43 lines
1.6 KiB
Swift
43 lines
1.6 KiB
Swift
// SPDX-FileCopyrightText: 2026 Kaede Akino
|
|
// SPDX-License-Identifier: GPL-3.0-only
|
|
|
|
import AgentKit
|
|
import Foundation
|
|
import TermindDomain
|
|
|
|
/// Planning registration for the ordinary `ssh_exec_run` identity. Destructive
|
|
/// commands never reach approval or execution in this posture.
|
|
public nonisolated struct PlanningSSHExecRunTool: AgentToolDefinition {
|
|
public static let presenter = SSHExecRunTool.presenter
|
|
private let base: SSHExecRunTool
|
|
|
|
public init(
|
|
authentication: AgentSSHAuthenticationRegistry,
|
|
pool: AgentConnectionPool,
|
|
background: AgentBackgroundCommands, scope: UUID = UUID()
|
|
) {
|
|
base = SSHExecRunTool(authentication: authentication, pool: pool, background: background, scope: scope)
|
|
}
|
|
|
|
public var truncateStrategy: AgentTruncateStrategy { base.truncateStrategy }
|
|
|
|
public var descriptor: AgentToolDescriptor { base.descriptor }
|
|
|
|
public func preflight(_ invocation: AgentToolInvocation) async throws -> AgentToolPreflight {
|
|
let command = try Arguments(invocation).string("command")
|
|
guard CommandRiskClassifier.assess(command).risk == .destructive else {
|
|
return try await base.preflight(invocation)
|
|
}
|
|
return AgentToolPreflight(
|
|
invocation: invocation, approvalPolicy: .deny,
|
|
reasons: ["Planning cannot execute a destructive SSH command."]
|
|
)
|
|
}
|
|
|
|
public func execute(
|
|
_ invocation: AgentToolInvocation, context: AgentToolExecutionContext
|
|
) async throws -> AgentToolResult {
|
|
try await base.execute(invocation, context: context)
|
|
}
|
|
}
|