kingwl
99650a201b
A ModeDefinition may declare access: the widest sandbox access shell commands run under while the mode holds, on the SANDBOX_MODES ladder. The bash seam gains the resolution point to hang it on: BashExecutor. resolveMode(session) folds override ?? default and dispatches the new bash/resolve-mode waterfall; dsh-tool-bash consults it at both the stamping site and the escalation baseline; dsh-mode's clamp listener takes the ladder minimum per call. Two independent log folds compose at read time — the mode never writes the sandbox knob, so the two switch in any order and the knob re-emerges intact on exit. The built-in plan definition ships access: read-only with the bash trio allowlisted CONDITIONALLY: both policy layers admit bash/bash_output/ bash_kill only while a confining executor is mounted (an unconfinable shell cannot honor the cap), and a bash call carrying sandbox_permissions under a cap is denied at the gate — no widening mid-mode; the widened step belongs in the plan. examples/plan-acp-agent swaps bash-local for sandbox-local + bash-sandbox (workspace-write default, clamped read-only inside plan) plus the approval seam; the re-recorded plan-mode arc runs a real cat inside plan under the clamped sandbox, and modes-advertise now pins the sandbox-mode and approval config options. RFC amended to the landed shape (access cap section, orthogonality FAQ, deferred item resolved into effects self-declaration).
62 lines
3.0 KiB
Markdown
62 lines
3.0 KiB
Markdown
<!-- Generated by scripts/gen-doc-graphs.ts - do not edit by hand.
|
|
Run `pnpm run gen-doc-graphs` to regenerate. -->
|
|
|
|
# Plan-Mode ACP Agent App Composition
|
|
|
|
The plan-mode demo composes session modes onto the ACP server: the editor mode picker drives plan mode, and the model exits through the user-reviewed exit_plan_mode tool.
|
|
|
|
```mermaid
|
|
flowchart LR
|
|
cfg["examples/plan-acp-agent<br/>cordis.yml"]
|
|
plugin_plan-acp_llm_deepseek["llm-deepseek<br/>@deepseek-ai/dsh-llm-deepseek"]
|
|
cfg --> plugin_plan-acp_llm_deepseek
|
|
plugin_plan-acp_acp_agent["acp-agent<br/>@deepseek-ai/dsh-acp-agent"]
|
|
cfg --> plugin_plan-acp_acp_agent
|
|
plugin_plan-acp_acp_agent --> bundle_agent_core["@deepseek-ai/dsh-agent-core"]
|
|
plugin_plan-acp_acp_agent --> bundle_jsonl["@deepseek-ai/dsh-session-persistence-jsonl"]
|
|
plugin_plan-acp_acp_agent --> frontdoor_acp["@deepseek-ai/dsh-acp<br/>JSON-RPC stdio bridge<br/>sessions created by client"]
|
|
bundle_agent_core --> spine_llm["ctx.llm"]
|
|
bundle_agent_core --> spine_sessions["ctx.sessions"]
|
|
bundle_agent_core --> spine_tools["ctx.tools + tool-bash"]
|
|
bundle_agent_core --> spine_loop["ctx.agents + ctx.agentLoop"]
|
|
plugin_plan-acp_mode["mode<br/>@deepseek-ai/dsh-mode"]
|
|
cfg --> plugin_plan-acp_mode
|
|
plugin_plan-acp_sandbox["sandbox<br/>@deepseek-ai/dsh-sandbox-local"]
|
|
cfg --> plugin_plan-acp_sandbox
|
|
plugin_plan-acp_bash["bash<br/>@deepseek-ai/dsh-bash-sandbox"]
|
|
cfg --> plugin_plan-acp_bash
|
|
plugin_plan-acp_tool_bash["tool-bash<br/>@deepseek-ai/dsh-tool-bash"]
|
|
cfg --> plugin_plan-acp_tool_bash
|
|
plugin_plan-acp_approval["approval<br/>@deepseek-ai/dsh-user-approval"]
|
|
cfg --> plugin_plan-acp_approval
|
|
plugin_plan-acp_tool_ask_user["tool-ask-user<br/>@deepseek-ai/dsh-tool-ask-user"]
|
|
cfg --> plugin_plan-acp_tool_ask_user
|
|
plugin_plan-acp_fs_local["fs-local<br/>@deepseek-ai/dsh-fs-local"]
|
|
cfg --> plugin_plan-acp_fs_local
|
|
plugin_plan-acp_fs_policy["fs-policy<br/>@deepseek-ai/dsh-fs-policy"]
|
|
cfg --> plugin_plan-acp_fs_policy
|
|
plugin_plan-acp_tool_fs["tool-fs<br/>@deepseek-ai/dsh-tool-fs"]
|
|
cfg --> plugin_plan-acp_tool_fs
|
|
plugin_plan-acp_tool_todo["tool-todo<br/>@deepseek-ai/dsh-tool-todo"]
|
|
cfg --> plugin_plan-acp_tool_todo
|
|
```
|
|
|
|
| Plugin id | Package / module |
|
|
| --- | --- |
|
|
| `llm-deepseek` | `@deepseek-ai/dsh-llm-deepseek` |
|
|
| `acp-agent` | `@deepseek-ai/dsh-acp-agent` |
|
|
| `mode` | `@deepseek-ai/dsh-mode` |
|
|
| `sandbox` | `@deepseek-ai/dsh-sandbox-local` |
|
|
| `bash` | `@deepseek-ai/dsh-bash-sandbox` |
|
|
| `tool-bash` | `@deepseek-ai/dsh-tool-bash` |
|
|
| `approval` | `@deepseek-ai/dsh-user-approval` |
|
|
| `tool-ask-user` | `@deepseek-ai/dsh-tool-ask-user` |
|
|
| `fs-local` | `@deepseek-ai/dsh-fs-local` |
|
|
| `fs-policy` | `@deepseek-ai/dsh-fs-policy` |
|
|
| `tool-fs` | `@deepseek-ai/dsh-tool-fs` |
|
|
| `tool-todo` | `@deepseek-ai/dsh-tool-todo` |
|
|
|
|
Source config: [`examples/plan-acp-agent/cordis.yml`](cordis.yml).
|
|
|
|
Maintenance mode: hybrid: the leaf plugin list is parsed from its `cordis.yml`; app package expansion is curated from package source.
|