model.go RawHistoryFolder

1package subagents
2
3import "time"
4
5// WebSearchPolicy is the capability decision propagated from a host agent to
6// a resident child.
7type WebSearchPolicy uint8
8
9const (
10	WebSearchInherit WebSearchPolicy = iota
11	WebSearchDeny
12	WebSearchAllow
13)
14
15func (p WebSearchPolicy) Allows() bool { return p == WebSearchAllow }
16
17func (p WebSearchPolicy) String() string {
18	switch p {
19	case WebSearchAllow:
20		return "allow"
21	case WebSearchDeny:
22		return "deny"
23	case WebSearchInherit:
24		return "inherit"
25	default:
26		// Unknown values must not serialize as inherit: that would let a
27		// worker fall back to its own default and potentially regain access.
28		return "deny"
29	}
30}
31
32// WorkspaceMode selects how a child is allowed to access the repository.
33type WorkspaceMode string
34
35const (
36	WorkspaceShared   WorkspaceMode = "shared"
37	WorkspaceWorktree WorkspaceMode = "worktree"
38)
39
40// CaptureMode controls which durable worktree output is collected.
41type CaptureMode string
42
43const (
44	CapturePatch CaptureMode = "patch"
45	CaptureDiff  CaptureMode = "diff"
46)
47
48// SubagentPolicy contains the resident manager's limits and capability ceiling.
49type SubagentPolicy struct {
50	MaxConcurrent int
51	QueueTimeout  time.Duration
52	AllowedTools  []string
53	AllowedRoots  []string
54}
55
56func (p SubagentPolicy) allowedTool(name string) bool {
57	if len(p.AllowedTools) == 0 {
58		return true
59	}
60	for _, allowed := range p.AllowedTools {
61		if allowed == name {
62			return true
63		}
64	}
65	return false
66}
67
68// AllowsTool reports whether a child may receive name under the host policy.
69// An empty allowlist retains the historical unrestricted policy.
70func (p SubagentPolicy) AllowsTool(name string) bool { return p.allowedTool(name) }