a55b4dcb7e
Add a toolPolicy parameter to sessions_spawn that allows the parent agent to restrict the tool set available to spawned sub-agents. The new toolPolicy parameter accepts allow and deny arrays: - allow: Narrows the sub-agent to only these tools (on top of default deny list) - deny: Additional tools/groups to block (appended to default deny list) Supports tool group syntax (group:web, group:fs, group:runtime, etc.) Implementation: - SessionEntry gains spawnToolPolicy field (persisted per-session) - sessions.patch accepts spawnToolPolicy for subagent sessions - Policy is immutable once set (cannot be changed after spawn) - Merges with existing default subagent deny list - Applied in both embedded agent path and HTTP tool invoke path
114 lines
3.9 KiB
TypeScript
114 lines
3.9 KiB
TypeScript
import { Type } from "@sinclair/typebox";
|
|
|
|
import { NonEmptyString, SessionLabelString } from "./primitives.js";
|
|
|
|
export const SessionsListParamsSchema = Type.Object(
|
|
{
|
|
limit: Type.Optional(Type.Integer({ minimum: 1 })),
|
|
activeMinutes: Type.Optional(Type.Integer({ minimum: 1 })),
|
|
includeGlobal: Type.Optional(Type.Boolean()),
|
|
includeUnknown: Type.Optional(Type.Boolean()),
|
|
/**
|
|
* Read first 8KB of each session transcript to derive title from first user message.
|
|
* Performs a file read per session - use `limit` to bound result set on large stores.
|
|
*/
|
|
includeDerivedTitles: Type.Optional(Type.Boolean()),
|
|
/**
|
|
* Read last 16KB of each session transcript to extract most recent message preview.
|
|
* Performs a file read per session - use `limit` to bound result set on large stores.
|
|
*/
|
|
includeLastMessage: Type.Optional(Type.Boolean()),
|
|
label: Type.Optional(SessionLabelString),
|
|
spawnedBy: Type.Optional(NonEmptyString),
|
|
agentId: Type.Optional(NonEmptyString),
|
|
search: Type.Optional(Type.String()),
|
|
},
|
|
{ additionalProperties: false },
|
|
);
|
|
|
|
export const SessionsPreviewParamsSchema = Type.Object(
|
|
{
|
|
keys: Type.Array(NonEmptyString, { minItems: 1 }),
|
|
limit: Type.Optional(Type.Integer({ minimum: 1 })),
|
|
maxChars: Type.Optional(Type.Integer({ minimum: 20 })),
|
|
},
|
|
{ additionalProperties: false },
|
|
);
|
|
|
|
export const SessionsResolveParamsSchema = Type.Object(
|
|
{
|
|
key: Type.Optional(NonEmptyString),
|
|
sessionId: Type.Optional(NonEmptyString),
|
|
label: Type.Optional(SessionLabelString),
|
|
agentId: Type.Optional(NonEmptyString),
|
|
spawnedBy: Type.Optional(NonEmptyString),
|
|
includeGlobal: Type.Optional(Type.Boolean()),
|
|
includeUnknown: Type.Optional(Type.Boolean()),
|
|
},
|
|
{ additionalProperties: false },
|
|
);
|
|
|
|
export const SessionsPatchParamsSchema = Type.Object(
|
|
{
|
|
key: NonEmptyString,
|
|
label: Type.Optional(Type.Union([SessionLabelString, Type.Null()])),
|
|
thinkingLevel: Type.Optional(Type.Union([NonEmptyString, Type.Null()])),
|
|
verboseLevel: Type.Optional(Type.Union([NonEmptyString, Type.Null()])),
|
|
reasoningLevel: Type.Optional(Type.Union([NonEmptyString, Type.Null()])),
|
|
responseUsage: Type.Optional(
|
|
Type.Union([
|
|
Type.Literal("off"),
|
|
Type.Literal("tokens"),
|
|
Type.Literal("full"),
|
|
// Backward compat with older clients/stores.
|
|
Type.Literal("on"),
|
|
Type.Null(),
|
|
]),
|
|
),
|
|
elevatedLevel: Type.Optional(Type.Union([NonEmptyString, Type.Null()])),
|
|
execHost: Type.Optional(Type.Union([NonEmptyString, Type.Null()])),
|
|
execSecurity: Type.Optional(Type.Union([NonEmptyString, Type.Null()])),
|
|
execAsk: Type.Optional(Type.Union([NonEmptyString, Type.Null()])),
|
|
execNode: Type.Optional(Type.Union([NonEmptyString, Type.Null()])),
|
|
model: Type.Optional(Type.Union([NonEmptyString, Type.Null()])),
|
|
spawnedBy: Type.Optional(Type.Union([NonEmptyString, Type.Null()])),
|
|
spawnToolPolicy: Type.Optional(
|
|
Type.Union([
|
|
Type.Object({
|
|
allow: Type.Optional(Type.Array(Type.String())),
|
|
deny: Type.Optional(Type.Array(Type.String())),
|
|
}),
|
|
Type.Null(),
|
|
]),
|
|
),
|
|
sendPolicy: Type.Optional(
|
|
Type.Union([Type.Literal("allow"), Type.Literal("deny"), Type.Null()]),
|
|
),
|
|
groupActivation: Type.Optional(
|
|
Type.Union([Type.Literal("mention"), Type.Literal("always"), Type.Null()]),
|
|
),
|
|
},
|
|
{ additionalProperties: false },
|
|
);
|
|
|
|
export const SessionsResetParamsSchema = Type.Object(
|
|
{ key: NonEmptyString },
|
|
{ additionalProperties: false },
|
|
);
|
|
|
|
export const SessionsDeleteParamsSchema = Type.Object(
|
|
{
|
|
key: NonEmptyString,
|
|
deleteTranscript: Type.Optional(Type.Boolean()),
|
|
},
|
|
{ additionalProperties: false },
|
|
);
|
|
|
|
export const SessionsCompactParamsSchema = Type.Object(
|
|
{
|
|
key: NonEmptyString,
|
|
maxLines: Type.Optional(Type.Integer({ minimum: 1 })),
|
|
},
|
|
{ additionalProperties: false },
|
|
);
|