jiang
7383ed6d13
Upgrade the runtime and native plugin API to OpenCode 2.0.24. Restore session-scoped learning, credential renewal, typed project queries and controlled frontend actions from the legacy Agent. Replace host Shell execution with an approved Landlock/seccomp executor and persistent per-session workspaces. Add typed Bocha search and Tianditu geocoding bridges using the owning session credential. Require a working kernel sandbox before startup and persist workspace files in deployments. Validation completed before this commit: TypeScript checks, 150 Bun tests, Docker build and UID 10001 sandbox execution, native Shell approval and session recovery. Tianditu succeeded; Bocha currently reports exhausted account quota. Unrelated investigation-report contract work is excluded.
29 lines
1.4 KiB
TypeScript
29 lines
1.4 KiB
TypeScript
import { tool } from "../tool.js";
|
|
import { getInternalBridgeConfig } from "../internalBridge.js";
|
|
|
|
export default tool({
|
|
description: "Request task-scoped access to one or more finite investigation data sources. This only creates a pending human review record. Do not query the requested sources until the approved scope appears in task context; after denial, mark the evidence gap and continue with available facts.",
|
|
args: {
|
|
request_id: tool.schema.string().uuid(),
|
|
node_id: tool.schema.string().min(1),
|
|
scopes: tool.schema.array(tool.schema.enum([
|
|
"workbench_runtime", "scada_devices", "scada_readings", "peripheral_points",
|
|
"peripheral_work_orders", "peripheral_observations", "peripheral_test_data",
|
|
])).min(1),
|
|
reason: tool.schema.string().min(1),
|
|
},
|
|
async execute(args, context) {
|
|
const { baseUrl, internalToken } = getInternalBridgeConfig();
|
|
const response = await fetch(`${baseUrl}/internal/operational-task/access-requests`, {
|
|
method: "POST",
|
|
headers: { "Content-Type": "application/json", "x-agent-internal-token": internalToken },
|
|
body: JSON.stringify({ session_id: context.sessionID, request: {
|
|
requestId: args.request_id, nodeId: args.node_id, scopes: args.scopes, reason: args.reason,
|
|
} }),
|
|
});
|
|
const text = await response.text();
|
|
if (!response.ok) throw new Error(`task data access request failed (${response.status}): ${text}`);
|
|
return text;
|
|
},
|
|
});
|