mirror of
https://bitbucket.org/siakitem/my-pi.git
synced 2026-08-28 08:35:57 +00:00
71 lines
3.0 KiB
TypeScript
71 lines
3.0 KiB
TypeScript
/**
|
|
* model-scope.ts — `scopeModels` policy, shared by the top-level Agent tool and
|
|
* the nested delegation tools so a nested spawn can't escape the allowlist the
|
|
* top-level path enforces.
|
|
*
|
|
* State lives here (rather than in an index.ts closure) for the same reason
|
|
* `disableDefaults` lives in agent-types.ts: both entry points need it.
|
|
*/
|
|
|
|
import { isModelInScope, type ModelRegistryRef, readEnabledModels, resolveEnabledModels } from "./enabled-models.js";
|
|
|
|
/**
|
|
* When enabled, subagent model choices are validated against `enabledModels`
|
|
* from pi's settings — both global `<agentDir>/settings.json` and project-local
|
|
* `<cwd>/.pi/settings.json` (project overrides global). Off by default; opt-in
|
|
* via `/agents → Settings`. See the SubagentsSettings.scopeModels docstring for
|
|
* the hard-error vs warn-and-proceed policy and its rationale.
|
|
*/
|
|
let scopeModelsEnabled = false;
|
|
|
|
export function isScopeModelsEnabled(): boolean { return scopeModelsEnabled; }
|
|
export function setScopeModelsEnabled(enabled: boolean): void { scopeModelsEnabled = enabled; }
|
|
|
|
export type ModelScopeVerdict =
|
|
/** In scope, or nothing to validate against (feature off / no allowlist). */
|
|
| { kind: "ok" }
|
|
/** Caller-supplied out-of-scope choice — refuse the spawn with this message. */
|
|
| { kind: "error"; message: string }
|
|
/** Frontmatter-pinned or parent-inherited — proceed, but tell the user. */
|
|
| { kind: "warn"; message: string };
|
|
|
|
/**
|
|
* Check the effective resolved model against the user's enabledModels list.
|
|
*
|
|
* scopeModels guards against *runtime* LLM choices, not user-level config:
|
|
* - Caller-supplied out-of-scope → hard error (the orchestrator made an explicit
|
|
* out-of-scope choice; surface it so it picks differently).
|
|
* - Frontmatter-pinned or parent-inherited out-of-scope → warn but proceed (the
|
|
* user authored/installed this agent or chose the parent's model; trust it).
|
|
*/
|
|
export function checkModelScope(args: {
|
|
model: { provider: string; id: string } | undefined;
|
|
cwd: string;
|
|
modelRegistry: ModelRegistryRef;
|
|
/** True when the model came from the tool call rather than frontmatter. */
|
|
callerSupplied: boolean;
|
|
/** Display name used in the warning toast. */
|
|
agentLabel: string;
|
|
/** The raw `model:` input, when there was one. */
|
|
modelInput?: string;
|
|
}): ModelScopeVerdict {
|
|
const { model, cwd, modelRegistry, callerSupplied, agentLabel, modelInput } = args;
|
|
if (!scopeModelsEnabled || !model) return { kind: "ok" };
|
|
|
|
const allowed = resolveEnabledModels(readEnabledModels(cwd), modelRegistry, cwd);
|
|
if (!allowed || isModelInScope(model, allowed)) return { kind: "ok" };
|
|
|
|
if (callerSupplied) {
|
|
const list = [...allowed].sort().map(m => ` ${m}`).join("\n");
|
|
return {
|
|
kind: "error",
|
|
message: `Model not in scope: "${modelInput}".\n\nAllowed models (from enabledModels):\n${list}`,
|
|
};
|
|
}
|
|
const modelLabel = modelInput ?? `${model.provider}/${model.id}`;
|
|
return {
|
|
kind: "warn",
|
|
message: `Agent "${agentLabel}" using out-of-scope model "${modelLabel}"`,
|
|
};
|
|
}
|