Henry
5a2a063a76
Co-authored-by: nova28 <17953305+nova28@users.noreply.github.com> Co-authored-by: Carlos Florencio <carlosmflorencio@gmail.com>
74 lines
3.2 KiB
Go
74 lines
3.2 KiB
Go
// Package runtime defines the narrow execution contract used by Office agent runs.
|
|
package runtime
|
|
|
|
// Capabilities describes what an agent run may do through the runtime HTTP
|
|
// action surface. These permissions are serialized into the run JWT.
|
|
type Capabilities struct {
|
|
CanPostComments bool `json:"post_comment"`
|
|
CanUpdateTaskStatus bool `json:"update_task_status"`
|
|
CanCreateTasks bool `json:"create_task"`
|
|
CanCreateSubtasks bool `json:"create_subtask"`
|
|
CanCreateAgents bool `json:"create_agent"`
|
|
CanListProjects bool `json:"list_projects"`
|
|
CanCreateProjects bool `json:"create_project"`
|
|
CanRequestApproval bool `json:"request_approval"`
|
|
CanReadMemory bool `json:"read_memory"`
|
|
CanWriteMemory bool `json:"write_memory"`
|
|
CanListSkills bool `json:"list_skills"`
|
|
CanSpawnAgentRun bool `json:"spawn_agent_run"`
|
|
CanModifyAgents bool `json:"modify_agents"`
|
|
CanDeleteSkills bool `json:"delete_skills"`
|
|
CanListTasks bool `json:"list_tasks"`
|
|
CanHandoffTasks bool `json:"handoff_task"`
|
|
AllowedTaskIDs []string `json:"allowed_task_ids"`
|
|
// TaskScopeSource marks which source produced AllowedTaskIDs — "payload"
|
|
// or "runner_set" (both final), or "unavailable" (provisional). Empty for
|
|
// a snapshot persisted before this marker existed. See
|
|
// docs/specs/office/system-design/taskless-coordinator-authority-01.md#snapshot-semantics.
|
|
TaskScopeSource string `json:"task_scope_source,omitempty"`
|
|
}
|
|
|
|
// Task scope source markers. "payload" and "runner_set" are final: a build
|
|
// reads a final marker back verbatim rather than re-deriving the scope.
|
|
// "unavailable" is provisional and is retried on the next build.
|
|
const (
|
|
TaskScopeSourcePayload = "payload"
|
|
TaskScopeSourceRunnerSet = "runner_set"
|
|
TaskScopeSourceUnavailable = "unavailable"
|
|
)
|
|
|
|
// RunContext is the identity, runtime-permission, and advertised-action
|
|
// envelope for one agent execution. AvailableActions only describes tools the
|
|
// prompt can advertise. The backend performs live authorization when a tool is
|
|
// called.
|
|
type RunContext struct {
|
|
WorkspaceID string `json:"workspace_id"`
|
|
AgentID string `json:"agent_id"`
|
|
TaskID string `json:"task_id"`
|
|
RunID string `json:"run_id"`
|
|
SessionID string `json:"session_id"`
|
|
Reason string `json:"reason"`
|
|
Capabilities Capabilities `json:"capabilities"`
|
|
AvailableActions []string `json:"available_actions,omitempty"`
|
|
}
|
|
|
|
// CanMutateTask reports whether the run may mutate the given task. The
|
|
// wildcard sentinel is never a real task id, so a target of exactly
|
|
// WildcardTaskScope is refused outright — otherwise a run whose own TaskID
|
|
// is the sentinel (a payload that injected task_id="*" stays task-bound,
|
|
// see context_builder.go#build) would self-match against it.
|
|
func (c RunContext) CanMutateTask(taskID string) bool {
|
|
if taskID == "" || taskID == WildcardTaskScope {
|
|
return false
|
|
}
|
|
if taskID == c.TaskID {
|
|
return true
|
|
}
|
|
for _, allowed := range c.Capabilities.AllowedTaskIDs {
|
|
if allowed == WildcardTaskScope || allowed == taskID {
|
|
return true
|
|
}
|
|
}
|
|
return false
|
|
}
|