1use std::path::{Component, Path};
4use std::process::Stdio;
5use std::sync::Arc;
6
7use serde_json::Value;
8
9use crate::skills::registry::{RegisteredPluginCommand, RegisteredPluginCommandBackend};
10use crate::tools::{ToolCapabilities, ToolChannels, ToolLimits};
11use crate::{ToolContext, ToolRegistry};
12
13#[derive(Debug, Clone, PartialEq, Eq)]
14pub struct PluginCommandOutput {
15 pub status: Option<i32>,
16 pub stdout: String,
17 pub stderr: String,
18}
19
20fn validate_command_path(command: &str) -> crate::Result<()> {
21 let path = Path::new(command);
22 if path.is_absolute() {
23 return Err(crate::RuntimeError::Tool(
24 "plugin command must be relative to plugin root or resolved from PATH".to_string(),
25 ));
26 }
27 if path.components().any(|c| matches!(c, Component::ParentDir)) {
28 return Err(crate::RuntimeError::Tool(
29 "plugin command may not contain '..' path components".to_string(),
30 ));
31 }
32 Ok(())
33}
34
35fn interpolate_slash_args(value: Value, slash_args: &str) -> Value {
36 match value {
37 Value::String(s) if s == "${args}" => Value::String(slash_args.to_string()),
38 Value::String(s) => Value::String(s.replace("${args}", slash_args)),
39 Value::Array(items) => Value::Array(
40 items
41 .into_iter()
42 .map(|v| interpolate_slash_args(v, slash_args))
43 .collect(),
44 ),
45 Value::Object(obj) => Value::Object(
46 obj.into_iter()
47 .map(|(k, v)| (k, interpolate_slash_args(v, slash_args)))
48 .collect(),
49 ),
50 other => other,
51 }
52}
53
54pub async fn execute_plugin_command(
55 command: &RegisteredPluginCommand,
56 slash_args: &str,
57) -> crate::Result<PluginCommandOutput> {
58 match &command.backend {
59 RegisteredPluginCommandBackend::Shell {
60 command: executable,
61 args,
62 } => {
63 validate_command_path(executable)?;
64
65 let mut cmd = tokio::process::Command::new(executable);
66 cmd.current_dir(&command.plugin_root)
67 .args(args)
68 .args(slash_words(slash_args))
69 .stdin(Stdio::null())
70 .stdout(Stdio::piped())
71 .stderr(Stdio::piped());
72
73 let output = cmd.output().await.map_err(|e| {
74 crate::RuntimeError::Tool(format!(
75 "failed to run plugin command /{}:{}: {}",
76 command.plugin, command.name, e
77 ))
78 })?;
79
80 Ok(PluginCommandOutput {
81 status: output.status.code(),
82 stdout: String::from_utf8_lossy(&output.stdout).to_string(),
83 stderr: String::from_utf8_lossy(&output.stderr).to_string(),
84 })
85 }
86 RegisteredPluginCommandBackend::SkillPrompt { skill, prompt } => {
87 let mut text = prompt.replace("${args}", slash_args);
88 if !slash_args.trim().is_empty() && !prompt.contains("${args}") {
89 text.push('\n');
90 text.push_str(slash_args);
91 }
92 Ok(PluginCommandOutput {
93 status: Some(0),
94 stdout: format!(
95 "Skill prompt for /{}:{} (skill: {})\n{}",
96 command.plugin, command.name, skill, text
97 ),
98 stderr: String::new(),
99 })
100 }
101 RegisteredPluginCommandBackend::ExtensionTool { .. } => Err(crate::RuntimeError::Tool(
102 "extension-backed plugin command requires execute_plugin_command_with_tools"
103 .to_string(),
104 )),
105 RegisteredPluginCommandBackend::Interactive { .. } => Err(crate::RuntimeError::Tool(
106 "interactive plugin command requires ExtensionManager::invoke_command".to_string(),
107 )),
108 }
109}
110
111pub async fn execute_plugin_command_with_tools(
112 command: &RegisteredPluginCommand,
113 slash_args: &str,
114 tools: Arc<tokio::sync::RwLock<ToolRegistry>>,
115) -> crate::Result<PluginCommandOutput> {
116 if let RegisteredPluginCommandBackend::ExtensionTool { tool, input } = &command.backend {
117 let runtime_tool_name = format!("{}:{}", command.plugin, tool);
118 let params = interpolate_slash_args(input.clone(), slash_args);
119 let registry = tools.read().await;
120 let tool = registry
121 .get(&runtime_tool_name)
122 .ok_or_else(|| {
123 crate::RuntimeError::Tool(format!(
124 "extension tool '{}' is not registered",
125 runtime_tool_name
126 ))
127 })?
128 .clone();
129 drop(registry);
130 let stdout = tool.execute(params, empty_tool_context()).await?;
131 Ok(PluginCommandOutput {
132 status: Some(0),
133 stdout,
134 stderr: String::new(),
135 })
136 } else {
137 execute_plugin_command(command, slash_args).await
138 }
139}
140
141fn empty_tool_context() -> ToolContext {
142 ToolContext {
143 channels: ToolChannels {
144 tx_delta: None,
145 tx_events: None,
146 },
147 capabilities: ToolCapabilities {
148 launch_cancel: None,
149 memory_backend: None,
150 watcher_exit_path: None,
151 tool_register_tx: None,
152 session_manager: None,
153 subagent_registry: None,
154 event_queue: None,
155 delegation_parent: None,
156 codex_parent_plan: None,
157 secret_prompt: None,
158 orchestration: None,
159 tool_activation: None,
160 mcp_leases: None,
161 extension_leases: None,
162 memory_context: None,
163 cwd: None,
164 env: None,
165 env_stripped: Vec::new(),
166 env_warned: Default::default(),
167 },
168 limits: ToolLimits {
169 max_tool_output: 30_000,
170 max_tool_buffer: 256 * 1024,
171 bash_timeout: 30,
172 bash_max_timeout: 300,
173 subagent_timeout: 300,
174 },
175 }
176}
177
178fn slash_words(input: &str) -> Vec<String> {
179 input.split_whitespace().map(str::to_string).collect()
180}
181
182#[cfg(test)]
183mod tests {
184 use super::*;
185 use crate::Tool;
186 use async_trait::async_trait;
187 use std::path::PathBuf;
188
189 fn cmd(command: &str, args: Vec<&str>, root: PathBuf) -> RegisteredPluginCommand {
190 RegisteredPluginCommand {
191 plugin: "p".to_string(),
192 name: "hello".to_string(),
193 description: None,
194 backend: RegisteredPluginCommandBackend::Shell {
195 command: command.to_string(),
196 args: args.into_iter().map(str::to_string).collect(),
197 },
198 plugin_root: root,
199 }
200 }
201
202 fn tempdir() -> PathBuf {
203 let dir = std::env::temp_dir().join(format!(
204 "synaps-plugin-cmd-test-{}-{}",
205 std::process::id(),
206 crate::epoch_millis()
207 ));
208 std::fs::create_dir_all(&dir).unwrap();
209 dir
210 }
211
212 #[tokio::test]
213 async fn execute_plugin_command_runs_from_plugin_root_and_appends_slash_args() {
214 let root = tempdir();
215 let command = cmd("printf", vec!["cwd=%s arg=%s", "."], root);
216
217 let output = execute_plugin_command(&command, "extra").await.unwrap();
218
219 assert_eq!(output.status, Some(0));
220 assert_eq!(output.stdout, "cwd=. arg=extra");
221 }
222
223 #[tokio::test]
224 async fn execute_plugin_command_rejects_parent_dir_command_path() {
225 let root = tempdir();
226 let command = cmd("../evil", vec![], root);
227
228 let result = execute_plugin_command(&command, "").await;
229
230 assert!(result.is_err());
231 }
232
233 #[tokio::test]
234 async fn skill_prompt_command_outputs_prompt_with_args() {
235 let command = RegisteredPluginCommand {
236 plugin: "p".to_string(),
237 name: "review".to_string(),
238 description: None,
239 backend: RegisteredPluginCommandBackend::SkillPrompt {
240 skill: "reviewer".to_string(),
241 prompt: "Review: ${args}".to_string(),
242 },
243 plugin_root: PathBuf::from("/tmp/p"),
244 };
245
246 let output = execute_plugin_command(&command, "diff").await.unwrap();
247 assert_eq!(output.status, Some(0));
248 assert!(output.stdout.contains("Review: diff"));
249 }
250
251 struct EchoTool;
252
253 #[async_trait]
254 impl Tool for EchoTool {
255 fn name(&self) -> &str {
256 "p:echo"
257 }
258 fn description(&self) -> &str {
259 "echo"
260 }
261 fn parameters(&self) -> Value {
262 serde_json::json!({"type":"object"})
263 }
264 async fn execute(&self, params: Value, _ctx: ToolContext) -> crate::Result<String> {
265 Ok(format!("echo {}", params["text"].as_str().unwrap()))
266 }
267 }
268
269 #[tokio::test]
270 async fn extension_tool_command_executes_namespaced_registered_tool() {
271 let command = RegisteredPluginCommand {
272 plugin: "p".to_string(),
273 name: "echo".to_string(),
274 description: None,
275 backend: RegisteredPluginCommandBackend::ExtensionTool {
276 tool: "echo".to_string(),
277 input: serde_json::json!({"text":"${args}"}),
278 },
279 plugin_root: PathBuf::from("/tmp/p"),
280 };
281 let registry = Arc::new(tokio::sync::RwLock::new(ToolRegistry::without_subagent()));
282 registry.write().await.register(Arc::new(EchoTool));
283
284 let output = execute_plugin_command_with_tools(&command, "hello", registry)
285 .await
286 .unwrap();
287
288 assert_eq!(output.status, Some(0));
289 assert_eq!(output.stdout, "echo hello");
290 }
291}