opencode/picoclaw
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat: add ToolPolicyConfig for per-agent tool filtering

Browse source 
Add ToolPolicyConfig struct with Allow/Deny string slices supporting
both individual tool names and group refs (e.g. "group:web"). Add
ToolPolicy field to AgentConfig. Backward compatible: nil = full access.
This commit is contained in:
Leandro Barbosa 2026-02-18 15:45:50 -03:00
parent 148623f07e
commit f3a838fe45
1 changed files with 9 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

9
pkg/config/config.go
View file

@ -100,6 +100,14 @@ func (m AgentModelConfig) MarshalJSON() ([]byte, error) {
return json.Marshal(raw{Primary: m.Primary, Fallbacks: m.Fallbacks}) return json.Marshal(raw{Primary: m.Primary, Fallbacks: m.Fallbacks})
} }
// ToolPolicyConfig defines allow/deny lists for per-agent tool filtering.
// Tool names can be individual (e.g. "exec") or group refs (e.g. "group:web").
// nil = full access (no filtering applied).
type ToolPolicyConfig struct {
Allow []string `json:"allow,omitempty"` // tool names or group refs
Deny []string `json:"deny,omitempty"` // tool names or group refs
}
type AgentConfig struct { type AgentConfig struct {
ID string `json:"id"` ID string `json:"id"`
Default bool `json:"default,omitempty"` Default bool `json:"default,omitempty"`
@ -111,6 +119,7 @@ type AgentConfig struct {
Skills []string `json:"skills,omitempty"` Skills []string `json:"skills,omitempty"`
Capabilities []string `json:"capabilities,omitempty"` Capabilities []string `json:"capabilities,omitempty"`
Subagents *SubagentsConfig `json:"subagents,omitempty"` Subagents *SubagentsConfig `json:"subagents,omitempty"`
ToolPolicy *ToolPolicyConfig `json:"tool_policy,omitempty"`
} }
type SubagentsConfig struct { type SubagentsConfig struct {