agent-lyceum 0.7.0 → 0.8.0

package/README.md

@@ -107,9 +107,10 @@ agents:
   lead:      { resume: true, can_message: all, can_edit_agent_md: true }
   fe-member: { runtime: codex, can_message: [lead], owns: ["src/web/**"] }
   qa-member: { can_message: [lead], owns: ["tests/**"] }
+  pm:        { can_message: [lead], allow_web: fetch }   # pm may search and read pages; the others have no web tools
 ```
 
-Agent fields: `runtime` (`claude-code`|`codex`; optional when `model` is recognizable: `opus`/`sonnet`/`haiku`/`claude-*` → Claude Code, `gpt-*`/`o3`/`*codex*` → Codex; precedence: project runtime > project model > global runtime > global model), `model`, `effort` (Claude Code: `low`|`medium`|`high`|`xhigh`|`max` via `--effort`; Codex: `minimal`|`low`|`medium`|`high`|`xhigh` via `model_reasoning_effort`; unset = CLI default), `agent_md`, `memory.global` / `memory.project`, `resume`, `can_message` (`all` or list; default `[lead]`, lead default `all`), `can_edit_agent_md` (default only the lead), `can_ask_user` (may send `type: ask` mail to you and pause the run for an answer; default only the lead), `owns` (repo globs).
+Agent fields: `runtime` (`claude-code`|`codex`; optional when `model` is recognizable: `opus`/`sonnet`/`haiku`/`claude-*` → Claude Code, `gpt-*`/`o3`/`*codex*` → Codex; precedence: project runtime > project model > global runtime > global model), `model`, `effort` (Claude Code: `low`|`medium`|`high`|`xhigh`|`max` via `--effort`; Codex: `minimal`|`low`|`medium`|`high`|`xhigh` via `model_reasoning_effort`; unset = CLI default), `agent_md`, `memory.global` / `memory.project`, `resume`, `can_message` (`all` or list; default `[lead]`, lead default `all`), `can_edit_agent_md` (default only the lead), `can_ask_user` (may send `type: ask` mail to you and pause the run for an answer; default only the lead), `allow_web` (`none`|`search`|`fetch`: what the agent may use of the web; unset means Claude Code gets no web tools and Codex keeps its own default; `search` = `WebSearch` / Codex `web_search="cached"`, `fetch` = `WebSearch` + `WebFetch` / Codex `web_search="live"`, `none` = no web tools / Codex `disabled`; `fetch` pulls whole pages into the agent's context, so give it only to agents that do little editing, such as a requirements or research role), `owns` (repo globs).
 
 Rules checked by `validate`: ≥ 2 agents (the lead and one member; the template has three), the lead is a listed agent, every agent has a runtime (explicit or inferred from `model`) and an existing `AGENT.md`, `effort` is valid for the agent's runtime (warning if `runtime` contradicts a recognizable `model`), `can_message` targets exist, memory dirs don't overlap, and with `max_parallel > 1` every non-lead agent needs non-overlapping `owns` and the repo must be a git repository.
 

package/README.zh-TW.md

@@ -108,9 +108,10 @@ agents:
   lead:      { resume: true, can_message: all, can_edit_agent_md: true }
   fe-member: { runtime: codex, can_message: [lead], owns: ["src/web/**"] }
   qa-member: { can_message: [lead], owns: ["tests/**"] }
+  pm:        { can_message: [lead], allow_web: fetch }   # pm 可以搜尋並讀網頁；其他人沒有網路工具
 ```
 
-Agent 欄位：`runtime`（`claude-code`|`codex`；若 `model` 可辨識則可省略：`opus`/`sonnet`/`haiku`/`claude-*` → Claude Code，`gpt-*`/`o3`/`*codex*` → Codex；優先順序：專案 runtime > 專案 model > 全域 runtime > 全域 model）、`model`、`effort`（Claude Code：`low`|`medium`|`high`|`xhigh`|`max`，經 `--effort`；Codex：`minimal`|`low`|`medium`|`high`|`xhigh`，經 `model_reasoning_effort`；未設則用 CLI 預設）、`agent_md`、`memory.global` / `memory.project`、`resume`、`can_message`（`all` 或清單；預設 `[lead]`，lead 預設 `all`）、`can_edit_agent_md`（預設只有 lead）、`can_ask_user`（可用 `type: ask` 信件向你提問並暫停 run 等待回答；預設只有 lead）、`owns`（repo glob）。
+Agent 欄位：`runtime`（`claude-code`|`codex`；若 `model` 可辨識則可省略：`opus`/`sonnet`/`haiku`/`claude-*` → Claude Code，`gpt-*`/`o3`/`*codex*` → Codex；優先順序：專案 runtime > 專案 model > 全域 runtime > 全域 model）、`model`、`effort`（Claude Code：`low`|`medium`|`high`|`xhigh`|`max`，經 `--effort`；Codex：`minimal`|`low`|`medium`|`high`|`xhigh`，經 `model_reasoning_effort`；未設則用 CLI 預設）、`agent_md`、`memory.global` / `memory.project`、`resume`、`can_message`（`all` 或清單；預設 `[lead]`，lead 預設 `all`）、`can_edit_agent_md`（預設只有 lead）、`can_ask_user`（可用 `type: ask` 信件向你提問並暫停 run 等待回答；預設只有 lead）、`allow_web`（`none`|`search`|`fetch`：agent 可以使用多少網路；不設時 Claude Code 沒有網路工具、Codex 維持它自己的預設；`search` = `WebSearch`／Codex `web_search="cached"`，`fetch` = `WebSearch` 加 `WebFetch`／Codex `web_search="live"`，`none` = 不給網路工具／Codex `disabled`；`fetch` 會把整個網頁放進 agent 的上下文，只建議給很少改檔的角色，例如需求或研究角色）、`owns`（repo glob）。
 
 `validate` 檢查的規則：至少 2 個 agent（lead 加一位成員；範本預設是三位）、lead 在 agent 清單內、每個 agent 都有 runtime（明設或由 `model` 推斷）且 `AGENT.md` 存在、`effort` 對該 runtime 合法（若 `runtime` 與可辨識的 `model` 矛盾則警告）、`can_message` 的目標存在、記憶資料夾互不重疊，且當 `max_parallel > 1` 時，每個非 lead 的 agent 都必須有互不重疊的 `owns`，repo 也必須是 git repository。
 

package/dist/adapters/claude.js

@@ -22,6 +22,11 @@ export function buildClaudeSettings(project, agent) {
     const ws = project.workspaces?.[agent.name];
     const repo = repoDirFor(project, agent.name);
     const allow = ["Bash", "Read", "Glob", "Grep"];
+    // Web tools are opt-in: `search` is the lighter one (snippets only), `fetch` also pulls whole pages into the agent's context.
+    if (agent.allowWeb === "search" || agent.allowWeb === "fetch")
+        allow.push("WebSearch");
+    if (agent.allowWeb === "fetch")
+        allow.push("WebFetch");
     if (pol.restrictRepoToOwns) {
         for (const g of pol.owns)
             allow.push(rule("Edit", path.join(repo, g)));

package/dist/adapters/codex.js

@@ -48,6 +48,8 @@ export function codexOutputTokens(jsonl) {
     }
     return total;
 }
+/** Codex has one `web_search` setting: `cached` answers from an index, `live` browses. */
+const CODEX_WEB_SEARCH = { none: "disabled", search: "cached", fetch: "live" };
 export function buildCodexInvocation(input) {
     const { project, agent, workDir } = input;
     const repo = repoDirFor(project, agent.name);
@@ -67,6 +69,8 @@ export function buildCodexInvocation(input) {
         common.push("-m", agent.model);
     if (agent.effort)
         common.push("-c", `model_reasoning_effort="${agent.effort}"`);
+    if (agent.allowWeb)
+        common.push("-c", `web_search="${CODEX_WEB_SEARCH[agent.allowWeb]}"`);
     const args = input.sessionId
         ? ["exec", "resume", input.sessionId, "-c", 'sandbox_mode="workspace-write"', ...common, "-"]
         : ["exec", "-C", repo, "-s", "workspace-write", "--skip-git-repo-check", ...common, "-"];

package/dist/config.d.ts

@@ -1,6 +1,6 @@
 import { type ProjectPaths } from "./paths.js";
 import type { AgentWorkspace } from "./worktree.js";
-import { type DispatcherSettings, type Effort, type Runtime } from "./schema.js";
+import { type DispatcherSettings, type Effort, type Runtime, type WebLevel } from "./schema.js";
 export declare class ConfigError extends Error {
 }
 export type Source = "global" | "project" | "default" | "model";
@@ -20,6 +20,8 @@ export interface ResolvedAgent {
     canEditAgentMd: boolean;
     /** May send `type: ask` mail to the user (the run then waits for the answer). */
     canAskUser: boolean;
+    /** Web access for this agent; undefined = not configured, so the runtime keeps its own default. */
+    allowWeb?: WebLevel;
     owns: string[];
     /** Where each field's value came from (for `validate` output). */
     sources: Record<string, Source>;
@@ -58,6 +60,7 @@ export declare function loadGlobal(home: string): {
         can_message?: "all" | string[] | undefined;
         can_edit_agent_md?: boolean | undefined;
         can_ask_user?: boolean | undefined;
+        allow_web?: "fetch" | "none" | "search" | undefined;
         owns?: string[] | undefined;
     }>;
 };
@@ -88,6 +91,7 @@ export declare function loadProjectRaw(home: string, name: string): {
         can_message?: "all" | string[] | undefined;
         can_edit_agent_md?: boolean | undefined;
         can_ask_user?: boolean | undefined;
+        allow_web?: "fetch" | "none" | "search" | undefined;
         owns?: string[] | undefined;
     }>;
 };

package/dist/config.js

@@ -133,6 +133,7 @@ export function resolveProjectFrom(home, name, g, p) {
         const canMessage = pick("can_message");
         const canEdit = pick("can_edit_agent_md");
         const canAsk = pick("can_ask_user");
+        const allowWeb = pick("allow_web");
         const owns = pick("owns");
         for (const [k, v] of [
             ["resume", resume],
@@ -155,6 +156,7 @@ export function resolveProjectFrom(home, name, g, p) {
             canMessage: canMessage ?? (isLead ? "all" : [lead]),
             canEditAgentMd: canEdit ?? isLead,
             canAskUser: canAsk ?? isLead,
+            allowWeb,
             owns: owns ?? [],
             sources,
         };
@@ -203,7 +205,7 @@ export function findProjectForCwd(home, cwd) {
     }
     return best?.name;
 }
-const AGENT_FIELDS = ["runtime", "model", "effort", "agent_md", "memory.global", "memory.project", "resume", "can_message", "can_edit_agent_md", "can_ask_user", "owns"];
+const AGENT_FIELDS = ["runtime", "model", "effort", "agent_md", "memory.global", "memory.project", "resume", "can_message", "can_edit_agent_md", "can_ask_user", "allow_web", "owns"];
 /** The resolved project plus, for every setting, the file and key it was taken from (or "default"). */
 export function resolveProjectWithSources(home, name) {
     const project = resolveProject(home, name);
@@ -261,6 +263,7 @@ export function flattenResolved(project) {
         v[`${p}.can_message`] = a.canMessage;
         v[`${p}.can_edit_agent_md`] = a.canEditAgentMd;
         v[`${p}.can_ask_user`] = a.canAskUser;
+        v[`${p}.allow_web`] = a.allowWeb;
         v[`${p}.owns`] = a.owns;
     }
     return v;

package/dist/schema.d.ts

@@ -8,6 +8,9 @@ export type Effort = (typeof EFFORTS)[number];
 export declare const RUNTIME_EFFORTS: Record<Runtime, readonly Effort[]>;
 /** Guess the runtime from a model name: Claude aliases/IDs -> claude-code, GPT/o-series/codex names -> codex. */
 export declare function inferRuntime(model: string | undefined): Runtime | undefined;
+/** How much of the web an agent may use: nothing, search only, or search plus fetching pages. Unset leaves each runtime's own default alone. */
+export declare const WEB_LEVELS: readonly ["none", "search", "fetch"];
+export type WebLevel = (typeof WEB_LEVELS)[number];
 export declare const AgentPartial: z.ZodObject<{
     runtime: z.ZodOptional<z.ZodEnum<{
         "claude-code": "claude-code";
@@ -31,6 +34,11 @@ export declare const AgentPartial: z.ZodObject<{
     can_message: z.ZodOptional<z.ZodUnion<readonly [z.ZodLiteral<"all">, z.ZodArray<z.ZodString>]>>;
     can_edit_agent_md: z.ZodOptional<z.ZodBoolean>;
     can_ask_user: z.ZodOptional<z.ZodBoolean>;
+    allow_web: z.ZodOptional<z.ZodEnum<{
+        fetch: "fetch";
+        none: "none";
+        search: "search";
+    }>>;
     owns: z.ZodOptional<z.ZodArray<z.ZodString>>;
 }, z.core.$strict>;
 export type AgentPartialT = z.infer<typeof AgentPartial>;
@@ -71,6 +79,11 @@ export declare const GlobalConfig: z.ZodObject<{
         can_message: z.ZodOptional<z.ZodUnion<readonly [z.ZodLiteral<"all">, z.ZodArray<z.ZodString>]>>;
         can_edit_agent_md: z.ZodOptional<z.ZodBoolean>;
         can_ask_user: z.ZodOptional<z.ZodBoolean>;
+        allow_web: z.ZodOptional<z.ZodEnum<{
+            fetch: "fetch";
+            none: "none";
+            search: "search";
+        }>>;
         owns: z.ZodOptional<z.ZodArray<z.ZodString>>;
     }, z.core.$strict>>>;
 }, z.core.$strict>;
@@ -115,6 +128,11 @@ export declare const ProjectConfig: z.ZodObject<{
         can_message: z.ZodOptional<z.ZodUnion<readonly [z.ZodLiteral<"all">, z.ZodArray<z.ZodString>]>>;
         can_edit_agent_md: z.ZodOptional<z.ZodBoolean>;
         can_ask_user: z.ZodOptional<z.ZodBoolean>;
+        allow_web: z.ZodOptional<z.ZodEnum<{
+            fetch: "fetch";
+            none: "none";
+            search: "search";
+        }>>;
         owns: z.ZodOptional<z.ZodArray<z.ZodString>>;
     }, z.core.$strict>>>;
 }, z.core.$strict>;

package/dist/schema.js

@@ -18,6 +18,8 @@ export function inferRuntime(model) {
         return "codex";
     return undefined;
 }
+/** How much of the web an agent may use: nothing, search only, or search plus fetching pages. Unset leaves each runtime's own default alone. */
+export const WEB_LEVELS = ["none", "search", "fetch"];
 const Memory = z
     .object({
     global: z.string().optional(),
@@ -35,6 +37,7 @@ export const AgentPartial = z
     can_message: z.union([z.literal("all"), z.array(z.string())]).optional(),
     can_edit_agent_md: z.boolean().optional(),
     can_ask_user: z.boolean().optional(),
+    allow_web: z.enum(WEB_LEVELS).optional(),
     owns: z.array(z.string()).optional(),
 })
     .strict();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agent-lyceum",
-  "version": "0.7.0",
+  "version": "0.8.0",
   "description": "Config + dispatcher for teams of Claude Code / Codex agents with scoped context and file-based mailboxes",
   "keywords": [
     "ai",