83b557a6fc
Register sessions_spawn tool in the tool system with TypeBox schema. Subagents are blocked from spawning nested subagents via both tool policy (DEFAULT_SUBAGENT_TOOL_DENY) and runtime guard. Add group:subagent tool group and parentSessionId to AgentOptions. Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
140 lines
3.3 KiB
TypeScript
140 lines
3.3 KiB
TypeScript
/**
|
|
* Tool groups and profiles for policy-based filtering.
|
|
*
|
|
* Groups provide shortcuts for allowing/denying multiple tools at once.
|
|
* Profiles are predefined tool sets for common use cases.
|
|
*/
|
|
|
|
export type ToolProfileId = "minimal" | "coding" | "web" | "full";
|
|
|
|
/**
|
|
* Tool name aliases for compatibility.
|
|
* Maps alternative names to canonical tool names.
|
|
*/
|
|
export const TOOL_NAME_ALIASES: Record<string, string> = {
|
|
bash: "exec",
|
|
shell: "exec",
|
|
search: "web_search",
|
|
fetch: "web_fetch",
|
|
};
|
|
|
|
/**
|
|
* Tool groups - shortcuts for multiple tools.
|
|
* Use "group:name" in allow/deny lists.
|
|
*/
|
|
export const TOOL_GROUPS: Record<string, string[]> = {
|
|
// File system operations
|
|
"group:fs": ["read", "write", "edit", "glob"],
|
|
|
|
// Runtime/execution tools
|
|
"group:runtime": ["exec", "process"],
|
|
|
|
// Web tools
|
|
"group:web": ["web_search", "web_fetch"],
|
|
|
|
// Memory tools (requires profileId)
|
|
"group:memory": ["memory_get", "memory_set", "memory_delete", "memory_list"],
|
|
|
|
// Subagent tools
|
|
"group:subagent": ["sessions_spawn"],
|
|
|
|
// All core tools
|
|
"group:core": [
|
|
"read",
|
|
"write",
|
|
"edit",
|
|
"glob",
|
|
"exec",
|
|
"process",
|
|
"web_search",
|
|
"web_fetch",
|
|
],
|
|
};
|
|
|
|
/**
|
|
* Tool profiles - predefined tool sets.
|
|
*/
|
|
export const TOOL_PROFILES: Record<ToolProfileId, { allow?: string[]; deny?: string[] }> = {
|
|
// Minimal: no tools (useful for chat-only agents)
|
|
minimal: {
|
|
allow: [],
|
|
},
|
|
|
|
// Coding: file system + execution (default for coding tasks)
|
|
coding: {
|
|
allow: ["group:fs", "group:runtime"],
|
|
},
|
|
|
|
// Web: coding + web access
|
|
web: {
|
|
allow: ["group:fs", "group:runtime", "group:web"],
|
|
},
|
|
|
|
// Full: no restrictions
|
|
full: {},
|
|
};
|
|
|
|
/**
|
|
* Default tools denied for subagents.
|
|
* Subagents should not have access to session management or system tools.
|
|
*/
|
|
export const DEFAULT_SUBAGENT_TOOL_DENY: string[] = [
|
|
// Subagents cannot spawn subagents (no nested spawning)
|
|
"sessions_spawn",
|
|
];
|
|
|
|
/**
|
|
* Normalize a tool name to its canonical form.
|
|
*/
|
|
export function normalizeToolName(name: string): string {
|
|
const normalized = name.trim().toLowerCase();
|
|
return TOOL_NAME_ALIASES[normalized] ?? normalized;
|
|
}
|
|
|
|
/**
|
|
* Normalize a list of tool names.
|
|
*/
|
|
export function normalizeToolList(list?: string[]): string[] {
|
|
if (!list) return [];
|
|
return list.map(normalizeToolName).filter(Boolean);
|
|
}
|
|
|
|
/**
|
|
* Expand group references in a tool list.
|
|
* "group:fs" -> ["read", "write", "edit", "glob"]
|
|
*/
|
|
export function expandToolGroups(list?: string[]): string[] {
|
|
const normalized = normalizeToolList(list);
|
|
const expanded: string[] = [];
|
|
|
|
for (const value of normalized) {
|
|
const group = TOOL_GROUPS[value];
|
|
if (group) {
|
|
expanded.push(...group);
|
|
continue;
|
|
}
|
|
expanded.push(value);
|
|
}
|
|
|
|
return Array.from(new Set(expanded));
|
|
}
|
|
|
|
/**
|
|
* Get the policy for a profile.
|
|
*/
|
|
export function getProfilePolicy(
|
|
profile?: ToolProfileId,
|
|
): { allow?: string[]; deny?: string[] } | undefined {
|
|
if (!profile) return undefined;
|
|
const resolved = TOOL_PROFILES[profile];
|
|
if (!resolved) return undefined;
|
|
if (!resolved.allow && !resolved.deny) return undefined;
|
|
const result: { allow?: string[]; deny?: string[] } = {};
|
|
if (resolved.allow) {
|
|
result.allow = [...resolved.allow];
|
|
}
|
|
if (resolved.deny) {
|
|
result.deny = [...resolved.deny];
|
|
}
|
|
return result;
|
|
}
|