Why: N1 increment three host side - plugin agent assets must reject
hooks/mcp/permissionMode declarations (WP1 acceptance), and squad
members need the kernel ask port wired to the HITL card (WP4).
Evidence: go vet clean; go test ./... 29 packages ok, including new
agent-asset tests (banned keys located to the field, unknown keys,
missing id) and the V2 asset suite. Nested pins at native c5b9dca
(PR #18) and squad fc9620e (PR #17).
Impact: plugins agents/ assets now parse via parseAgentAsset
(strict JSON with banned-key rejection); PermissionAskOf exported
and takes any host with the optional method; app.go wires
cfg.PermissionAsk for the squad path. Legacy behavior unchanged when
nothing registers the port.
Refs: Documents proposal 2026-10-07-agent-stack-n1q1i1-plans.md WP1/WP4
weichen
merged commit f0b0db9aaa into main2026-10-07 05:15:37 +00:00
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
N1 增量三（Backend 侧）：插件代理声明校验 + 小队 ask 接线（WP1/WP4 验收条款）
Agent-Native PR #18、Agent-Squad PR #17 已合入。本 PR 完成 Backend 侧：
改动
internal/plugins/agents.go新增parseAgentAsset——agents/*.json资产严格解析：禁带 hooks/mcp/permissionMode 键（错误定位到字段，「钩子、MCP 与权限模式归宿主与基座」）、未知键拒绝（DisallowUnknownFields）、id 必填；host_v2.go的 agents 装载改走该校验，违规由 loadOne 整批拒绝该插件（fail-closed）。PermissionAskOf导出并入参放宽为any（小队装配传的squadadapter.Ctx不满足完整 RunCtx；判定只依赖可选方法）；app.go给nativeadp.Config.PermissionAsk接线——小队成员的内核 ask 决策自此也走 HITL 确认卡，与直连/子代理同卡同选项。宿主无实现时 nil，内核保持 ask=拒绝旧行为。deps/agent-native→ c5b9dca（#18）、deps/agent-squad→ fc9620e（#17）。验证
go vet ./...通过；go test -count=1 ./...29 包全 ok。agents_test.go：合法代理装载、三种禁带键逐一拒绝且定位字段、未知键/缺 id 拒绝；V2 资产套件、runmgr 权限回归、PermissionAskOf 两态全绿。合入顺序
Agent-Native #18 ✓ → Squad #17 ✓ → 本 PR → Dev 三 pin PR。
主任务：Dev 仓
feature/agent-stack-n1。