mirror of
https://github.com/tiennm99/goclaw.git
synced 2026-10-12 20:15:42 +00:00
Duc Nguyenandntduc
bb7712a9ff
* feat(collaboration): isolate delegated artifacts and child runs Isolate delegated inputs and outputs behind secure artifact exchange lifecycles. Scope Agent Link tasks by tenant and root agent, and enforce delegation spawn-tree boundaries. Add process-wide child-run admission and preserve logical media paths across native, MCP, and sandbox execution. * fix(collaboration): harden delegated task isolation Enforce tenant and root-agent task scope across migrations and stores. Add exactly-once async completion delivery, delegated sandbox boundaries, and confined artifact and media recovery across runtime surfaces. * fix(collaboration): recover interrupted async tasks * fix(collaboration): normalize persisted child-run status --------- Co-authored-by: ntduc <ntduc@cpp.ai.vn>
68 lines
3.0 KiB
Go
68 lines
3.0 KiB
Go
package tools
|
|
|
|
// Message metadata keys used in dispatch → consumer communication.
|
|
// These keys appear in bus.InboundMessage.Metadata for teammate and
|
|
// subagent messages routed through the gateway consumer.
|
|
const (
|
|
MetaOriginChannel = "origin_channel"
|
|
MetaOriginPeerKind = "origin_peer_kind"
|
|
MetaOriginChatID = "origin_chat_id"
|
|
MetaOriginUserID = "origin_user_id"
|
|
// MetaOriginSenderID carries the real acting sender through announce re-ingress
|
|
// so permission checks (e.g. CheckFileWriterPermission) attribute to the
|
|
// original user rather than a synthetic "subagent:<id>" / "notification:system" string.
|
|
MetaOriginSenderID = "origin_sender_id"
|
|
// MetaOriginRole carries the caller's RBAC role through dispatch + re-ingress
|
|
// so permission checks can bypass per-user grants for authenticated admins
|
|
// (e.g. dashboard user dispatches a task that writes files in a group chat).
|
|
MetaOriginRole = "origin_role"
|
|
MetaOriginLocalKey = "origin_local_key"
|
|
MetaOriginSessionKey = "origin_session_key"
|
|
MetaOriginTraceID = "origin_trace_id"
|
|
MetaOriginRootSpanID = "origin_root_span_id"
|
|
MetaFromAgent = "from_agent"
|
|
MetaToAgent = "to_agent"
|
|
MetaToAgentDisplay = "to_agent_display"
|
|
MetaTeamTaskID = "team_task_id"
|
|
MetaTeamID = "team_id"
|
|
MetaTeamWorkspace = "team_workspace"
|
|
MetaLeaderAgentID = "leader_agent_id"
|
|
MetaParentAgent = "parent_agent"
|
|
MetaSubagentRootAgentID = "subagent_root_agent_id"
|
|
MetaSubagentParentTask = "subagent_parent_task_id"
|
|
MetaSubagentDepth = "subagent_depth"
|
|
MetaSubagentLabel = "subagent_label"
|
|
MetaSubagentStatus = "subagent_status"
|
|
MetaSubagentResult = "subagent_result"
|
|
MetaSubagentRuntime = "subagent_runtime_ms"
|
|
MetaSubagentIterations = "subagent_iterations"
|
|
MetaSubagentInputToks = "subagent_input_tokens"
|
|
MetaSubagentOutputToks = "subagent_output_tokens"
|
|
MetaCommand = "command"
|
|
MetaIsForum = "is_forum"
|
|
MetaMessageThreadID = "message_thread_id"
|
|
MetaDMThreadID = "dm_thread_id"
|
|
MetaChatTitle = "chat_title"
|
|
MetaUsername = "username"
|
|
MetaUserName = "user_name"
|
|
MetaTopicSystemPrompt = "topic_system_prompt"
|
|
MetaTopicSkills = "topic_skills"
|
|
// MetaChannelSelfIdentity carries a channel-provided self-identity hint
|
|
// (e.g. "You are @viet_super_bot (ViệtBot) on this Telegram channel.")
|
|
// appended to the agent's system prompt so the LLM does not confuse its own
|
|
// platform handle for a different bot when users @mention it.
|
|
MetaChannelSelfIdentity = "channel_self_identity"
|
|
)
|
|
|
|
// Task metadata keys stored in store.TeamTaskData.Metadata.
|
|
// Written during task creation/dispatch, read during deferred dispatch
|
|
// and trace context restoration.
|
|
const (
|
|
TaskMetaPeerKind = "peer_kind"
|
|
TaskMetaLocalKey = "local_key"
|
|
TaskMetaOriginSession = "origin_session_key"
|
|
TaskMetaOriginTrace = "origin_trace_id"
|
|
TaskMetaOriginRootSpan = "origin_root_span_id"
|
|
TaskMetaTeamWorkspace = "team_workspace"
|
|
)
|