weichen dc6d9985d8 Validate plugin agent declarations and wire the squad ask port ...

Why: N1 increment three host side - plugin agent assets must reject
hooks/mcp/permissionMode declarations (WP1 acceptance), and squad
members need the kernel ask port wired to the HITL card (WP4).

Evidence: go vet clean; go test ./... 29 packages ok, including new
agent-asset tests (banned keys located to the field, unknown keys,
missing id) and the V2 asset suite. Nested pins at native c5b9dca
(PR #18) and squad fc9620e (PR #17).

Impact: plugins agents/ assets now parse via parseAgentAsset
(strict JSON with banned-key rejection); PermissionAskOf exported
and takes any host with the optional method; app.go wires
cfg.PermissionAsk for the squad path. Legacy behavior unchanged when
nothing registers the port.

Refs: Documents proposal 2026-10-07-agent-stack-n1q1i1-plans.md WP1/WP4

2026-10-07 05:14:06 +00:00

..

app

Validate plugin agent declarations and wire the squad ask port

2026-10-07 05:14:06 +00:00

blobstore

Validate object ids in the local blobstore to block path traversal

2026-09-30 16:32:17 +00:00

bus

Recover interrupted runs and commit terminal state once

2026-10-03 14:37:49 +00:00

cardsvc

Land project inbox: aggregation, archive-to-project, project SSE (CF3)

2026-09-30 19:11:11 +00:00

cmdbus

Add EXT-1 inproc plugin command handler with owner-scoped host handle

2026-10-05 11:39:25 +00:00

config

Refuse open listeners and cross-site writes without auth

2026-10-04 17:28:46 +00:00

ctxasm

Store secrets apart from settings and assemble context at the end

2026-10-04 18:20:10 +00:00

docgen

Generate styled Word deliverables and pin artifact cards in chat

2026-10-01 02:48:49 +00:00

evalgold

Add the public extension surface and platform services

2026-10-01 10:35:02 +00:00

hostapi

Add the public extension surface and platform services

2026-10-01 10:35:02 +00:00

ingest

Skip wide sparse columns without dropping later xlsx sheets

2026-10-06 15:30:50 +00:00

intentgate

Route a matched intent to its workflow after commands

2026-10-01 16:04:49 +00:00

pgbus

Add admin-issued accounts with forced first-login password change

2026-09-30 11:15:22 +00:00

plugins

Validate plugin agent declarations and wire the squad ask port

2026-10-07 05:14:06 +00:00

profiles

Stream tool progress and drop hard agent limits

2026-10-02 02:17:02 +00:00

prompts

Hide the compose model's reasoning from the user

2026-10-02 13:53:57 +00:00

quality

Check final replies before the direct run stops

2026-10-01 13:54:15 +00:00

rag

Add EXT-1 inproc plugin command handler with owner-scoped host handle

2026-10-05 11:39:25 +00:00

ratelimit

Add multi-instance groundwork: blobstore seam for artifacts

2026-09-30 02:39:50 +00:00

runmgr

Wire the permission ask port to HITL and adopt the Policy object

2026-10-07 04:04:10 +00:00

runtime

Validate plugin agent declarations and wire the squad ask port

2026-10-07 05:14:06 +00:00

server

Expose builtin document parsing through the host handle

2026-10-06 14:59:38 +00:00

settings

Store secrets apart from settings and assemble context at the end

2026-10-04 18:20:10 +00:00

skills

Add cross-task content methods, visuals, and scoring

2026-10-01 09:06:36 +00:00

squadadapter

Wire the squad native adapter instead of the core registration

2026-10-03 13:42:04 +00:00

store

Bind archived filter as bool in ListTasks

2026-10-05 03:18:10 +00:00

tools

Run tool scripts through the shared host and keep orchestration off

2026-10-03 18:04:25 +00:00

workflow

Run workflow scripts through a capped callback host

2026-10-01 16:18:59 +00:00