mirror of
https://github.com/bytedance/deer-flow.git
synced 2026-08-01 10:56:02 +00:00
65afc9b1d2
* fix(skills): scope allowed-tools to active skills * fix(skills): tolerate stale active skill paths * chore: retrigger CI * fix(skills): document policy activation limits * perf(skills): reuse per-step tool policy decisions * fix(skills): harden runtime tool policy contracts * fix(skills): redact cached policy decisions * fix(skills): make slash tool policy authoritative * fix(skills): preserve policy-safe discovery tools * test(skills): cover explicit task delegation policy
66 lines
2.0 KiB
Python
66 lines
2.0 KiB
Python
import logging
|
|
from typing import Protocol
|
|
|
|
from deerflow.skills.types import Skill
|
|
|
|
logger = logging.getLogger(__name__)
|
|
|
|
|
|
class NamedTool(Protocol):
|
|
name: str
|
|
|
|
|
|
# Framework built-ins that remain available even when an active skill declares
|
|
# allowed-tools. They support controlled file/review/discovery workflows rather
|
|
# than extending the reviewed/activated skill's own business-tool authority.
|
|
# In particular, promotion through tool_search does not restore a tool removed
|
|
# by SkillToolPolicyMiddleware, and describe_skill only returns catalog metadata.
|
|
ALWAYS_AVAILABLE_BUILTIN_TOOL_NAMES = frozenset(
|
|
{
|
|
"describe_skill",
|
|
"read_file",
|
|
"review_skill_package",
|
|
"tool_search",
|
|
}
|
|
)
|
|
|
|
|
|
def allowed_tool_names_for_skills(skills: list[Skill]) -> set[str] | None:
|
|
"""Return the union of explicit skill allowed-tools declarations.
|
|
|
|
None means legacy allow-all behavior. It is returned only when no loaded
|
|
skill declares allowed-tools. Once any skill declares the field, legacy
|
|
skills without the field contribute no tools instead of disabling the
|
|
explicit restrictions from other skills.
|
|
"""
|
|
if not skills:
|
|
return None
|
|
|
|
allowed: set[str] = set()
|
|
has_explicit_declaration = False
|
|
for skill in skills:
|
|
if skill.allowed_tools is None:
|
|
continue
|
|
has_explicit_declaration = True
|
|
if not skill.allowed_tools:
|
|
logger.info("Skill %s declared empty allowed-tools", skill.name)
|
|
allowed.update(skill.allowed_tools)
|
|
|
|
if not has_explicit_declaration:
|
|
return None
|
|
return allowed
|
|
|
|
|
|
def filter_tools_by_skill_allowed_tools[ToolT: NamedTool](
|
|
tools: list[ToolT],
|
|
skills: list[Skill],
|
|
*,
|
|
always_allowed_tool_names: set[str] | frozenset[str] = frozenset(),
|
|
) -> list[ToolT]:
|
|
allowed = allowed_tool_names_for_skills(skills)
|
|
if allowed is None:
|
|
return tools
|
|
|
|
allowed_with_framework_tools = allowed | set(always_allowed_tool_names)
|
|
return [tool for tool in tools if tool.name in allowed_with_framework_tools]
|