2323a9ae83
- `bottle:` in agent frontmatter is now optional; agents without it are portable and require bottles to be selected at launch. - Adds `filter_multiselect` to `tui.py`: multi-select picker with ordered selection list, Space/Enter to toggle, Ctrl-D to confirm. - `ManifestIndex` gains `all_bottle_names` and `load_for_agent` accepts `bottle_names: tuple[str, ...]` to merge bottles in order at runtime. - `merge_bottles_runtime` in `manifest_extends.py` applies the same field-merge rules as `extends:` to pre-resolved bottle objects. - `BottleSpec` gains `bottle_names`; `_validate` and `write_launch_metadata` thread it through so `resume` replays the same bottle configuration. - `cmd_start` shows the bottle multiselect after agent selection, pre-populated from the agent's `bottle:` field when present. - Existing agents with `bottle:` declared continue to work unchanged.
302 lines
12 KiB
Python
302 lines
12 KiB
Python
"""Agent configuration manifest dataclasses."""
|
|
|
|
from __future__ import annotations
|
|
|
|
from dataclasses import dataclass, field
|
|
from typing import cast
|
|
|
|
from .agent_provider import PROVIDER_TEMPLATES
|
|
from .manifest_util import ManifestError, as_json_object
|
|
from .manifest_git import ManifestGitUser
|
|
from .manifest_schema import AGENT_MODEL_KEYS
|
|
|
|
|
|
@dataclass(frozen=True)
|
|
class ManifestAgentProvider:
|
|
"""Provider/template for the agent process inside a bottle.
|
|
|
|
`template` selects a built-in launch/runtime contract. `dockerfile`
|
|
optionally points at a custom agent-image Dockerfile while leaving
|
|
bot-bottle's sidecar infrastructure intact.
|
|
|
|
`auth_token` names the host env var that holds the provider's OAuth
|
|
token (Claude only). The provisioner injects a provider-owned egress
|
|
route for api.anthropic.com that re-injects this token as the Bearer
|
|
header, and sets a placeholder CLAUDE_CODE_OAUTH_TOKEN in the agent
|
|
so the Claude Code CLI starts.
|
|
|
|
`forward_host_credentials` forwards the host Codex auth token into
|
|
the egress sidecar (Codex only).
|
|
"""
|
|
|
|
template: str = "claude"
|
|
dockerfile: str = ""
|
|
auth_token: str = ""
|
|
forward_host_credentials: bool = False
|
|
settings: dict[str, object] = field(default_factory=dict)
|
|
|
|
@classmethod
|
|
def from_dict(cls, bottle_name: str, raw: object) -> "ManifestAgentProvider":
|
|
d = as_json_object(raw, f"bottle '{bottle_name}' agent_provider")
|
|
for k in d:
|
|
if k not in {
|
|
"template",
|
|
"dockerfile",
|
|
"auth_token",
|
|
"forward_host_credentials",
|
|
"settings",
|
|
}:
|
|
raise ManifestError(
|
|
f"bottle '{bottle_name}' agent_provider has unknown key {k!r}; "
|
|
"allowed: template, dockerfile, auth_token, "
|
|
"forward_host_credentials, settings"
|
|
)
|
|
template = d.get("template", "claude")
|
|
if not isinstance(template, str) or not template:
|
|
raise ManifestError(
|
|
f"bottle '{bottle_name}' agent_provider.template must be a "
|
|
f"non-empty string"
|
|
)
|
|
dockerfile = d.get("dockerfile", "")
|
|
if not isinstance(dockerfile, str):
|
|
raise ManifestError(
|
|
f"bottle '{bottle_name}' agent_provider.dockerfile must be a "
|
|
f"string (was {type(dockerfile).__name__})"
|
|
)
|
|
auth_token = d.get("auth_token", "")
|
|
if not isinstance(auth_token, str):
|
|
raise ManifestError(
|
|
f"bottle '{bottle_name}' agent_provider.auth_token must be a "
|
|
f"string (was {type(auth_token).__name__})"
|
|
)
|
|
if auth_token and template not in PROVIDER_TEMPLATES:
|
|
raise ManifestError(
|
|
f"bottle '{bottle_name}' agent_provider.auth_token is only "
|
|
f"supported for built-in templates "
|
|
f"({', '.join(sorted(PROVIDER_TEMPLATES))})"
|
|
)
|
|
if auth_token and template != "claude":
|
|
raise ManifestError(
|
|
f"bottle '{bottle_name}' agent_provider.auth_token is only "
|
|
f"supported for template 'claude'"
|
|
)
|
|
forward_host_credentials = d.get("forward_host_credentials", False)
|
|
if not isinstance(forward_host_credentials, bool):
|
|
raise ManifestError(
|
|
f"bottle '{bottle_name}' agent_provider.forward_host_credentials "
|
|
f"must be a boolean (was {type(forward_host_credentials).__name__})"
|
|
)
|
|
if forward_host_credentials and template not in PROVIDER_TEMPLATES:
|
|
raise ManifestError(
|
|
f"bottle '{bottle_name}' agent_provider.forward_host_credentials "
|
|
f"is only supported for built-in templates "
|
|
f"({', '.join(sorted(PROVIDER_TEMPLATES))})"
|
|
)
|
|
if forward_host_credentials and template != "codex":
|
|
raise ManifestError(
|
|
f"bottle '{bottle_name}' agent_provider.forward_host_credentials "
|
|
"is currently only supported for template 'codex'"
|
|
)
|
|
settings = _parse_provider_settings(bottle_name, template, d.get("settings"))
|
|
return cls(
|
|
template=template,
|
|
dockerfile=dockerfile,
|
|
auth_token=auth_token,
|
|
forward_host_credentials=forward_host_credentials,
|
|
settings=settings,
|
|
)
|
|
|
|
|
|
@dataclass(frozen=True)
|
|
class ManifestAgent:
|
|
# Optional: when empty the operator selects bottles at launch time.
|
|
bottle: str = ""
|
|
skills: tuple[str, ...] = ()
|
|
prompt: str = ""
|
|
# Per-agent git identity (issue #94). Overlays the referenced
|
|
# bottle's git-gate.user per-field at `Manifest.bottle_for`. Only
|
|
# `user` is allowed at the agent level; `repos` stays bottle-only
|
|
# because it carries credentials and host trust.
|
|
git_user: ManifestGitUser = ManifestGitUser()
|
|
|
|
@classmethod
|
|
def from_dict(cls, name: str, raw: object, bottle_names: set[str]) -> "ManifestAgent":
|
|
d = as_json_object(raw, f"agent '{name}'")
|
|
unknown = set(d.keys()) - AGENT_MODEL_KEYS
|
|
if unknown:
|
|
allowed = ", ".join(sorted(AGENT_MODEL_KEYS))
|
|
raise ManifestError(
|
|
f"agent '{name}' has unknown key(s) {sorted(unknown)}; "
|
|
f"allowed keys are {allowed}."
|
|
)
|
|
|
|
bottle_raw = d.get("bottle")
|
|
bottle = ""
|
|
if bottle_raw is not None:
|
|
if not isinstance(bottle_raw, str) or not bottle_raw:
|
|
raise ManifestError(
|
|
f"agent '{name}' bottle must be a non-empty string when declared"
|
|
)
|
|
if bottle_raw not in bottle_names:
|
|
available = ", ".join(sorted(bottle_names)) or "(none defined)"
|
|
raise ManifestError(
|
|
f"agent '{name}' references bottle '{bottle_raw}', which is not defined. "
|
|
f"Available: {available}"
|
|
)
|
|
bottle = bottle_raw
|
|
|
|
skills: tuple[str, ...] = ()
|
|
skills_raw = d.get("skills")
|
|
if skills_raw is not None:
|
|
if not isinstance(skills_raw, list):
|
|
raise ManifestError(
|
|
f"agent '{name}' skills must be an array "
|
|
f"(was {type(skills_raw).__name__})"
|
|
)
|
|
collected: list[str] = []
|
|
skills_list = cast(list[object], skills_raw)
|
|
for i, skill in enumerate(skills_list):
|
|
if not isinstance(skill, str):
|
|
raise ManifestError(
|
|
f"agent '{name}' skills[{i}] must be a string "
|
|
f"(was {type(skill).__name__})"
|
|
)
|
|
collected.append(skill)
|
|
skills = tuple(collected)
|
|
|
|
prompt_raw = d.get("prompt")
|
|
if prompt_raw is None:
|
|
prompt = ""
|
|
elif isinstance(prompt_raw, str):
|
|
prompt = prompt_raw
|
|
else:
|
|
raise ManifestError(
|
|
f"agent '{name}' prompt must be a string "
|
|
f"(was {type(prompt_raw).__name__})"
|
|
)
|
|
|
|
# git-gate: agents may declare only `git-gate.user` (name/email).
|
|
# `git-gate.repos` is bottle-only — it carries credentials and host trust.
|
|
git_user = ManifestGitUser()
|
|
git_raw = d.get("git-gate")
|
|
if git_raw is not None:
|
|
gd = as_json_object(git_raw, f"agent '{name}' git-gate")
|
|
for k in gd:
|
|
if k != "user":
|
|
raise ManifestError(
|
|
f"agent '{name}' git-gate.{k} is not allowed at the "
|
|
f"agent level; only git-gate.user (name/email) may be "
|
|
f"set on an agent. git-gate.repos is bottle-only "
|
|
f"(it carries credentials and host trust)."
|
|
)
|
|
if "user" in gd:
|
|
git_user = ManifestGitUser.from_dict(name, gd["user"])
|
|
|
|
return cls(bottle=bottle, skills=skills, prompt=prompt, git_user=git_user)
|
|
|
|
|
|
def _parse_provider_settings(
|
|
bottle_name: str,
|
|
template: str,
|
|
raw: object,
|
|
) -> dict[str, object]:
|
|
if raw is None:
|
|
return {}
|
|
settings = as_json_object(raw, f"bottle '{bottle_name}' agent_provider.settings")
|
|
|
|
common_allowed = {"startup_args"}
|
|
pi_allowed = {
|
|
"provider",
|
|
"base_url",
|
|
"api",
|
|
"api_key",
|
|
"api_key_env",
|
|
"models",
|
|
"context_window",
|
|
"max_tokens_field",
|
|
"max_tokens",
|
|
"supports_developer_role",
|
|
"supports_reasoning_effort",
|
|
}
|
|
if template == "pi":
|
|
allowed = common_allowed | pi_allowed
|
|
elif template in ("claude", "codex"):
|
|
allowed = common_allowed
|
|
elif template not in PROVIDER_TEMPLATES:
|
|
return dict(settings)
|
|
else:
|
|
allowed = common_allowed
|
|
|
|
for key in settings:
|
|
if key not in allowed:
|
|
raise ManifestError(
|
|
f"bottle '{bottle_name}' agent_provider.settings has unknown "
|
|
f"key {key!r}; allowed: {', '.join(sorted(allowed))}"
|
|
)
|
|
startup_args = settings.get("startup_args")
|
|
if startup_args is not None:
|
|
if not isinstance(startup_args, list):
|
|
raise ManifestError(
|
|
f"bottle '{bottle_name}' agent_provider.settings.startup_args "
|
|
f"must be an array of strings"
|
|
)
|
|
for i, arg in enumerate(startup_args):
|
|
if not isinstance(arg, str) or not arg:
|
|
raise ManifestError(
|
|
f"bottle '{bottle_name}' agent_provider.settings."
|
|
f"startup_args[{i}] must be a non-empty string"
|
|
)
|
|
if template != "pi":
|
|
return dict(settings)
|
|
|
|
for key in ("provider", "base_url", "api", "api_key", "api_key_env"):
|
|
value = settings.get(key)
|
|
if value is not None and (not isinstance(value, str) or not value):
|
|
raise ManifestError(
|
|
f"bottle '{bottle_name}' agent_provider.settings.{key} must "
|
|
"be a non-empty string"
|
|
)
|
|
max_tokens_field = settings.get("max_tokens_field")
|
|
if max_tokens_field is not None and max_tokens_field not in (
|
|
"max_tokens", "max_completion_tokens",
|
|
):
|
|
raise ManifestError(
|
|
f"bottle '{bottle_name}' agent_provider.settings.max_tokens_field "
|
|
"must be 'max_tokens' or 'max_completion_tokens'"
|
|
)
|
|
if settings.get("api_key") is not None and settings.get("api_key_env") is not None:
|
|
raise ManifestError(
|
|
f"bottle '{bottle_name}' agent_provider.settings may set either "
|
|
"api_key or api_key_env, not both"
|
|
)
|
|
models = settings.get("models")
|
|
if models is not None:
|
|
if not isinstance(models, list) or not models:
|
|
raise ManifestError(
|
|
f"bottle '{bottle_name}' agent_provider.settings.models must "
|
|
"be a non-empty array of strings"
|
|
)
|
|
for i, model in enumerate(models):
|
|
if not isinstance(model, str) or not model:
|
|
raise ManifestError(
|
|
f"bottle '{bottle_name}' agent_provider.settings.models[{i}] "
|
|
"must be a non-empty string"
|
|
)
|
|
for key in ("supports_developer_role", "supports_reasoning_effort"):
|
|
value = settings.get(key)
|
|
if value is not None and not isinstance(value, bool):
|
|
raise ManifestError(
|
|
f"bottle '{bottle_name}' agent_provider.settings.{key} must "
|
|
f"be a boolean (was {type(value).__name__})"
|
|
)
|
|
for key in ("context_window", "max_tokens"):
|
|
value = settings.get(key)
|
|
if value is not None and (
|
|
not isinstance(value, int) or isinstance(value, bool) or value <= 0
|
|
):
|
|
raise ManifestError(
|
|
f"bottle '{bottle_name}' agent_provider.settings.{key} must "
|
|
f"be a positive integer (was {type(value).__name__})"
|
|
)
|
|
return dict(settings)
|