toolchain

type AgentAccessControlHook struct {
	// AllowedTools maps agent name → set of allowed tool names.
	// An empty or missing entry means the agent has no restrictions (all tools allowed).
	AllowedTools map[string]map[string]bool

	// DeniedTools maps agent name → set of denied tool names.
	// Deny takes precedence over allow.
	DeniedTools map[string]map[string]bool
}

type EventBusHook struct {
	// contains filtered or unexported fields
}

type HookContext struct {
	ToolName   string
	AgentName  string
	Params     map[string]interface{}
	SessionKey string
	Ctx        context.Context
}

type HookRegistry struct {
	// contains filtered or unexported fields
}

type KnowledgeSaveHook struct {

	// SaveableTools is the set of tool names whose results should be saved.
	// If empty, no results are saved (opt-in, not opt-out).
	SaveableTools map[string]bool
	// contains filtered or unexported fields
}

type KnowledgeSaver interface {
	SaveToolResult(ctx context.Context, sessionKey, toolName string, params map[string]interface{}, result interface{}) error
}

type Middleware func(tool *agent.Tool, next agent.ToolHandler) agent.ToolHandler

type PostToolHook interface {
	Name() string
	Priority() int // Lower = runs first
	Post(ctx HookContext, result interface{}, toolErr error) error
}

type PreHookAction int

type PreHookResult struct {
	Action         PreHookAction
	BlockReason    string                 // Used when Action == Block
	ModifiedParams map[string]interface{} // Used when Action == Modify
}

type PreToolHook interface {
	Name() string
	Priority() int // Lower = runs first
	Pre(ctx HookContext) (PreHookResult, error)
}

type SecurityFilterHook struct {
	// BlockedPatterns contains substrings that cause a tool invocation to be blocked.
	// Matched case-insensitively against the "command" parameter of exec-like tools.
	BlockedPatterns []string

	// BlockedTools contains tool names that are unconditionally blocked.
	BlockedTools []string
}

type ToolExecutedEvent struct {
	ToolName   string
	AgentName  string
	SessionKey string
	Duration   time.Duration
	Success    bool
	Error      string
}