91 lines
2.8 KiB
TypeScript
91 lines
2.8 KiB
TypeScript
import type { ClawdbotConfig } from "../../config/config.js";
|
|
import { resolveAgentConfig } from "../agent-scope.js";
|
|
import { expandToolGroups } from "../tool-policy.js";
|
|
import { DEFAULT_TOOL_ALLOW, DEFAULT_TOOL_DENY } from "./constants.js";
|
|
import type {
|
|
SandboxToolPolicy,
|
|
SandboxToolPolicyResolved,
|
|
SandboxToolPolicySource,
|
|
} from "./types.js";
|
|
|
|
export function isToolAllowed(policy: SandboxToolPolicy, name: string) {
|
|
const deny = new Set(expandToolGroups(policy.deny));
|
|
if (deny.has(name.toLowerCase())) return false;
|
|
const allow = expandToolGroups(policy.allow);
|
|
if (allow.length === 0) return true;
|
|
return allow.includes(name.toLowerCase());
|
|
}
|
|
|
|
export function resolveSandboxToolPolicyForAgent(
|
|
cfg?: ClawdbotConfig,
|
|
agentId?: string,
|
|
): SandboxToolPolicyResolved {
|
|
const agentConfig = cfg && agentId ? resolveAgentConfig(cfg, agentId) : undefined;
|
|
const agentAllow = agentConfig?.tools?.sandbox?.tools?.allow;
|
|
const agentDeny = agentConfig?.tools?.sandbox?.tools?.deny;
|
|
const globalAllow = cfg?.tools?.sandbox?.tools?.allow;
|
|
const globalDeny = cfg?.tools?.sandbox?.tools?.deny;
|
|
|
|
const allowSource = Array.isArray(agentAllow)
|
|
? ({
|
|
source: "agent",
|
|
key: "agents.list[].tools.sandbox.tools.allow",
|
|
} satisfies SandboxToolPolicySource)
|
|
: Array.isArray(globalAllow)
|
|
? ({
|
|
source: "global",
|
|
key: "tools.sandbox.tools.allow",
|
|
} satisfies SandboxToolPolicySource)
|
|
: ({
|
|
source: "default",
|
|
key: "tools.sandbox.tools.allow",
|
|
} satisfies SandboxToolPolicySource);
|
|
|
|
const denySource = Array.isArray(agentDeny)
|
|
? ({
|
|
source: "agent",
|
|
key: "agents.list[].tools.sandbox.tools.deny",
|
|
} satisfies SandboxToolPolicySource)
|
|
: Array.isArray(globalDeny)
|
|
? ({
|
|
source: "global",
|
|
key: "tools.sandbox.tools.deny",
|
|
} satisfies SandboxToolPolicySource)
|
|
: ({
|
|
source: "default",
|
|
key: "tools.sandbox.tools.deny",
|
|
} satisfies SandboxToolPolicySource);
|
|
|
|
const deny = Array.isArray(agentDeny)
|
|
? agentDeny
|
|
: Array.isArray(globalDeny)
|
|
? globalDeny
|
|
: [...DEFAULT_TOOL_DENY];
|
|
const allow = Array.isArray(agentAllow)
|
|
? agentAllow
|
|
: Array.isArray(globalAllow)
|
|
? globalAllow
|
|
: [...DEFAULT_TOOL_ALLOW];
|
|
|
|
const expandedDeny = expandToolGroups(deny);
|
|
let expandedAllow = expandToolGroups(allow);
|
|
|
|
// `image` is essential for multimodal workflows; always include it in sandboxed
|
|
// sessions unless explicitly denied.
|
|
if (
|
|
!expandedDeny.map((v) => v.toLowerCase()).includes("image") &&
|
|
!expandedAllow.map((v) => v.toLowerCase()).includes("image")
|
|
) {
|
|
expandedAllow = [...expandedAllow, "image"];
|
|
}
|
|
|
|
return {
|
|
allow: expandedAllow,
|
|
deny: expandedDeny,
|
|
sources: {
|
|
allow: allowSource,
|
|
deny: denySource,
|
|
},
|
|
};
|
|
}
|