[Grok/dsh 33] 插件来源与安装生命周期 #165

Activity

1. Blackman99

   added

   ready-for-agentAgent-grabbable workAgent-grabbable work

   on Sep 19, 2026
2. Blackman99

   added a parent issue on Sep 19, 2026

   • [Grok/dsh rewrite] Spec: official Rust client with dsh execution core #132
3. Blackman99

   marked this as blocked on Sep 19, 2026

   • [Grok/dsh 09] 管理策略与工作区信任 #141
4. Blackman99

   marked this as blocking on Sep 19, 2026

   • [Grok/dsh 34] 插件内容启停与扩展视图 #166
5. Blackman99 commented on Sep 22, 2026

   

   Blackman99

   on Sep 22, 2026

   OwnerAuthor

   More actions

   按用户2026-09-20的实施授权领取 Ticket33 / #165；本次只记录领取，未启动实施工作者，也不表示已实现。已重新读取 #132 及全部80票正文/评论和实际 blocked-by（native 177 边）。#133–#141、#149、#160、#161 已在 rewrite/grok-dsh-20260920 集成并关闭（COMPLETED），隔离集成 HEAD/origin 均为 2232130e9ce287aa85bc3270bb3383ab079e4efd。当前独立就绪票为 #142、#150、#152、#153、#154、#165、#189、#193。#142/#150/#152/#153 仍有未核销领取且本波按记录失败延后，不重试、不重领、不覆盖其现有领取评论。本波并行领取剩余四张独立就绪票 #154、#165、#189、#193。未领取任何被阻塞后继（含 #166），也未领取 #212。

   实施必须从独立集成树精确基线 2232130e9ce287aa85bc3270bb3383ab079e4efd 开始。前置 #141 已关闭，同一提交已保留在 rewrite/grok-dsh-20260920；集成证据见 #141 (comment) 。#160/#141/#161/#140/#139/#138/#137/#136/#135/#134/#133 仍为已集成关闭基线 #160 (comment) 、#141 (comment) 、#161 (comment) 、#140 (comment) 、#139 (comment) 、#138 (comment) 、#137 (comment) 、#136 (comment) 、#135 (comment) 、#134 (comment) 与 https://github.com/Blackman99/codsh/issues/133#issuecomment-5746720505。

   范围按原验收：插件来源与安装生命周期覆盖 marketplace/source/install/update/remove 外部流程，锁定可追溯版本和适用许可；下载或校验失败、冲突、离线与取消不留下假成功安装，不因安装自动授予执行权限；新旧实例、个人/项目作用域不互相污染；卸载不删除用户无关文件；用受控插件源验证真实安装后再打开目录与状态界面检查一致性，适用文档/Changeset 同步。后续实施/审查子代理使用 My CPA - Grok 4.6（grk-4.6）。仅在实施、独立审查和集成验收通过后关闭。main、现有未跟踪文件及其他工作树不改动；不授权付费资源，#212仍须新的明确最终发布/默认切换批准。
6. Blackman99

   self-assigned this

   on Sep 22, 2026
7. Blackman99 commented on Sep 22, 2026

   

   Blackman99

   on Sep 22, 2026

   OwnerAuthor

   More actions

   Integrated Ticket 33 / #165 onto rewrite/grok-dsh-20260920.

   Worker 2070b17457fb30c8e9dedbfd5aa593ae902c9fcf (base 1c77a8a) cherry-picked cleanly as 8106810..7248642. The integration tree matches the worker tree. Pushed without force: 1c77a8a..7248642.

   Combined-tree checks:

   • pnpm run typecheck: pass
   • TMPDIR=/tmp pnpm test: 80 files, 2246 tests, pass
   • TMPDIR=/tmp cargo test --locked --offline --workspace: pass (codsh-rust 156, plus upstream)
   • cargo test --bin codsh-rust -- plugin::: 27 passed, including git_allowlist_keeps_github_path_case_distinct
   • cargo fmt --check and cargo clippy --locked --offline --all-targets -- -D warnings: pass
   • pnpm run build:rust staged the local candidate only
   • TMPDIR=/tmp python3 scripts/rust-plugin-pty-test.py: pass (strict-allowlist catalog ["allowed"], installed allowed-tools, /plugins, /marketplace, Ctrl+L does not open the overlay, overlay cancel, require-sha update, two-plugin dests, conflict, untrusted project scope)
   • Other packed Rust PTY suites passed except scripts/rust-compact-pty-test.py. That script and its mock are unchanged by this ticket. compact-fail reaches the failure banner, then the next prompt echoes TOKEN_KEEP_ORIGINAL instead of TOKEN_AFTER_FAIL. Reproduced twice on the combined tree. Not introduced by the plugin range.

   Marketplace add/list/update/remove and plugin install/update/uninstall record version, source, and license. Install requires --trust and does not grant execution. Spec #132 and descendant issues stay open.
8. Blackman99

   closed this as completedon Sep 22, 2026