mirror of
https://github.com/MODSetter/SurfSense.git
synced 2026-10-21 05:05:36 +00:00
c40784fada
The agent's opencode calls plugin servers with its own MCP client and keeps each call in its session, so SurfSense's call path and the plugin_calls table are removed. They return with the chat engine. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
19 lines
829 B
Python
19 lines
829 B
Python
"""Whether a tool must be approved before each call, from its annotations and the user's setting.
|
|
|
|
A server's annotations are its own claim, so a read-only tool skips approval only on a
|
|
plugin SurfSense runs, as Claude's connectors trust a read-only annotation.
|
|
"""
|
|
|
|
from modules.plugins.gateway.ready_tool import ReadyTool
|
|
from modules.plugins.installed.models import PluginSource, ToolApproval
|
|
|
|
|
|
def needs_approval(tool: ReadyTool) -> bool:
|
|
read_only = tool.annotations.get("readOnlyHint") is True
|
|
if read_only and tool.plugin_source == PluginSource.FIRST_PARTY:
|
|
return False
|
|
# MCP's default for a tool that says nothing: it may destroy.
|
|
destructive = (
|
|
not read_only and tool.annotations.get("destructiveHint", True) is True
|
|
)
|
|
return destructive or tool.approval != ToolApproval.ALWAYS
|