feat(plugins): add managed runtime SDK and release 2.4.5
This commit is contained in:
chenmingxuan committed
1 parent
506e3bf1c5
commit
2a3bbaa3fb
45 files changed
+3348
-98
No files matched your search
@@ -17,6 +17,7 @@ ARTEMIS 自己编排手机和已授权插件，共用网页的任务队列、历
|
||||
| 给出任务编号，问失败原因、token、缓存、录像或最终结论 | [诊断与复盘](references/diagnostics.md) |
|
||||
| 使用电脑、路由器、终端等已安装能力 | [插件任务参数](references/plugins.md) |
|
||||
| 编写、适配、验证或发布 ARTEMIS 插件 | [插件开发规范](references/plugin-development.md)，按需读取 [清单与市场协议](references/plugin-manifest.md) |
|
||||
| 插件调用外部程序、消费已批准文件或准备市场材料 | [运行辅助接口、故障自测与市场检查](references/plugin-sdk.md) |
|
||||
| 开发回放侧栏、人工表单或扩展报告字段 | [工作区插件接口（ARTEMIS 2.3.0+）](references/workspace-plugins.md) |
|
||||
|
||||
只读当前任务相关参考。普通执行不加载插件开发文档。
|
||||
|
||||
@@ -0,0 +1,202 @@
|
||||
|
||||
Apache License
|
||||
Version 2.0, January 2004
|
||||
https://www.apache.org/licenses/
|
||||
|
||||
TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
|
||||
|
||||
1. Definitions.
|
||||
|
||||
"License" shall mean the terms and conditions for use, reproduction,
|
||||
and distribution as defined by Sections 1 through 9 of this document.
|
||||
|
||||
"Licensor" shall mean the copyright owner or entity authorized by
|
||||
the copyright owner that is granting the License.
|
||||
|
||||
"Legal Entity" shall mean the union of the acting entity and all
|
||||
other entities that control, are controlled by, or are under common
|
||||
control with that entity. For the purposes of this definition,
|
||||
"control" means (i) the power, direct or indirect, to cause the
|
||||
direction or management of such entity, whether by contract or
|
||||
otherwise, or (ii) ownership of fifty percent (50%) or more of the
|
||||
outstanding shares, or (iii) beneficial ownership of such entity.
|
||||
|
||||
"You" (or "Your") shall mean an individual or Legal Entity
|
||||
exercising permissions granted by this License.
|
||||
|
||||
"Source" form shall mean the preferred form for making modifications,
|
||||
including but not limited to software source code, documentation
|
||||
source, and configuration files.
|
||||
|
||||
"Object" form shall mean any form resulting from mechanical
|
||||
transformation or translation of a Source form, including but
|
||||
not limited to compiled object code, generated documentation,
|
||||
and conversions to other media types.
|
||||
|
||||
"Work" shall mean the work of authorship, whether in Source or
|
||||
Object form, made available under the License, as indicated by a
|
||||
copyright notice that is included in or attached to the work
|
||||
(an example is provided in the Appendix below).
|
||||
|
||||
"Derivative Works" shall mean any work, whether in Source or Object
|
||||
form, that is based on (or derived from) the Work and for which the
|
||||
editorial revisions, annotations, elaborations, or other modifications
|
||||
represent, as a whole, an original work of authorship. For the purposes
|
||||
of this License, Derivative Works shall not include works that remain
|
||||
separable from, or merely link (or bind by name) to the interfaces of,
|
||||
the Work and Derivative Works thereof.
|
||||
|
||||
"Contribution" shall mean any work of authorship, including
|
||||
the original version of the Work and any modifications or additions
|
||||
to that Work or Derivative Works thereof, that is intentionally
|
||||
submitted to Licensor for inclusion in the Work by the copyright owner
|
||||
or by an individual or Legal Entity authorized to submit on behalf of
|
||||
the copyright owner. For the purposes of this definition, "submitted"
|
||||
means any form of electronic, verbal, or written communication sent
|
||||
to the Licensor or its representatives, including but not limited to
|
||||
communication on electronic mailing lists, source code control systems,
|
||||
and issue tracking systems that are managed by, or on behalf of, the
|
||||
Licensor for the purpose of discussing and improving the Work, but
|
||||
excluding communication that is conspicuously marked or otherwise
|
||||
designated in writing by the copyright owner as "Not a Contribution."
|
||||
|
||||
"Contributor" shall mean Licensor and any individual or Legal Entity
|
||||
on behalf of whom a Contribution has been received by Licensor and
|
||||
subsequently incorporated within the Work.
|
||||
|
||||
2. Grant of Copyright License. Subject to the terms and conditions of
|
||||
this License, each Contributor hereby grants to You a perpetual,
|
||||
worldwide, non-exclusive, no-charge, royalty-free, irrevocable
|
||||
copyright license to reproduce, prepare Derivative Works of,
|
||||
publicly display, publicly perform, sublicense, and distribute the
|
||||
Work and such Derivative Works in Source or Object form.
|
||||
|
||||
3. Grant of Patent License. Subject to the terms and conditions of
|
||||
this License, each Contributor hereby grants to You a perpetual,
|
||||
worldwide, non-exclusive, no-charge, royalty-free, irrevocable
|
||||
(except as stated in this section) patent license to make, have made,
|
||||
use, offer to sell, sell, import, and otherwise transfer the Work,
|
||||
where such license applies only to those patent claims licensable
|
||||
by such Contributor that are necessarily infringed by their
|
||||
Contribution(s) alone or by combination of their Contribution(s)
|
||||
with the Work to which such Contribution(s) was submitted. If You
|
||||
institute patent litigation against any entity (including a
|
||||
cross-claim or counterclaim in a lawsuit) alleging that the Work
|
||||
or a Contribution incorporated within the Work constitutes direct
|
||||
or contributory patent infringement, then any patent licenses
|
||||
granted to You under this License for that Work shall terminate
|
||||
as of the date such litigation is filed.
|
||||
|
||||
4. Redistribution. You may reproduce and distribute copies of the
|
||||
Work or Derivative Works thereof in any medium, with or without
|
||||
modifications, and in Source or Object form, provided that You
|
||||
meet the following conditions:
|
||||
|
||||
(a) You must give any other recipients of the Work or
|
||||
Derivative Works a copy of this License; and
|
||||
|
||||
(b) You must cause any modified files to carry prominent notices
|
||||
stating that You changed the files; and
|
||||
|
||||
(c) You must retain, in the Source form of any Derivative Works
|
||||
that You distribute, all copyright, patent, trademark, and
|
||||
attribution notices from the Source form of the Work,
|
||||
excluding those notices that do not pertain to any part of
|
||||
the Derivative Works; and
|
||||
|
||||
(d) If the Work includes a "NOTICE" text file as part of its
|
||||
distribution, then any Derivative Works that You distribute must
|
||||
include a readable copy of the attribution notices contained
|
||||
within such NOTICE file, excluding those notices that do not
|
||||
pertain to any part of the Derivative Works, in at least one
|
||||
of the following places: within a NOTICE text file distributed
|
||||
as part of the Derivative Works; within the Source form or
|
||||
documentation, if provided along with the Derivative Works; or,
|
||||
within a display generated by the Derivative Works, if and
|
||||
wherever such third-party notices normally appear. The contents
|
||||
of the NOTICE file are for informational purposes only and
|
||||
do not modify the License. You may add Your own attribution
|
||||
notices within Derivative Works that You distribute, alongside
|
||||
or as an addendum to the NOTICE text from the Work, provided
|
||||
that such additional attribution notices cannot be construed
|
||||
as modifying the License.
|
||||
|
||||
You may add Your own copyright statement to Your modifications and
|
||||
may provide additional or different license terms and conditions
|
||||
for use, reproduction, or distribution of Your modifications, or
|
||||
for any such Derivative Works as a whole, provided Your use,
|
||||
reproduction, and distribution of the Work otherwise complies with
|
||||
the conditions stated in this License.
|
||||
|
||||
5. Submission of Contributions. Unless You explicitly state otherwise,
|
||||
any Contribution intentionally submitted for inclusion in the Work
|
||||
by You to the Licensor shall be under the terms and conditions of
|
||||
this License, without any additional terms or conditions.
|
||||
Notwithstanding the above, nothing herein shall supersede or modify
|
||||
the terms of any separate license agreement you may have executed
|
||||
with Licensor regarding such Contributions.
|
||||
|
||||
6. Trademarks. This License does not grant permission to use the trade
|
||||
names, trademarks, service marks, or product names of the Licensor,
|
||||
except as required for reasonable and customary use in describing the
|
||||
origin of the Work and reproducing the content of the NOTICE file.
|
||||
|
||||
7. Disclaimer of Warranty. Unless required by applicable law or
|
||||
agreed to in writing, Licensor provides the Work (and each
|
||||
Contributor provides its Contributions) on an "AS IS" BASIS,
|
||||
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
|
||||
implied, including, without limitation, any warranties or conditions
|
||||
of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
|
||||
PARTICULAR PURPOSE. You are solely responsible for determining the
|
||||
appropriateness of using or redistributing the Work and assume any
|
||||
risks associated with Your exercise of permissions under this License.
|
||||
|
||||
8. Limitation of Liability. In no event and under no legal theory,
|
||||
whether in tort (including negligence), contract, or otherwise,
|
||||
unless required by applicable law (such as deliberate and grossly
|
||||
negligent acts) or agreed to in writing, shall any Contributor be
|
||||
liable to You for damages, including any direct, indirect, special,
|
||||
incidental, or consequential damages of any character arising as a
|
||||
result of this License or out of the use or inability to use the
|
||||
Work (including but not limited to damages for loss of goodwill,
|
||||
work stoppage, computer failure or malfunction, or any and all
|
||||
other commercial damages or losses), even if such Contributor
|
||||
has been advised of the possibility of such damages.
|
||||
|
||||
9. Accepting Warranty or Additional Liability. While redistributing
|
||||
the Work or Derivative Works thereof, You may choose to offer,
|
||||
and charge a fee for, acceptance of support, warranty, indemnity,
|
||||
or other liability obligations and/or rights consistent with this
|
||||
License. However, in accepting such obligations, You may act only
|
||||
on Your own behalf and on Your sole responsibility, not on behalf
|
||||
of any other Contributor, and only if You agree to indemnify,
|
||||
defend, and hold each Contributor harmless for any liability
|
||||
incurred by, or claims asserted against, such Contributor by reason
|
||||
of your accepting any such warranty or additional liability.
|
||||
|
||||
END OF TERMS AND CONDITIONS
|
||||
|
||||
APPENDIX: How to apply the Apache License to your work.
|
||||
|
||||
To apply the Apache License to your work, attach the following
|
||||
boilerplate notice, with the fields enclosed by brackets "[]"
|
||||
replaced with your own identifying information. (Don't include
|
||||
the brackets!) The text should be enclosed in the appropriate
|
||||
comment syntax for the file format. We also recommend that a
|
||||
file or class name and description of purpose be included on the
|
||||
same "printed page" as the copyright notice for easier
|
||||
identification within third-party archives.
|
||||
|
||||
Copyright 2026 Google LLC.
|
||||
|
||||
Licensed under the Apache License, Version 2.0 (the "License");
|
||||
you may not use this file except in compliance with the License.
|
||||
You may obtain a copy of the License at
|
||||
|
||||
https://www.apache.org/licenses/LICENSE-2.0
|
||||
|
||||
Unless required by applicable law or agreed to in writing, software
|
||||
distributed under the License is distributed on an "AS IS" BASIS,
|
||||
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||
See the License for the specific language governing permissions and
|
||||
limitations under the License.
|
||||
@@ -0,0 +1,5 @@
|
||||
# 模板来源
|
||||
|
||||
本目录为 ARTEMIS 主程序仓库提供的文件证据开发模板，适用本目录 LICENSE 的 Apache-2.0，来源以随模板交付的主程序源码提交为准。没有包含厂商协议、内部资料或用户测试数据。
|
||||
|
||||
复制模板后，新增代码、资料和第三方依赖需要分别记录实际来源与分发许可，并为本次候选包保存真实验证结果。模板许可不重新许可新增内容。
|
||||
@@ -7,7 +7,8 @@
|
||||
"artemis_version": ">=2.0.0,<3.0.0",
|
||||
"platforms": ["win32", "linux", "darwin"],
|
||||
"architectures": ["amd64", "arm64"],
|
||||
"server": {"command": "${config.python}", "args": ["${plugin_dir}/server.py"]},
|
||||
"license": "Apache-2.0",
|
||||
"server": {"command": "${config.python}", "args": ["-B", "${plugin_dir}/server.py"]},
|
||||
"config": {"python": {"label": "含 MCP 依赖的 Python", "default": "python"}},
|
||||
"skill": "SKILL.md",
|
||||
"targets": ["mixed", "computer"],
|
||||
|
||||
@@ -0,0 +1,202 @@
|
||||
|
||||
Apache License
|
||||
Version 2.0, January 2004
|
||||
https://www.apache.org/licenses/
|
||||
|
||||
TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
|
||||
|
||||
1. Definitions.
|
||||
|
||||
"License" shall mean the terms and conditions for use, reproduction,
|
||||
and distribution as defined by Sections 1 through 9 of this document.
|
||||
|
||||
"Licensor" shall mean the copyright owner or entity authorized by
|
||||
the copyright owner that is granting the License.
|
||||
|
||||
"Legal Entity" shall mean the union of the acting entity and all
|
||||
other entities that control, are controlled by, or are under common
|
||||
control with that entity. For the purposes of this definition,
|
||||
"control" means (i) the power, direct or indirect, to cause the
|
||||
direction or management of such entity, whether by contract or
|
||||
otherwise, or (ii) ownership of fifty percent (50%) or more of the
|
||||
outstanding shares, or (iii) beneficial ownership of such entity.
|
||||
|
||||
"You" (or "Your") shall mean an individual or Legal Entity
|
||||
exercising permissions granted by this License.
|
||||
|
||||
"Source" form shall mean the preferred form for making modifications,
|
||||
including but not limited to software source code, documentation
|
||||
source, and configuration files.
|
||||
|
||||
"Object" form shall mean any form resulting from mechanical
|
||||
transformation or translation of a Source form, including but
|
||||
not limited to compiled object code, generated documentation,
|
||||
and conversions to other media types.
|
||||
|
||||
"Work" shall mean the work of authorship, whether in Source or
|
||||
Object form, made available under the License, as indicated by a
|
||||
copyright notice that is included in or attached to the work
|
||||
(an example is provided in the Appendix below).
|
||||
|
||||
"Derivative Works" shall mean any work, whether in Source or Object
|
||||
form, that is based on (or derived from) the Work and for which the
|
||||
editorial revisions, annotations, elaborations, or other modifications
|
||||
represent, as a whole, an original work of authorship. For the purposes
|
||||
of this License, Derivative Works shall not include works that remain
|
||||
separable from, or merely link (or bind by name) to the interfaces of,
|
||||
the Work and Derivative Works thereof.
|
||||
|
||||
"Contribution" shall mean any work of authorship, including
|
||||
the original version of the Work and any modifications or additions
|
||||
to that Work or Derivative Works thereof, that is intentionally
|
||||
submitted to Licensor for inclusion in the Work by the copyright owner
|
||||
or by an individual or Legal Entity authorized to submit on behalf of
|
||||
the copyright owner. For the purposes of this definition, "submitted"
|
||||
means any form of electronic, verbal, or written communication sent
|
||||
to the Licensor or its representatives, including but not limited to
|
||||
communication on electronic mailing lists, source code control systems,
|
||||
and issue tracking systems that are managed by, or on behalf of, the
|
||||
Licensor for the purpose of discussing and improving the Work, but
|
||||
excluding communication that is conspicuously marked or otherwise
|
||||
designated in writing by the copyright owner as "Not a Contribution."
|
||||
|
||||
"Contributor" shall mean Licensor and any individual or Legal Entity
|
||||
on behalf of whom a Contribution has been received by Licensor and
|
||||
subsequently incorporated within the Work.
|
||||
|
||||
2. Grant of Copyright License. Subject to the terms and conditions of
|
||||
this License, each Contributor hereby grants to You a perpetual,
|
||||
worldwide, non-exclusive, no-charge, royalty-free, irrevocable
|
||||
copyright license to reproduce, prepare Derivative Works of,
|
||||
publicly display, publicly perform, sublicense, and distribute the
|
||||
Work and such Derivative Works in Source or Object form.
|
||||
|
||||
3. Grant of Patent License. Subject to the terms and conditions of
|
||||
this License, each Contributor hereby grants to You a perpetual,
|
||||
worldwide, non-exclusive, no-charge, royalty-free, irrevocable
|
||||
(except as stated in this section) patent license to make, have made,
|
||||
use, offer to sell, sell, import, and otherwise transfer the Work,
|
||||
where such license applies only to those patent claims licensable
|
||||
by such Contributor that are necessarily infringed by their
|
||||
Contribution(s) alone or by combination of their Contribution(s)
|
||||
with the Work to which such Contribution(s) was submitted. If You
|
||||
institute patent litigation against any entity (including a
|
||||
cross-claim or counterclaim in a lawsuit) alleging that the Work
|
||||
or a Contribution incorporated within the Work constitutes direct
|
||||
or contributory patent infringement, then any patent licenses
|
||||
granted to You under this License for that Work shall terminate
|
||||
as of the date such litigation is filed.
|
||||
|
||||
4. Redistribution. You may reproduce and distribute copies of the
|
||||
Work or Derivative Works thereof in any medium, with or without
|
||||
modifications, and in Source or Object form, provided that You
|
||||
meet the following conditions:
|
||||
|
||||
(a) You must give any other recipients of the Work or
|
||||
Derivative Works a copy of this License; and
|
||||
|
||||
(b) You must cause any modified files to carry prominent notices
|
||||
stating that You changed the files; and
|
||||
|
||||
(c) You must retain, in the Source form of any Derivative Works
|
||||
that You distribute, all copyright, patent, trademark, and
|
||||
attribution notices from the Source form of the Work,
|
||||
excluding those notices that do not pertain to any part of
|
||||
the Derivative Works; and
|
||||
|
||||
(d) If the Work includes a "NOTICE" text file as part of its
|
||||
distribution, then any Derivative Works that You distribute must
|
||||
include a readable copy of the attribution notices contained
|
||||
within such NOTICE file, excluding those notices that do not
|
||||
pertain to any part of the Derivative Works, in at least one
|
||||
of the following places: within a NOTICE text file distributed
|
||||
as part of the Derivative Works; within the Source form or
|
||||
documentation, if provided along with the Derivative Works; or,
|
||||
within a display generated by the Derivative Works, if and
|
||||
wherever such third-party notices normally appear. The contents
|
||||
of the NOTICE file are for informational purposes only and
|
||||
do not modify the License. You may add Your own attribution
|
||||
notices within Derivative Works that You distribute, alongside
|
||||
or as an addendum to the NOTICE text from the Work, provided
|
||||
that such additional attribution notices cannot be construed
|
||||
as modifying the License.
|
||||
|
||||
You may add Your own copyright statement to Your modifications and
|
||||
may provide additional or different license terms and conditions
|
||||
for use, reproduction, or distribution of Your modifications, or
|
||||
for any such Derivative Works as a whole, provided Your use,
|
||||
reproduction, and distribution of the Work otherwise complies with
|
||||
the conditions stated in this License.
|
||||
|
||||
5. Submission of Contributions. Unless You explicitly state otherwise,
|
||||
any Contribution intentionally submitted for inclusion in the Work
|
||||
by You to the Licensor shall be under the terms and conditions of
|
||||
this License, without any additional terms or conditions.
|
||||
Notwithstanding the above, nothing herein shall supersede or modify
|
||||
the terms of any separate license agreement you may have executed
|
||||
with Licensor regarding such Contributions.
|
||||
|
||||
6. Trademarks. This License does not grant permission to use the trade
|
||||
names, trademarks, service marks, or product names of the Licensor,
|
||||
except as required for reasonable and customary use in describing the
|
||||
origin of the Work and reproducing the content of the NOTICE file.
|
||||
|
||||
7. Disclaimer of Warranty. Unless required by applicable law or
|
||||
agreed to in writing, Licensor provides the Work (and each
|
||||
Contributor provides its Contributions) on an "AS IS" BASIS,
|
||||
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
|
||||
implied, including, without limitation, any warranties or conditions
|
||||
of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
|
||||
PARTICULAR PURPOSE. You are solely responsible for determining the
|
||||
appropriateness of using or redistributing the Work and assume any
|
||||
risks associated with Your exercise of permissions under this License.
|
||||
|
||||
8. Limitation of Liability. In no event and under no legal theory,
|
||||
whether in tort (including negligence), contract, or otherwise,
|
||||
unless required by applicable law (such as deliberate and grossly
|
||||
negligent acts) or agreed to in writing, shall any Contributor be
|
||||
liable to You for damages, including any direct, indirect, special,
|
||||
incidental, or consequential damages of any character arising as a
|
||||
result of this License or out of the use or inability to use the
|
||||
Work (including but not limited to damages for loss of goodwill,
|
||||
work stoppage, computer failure or malfunction, or any and all
|
||||
other commercial damages or losses), even if such Contributor
|
||||
has been advised of the possibility of such damages.
|
||||
|
||||
9. Accepting Warranty or Additional Liability. While redistributing
|
||||
the Work or Derivative Works thereof, You may choose to offer,
|
||||
and charge a fee for, acceptance of support, warranty, indemnity,
|
||||
or other liability obligations and/or rights consistent with this
|
||||
License. However, in accepting such obligations, You may act only
|
||||
on Your own behalf and on Your sole responsibility, not on behalf
|
||||
of any other Contributor, and only if You agree to indemnify,
|
||||
defend, and hold each Contributor harmless for any liability
|
||||
incurred by, or claims asserted against, such Contributor by reason
|
||||
of your accepting any such warranty or additional liability.
|
||||
|
||||
END OF TERMS AND CONDITIONS
|
||||
|
||||
APPENDIX: How to apply the Apache License to your work.
|
||||
|
||||
To apply the Apache License to your work, attach the following
|
||||
boilerplate notice, with the fields enclosed by brackets "[]"
|
||||
replaced with your own identifying information. (Don't include
|
||||
the brackets!) The text should be enclosed in the appropriate
|
||||
comment syntax for the file format. We also recommend that a
|
||||
file or class name and description of purpose be included on the
|
||||
same "printed page" as the copyright notice for easier
|
||||
identification within third-party archives.
|
||||
|
||||
Copyright 2026 Google LLC.
|
||||
|
||||
Licensed under the Apache License, Version 2.0 (the "License");
|
||||
you may not use this file except in compliance with the License.
|
||||
You may obtain a copy of the License at
|
||||
|
||||
https://www.apache.org/licenses/LICENSE-2.0
|
||||
|
||||
Unless required by applicable law or agreed to in writing, software
|
||||
distributed under the License is distributed on an "AS IS" BASIS,
|
||||
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||
See the License for the specific language governing permissions and
|
||||
limitations under the License.
|
||||
@@ -0,0 +1,19 @@
|
||||
# 受管工具与文件快照模板
|
||||
|
||||
本模板使用 ARTEMIS 2.4.5 新增的 `artemis.plugins.sdk`，最低宿主版本为 2.4.5。复制模板后使用该版本或更新版本的 ARTEMIS Python；正式的 2.4.4 包不提供这些接口。模板随源码和 Skill 分发，尚未发布到市场。纯文件写入可用相邻 evidence-demo，本模板用于需要外部工具或已批准文件输入的插件。
|
||||
|
||||
复制整个目录，使用 ARTEMIS 自己的 Python：
|
||||
|
||||
```sh
|
||||
<ARTEMIS_PYTHON> -B test_contract.py
|
||||
```
|
||||
|
||||
测试只在临时目录创建样例和休眠进程，验证 SDK 的文件替换、超时、取消、后代回收、输出上限，以及真实 stdio MCP 调用、错误输入拒绝和宿主附件回读。结果分为 SDK 自测与本模板离线契约，不证明改写后的插件、设备或业务通过。
|
||||
|
||||
扩展时保持固定 argv 和工作目录。先用 `snapshot_file(path, approved_sha256)` 得到不可变 bytes，再将 `snapshot.data` 或 `snapshot.chunks()` 交给实际消费者；不要重新打开原路径。默认内存输入上限 64 MiB，按明确需求选择上限；超大固件需要另外实现有等价保护的流式存储，并单独验证。
|
||||
|
||||
`await run_process(argv, cwd=..., timeout=..., input_data=...)` 不执行 shell、不重试，返回原始退出码与 stdout/stderr。标准输入最多 64 MiB，stdout/stderr 共用默认 4 MiB 上限。它在正常退出、超时、取消、输出超限时回收后代；Windows 先将等待启动的引导进程加入 Job Object，再运行工具。POSIX 使用独立会话；这些是生命周期管理，不是恶意程序沙箱，不能托管主动逃离进程组的程序。
|
||||
|
||||
宿主负责整个 MCP 调用的期限；插件负责内部操作和子进程。内部超时先发生时，插件必须在返回前完成回收。取消会在回收后传播，不能吞掉 `CancelledError` 后声称完成。`ManagedProcessError.error_code` 稳定且不回显命令，`may_have_started` 决定能否声明尚未执行；`process_cleanup_unconfirmed` 必须按未知处理。命令输出可能包含敏感数据，按业务白名单转换后再返回。
|
||||
|
||||
本工具只处理已有任务文件，不提供观察或任意命令能力。保留模板 LICENSE、SOURCE.md，并补充新增代码、协议、资料与依赖的来源和业务回归。在副本中执行 `check_plugin.py --prepare-market` 生成全部未验证的市场记录；本模板自身的离线通过不能填作真实业务验收。
|
||||
@@ -0,0 +1,8 @@
|
||||
---
|
||||
name: managed-tool-demo
|
||||
description: 对任务目录中已明确批准的文件制作不可变快照，并通过固定工具校验、保存回执。
|
||||
---
|
||||
|
||||
调用 plugin_load 返回映射后的 verify_note。name 只允许任务目录内的普通文件名，sha256 必须是用户明确批准的内容摘要；不要临时计算另一份内容的摘要来绕过批准。
|
||||
|
||||
固定工具只读取快照并计算摘要，不提供任意命令、不访问设备或网络。校验与回执保存成功不等于业务测试通过。超时、取消或结果不明时先观察实际状态，不自动重试写操作。没有视觉能力，不能独立承担纯电脑任务。
|
||||
@@ -0,0 +1,5 @@
|
||||
# 模板来源
|
||||
|
||||
本目录为 ARTEMIS 主程序仓库提供的插件开发模板，适用本目录 LICENSE 的 Apache-2.0。来源为主程序仓库中随该模板交付的对应源码提交；模板使用主程序的 `artemis.plugins.sdk`，不另行分发设备协议、厂商资料或用户用例。
|
||||
|
||||
复制后应记录自己的代码、所适配上游、第三方依赖、协议资料和用例的实际来源与许可证；新增内容的分发范围需要分别确认。模板的许可不会重新许可这些新增材料。运行记录须使用自己的实际候选版本和验证结果，不能沿用模板演示结论。
|
||||
@@ -0,0 +1,23 @@
|
||||
{
|
||||
"schema_version": 2,
|
||||
"id": "managed-tool-demo",
|
||||
"name": "受管工具与文件快照示例",
|
||||
"version": "1.0.0",
|
||||
"description": "开发模板：读取已批准的任务文件快照，调用固定校验程序并保存真实回执。",
|
||||
"artemis_version": ">=2.4.5,<3.0.0",
|
||||
"platforms": ["win32", "linux", "darwin"],
|
||||
"architectures": ["amd64", "arm64"],
|
||||
"license": "Apache-2.0",
|
||||
"server": {"command": "${config.python}", "args": ["-B", "${plugin_dir}/server.py"]},
|
||||
"config": {"python": {"label": "当前 ARTEMIS 环境的 Python", "default": "python"}},
|
||||
"skill": "SKILL.md",
|
||||
"targets": ["android", "mixed", "computer"],
|
||||
"resources": [],
|
||||
"capabilities": {
|
||||
"kind": "file", "recording": "none", "required_tools": ["verify_note"],
|
||||
"tools": {"verify_note": {
|
||||
"effect": "read", "observation": false, "idempotent": false,
|
||||
"cancellation": "confirmed", "evidence": ["text", "file"]
|
||||
}}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,128 @@
|
||||
"""A fixed checksum tool using the installed ARTEMIS authoring SDK."""
|
||||
|
||||
import hashlib
|
||||
import json
|
||||
import os
|
||||
from pathlib import Path
|
||||
import sys
|
||||
from typing import Annotated
|
||||
import uuid
|
||||
|
||||
from mcp.server.fastmcp import FastMCP
|
||||
from mcp.types import CallToolResult, TextContent, ToolAnnotations
|
||||
from pydantic import Field
|
||||
|
||||
from artemis.plugins.sdk import ManagedProcessError, run_process, snapshot_file
|
||||
|
||||
mcp = FastMCP("managed-tool-demo")
|
||||
CHECKSUM = "import hashlib,sys; print(hashlib.sha256(sys.stdin.buffer.read()).hexdigest())"
|
||||
|
||||
|
||||
def failure(code: str, *, execution: str = "not_started") -> CallToolResult:
|
||||
return CallToolResult(
|
||||
isError=True,
|
||||
content=[TextContent(type="text", text=code)],
|
||||
structuredContent={
|
||||
"artemis": {
|
||||
"version": 1,
|
||||
"execution": execution,
|
||||
"side_effect": "none",
|
||||
"error_code": code,
|
||||
"retryable": False,
|
||||
}
|
||||
},
|
||||
)
|
||||
|
||||
|
||||
@mcp.tool(
|
||||
annotations=ToolAnnotations(readOnlyHint=True, destructiveHint=False, idempotentHint=False)
|
||||
)
|
||||
async def verify_note(
|
||||
name: Annotated[str, Field(min_length=1, max_length=180)],
|
||||
sha256: Annotated[str, Field(pattern=r"^[a-fA-F0-9]{64}$")],
|
||||
) -> CallToolResult:
|
||||
"""Verify a task-owned file of at most 64 MiB against its explicitly approved SHA256."""
|
||||
location = os.environ.get("ARTEMIS_ARTIFACTS_DIR")
|
||||
if (
|
||||
not location
|
||||
or name in {".", ".."}
|
||||
or Path(name).name != name
|
||||
or any(c in name for c in '/\\:*?"<>|')
|
||||
or name.rstrip(" .") != name
|
||||
or any(ord(c) < 32 for c in name)
|
||||
):
|
||||
return failure("invalid_task_filename")
|
||||
root = Path(location)
|
||||
try:
|
||||
if root.is_symlink() or root.is_junction() or root.resolve() != root.absolute():
|
||||
return failure("invalid_task_directory")
|
||||
snapshot = snapshot_file(root / name, sha256)
|
||||
except (OSError, ValueError):
|
||||
return failure("input_not_bound_to_approved_digest")
|
||||
try:
|
||||
# Never reopen the original pathname after verification. The fixed tool
|
||||
# receives the same immutable bytes even if the source file changes.
|
||||
result = await run_process(
|
||||
[sys.executable, "-I", "-B", "-c", CHECKSUM],
|
||||
cwd=root,
|
||||
timeout=5,
|
||||
input_data=snapshot.data,
|
||||
)
|
||||
except ManagedProcessError as exc:
|
||||
return failure(
|
||||
exc.error_code,
|
||||
execution="unknown"
|
||||
if exc.error_code == "process_cleanup_unconfirmed"
|
||||
else "partial"
|
||||
if exc.may_have_started
|
||||
else "not_started",
|
||||
)
|
||||
if (
|
||||
result.returncode != 0
|
||||
or result.stdout.strip().decode("ascii", errors="replace") != snapshot.sha256
|
||||
):
|
||||
return failure("checksum_tool_result_invalid", execution="partial")
|
||||
content = json.dumps(
|
||||
{
|
||||
"source_name": name,
|
||||
"snapshot_sha256": snapshot.sha256,
|
||||
"snapshot_bytes": snapshot.size,
|
||||
"tool_returncode": result.returncode,
|
||||
"test_verdict": "not_evaluated",
|
||||
},
|
||||
ensure_ascii=False,
|
||||
).encode("utf-8")
|
||||
receipt_name = f"verified-{uuid.uuid4().hex}.json"
|
||||
try:
|
||||
with (root / receipt_name).open("xb") as handle:
|
||||
handle.write(content)
|
||||
except OSError:
|
||||
return failure("receipt_write_failed", execution="partial")
|
||||
return CallToolResult(
|
||||
content=[TextContent(type="text", text="已核对批准的文件快照，回执已保存。")],
|
||||
structuredContent={
|
||||
"snapshot_sha256": snapshot.sha256,
|
||||
"artemis": {
|
||||
"version": 1,
|
||||
"execution": "completed",
|
||||
"side_effect": "none",
|
||||
"retryable": False,
|
||||
"source": {
|
||||
"kind": "file",
|
||||
"target_id": "task-artifacts",
|
||||
"label": "已批准文件快照",
|
||||
},
|
||||
"attachments": [
|
||||
{
|
||||
"name": receipt_name,
|
||||
"media_type": "application/json",
|
||||
"sha256": hashlib.sha256(content).hexdigest(),
|
||||
}
|
||||
],
|
||||
},
|
||||
},
|
||||
)
|
||||
|
||||
|
||||
if __name__ == "__main__":
|
||||
mcp.run(transport="stdio")
|
||||
@@ -0,0 +1,69 @@
|
||||
"""Run with the current ARTEMIS Python; no pytest/device/service/config needed."""
|
||||
|
||||
import asyncio
|
||||
import hashlib
|
||||
import json
|
||||
from pathlib import Path
|
||||
import sys
|
||||
import tempfile
|
||||
|
||||
from artemis.plugins.evidence import persist_attachments, validate_tools
|
||||
from artemis.plugins.models import PluginManifest, PluginProfile
|
||||
from artemis.plugins.sdk_checks import run_checks
|
||||
from artemis.plugins.session import PluginSession, resolve_server
|
||||
|
||||
|
||||
async def run_contract():
|
||||
directory = Path(__file__).resolve().parent
|
||||
manifest = PluginManifest.model_validate_json((directory / "plugin.json").read_text("utf-8"))
|
||||
with tempfile.TemporaryDirectory(prefix="artemis-template-contract-") as temporary:
|
||||
trace = Path(temporary).resolve()
|
||||
artifacts = trace / "artifacts" / "plugins" / manifest.id
|
||||
artifacts.mkdir(parents=True)
|
||||
content = "synthetic local sample\n中文\x00".encode()
|
||||
(artifacts / "样例.txt").write_bytes(content)
|
||||
server = resolve_server(
|
||||
manifest, PluginProfile(values={"python": sys.executable}), directory
|
||||
)
|
||||
server.env["ARTEMIS_ARTIFACTS_DIR"] = str(artifacts)
|
||||
server.env["PYTHONDONTWRITEBYTECODE"] = "1"
|
||||
session = await PluginSession(server, directory).start()
|
||||
try:
|
||||
validate_tools(manifest, session.tools)
|
||||
success = await session.call(
|
||||
"verify_note", {"name": "样例.txt", "sha256": hashlib.sha256(content).hexdigest()}
|
||||
)
|
||||
if success.isError:
|
||||
raise AssertionError("MCP 校验入口失败")
|
||||
receipt = success.structuredContent["artemis"]
|
||||
attachments = persist_attachments(trace, manifest.id, receipt["attachments"])
|
||||
if len(attachments) != 1:
|
||||
raise AssertionError("宿主未回读到校验回执")
|
||||
for name, digest in (("样例.txt", "0" * 64), ("../outside.txt", "0" * 64)):
|
||||
denied = await session.call("verify_note", {"name": name, "sha256": digest})
|
||||
if (
|
||||
not denied.isError
|
||||
or denied.structuredContent["artemis"]["execution"] != "not_started"
|
||||
):
|
||||
raise AssertionError("无效输入没有在工具启动前拒绝")
|
||||
finally:
|
||||
await session.aclose()
|
||||
return {
|
||||
"status": "passed",
|
||||
"scope": "template_offline_contract",
|
||||
"mcp_calls": 3,
|
||||
"host_attachments_verified": 1,
|
||||
"real_device_actions": False,
|
||||
}
|
||||
|
||||
|
||||
async def main():
|
||||
print(
|
||||
json.dumps(
|
||||
{"sdk": await run_checks(), "template": await run_contract()}, ensure_ascii=False
|
||||
)
|
||||
)
|
||||
|
||||
|
||||
if __name__ == "__main__":
|
||||
asyncio.run(main())
|
||||
@@ -1,6 +1,6 @@
|
||||
# 插件开发 SDK 与证据协议（ARTEMIS 2.3.0）
|
||||
# 插件开发 SDK 与证据协议（ARTEMIS 2.4.5）
|
||||
|
||||
新插件必须适配本文规则，再通过实测进入市场。旧 `schema_version: 1` 仍可读取；执行插件使用版本 2，并声明 `capabilities`。工作区面板和人工表单使用版本 3，详见[工作区插件接口](workspace-plugins.md)。纯工作区插件不加入任务执行选择，不向模型开放人工评审写入工具。模型执行、任务队列、资源锁、超时和报告由 ARTEMIS 管理，插件不另建任务调度器，也不替用户决定用例通过。
|
||||
新插件必须适配本文规则，再通过实测进入市场。旧 `schema_version: 1` 仍可读取；执行插件使用版本 2，并声明 `capabilities`。工作区面板和人工表单使用版本 3，详见[工作区插件接口](workspace-plugins.md)。纯工作区插件不加入任务执行选择，不向模型开放人工评审写入工具。模型执行、任务队列、资源锁、整体调用预算和报告由 ARTEMIS 管理；插件负责内部工具的超时、取消与子进程收尾，不另建任务调度器，也不替用户决定用例通过。
|
||||
|
||||
## 从可运行模板开始
|
||||
|
||||
@@ -25,6 +25,12 @@
|
||||
|
||||
静态检查通过不等于市场准入，也不表示业务测试通过。需按下面清单提交实际验证记录。
|
||||
|
||||
## 运行辅助接口与市场材料
|
||||
|
||||
涉及外部程序或已批准文件输入时，复制 [managed-tool-demo](../assets/managed-tool-demo/README.md) 整个目录开始；最低宿主为 ARTEMIS 2.4.5，使用该版本或更新版本的 Python。固定 argv 和工作目录，用 `snapshot_file` 取得已批准的不可变字节并交给工具，不重新打开原路径。内部超时、取消和正常结束都要回收自己启动的后代；无法确认收尾时如实返回未知状态，不自动重发写操作。SDK 故障检查与模板离线通过不能替代真实任务。
|
||||
|
||||
接口与命令见 [SDK 与市场材料](plugin-sdk.md)。在用户插件目录的副本中，使用 `<ARTEMIS_PYTHON> <本Skill目录>/scripts/check_plugin.py <插件目录> --prepare-market` 生成未验证的 `MARKET.json`，再补全来源许可、组件分发授权与实际验收证据。对最终 ZIP 使用同一脚本的 `--market` 核对内容摘要与材料；它只握手核对 MCP 声明，不执行业务工具，也不自动发布。
|
||||
|
||||
## 清单与工具能力
|
||||
|
||||
`plugin.json` 的安装、版本约束、资源、权限设置沿用 [插件说明](plugin-manifest.md)。版本 2 增加：
|
||||
|
||||
@@ -0,0 +1,121 @@
|
||||
# 插件运行辅助接口与市场检查
|
||||
|
||||
这些接口从 ARTEMIS **2.4.5** 开始提供，位于 `artemis.plugins.sdk`；使用 ARTEMIS 2.4.5 或更新版本的 Python，并在插件清单中声明 `artemis_version: ">=2.4.5,<3.0.0"`。它们不属于远程薄客户端 `artemis-client`，不启动后台、模型或第二套任务队列。现有不依赖这些辅助接口的插件仍按自身清单兼容旧宿主；采用这些接口才需要提高最低版本。
|
||||
|
||||
## 已批准文件必须绑定实际使用的字节
|
||||
|
||||
```python
|
||||
from artemis.plugins.sdk import snapshot_file
|
||||
|
||||
snapshot = snapshot_file(authorized_path, approved_sha256)
|
||||
# 此后只消费快照。连接建立、预检或等待期间原文件发生变化，也不会改变快照。
|
||||
for chunk in snapshot.chunks():
|
||||
transport.sendall(chunk)
|
||||
```
|
||||
|
||||
`approved_sha256` 必须来自已批准的内容身份，不能在执行时把新文件的摘要自动当作新的批准。制作快照、验证设备身份和写入授权都应在真正写操作前完成。使用 `.data` 或只读的 `.chunks()`，不要校验之后重新打开原路径；传输后才发现摘要不符不能撤销已经发生的写入。
|
||||
|
||||
`snapshot_file` 一次读取授权的普通文件并核对 SHA256，拒绝链接、特殊文件、大小超限和摘要不符。默认上限 64 MiB，副本是不可变内存 bytes；参数 `max_bytes` 仅作用于本次调用，选择更大上限须评估内存。它不负责用户授权或路径沙箱，插件仍要限制允许读取的范围。大文件如采用磁盘快照或流式方案，应提供等价的防修改保证并另行验证，不能恢复到“检查后重开路径”。
|
||||
|
||||
`VerifiedFile.size`、`.sha256` 对应快照本身。原路径同长度覆盖、替换、增长或截断后，快照仍保持原内容。对写入端到端的回归必须检查实际发送字节，不能只断言预检函数被调用。
|
||||
|
||||
## 外部工具的生命周期
|
||||
|
||||
```python
|
||||
from artemis.plugins.sdk import ManagedProcessError, run_process
|
||||
|
||||
try:
|
||||
result = await run_process(
|
||||
fixed_argv,
|
||||
cwd=authorized_directory,
|
||||
timeout=20,
|
||||
input_data=snapshot.data,
|
||||
)
|
||||
except ManagedProcessError as exc:
|
||||
# 用稳定的 error_code 返回部分执行/未知；不回显命令或原始敏感输出，不自动重试。
|
||||
...
|
||||
```
|
||||
|
||||
`fixed_argv` 必须是业务层构造的固定参数列表，不能向模型暴露任意 shell；`cwd` 为明确的现有目录。可通过 `env` 提供所需的环境白名单；未提供时继承当前插件环境，插件应自行排除不需要的密钥和工具日志变量。宿主的凭据管理不会自动证明外部程序的输出安全。
|
||||
|
||||
`timeout` 必须为有限正数，作用于本次工具运行；标准输入最多 64 MiB。stdout、stderr 分别返回 bytes，共用默认 4 MiB 上限，可通过本次调用的 `max_output_bytes` 调整。输出超限立即停止；部分输出不作有效结果返回。`ProcessResult.returncode` 保留非零退出码，不据此生成业务用例通过结论。
|
||||
|
||||
运行器在 Windows 先将等待启动的引导进程加入不可继承的 Job Object，再允许启动实际工具，防止快速派生后代漏出归属；父进程退出时 Job Object 同样回收其树。POSIX 使用独立会话，正常退出、超时、取消和输出超限均回收所属进程组。它是生命周期辅助，不是恶意程序沙箱，不能承诺回收主动逃离会话的程序。
|
||||
|
||||
调用结束后不保留后台子进程。需要常驻驱动的插件应实现会话级归属、关闭与验证，不借本接口后台化工具。取消在清理后继续传播，不能吞掉 `CancelledError`。清理另有固定的有界等待；未确认完成时抛出 `process_cleanup_unconfirmed`，插件必须返回未知状态并核对资源，不声明已全部停止。
|
||||
|
||||
常见错误码：`process_timeout`、`process_output_limit`、`process_launch_failed`、`process_ownership_failed`、`process_worker_interrupted`、`process_invalid_status`、`process_cleanup_unconfirmed`。`may_have_started=false` 只表示已知工具尚未启动；其余情况不能授权重发写操作。运行器从不重试。原始输出可能包含密钥，返回给模型前按业务字段白名单处理。
|
||||
|
||||
宿主负责整体任务与 MCP 调用预算，插件负责内部操作及其后代。内部超时先发生时，必须在向宿主返回前收尾；宿主未超时、或只关闭 MCP 连接，都不能替代这一步。
|
||||
|
||||
## 可运行回归
|
||||
|
||||
```sh
|
||||
<ARTEMIS_PYTHON> -B -m artemis.plugins.sdk_checks --json-output sdk-faults.json
|
||||
<ARTEMIS_PYTHON> -B <受管工具模板目录>/test_contract.py
|
||||
```
|
||||
|
||||
模板目录在源码仓库的 `examples/plugins/managed-tool-demo`，或本 Skill 的 `assets/managed-tool-demo`；先复制到用户指定开发目录。以下检查均使用 ARTEMIS 2.4.5 或更新版本的 Python。
|
||||
|
||||
第一条只在临时目录创建合成文件和自己的测试进程，覆盖文件同长度覆盖、截断/增长、错误摘要、二进制 stdin、非零退出码、正常结束/超时/取消后的后代回收、输出超限、附件摘要与路径拒绝，以及部分/未知执行不能授权重试。它不连接设备、不调用模型、不修改现有任务或配置。结果明确标为 `sdk_faults_only`。
|
||||
|
||||
第二条额外通过真实 stdio MCP 调用模板工具，核对有效输入、错误摘要、目录穿越拒绝及宿主附件回读，结果标为 `template_offline_contract`。模板见插件开发文档的受管工具示例。
|
||||
|
||||
改写插件后，必须扩展模板测试到自己的实际入口：在最后一次预检与真正消费文件之间替换输入、让实际工具创建后代再超时/取消，并检查实际传输和进程存活。SDK 自测通过不能证明插件调用正确。还需覆盖错误/部分执行、证据丢失或摘要不符、权限、资源互斥以及真实任务时间线。
|
||||
|
||||
## 开发检查与市场材料检查
|
||||
|
||||
统一入口为仓库/Skill 的 `check_plugin.py`，也可执行 `python -m artemis.plugins.validation`。两处脚本调用同一个实现，不单独维护规则。
|
||||
|
||||
```sh
|
||||
# 日常本地开发，无需公开分发许可；--live 只握手，不派发工具。
|
||||
<ARTEMIS_PYTHON> <检查脚本> <插件目录或ZIP> --live --values '{"python":"ARTEMIS解释器绝对路径"}'
|
||||
|
||||
# 在清洁候选目录生成草稿；所有结论未验证、许可未知，不覆盖已有 MARKET.json。
|
||||
<ARTEMIS_PYTHON> <检查脚本> <插件目录> --prepare-market
|
||||
|
||||
# 对最终候选 ZIP 检查市场材料；包含只读 MCP 声明握手，不调用业务工具。
|
||||
<ARTEMIS_PYTHON> <检查脚本> <最终ZIP> --market --values '{"python":"ARTEMIS解释器绝对路径"}' --json-output market-check.json
|
||||
```
|
||||
|
||||
路径与 JSON 按当前 Shell 引用；密钥不放进 `--values`。`--json-output` 必须在候选目录外，不能覆盖输入 ZIP。ZIP 沿用宿主的安全解压和大小限制，检查不向已有插件库安装。`--market` 先核对材料，再握手，普通开发检查仍保持轻量。
|
||||
|
||||
市场检查拒绝缓存、`.pyc`、虚拟环境、版本库目录、个人 `.env` 配置、链接和冲突路径。环境样例可保留 `.env.example`。不要为通过检查而清理用户运行目录；从可分发输入构建独立候选。
|
||||
|
||||
## MARKET.json
|
||||
|
||||
此文件随包提交，版本固定为 1，不增加 `plugin.json` 字段，旧宿主仍可安装符合其能力的插件。草稿由检查脚本生成，包含：
|
||||
|
||||
| 字段 | 要求 |
|
||||
| --- | --- |
|
||||
| `plugin_id`、`plugin_version` | 与候选清单完全一致 |
|
||||
| `content_sha256` | 全部包内文件路径及 SHA256 的确定性摘要，只排除根层 `MARKET.json` 自身 |
|
||||
| `traits.uses_subprocesses` | 明确 true/false，不能保留 null |
|
||||
| `traits.file_inputs_for_writes` | 是否消费文件执行写操作，明确 true/false |
|
||||
| `components` | 分开列原始实现、适配层、第三方依赖/参考资料的许可和来源 |
|
||||
| `checks` | 下表全部验收项目，保留实际范围和证据 |
|
||||
|
||||
每个组件包含 `name`、`paths`、`license`、`permission`、`license_file`、`source_file`。`paths` 为精确包内相对路径或目录前缀，`.` 表示整个包；全部可分发文件须被覆盖。只有明确的 `permission: "permitted"` 才接受，`local_only` 和 `unknown` 均阻止市场提交。许可和来源文件必须实际在包内；适配层开源许可不会重新许可原始代码、用例、协议或内部资料。可使用合适的 LicenseRef，不强制统一开源，但具体分发授权必须可审查。
|
||||
|
||||
每条验收记录包含 `status`、`evidence_file`、`evidence_sha256`、`notes`。`passed` 必须指向真实的非空包内文档及其正确摘要，notes 说明验证环境、范围与结果；缺失、失败和未验证均拒绝。不能把历史记录、SDK 自测或模拟设备改写为本次真实业务通过。
|
||||
|
||||
| 验收项目 | 要记录的内容 |
|
||||
| --- | --- |
|
||||
| `installation` | 安装、升级、平台和依赖兼容 |
|
||||
| `tool_contract` | 实际 MCP Schema、能力和参数限制 |
|
||||
| `failure_partial` | 错误、部分执行、未知副作用与不盲目重试 |
|
||||
| `timeout_cancel` | 实际工具入口超时与取消 |
|
||||
| `process_tree` | 工具创建后代后，正常/超时/取消的回收验证 |
|
||||
| `file_binding` | 已批准文件被替换、截断、增长时的实际消费字节 |
|
||||
| `resource_conflicts` | 同设备/桌面资源互斥 |
|
||||
| `evidence_export` | 导出索引、中文路径、摘要不符与缺失附件 |
|
||||
| `history_uninstall` | 卸载/升级后历史仍可读 |
|
||||
| `secret_redaction` | 配置、命令、输出和回执脱敏 |
|
||||
| `real_task` | 经宿主正常任务的操作、时间线、暂停/恢复、证据和报告 |
|
||||
| `source_review` | 对本次包的源码审查、来源与分发授权核对 |
|
||||
|
||||
仅在声明无相应行为时，`process_tree`、`file_binding` 可 `not_applicable`；无 MCP 时 `tool_contract`、`timeout_cancel` 可不适用；无声明资源时 `resource_conflicts` 可不适用。仍须在 notes 中给出理由，不能把未测写成不适用。其他项目须有真实通过记录。
|
||||
|
||||
更新任何文件后，旧材料会失效。先重跑受影响验证，再用 `--fingerprint` 查看新的内容摘要，并更新记录；不要只刷新摘要来沿用过期结论。握手结束后重新核对内容与市场记录，检查期间改动会使检查失败。最终 ZIP 检查结果另包含实际解压检查的同一份字节的 SHA256，不重新打开原路径来记录替换文件；公开发布时仍需核对固定附件、市场索引与无认证下载字节。
|
||||
|
||||
市场材料检查验证字段、覆盖范围、摘要和证据存在性，不证明声明真实、不替作者确认权利归属，也不自动发布。源码审查和实际业务验收仍由发布方核对；文档、静态检查、握手、SDK 故障自测与真实业务结论分别记录。
|
||||
@@ -1,46 +1,6 @@
|
||||
"""Validate a plugin package; --live checks MCP declarations without executing actions."""
|
||||
"""Shared plugin development and market-materials checker; no tool actions."""
|
||||
|
||||
import argparse
|
||||
import asyncio
|
||||
import json
|
||||
from pathlib import Path
|
||||
|
||||
from artemis.plugins.evidence import validate_tools
|
||||
from artemis.plugins.models import PluginManifest, PluginProfile
|
||||
from artemis.plugins.session import PluginSession, resolve_server
|
||||
from artemis.plugins.store import contained_path
|
||||
|
||||
|
||||
async def check(directory: Path, live: bool, values: dict[str, str]) -> None:
|
||||
manifest = PluginManifest.model_validate_json((directory / "plugin.json").read_text("utf-8"))
|
||||
manifest.check_compatible()
|
||||
if manifest.skill:
|
||||
skill = contained_path(directory, manifest.skill)
|
||||
if not skill.is_file() or not skill.read_text("utf-8").strip():
|
||||
raise ValueError("缺少有效的 Skill")
|
||||
if manifest.schema_version not in {2, 3}:
|
||||
raise ValueError("新市场插件必须适配 schema_version=2 或 3")
|
||||
if live and manifest.server:
|
||||
server = resolve_server(manifest, PluginProfile(values=values), directory)
|
||||
session = await PluginSession(server, directory).start()
|
||||
try:
|
||||
validate_tools(manifest, session.tools)
|
||||
finally:
|
||||
await session.aclose()
|
||||
print(
|
||||
f"PASS {manifest.id} {manifest.version}: 清单/兼容性/Skill"
|
||||
+ ("/MCP 工具声明" if live and manifest.server else "")
|
||||
)
|
||||
print("此检查不代替实际执行、超时取消、证据导出和视觉能力验收。")
|
||||
|
||||
|
||||
def main() -> None:
|
||||
parser = argparse.ArgumentParser(description=__doc__)
|
||||
parser.add_argument("directory", type=Path)
|
||||
parser.add_argument("--live", action="store_true")
|
||||
parser.add_argument("--values", default="{}", help="普通配置 JSON；不得包含密钥")
|
||||
args = parser.parse_args()
|
||||
asyncio.run(check(args.directory.resolve(), args.live, json.loads(args.values)))
|
||||
from artemis.plugins.validation import check as check, main
|
||||
|
||||
|
||||
if __name__ == "__main__":
|
||||
|
||||
Reference in new issue
Block a user