ismeth
7a03d7bea3
ATHENA_RESTRICTIONS only denied write and edit, missing call_omo_agent that the agent factory already denies. This caused 6 callers of getAgentToolRestrictions() to get incomplete restrictions. Ultraworked with [Sisyphus](https://github.com/code-yeongyu/oh-my-opencode) Co-authored-by: Sisyphus <clio-agent@sisyphuslabs.ai>
85 lines
2.1 KiB
TypeScript
85 lines
2.1 KiB
TypeScript
import { stripInvisibleAgentCharacters } from "./agent-display-names"
|
|
|
|
/**
|
|
* Agent tool restrictions for session.prompt calls.
|
|
* OpenCode SDK's session.prompt `tools` parameter expects boolean values.
|
|
* true = tool allowed, false = tool denied.
|
|
*/
|
|
|
|
import { createAgentToolRestrictions } from "./permission-compat"
|
|
|
|
const EXPLORATION_AGENT_DENYLIST: Record<string, boolean> = {
|
|
write: false,
|
|
edit: false,
|
|
task: false,
|
|
call_omo_agent: false,
|
|
}
|
|
|
|
const ATHENA_RESTRICTIONS = permissionToToolBooleans(
|
|
createAgentToolRestrictions(["write", "edit", "call_omo_agent"]).permission
|
|
)
|
|
|
|
const AGENT_RESTRICTIONS: Record<string, Record<string, boolean>> = {
|
|
explore: EXPLORATION_AGENT_DENYLIST,
|
|
|
|
librarian: EXPLORATION_AGENT_DENYLIST,
|
|
|
|
oracle: {
|
|
write: false,
|
|
edit: false,
|
|
task: false,
|
|
call_omo_agent: false,
|
|
},
|
|
|
|
metis: {
|
|
write: false,
|
|
edit: false,
|
|
task: false,
|
|
},
|
|
|
|
momus: {
|
|
write: false,
|
|
edit: false,
|
|
task: false,
|
|
},
|
|
|
|
"multimodal-looker": {
|
|
read: true,
|
|
},
|
|
|
|
"sisyphus-junior": {
|
|
task: false,
|
|
},
|
|
|
|
athena: ATHENA_RESTRICTIONS,
|
|
|
|
"council-member": {
|
|
write: false,
|
|
edit: false,
|
|
task: false,
|
|
call_omo_agent: false,
|
|
},
|
|
}
|
|
|
|
function permissionToToolBooleans(
|
|
permission: Record<string, "ask" | "allow" | "deny">
|
|
): Record<string, boolean> {
|
|
return Object.fromEntries(
|
|
Object.entries(permission).map(([tool, value]) => [tool, value === "allow"])
|
|
)
|
|
}
|
|
|
|
export function getAgentToolRestrictions(agentName: string): Record<string, boolean> {
|
|
// Custom/unknown agents get no restrictions (empty object), matching Claude Code's
|
|
// trust model where project-registered agents retain full tool access including bash.
|
|
const stripped = stripInvisibleAgentCharacters(agentName)
|
|
return AGENT_RESTRICTIONS[stripped]
|
|
?? Object.entries(AGENT_RESTRICTIONS).find(([key]) => key.toLowerCase() === stripped.toLowerCase())?.[1]
|
|
?? {}
|
|
}
|
|
|
|
export function hasAgentToolRestrictions(agentName: string): boolean {
|
|
const restrictions = getAgentToolRestrictions(agentName)
|
|
return Object.keys(restrictions).length > 0
|
|
}
|