The engine can be embedded now instead of only driven from a terminal: the same objects link into a Qt front end (app/) that owns a cst_agent_t inside its own process -- no port, no token, no second process -- and that front end now runs on the desktop and, engine-side, on the phone. Capability metadata (include/cst_tools.h, src/tools/registry.c): - cst_tool_def_t gains perm_name, platforms and available (a probe that returns a reason), so a permission is addressable by name and a tool can say why it cannot run here. - cst_platform_name(), cst_tool_platform_ok(), cst_tool_available(), cst_tool_meta_reload(), cst_tool_perm_name() and CST_PLAT_DESKTOP[]. - cst_tool_register() may take over a built-in name that is not runnable on this platform, so a front end replaces it with its own implementation. - the registry entries carry their class (delete_file -> "delete"), the desktop clipboard tools carry a clipboard probe; find/active/run gate on it. - /api/settings.tools[] exposes perm_name, platforms, available, why and the declared parameters. Engine as a library (Makefile, CMakeLists.txt): - libcstcore.a from the CORE_OBJ set, and a CMake cstcore target shared by the CLI and by app/ (-DCST_BUILD_APP=ON): the engine is compiled once. - Android branch for the vendored sashidown: a per-ABI archive built with the NDK's aarch64-linux-android24-clang wrapper, because CMake's compiler is plain clang and keeps --target/--sysroot in its own variables. Qt front end (app/, new): - AgentCore wraps one cst_agent_t: turns run on a worker thread, every cst_agent_hooks_t callback becomes a Qt signal, and the two hooks that need an answer (on_permission, on_ask_user) block the worker until the GUI replies; mode, approval and plan mode go through the engine's config. - ToolProvider hands the front end's tools to the engine (owner "app:*"); the Linux one is notification_send with a probe for notify-send/D-Bus. - Main.qml: transcript, tool blocks, consent dialog (Deny/Once/Always -> CST_PERM_*), ask_user, mode switch, Esc to cancel; --selftest stays headless and runs the embedding checks without QML. Android (scripts/, docs/android.md, new): - scripts/build_third_party_android.sh builds static mbedTLS + libcurl for an ABI (CA path /system/etc/security/cacerts); build_android.sh builds cst-agent, libcstcore.a and the test binaries for the phone, can push them and run the whole suite there. - sandbox_exec.c keeps the plain exec path on Android: the seccomp supervisor compiled in and the probe reported "seccomp", but writes outside the workspace were not denied on the device -- claiming a sandbox that does not hold is worse than reporting none. - tests/test_diff.c compares layouts only against real GNU diffutils: toybox's diff prints the same hunk header with its own hunk/context rules. Tests: test_tool_meta (metadata, platform gate, probe reasons, takeover of a built-in name) and test_embed (in-process embedding contract) are new; the existing registry/llm_body assertions now follow availability. 38 test binaries pass on the host, 36/36 on arm64-v8a Android 16, cst-app-selftest passes in both the standalone app/ build and the repo build. Version 0.8.7.
110 lines
3.5 KiB
C++
110 lines
3.5 KiB
C++
/* Platform tools on Linux, implemented by the app (not by the engine): they
|
|
* exist exactly where the desktop service does, and the engine only ever sees
|
|
* the capability -- platforms + probe decide whether the tool is offered. */
|
|
|
|
#include <QByteArray>
|
|
#include <QFileInfo>
|
|
#include <QProcess>
|
|
#include <QString>
|
|
#include <QStringList>
|
|
|
|
#include <cstdio>
|
|
#include <cstring>
|
|
|
|
#include "core/AgentCore.h"
|
|
#include "core/ToolProvider.h"
|
|
|
|
namespace app {
|
|
namespace {
|
|
|
|
/* whereis-style check without a shell: the same rule the engine uses for the
|
|
* clipboard helpers. */
|
|
bool haveProgram(const char *name) {
|
|
QByteArray path = qgetenv("PATH");
|
|
const QList<QByteArray> dirs = path.split(':');
|
|
for (const QByteArray &d : dirs) {
|
|
QByteArray dir = d.isEmpty() ? QByteArray(".") : d;
|
|
QByteArray cand = dir + "/" + name;
|
|
if (QFileInfo::exists(QString::fromLocal8Bit(cand)) &&
|
|
QFileInfo(QString::fromLocal8Bit(cand)).isExecutable())
|
|
return true;
|
|
}
|
|
return false;
|
|
}
|
|
|
|
/* 0 when notifications can be shown; -1 with the reason otherwise. */
|
|
int notifyProbe(char *why, size_t why_sz) {
|
|
if (haveProgram("notify-send"))
|
|
return 0;
|
|
if (haveProgram("gdbus") && !qgetenv("DBUS_SESSION_BUS_ADDRESS").isEmpty())
|
|
return 0;
|
|
snprintf(why, why_sz,
|
|
"no notification service (no notify-send, no D-Bus session bus)");
|
|
return -1;
|
|
}
|
|
|
|
const char *argOf(const ctl_tool_call_t *call, const char *key) {
|
|
for (int i = 0; i < call->nargs; i++)
|
|
if (strcmp(call->args[i].key, key) == 0)
|
|
return call->args[i].value;
|
|
return nullptr;
|
|
}
|
|
|
|
/* Runs on the turn's worker thread: no GUI objects here. */
|
|
int notifyRun(const cst_tool_ctx_t *ctx, const ctl_tool_call_t *call,
|
|
cst_tool_result_t *r, void *ud) {
|
|
(void)ctx;
|
|
(void)ud;
|
|
const char *title = argOf(call, "title");
|
|
const char *message = argOf(call, "message");
|
|
if (!message || !message[0]) {
|
|
const char *msg = "error: notification_send needs a message";
|
|
r->out = strdup(msg);
|
|
r->out_len = r->out ? strlen(msg) : 0;
|
|
r->exit_code = 1;
|
|
return 0;
|
|
}
|
|
QStringList args;
|
|
if (title && title[0])
|
|
args << QString::fromUtf8(title);
|
|
else
|
|
args << QStringLiteral("CST-agent");
|
|
args << QString::fromUtf8(message);
|
|
const int rc = QProcess::execute(QStringLiteral("notify-send"), args);
|
|
const QByteArray text =
|
|
(rc == 0 ? QByteArrayLiteral("notification sent")
|
|
: QByteArrayLiteral("notify-send failed (rc=") +
|
|
QByteArray::number(rc) + QByteArrayLiteral(")"));
|
|
r->out = strdup(text.constData());
|
|
r->out_len = r->out ? strlen(r->out) : 0;
|
|
r->exit_code = rc == 0 ? 0 : 1;
|
|
return 0;
|
|
}
|
|
|
|
/* Registered once; the engine keeps a copy until the owner is unregistered. */
|
|
cst_tool_def_t g_notify;
|
|
|
|
} // namespace
|
|
|
|
int platformRegisterLinux(AgentCore *core) {
|
|
static const cst_tool_param_t params[CST_TOOL_MAX_PARAMS] = {
|
|
{"message", "string", 1, "text of the notification"},
|
|
{"title", "string", 0, "title line (default: CST-agent)"},
|
|
{nullptr, nullptr, 0, nullptr},
|
|
{nullptr, nullptr, 0, nullptr},
|
|
{nullptr, nullptr, 0, nullptr},
|
|
{nullptr, nullptr, 0, nullptr}};
|
|
memset(&g_notify, 0, sizeof(g_notify));
|
|
setMeta(&g_notify, "notification_send",
|
|
"Show a desktop notification (what the user sees outside the app).",
|
|
CST_TP_ASK, "notify", kDesktopOnly, notifyProbe);
|
|
memcpy(g_notify.params, params, sizeof(params));
|
|
g_notify.run = nullptr;
|
|
g_notify.run_ex = notifyRun;
|
|
g_notify.ud = nullptr;
|
|
g_notify.owner = "app:linux";
|
|
return core->registerTool(&g_notify) ? 1 : 0;
|
|
}
|
|
|
|
} // namespace app
|