is a path or a glob, absolute, ~ or relative to the parent's workspace root. Rules also cover files that do not exist yet.",
+      "type": "object",
+      "properties": {
+        "write": {
+          "$ref": "#/$defs/file_rules"
+        },
+        "read_only": {
+          "$ref": "#/$defs/file_rules"
+        },
+        "deny": {
+          "$ref": "#/$defs/file_rules"
+        }
+      },
+      "minProperties": 1,
+      "additionalProperties": false
+    },
+    "file_rules": {
+      "type": "array",
+      "items": {
+        "type": "string",
+        "minLength": 1,
+        "maxLength": 4096,
+        "pattern": "\\S"
+      },
+      "minItems": 1,
+      "maxItems": 64,
+      "uniqueItems": true
+    },
     "agent": {
       "type": "object",
       "properties": {
@@ -209,11 +272,6 @@
             "budget_limited"
           ]
         },
-        "depth": {
-          "type": "integer",
-          "minimum": 1,
-          "maximum": 2
-        },
         "iteration_budget": {
           "$ref": "#/$defs/spawn/properties/iteration_budget"
         },
@@ -248,6 +306,9 @@
             "object",
             "null"
           ]
+        },
+        "files": {
+          "$ref": "#/$defs/files"
         }
       },
       "required": [
@@ -257,7 +318,6 @@
         "team_id",
         "task",
         "status",
-        "depth",
         "iteration_budget",
         "iterations_used"
       ],

{vis_agent-0.2.52.dev7755 → vis_agent-0.2.53}/contracts/schema/gateway.json

@@ -2370,6 +2370,9 @@
         {
           "const": "context.updated"
         },
+        {
+          "const": "extensions.reloaded"
+        },
         {
           "const": "iteration.completed",
           "x-vis-turn-stream": true
@@ -2979,13 +2982,18 @@
       "required": [
         "loaded",
         "failed",
-        "scopes"
+        "scopes",
+        "reload_id"
       ],
       "properties": {
         "loaded": {
           "type": "integer",
           "minimum": 0
         },
+        "reload_id": {
+          "type": "string",
+          "minLength": 1
+        },
         "failed": {
           "type": "integer",
           "minimum": 0

{vis_agent-0.2.52.dev7755 → vis_agent-0.2.53}/pyproject.toml

@@ -8,7 +8,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "vis-agent"
-version = "0.2.52.dev7755"
+version = "0.2.53"
 description = "The Vis Python SDK — author extensions and control local or remote engines."
 readme = "README.md"
 requires-python = ">=3.12"

{vis_agent-0.2.52.dev7755 → vis_agent-0.2.53}/src/blockether/vis/engine/_agents.py

@@ -16,7 +16,6 @@ class Subagent:
     team_id: str
     task: str
     status: str
-    depth: int
     iteration_budget: int
     iterations_used: int
     provider: str | None = None
@@ -24,6 +23,7 @@ class Subagent:
     routing_locked: bool = False
     pending_input: bool = False
     usage: dict[str, Any] | None = None
+    files: dict[str, list[str]] | None = None
 
     @classmethod
     def from_wire(cls, value: dict[str, Any]) -> Subagent:

{vis_agent-0.2.52.dev7755 → vis_agent-0.2.53}/src/blockether/vis/engine/_council.py

@@ -235,6 +235,7 @@ class Council:
         model: str | None = None,
         iteration_budget: int | None = None,
         allowed_models: list[dict[str, str]] | None = None,
+        files: dict[str, list[str]] | None = None,
         key: str | None = None,
     ) -> Subagent:
         """Create a subagent and publish its delegated task through Council.
@@ -244,7 +245,8 @@ class Council:
         share the checkout, inherit authorization and use their own bounded model
         iterations. A key makes retries idempotent within the parent turn, and reusing
         it with different input is rejected. This is not an ordinary independent fork,
-        and it does not grant broader permissions.
+        and it does not grant broader permissions. ``files`` narrows file access with
+        ``write``, ``read_only`` and ``deny`` rules: paths or globs, also for future files.
         """
         body = {"task": task}
         body.update(
@@ -255,6 +257,7 @@ class Council:
                     "iteration_budget": iteration_budget,
                     "model": model,
                     "allowed_models": allowed_models,
+                    "files": files,
                     "key": key,
                 }.items()
                 if value is not None

{vis_agent-0.2.52.dev7755 → vis_agent-0.2.53}/src/blockether/vis/engine/_extensions.py

@@ -88,6 +88,7 @@ class ClientExtensions:
                     "network_filters",
                     "slash_commands",
                     "settings",
+                    "grants",
                 )
                 if getattr(extension, name)
             ]

{vis_agent-0.2.52.dev7755 → vis_agent-0.2.53}/src/blockether/vis/extension.py

@@ -1127,6 +1127,8 @@ class Extension:
         network_filters: `NetworkFilter` declarations.
         settings: Host-owned `Setting` declarations with explicit allowed scopes.
         env: Environment variable names resolved at host registration.
+        grants: `Grant` declarations: toolchain paths for this extension's
+            `jailed_shell` children.
 
     Collection inputs are copied into tuples. Constructing an Extension is pure: it does
     not run callbacks or register anything. In an application, pass it to
@@ -1155,6 +1157,7 @@ class Extension:
     network_filters: Sequence[NetworkFilter] = ()
     settings: Sequence[Setting] = ()
     env: Sequence[str] = ()
+    grants: Sequence[Grant] = ()
 
     def __post_init__(self):
         if not isinstance(self.name, str) or not self.name.strip():
@@ -1186,6 +1189,7 @@ class Extension:
             ("providers", Provider),
             ("network_filters", NetworkFilter),
             ("settings", Setting),
+            ("grants", Grant),
         ):
             value = getattr(self, name)
             if not isinstance(value, (tuple, list)) or not all(
@@ -1219,6 +1223,7 @@ class Extension:
             "providers",
             "network_filters",
             "settings",
+            "grants",
         }
         return {
             field.name: (
@@ -2712,6 +2717,48 @@ class NetworkFilter:
         return {"marker": "network_filter", "fn": self.fn}
 
 
+@dataclass(frozen=True, slots=True)
+class Grant:
+    """Filesystem access that this extension's own jailed child processes need.
+
+    A toolchain often lives outside the workspace: a JDK, a package cache or a
+    launcher. Declare each path once. The host checks every grant at registration.
+    It adds the grant only to the `jailed_shell` children of this extension. The
+    model's shell never receives it, and the jail deny rules still win.
+
+    Args:
+        path: Absolute path, or a path that starts with `~`.
+        mode: `"read"` to read and run files, or `"read_write"` for a cache that
+            the tool also writes.
+        reason: Short text that tells people why the extension needs the path.
+
+    Raises:
+        ValueError: The path or reason is blank, or the mode is unknown.
+    """
+
+    path: str | PathLike[str]
+    mode: Literal["read", "read_write"] = "read"
+    reason: str = field(kw_only=True)
+
+    def __post_init__(self):
+        path = os.fspath(self.path) if isinstance(self.path, PathLike) else self.path
+        if not isinstance(path, str) or not path.strip():
+            raise ValueError("vis.Grant requires path=<non-empty string>")
+        object.__setattr__(self, "path", path)
+        if self.mode not in ("read", "read_write"):
+            raise ValueError('vis.Grant mode must be "read" or "read_write"')
+        if not isinstance(self.reason, str) or not self.reason.strip():
+            raise ValueError("vis.Grant requires reason=<non-empty string>")
+
+    def _spec(self):
+        return {
+            "marker": "grant",
+            "path": self.path,
+            "mode": self.mode,
+            "reason": self.reason,
+        }
+
+
 # Provider vocabularies are pinned to the canonical provider/config JSON in tests.
 ProviderJSON: TypeAlias = (
     str

{vis_agent-0.2.52.dev7755 → vis_agent-0.2.53}/tests/test_agents.py

@@ -13,7 +13,6 @@ CHILD = {
     "team_id": "task",
     "task": "Check the contract",
     "status": "running",
-    "depth": 1,
     "iteration_budget": 4,
     "iterations_used": 1,
     "provider": "p",
@@ -63,6 +62,7 @@ def test_managed_team_transport():
             model="small",
             iteration_budget=4,
             allowed_models=[{"provider": "p", "model": "small"}],
+            files={"write": ["src/owner/**"]},
             key="contract",
         )
         assert isinstance(child, Subagent)
@@ -86,6 +86,7 @@ def test_managed_team_transport():
                     "provider": "p",
                     "model": "small",
                     "allowed_models": [{"provider": "p", "model": "small"}],
+                    "files": {"write": ["src/owner/**"]},
                     "key": "contract",
                 },
             ),
@@ -167,6 +168,9 @@ def test_group_members_are_not_the_managed_team():
         {"task": "x", "iteration_budget": 601},
         {"task": "x", "model": "small"},
         {"task": "x", "allowed_models": []},
+        {"task": "x", "files": {}},
+        {"task": "x", "files": {"exec": ["a"]}},
+        {"task": "x", "files": {"write": []}},
     ],
 )
 def test_spawn_rejects_invalid_input_before_http(opts):
@@ -293,7 +297,6 @@ def test_all_lifecycle_states_and_optional_response_defaults(status):
             "leader_id",
             "team_id",
             "task",
-            "depth",
             "iteration_budget",
             "iterations_used",
         )

{vis_agent-0.2.52.dev7755 → vis_agent-0.2.53}/tests/test_client.py

@@ -634,7 +634,6 @@ def test_dedicated_methods_cover_every_public_nonstreaming_operation():
         "team_id": "task",
         "task": "Check the contract",
         "status": "running",
-        "depth": 1,
         "iteration_budget": 4,
         "iterations_used": 1,
         "provider": "fixture",

{vis_agent-0.2.52.dev7755 → vis_agent-0.2.53}/tests/test_declarations.py

@@ -87,6 +87,7 @@ def test_dictionary_builders_are_retired(name):
         "slash_commands",
         "op_hooks",
         "network_filters",
+        "grants",
     ],
 )
 def test_declarations_refuse_untyped_children(field, monkeypatch):
@@ -324,3 +325,29 @@ def test_registration_snapshots_collections_and_provider_config(monkeypatch):
     }
     wire["providers"][0]["preset"]["extra_body"]["models"].clear()
     assert provider.preset.extra_body["models"][0]["name"] == "example"
+
+
+# Regression for #394: an extension declares its toolchain paths as typed grants.
+def test_grant_declarations_reach_the_wire(tmp_path):
+    grant = vis.Grant(tmp_path, "read_write", reason="Cache")
+    assert grant.path == str(tmp_path)
+    extension = vis.Extension(
+        name="tools",
+        description="Tools",
+        grants=[grant, vis.Grant("/opt/jdk", reason="JDK")],
+    )
+    assert extension._spec()["grants"] == [
+        {
+            "marker": "grant",
+            "path": str(tmp_path),
+            "mode": "read_write",
+            "reason": "Cache",
+        },
+        {"marker": "grant", "path": "/opt/jdk", "mode": "read", "reason": "JDK"},
+    ]
+    with pytest.raises(ValueError, match="mode"):
+        vis.Grant("/opt/jdk", "write", reason="JDK")
+    with pytest.raises(ValueError, match="reason"):
+        vis.Grant("/opt/jdk", reason=" ")
+    with pytest.raises(TypeError):
+        vis.Grant("/opt/jdk")

vis_agent-0.2.52.dev7755/release-tag

@@ -1 +0,0 @@
-beta-030ba6505ce00caad546fbff1bfdfe01b71c641d