6267a762a4
Replace one-shot grok -p JSON with native grok agent stdio (ACP) for realtime streaming, tool visibility, and multi-turn sessions. Vendor the ACP client into fusion-plugin-grok-runtime, forward Fusion fn_* tools and operator MCP, stage Fusion skills via --plugin-dir, authenticate per xAI headless docs, and align project chat manager store resolution so Grok chat sessions can send.
103 lines
4.4 KiB
TypeScript
103 lines
4.4 KiB
TypeScript
import { definePlugin } from "@fusion/plugin-sdk";
|
|
import type { FusionPlugin, PluginRuntimeFactory, PluginRuntimeManifestMetadata } from "@fusion/plugin-sdk";
|
|
import { resolveCliSettings, resolveBundledClaudeBridgeBinary } from "./cli-spawn.js";
|
|
import { AcpRuntimeAdapter } from "./runtime-adapter.js";
|
|
import { killAllProcesses } from "./process-manager.js";
|
|
import { setupHooks, setupManifest } from "./setup.js";
|
|
|
|
// Reap any live agent subprocesses on hard process exit so none are orphaned
|
|
// (KTD4 — the registry SIGKILL is the authoritative no-orphan guarantee). Scoped
|
|
// to tracked agent subprocesses only; never touches other processes/ports.
|
|
process.on("exit", killAllProcesses);
|
|
|
|
export const ACP_RUNTIME_ID = "acp";
|
|
const ACP_RUNTIME_VERSION = "0.1.0";
|
|
|
|
export const acpRuntimeMetadata: PluginRuntimeManifestMetadata = {
|
|
runtimeId: ACP_RUNTIME_ID,
|
|
name: "ACP Runtime",
|
|
description: "Drives any external ACP-compatible agent over JSON-RPC/stdio",
|
|
version: ACP_RUNTIME_VERSION,
|
|
};
|
|
|
|
export const acpRuntimeFactory: PluginRuntimeFactory = async (ctx) =>
|
|
new AcpRuntimeAdapter(ctx.settings as Record<string, unknown> | undefined);
|
|
|
|
const plugin: FusionPlugin = definePlugin({
|
|
manifest: {
|
|
id: "fusion-plugin-acp-runtime",
|
|
name: "ACP Runtime Plugin",
|
|
version: ACP_RUNTIME_VERSION,
|
|
description: "Drives any external ACP-compatible agent over JSON-RPC/stdio",
|
|
runtime: acpRuntimeMetadata,
|
|
},
|
|
state: "installed",
|
|
hooks: {
|
|
onLoad: (ctx) => {
|
|
const settings = resolveCliSettings(ctx.settings as Record<string, unknown>);
|
|
ctx.logger.info(
|
|
// Log the arg COUNT, not values — args can carry inline tokens/secrets.
|
|
`ACP Runtime Plugin loaded — binary=${settings.binaryPath} argCount=${settings.args.length} ` +
|
|
`fsRead=${settings.fsRead} fsWrite=${settings.fsWrite}`,
|
|
);
|
|
// Risk S1: the ACP agent is an untrusted subprocess. Acknowledging the
|
|
// unrestricted policy disables the per-call approval escalation — warn so
|
|
// it is a deliberate, visible choice.
|
|
if (settings.allowUnrestricted) {
|
|
ctx.logger.warn(
|
|
"ACP Runtime: acpAllowUnrestricted is set — sensitive tool calls from the untrusted agent " +
|
|
"will be auto-approved under an allow-all policy. Prefer an approval-required policy.",
|
|
);
|
|
}
|
|
// FNXC:ClaudeAcp 2026-06-15-11:40:
|
|
// KTD10 (Route A): publish the bundled `claude-code-cli-acp` bridge path
|
|
// process-wide so the pi-claude-cli provider's kill-switch can resolve it
|
|
// WITHOUT a manual FUSION_CLAUDE_ACP_BRIDGE env var. This only PUBLISHES the
|
|
// path — the ACP transport stays OFF until an operator sets
|
|
// FUSION_CLAUDE_ACP=1 (the rollout gate). An explicit env override wins, and
|
|
// the resolver is identity-pinned to the plugin-owned node_modules/.bin shim
|
|
// so a same-named global binary cannot replace the reviewed bridge.
|
|
if (!process.env.FUSION_CLAUDE_ACP_BRIDGE) {
|
|
const resolved = resolveBundledClaudeBridgeBinary();
|
|
if (resolved.kind === "resolved") {
|
|
process.env.FUSION_CLAUDE_ACP_BRIDGE = resolved.path;
|
|
ctx.logger.info(
|
|
"ACP Runtime: published bundled Claude bridge path for Route A " +
|
|
"(transport stays off until FUSION_CLAUDE_ACP=1).",
|
|
);
|
|
} else {
|
|
ctx.logger.info(`ACP Runtime: bundled Claude bridge not resolved (${resolved.reason}); Route A unavailable.`);
|
|
}
|
|
}
|
|
},
|
|
},
|
|
runtime: {
|
|
metadata: acpRuntimeMetadata,
|
|
factory: acpRuntimeFactory,
|
|
},
|
|
setup: {
|
|
manifest: setupManifest,
|
|
hooks: setupHooks,
|
|
},
|
|
});
|
|
|
|
export default plugin;
|
|
export { AcpRuntimeAdapter };
|
|
export { authenticateAcpConnection, AcpAuthRequiredError } from "./provider.js";
|
|
export { checkSetup, setupHooks, setupManifest, validateBundledBridgeIdentity } from "./setup.js";
|
|
export {
|
|
CLAUDE_CODE_CLI_ACP_BINARY,
|
|
bundledClaudeBridgeBinPath,
|
|
resolveBundledClaudeBridgeBinary,
|
|
resolveClaudeBridgeAskSettings,
|
|
resolveCliSettings,
|
|
} from "./cli-spawn.js";
|
|
export type { AcpBinaryResolution, AcpCliSettings } from "./cli-spawn.js";
|
|
/*
|
|
FNXC:GrokAcp 2026-07-11-12:00:
|
|
Grok Runtime composes AcpRuntimeAdapter for native `grok agent stdio`. Re-export
|
|
the process-registry kill so Grok can register the same exit reaper without a
|
|
second subprocess registry or a fragile cross-plugin relative import.
|
|
*/
|
|
export { killAllProcesses } from "./process-manager.js";
|