vis-agent 0.2.53.dev7782__tar.gz → 0.2.53.dev7784__tar.gz

{vis_agent-0.2.53.dev7782 → vis_agent-0.2.53.dev7784}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: vis-agent
-Version: 0.2.53.dev7782
+Version: 0.2.53.dev7784
 Summary: The Vis Python SDK — author extensions and control local or remote engines.
 Project-URL: Homepage, https://vis.blockether.com
 Project-URL: Documentation, https://vis.blockether.com

{vis_agent-0.2.53.dev7782 → vis_agent-0.2.53.dev7784}/pyproject.toml

@@ -8,7 +8,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "vis-agent"
-version = "0.2.53.dev7782"
+version = "0.2.53.dev7784"
 description = "The Vis Python SDK — author extensions and control local or remote engines."
 readme = "README.md"
 requires-python = ">=3.12"

vis_agent-0.2.53.dev7784/release-tag

@@ -0,0 +1 @@
+beta-73c3a9c33c127594962deaa28836f5e9b9b487ac

{vis_agent-0.2.53.dev7782 → vis_agent-0.2.53.dev7784}/src/blockether/vis/engine/_extensions.py

@@ -88,6 +88,7 @@ class ClientExtensions:
                     "network_filters",
                     "slash_commands",
                     "settings",
+                    "grants",
                 )
                 if getattr(extension, name)
             ]

{vis_agent-0.2.53.dev7782 → vis_agent-0.2.53.dev7784}/src/blockether/vis/extension.py

@@ -1127,6 +1127,8 @@ class Extension:
         network_filters: `NetworkFilter` declarations.
         settings: Host-owned `Setting` declarations with explicit allowed scopes.
         env: Environment variable names resolved at host registration.
+        grants: `Grant` declarations: toolchain paths for this extension's
+            `jailed_shell` children.
 
     Collection inputs are copied into tuples. Constructing an Extension is pure: it does
     not run callbacks or register anything. In an application, pass it to
@@ -1155,6 +1157,7 @@ class Extension:
     network_filters: Sequence[NetworkFilter] = ()
     settings: Sequence[Setting] = ()
     env: Sequence[str] = ()
+    grants: Sequence[Grant] = ()
 
     def __post_init__(self):
         if not isinstance(self.name, str) or not self.name.strip():
@@ -1186,6 +1189,7 @@ class Extension:
             ("providers", Provider),
             ("network_filters", NetworkFilter),
             ("settings", Setting),
+            ("grants", Grant),
         ):
             value = getattr(self, name)
             if not isinstance(value, (tuple, list)) or not all(
@@ -1219,6 +1223,7 @@ class Extension:
             "providers",
             "network_filters",
             "settings",
+            "grants",
         }
         return {
             field.name: (
@@ -2712,6 +2717,48 @@ class NetworkFilter:
         return {"marker": "network_filter", "fn": self.fn}
 
 
+@dataclass(frozen=True, slots=True)
+class Grant:
+    """Filesystem access that this extension's own jailed child processes need.
+
+    A toolchain often lives outside the workspace: a JDK, a package cache or a
+    launcher. Declare each path once. The host checks every grant at registration.
+    It adds the grant only to the `jailed_shell` children of this extension. The
+    model's shell never receives it, and the jail deny rules still win.
+
+    Args:
+        path: Absolute path, or a path that starts with `~`.
+        mode: `"read"` to read and run files, or `"read_write"` for a cache that
+            the tool also writes.
+        reason: Short text that tells people why the extension needs the path.
+
+    Raises:
+        ValueError: The path or reason is blank, or the mode is unknown.
+    """
+
+    path: str | PathLike[str]
+    mode: Literal["read", "read_write"] = "read"
+    reason: str = field(kw_only=True)
+
+    def __post_init__(self):
+        path = os.fspath(self.path) if isinstance(self.path, PathLike) else self.path
+        if not isinstance(path, str) or not path.strip():
+            raise ValueError("vis.Grant requires path=<non-empty string>")
+        object.__setattr__(self, "path", path)
+        if self.mode not in ("read", "read_write"):
+            raise ValueError('vis.Grant mode must be "read" or "read_write"')
+        if not isinstance(self.reason, str) or not self.reason.strip():
+            raise ValueError("vis.Grant requires reason=<non-empty string>")
+
+    def _spec(self):
+        return {
+            "marker": "grant",
+            "path": self.path,
+            "mode": self.mode,
+            "reason": self.reason,
+        }
+
+
 # Provider vocabularies are pinned to the canonical provider/config JSON in tests.
 ProviderJSON: TypeAlias = (
     str

{vis_agent-0.2.53.dev7782 → vis_agent-0.2.53.dev7784}/tests/test_declarations.py

@@ -87,6 +87,7 @@ def test_dictionary_builders_are_retired(name):
         "slash_commands",
         "op_hooks",
         "network_filters",
+        "grants",
     ],
 )
 def test_declarations_refuse_untyped_children(field, monkeypatch):
@@ -324,3 +325,29 @@ def test_registration_snapshots_collections_and_provider_config(monkeypatch):
     }
     wire["providers"][0]["preset"]["extra_body"]["models"].clear()
     assert provider.preset.extra_body["models"][0]["name"] == "example"
+
+
+# Regression for #394: an extension declares its toolchain paths as typed grants.
+def test_grant_declarations_reach_the_wire(tmp_path):
+    grant = vis.Grant(tmp_path, "read_write", reason="Cache")
+    assert grant.path == str(tmp_path)
+    extension = vis.Extension(
+        name="tools",
+        description="Tools",
+        grants=[grant, vis.Grant("/opt/jdk", reason="JDK")],
+    )
+    assert extension._spec()["grants"] == [
+        {
+            "marker": "grant",
+            "path": str(tmp_path),
+            "mode": "read_write",
+            "reason": "Cache",
+        },
+        {"marker": "grant", "path": "/opt/jdk", "mode": "read", "reason": "JDK"},
+    ]
+    with pytest.raises(ValueError, match="mode"):
+        vis.Grant("/opt/jdk", "write", reason="JDK")
+    with pytest.raises(ValueError, match="reason"):
+        vis.Grant("/opt/jdk", reason=" ")
+    with pytest.raises(TypeError):
+        vis.Grant("/opt/jdk")

vis_agent-0.2.53.dev7782/release-tag

@@ -1 +0,0 @@
-beta-b03f680fc34d8769728de10fc9d67b1e3b064fab