Upgrade the runtime and native plugin API to OpenCode 2.0.24. Restore session-scoped learning, credential renewal, typed project queries and controlled frontend actions from the legacy Agent. Replace host Shell execution with an approved Landlock/seccomp executor and persistent per-session workspaces. Add typed Bocha search and Tianditu geocoding bridges using the owning session credential. Require a working kernel sandbox before startup and persist workspace files in deployments. Validation completed before this commit: TypeScript checks, 150 Bun tests, Docker build and UID 10001 sandbox execution, native Shell approval and session recovery. Tianditu succeeded; Bocha currently reports exhausted account quota. Unrelated investigation-report contract work is excluded.
19 lines
899 B
TypeScript
19 lines
899 B
TypeScript
import { tool } from "../tool.js";
|
|
import { getInternalBridgeConfig } from "../internalBridge.js";
|
|
|
|
export default tool({
|
|
description: "Read the current operational task's authorized task, plan, report, evidence and scoped investigation data from TJWater Server. Use this before investigating a task. It is read-only and does not expose credentials.",
|
|
args: {},
|
|
async execute(_args, context) {
|
|
const { baseUrl, internalToken } = getInternalBridgeConfig();
|
|
const url = new URL("/internal/operational-task/context", baseUrl);
|
|
url.searchParams.set("session_id", context.sessionID);
|
|
const response = await fetch(url, {
|
|
headers: { Accept: "application/json", "x-agent-internal-token": internalToken },
|
|
});
|
|
const text = await response.text();
|
|
if (!response.ok) throw new Error(`task context request failed (${response.status}): ${text}`);
|
|
return text;
|
|
},
|
|
});
|