import { stripInvisibleAgentCharacters } from "./agent-display-names" /** * Agent tool restrictions for session.prompt calls. * OpenCode SDK's session.prompt `tools` parameter expects boolean values. * true = tool allowed, false = tool denied. */ import { createAgentToolRestrictions } from "./permission-compat" const EXPLORATION_AGENT_DENYLIST: Record = { write: false, edit: false, task: false, call_omo_agent: false, } const ATHENA_RESTRICTIONS = permissionToToolBooleans( createAgentToolRestrictions(["write", "edit", "call_omo_agent"]).permission ) const AGENT_RESTRICTIONS: Record> = { explore: EXPLORATION_AGENT_DENYLIST, librarian: EXPLORATION_AGENT_DENYLIST, oracle: { write: false, edit: false, task: false, call_omo_agent: false, }, metis: { write: false, edit: false, task: false, }, momus: { write: false, edit: false, task: false, }, "multimodal-looker": { read: true, }, "sisyphus-junior": { task: false, }, athena: ATHENA_RESTRICTIONS, "council-member": { write: false, edit: false, task: false, call_omo_agent: false, }, } function permissionToToolBooleans( permission: Record ): Record { return Object.fromEntries( Object.entries(permission).map(([tool, value]) => [tool, value === "allow"]) ) } export function getAgentToolRestrictions(agentName: string): Record { // Custom/unknown agents get no restrictions (empty object), matching Claude Code's // trust model where project-registered agents retain full tool access including bash. const stripped = stripInvisibleAgentCharacters(agentName) return AGENT_RESTRICTIONS[stripped] ?? Object.entries(AGENT_RESTRICTIONS).find(([key]) => key.toLowerCase() === stripped.toLowerCase())?.[1] ?? {} } export function hasAgentToolRestrictions(agentName: string): boolean { const restrictions = getAgentToolRestrictions(agentName) return Object.keys(restrictions).length > 0 }