ZacharyZhang-NY
07d0b4587d
The legacy application - its src, tests, landing site, promo assets, docs, release tooling, CI workflows, and root configs - leaves the tree; it stays reachable in history. Everything under AgentCompany-New moves up unchanged: same package name, so the production userData/database path is untouched, and e2e/build scripts already resolved paths relative to the project. The developer cred.txt stays gitignored at its new location. Full verify:ci passes from the new root.
55 lines
2.8 KiB
TypeScript
55 lines
2.8 KiB
TypeScript
import { requireString } from "./agent-tool-args";
|
|
import type { AgentToolContext, AgentToolDeps } from "./agent-tools";
|
|
import { ConnectorGrantsService } from "./composio/connector-grants";
|
|
import type { JsonRecord } from "./provider-http";
|
|
|
|
/** Company connector visibility for any agent: what is connected, who holds it. */
|
|
export function listConnectorsTool(deps: AgentToolDeps, ctx: AgentToolContext): string {
|
|
const grantsService = new ConnectorGrantsService(deps.db);
|
|
const accounts = grantsService.activeAccounts(ctx.orgId);
|
|
if (accounts.length === 0) {
|
|
return "The company has no connected external toolkits yet. The board connects them on the Connectors page.";
|
|
}
|
|
const grants = grantsService.grantsForOrg(ctx.orgId);
|
|
const agentNames = new Map(
|
|
(deps.db.prepare("select id, name from agents where org_id = ?").all(ctx.orgId) as Array<{ id: string; name: string }>)
|
|
.map((row) => [row.id, row.name]),
|
|
);
|
|
const lines = accounts.map((account) => {
|
|
const holders = grants
|
|
.filter((grant) => grant.toolkitSlug === account.toolkitSlug)
|
|
.map((grant) => agentNames.get(grant.agentId))
|
|
.filter(Boolean);
|
|
return `- ${account.toolkitName} (${account.toolkitSlug}): ${holders.length > 0 ? `granted to ${holders.join(", ")}` : "no grants yet"}`;
|
|
});
|
|
return ["Connected toolkits:", ...lines].join("\n");
|
|
}
|
|
|
|
/** CEO-only: hand a connected toolkit to a teammate, or take it back. */
|
|
export function grantConnectorTool(deps: AgentToolDeps, ctx: AgentToolContext, args: JsonRecord, mode: "grant" | "revoke"): string {
|
|
const acting = deps.db.prepare("select role_level from agents where id = ? and org_id = ?")
|
|
.get(ctx.agent.id, ctx.orgId) as { role_level: string } | undefined;
|
|
if (acting?.role_level !== "c_suite") {
|
|
return "ERROR: Only the CEO can manage connector grants. Ask them to run this.";
|
|
}
|
|
const agentName = requireString(args.agent_name, "agent_name");
|
|
const toolkit = requireString(args.toolkit, "toolkit");
|
|
const target = deps.db.prepare(
|
|
"select id, name from agents where org_id = ? and lower(name) = lower(?) and lifecycle = 'active' limit 1",
|
|
).get(ctx.orgId, agentName) as { id: string; name: string } | undefined;
|
|
if (!target) return `ERROR: No active agent named "${agentName}".`;
|
|
const grantsService = new ConnectorGrantsService(deps.db);
|
|
if (mode === "grant") {
|
|
grantsService.grant({
|
|
orgId: ctx.orgId,
|
|
agentId: target.id,
|
|
toolkitSlug: toolkit,
|
|
grantedByType: "agent",
|
|
grantedById: ctx.agent.id,
|
|
});
|
|
return `${target.name} now has access to the ${toolkit.toLowerCase()} connector; its tools join their next run.`;
|
|
}
|
|
grantsService.revoke({ orgId: ctx.orgId, agentId: target.id, toolkitSlug: toolkit });
|
|
return `${target.name} no longer has access to the ${toolkit.toLowerCase()} connector.`;
|
|
}
|