npm - flowent - Versions diffs - 0.0.4 → 0.0.5 - Mend

flowent 0.0.4 → 0.0.5

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (311) hide show

package/backend/src/flowent/static/index.html CHANGED Viewed

@@ -21,14 +21,13 @@
         }
       })();
     </script>
-    <script type="module" crossorigin src="/assets/index-CL1ALZ3r.js"></script>
+    <script type="module" crossorigin src="/assets/index-Biio-CoI.js"></script>
     <link rel="modulepreload" crossorigin href="/assets/rolldown-runtime-BYbx6iT9.js">
-    <link rel="modulepreload" crossorigin href="/assets/shared-CMxbpLeQ.js">
     <link rel="modulepreload" crossorigin href="/assets/graph-vendor-DRq_-6fV.js">
     <link rel="modulepreload" crossorigin href="/assets/react-vendor-mEs_JJxa.js">
-    <link rel="modulepreload" crossorigin href="/assets/ui-vendor-Dg9NNnWX.js">
+    <link rel="modulepreload" crossorigin href="/assets/ui-vendor-UazN8rcv.js">
     <link rel="stylesheet" crossorigin href="/assets/graph-vendor-CHpVij2M.css">
-    <link rel="stylesheet" crossorigin href="/assets/index-BHC1Vhy8.css">
+    <link rel="stylesheet" crossorigin href="/assets/index-CmQvO7sl.css">
   </head>
   <body class="min-h-dvh bg-background text-foreground">
     <div id="root"></div>

package/backend/src/flowent/tools/__init__.py CHANGED Viewed

@@ -24,6 +24,60 @@ MCP_BROWSING_TOOLS = (
     "get_mcp_prompt",
 )
+ASSISTANT_ONLY_TOOLS = frozenset(
+    {
+        "create_workflow",
+        "delete_workflow",
+        "list_workflows",
+        "manage_providers",
+        "manage_roles",
+        "manage_settings",
+        "manage_prompts",
+    }
+)
+ASSISTANT_ONLY_MCP_TOOL_NAMES = frozenset(
+    {
+        "create_workflow",
+        "create_workflows",
+        "delete_workflow",
+        "delete_workflows",
+        "duplicate_workflow",
+        "duplicate_workflows",
+        "copy_workflow",
+        "copy_workflows",
+        "list_workflow",
+        "list_workflows",
+        "select_workflow",
+        "select_workflows",
+        "switch_workflow",
+        "switch_workflows",
+        "manage_provider",
+        "manage_providers",
+        "manage_role",
+        "manage_roles",
+        "manage_setting",
+        "manage_settings",
+        "manage_prompt",
+        "manage_prompts",
+    }
+)
+def is_assistant_only_tool_name(tool_name: str) -> bool:
+    return tool_name in ASSISTANT_ONLY_TOOLS
+def is_assistant_only_mcp_tool_name(tool_name: str) -> bool:
+    normalized = tool_name.strip().lower().replace("-", "_")
+    candidate = (
+        normalized.rsplit("__", 1)[-1] if normalized.startswith("mcp__") else normalized
+    )
+    return (
+        normalized in ASSISTANT_ONLY_MCP_TOOL_NAMES
+        or candidate in ASSISTANT_ONLY_MCP_TOOL_NAMES
+    )
 class Tool(ABC):
     name: str
@@ -90,10 +144,13 @@ class ToolRegistry:
     def get_tools_for_agent(self, agent: Agent) -> list[Tool]:
         from flowent.mcp_service import mcp_service
+        from flowent.models import NodeType
         from flowent.settings import find_role, get_settings
         from flowent.tools.mcp import DynamicMCPTool
         allowed = set(agent.config.tools) | set(MINIMUM_TOOLS)
+        if agent.node_type != NodeType.ASSISTANT:
+            allowed -= ASSISTANT_ONLY_TOOLS
         visible_tools = [
             t for t in self._tools.values() if t.name in allowed and t.llm_visible
         ]
@@ -104,6 +161,10 @@ class ToolRegistry:
             for descriptor in mcp_service.list_agent_dynamic_tools(agent)
             if descriptor.fully_qualified_id in allowed
             and descriptor.fully_qualified_id not in excluded
+            and (
+                agent.node_type == NodeType.ASSISTANT
+                or not is_assistant_only_mcp_tool_name(descriptor.tool_name)
+            )
         ]
         return [*visible_tools, *dynamic_tools]
@@ -174,7 +235,10 @@ def build_tool_registry() -> ToolRegistry:
     return reg
-def list_agent_visible_tool_descriptors() -> list[dict[str, Any]]:
+def list_agent_visible_tool_descriptors(
+    *,
+    include_assistant_only: bool = True,
+) -> list[dict[str, Any]]:
     registry = build_tool_registry()
     from flowent.mcp_service import mcp_service
@@ -182,6 +246,8 @@ def list_agent_visible_tool_descriptors() -> list[dict[str, Any]]:
     for tool in registry.list_tools(agent_visible_only=True):
         if tool.name.startswith("mcp__"):
             continue
+        if not include_assistant_only and is_assistant_only_tool_name(tool.name):
+            continue
         schema = tool.to_schema()
         function = schema.get("function")
         parameters = (
@@ -197,5 +263,13 @@ def list_agent_visible_tool_descriptors() -> list[dict[str, Any]]:
                 "source": "builtin",
             }
         )
-    descriptors.extend(mcp_service.list_discovered_tool_descriptors())
+    for descriptor in mcp_service.list_discovered_tool_descriptors():
+        tool_name = descriptor.get("tool_name")
+        if (
+            not include_assistant_only
+            and isinstance(tool_name, str)
+            and is_assistant_only_mcp_tool_name(tool_name)
+        ):
+            continue
+        descriptors.append(descriptor)
     return descriptors

package/backend/src/flowent/tools/__pycache__/__init__.cpython-313.pyc CHANGED Viewed

Binary file

package/backend/src/flowent/tools/__pycache__/connect.cpython-313.pyc CHANGED Viewed

Binary file

package/backend/src/flowent/tools/__pycache__/contacts.cpython-313.pyc CHANGED Viewed

Binary file

package/backend/src/flowent/tools/__pycache__/create_agent.cpython-313.pyc CHANGED Viewed

Binary file

package/backend/src/flowent/tools/__pycache__/create_tab.cpython-313.pyc CHANGED Viewed

Binary file

package/backend/src/flowent/tools/__pycache__/delete_tab.cpython-313.pyc CHANGED Viewed

Binary file

package/backend/src/flowent/tools/__pycache__/edit.cpython-313.pyc CHANGED Viewed

Binary file

package/backend/src/flowent/tools/__pycache__/exec.cpython-313.pyc CHANGED Viewed

Binary file

package/backend/src/flowent/tools/__pycache__/fetch.cpython-313.pyc CHANGED Viewed

Binary file

package/backend/src/flowent/tools/__pycache__/idle.cpython-313.pyc CHANGED Viewed

Binary file

package/backend/src/flowent/tools/__pycache__/list_roles.cpython-313.pyc CHANGED Viewed

Binary file

package/backend/src/flowent/tools/__pycache__/list_tabs.cpython-313.pyc CHANGED Viewed

Binary file

package/backend/src/flowent/tools/__pycache__/list_tools.cpython-313.pyc CHANGED Viewed

Binary file

package/backend/src/flowent/tools/__pycache__/manage_prompts.cpython-313.pyc CHANGED Viewed

Binary file

package/backend/src/flowent/tools/__pycache__/manage_providers.cpython-313.pyc CHANGED Viewed

Binary file

package/backend/src/flowent/tools/__pycache__/manage_roles.cpython-313.pyc CHANGED Viewed

Binary file

package/backend/src/flowent/tools/__pycache__/manage_settings.cpython-313.pyc CHANGED Viewed

Binary file

package/backend/src/flowent/tools/__pycache__/mcp.cpython-313.pyc CHANGED Viewed

Binary file

package/backend/src/flowent/tools/__pycache__/read.cpython-313.pyc CHANGED Viewed

Binary file

package/backend/src/flowent/tools/__pycache__/send.cpython-313.pyc CHANGED Viewed

Binary file

package/backend/src/flowent/tools/__pycache__/set_permissions.cpython-313.pyc CHANGED Viewed

Binary file

package/backend/src/flowent/tools/__pycache__/sleep.cpython-313.pyc CHANGED Viewed

Binary file

package/backend/src/flowent/tools/__pycache__/todo.cpython-313.pyc CHANGED Viewed

Binary file

package/backend/src/flowent/tools/connect.py CHANGED Viewed

@@ -3,53 +3,13 @@ from __future__ import annotations
 import json
 from typing import TYPE_CHECKING, Any, ClassVar
-from flowent.graph_runtime import resolve_node_ref
 from flowent.models import NodeType
 from flowent.tools import Tool
-from flowent.workspace_store import workspace_store
 if TYPE_CHECKING:
     from flowent.agent import Agent
-def _resolve_workflow_node_ref(
-    *,
-    tab_id: str,
-    node_ref: str,
-) -> tuple[str, str] | None:
-    target = resolve_node_ref(node_ref)
-    if target is not None and target.config.tab_id == tab_id:
-        return target.uuid, target.config.tab_id
-    tab = workspace_store.get_tab(tab_id)
-    if tab is None:
-        return None
-    definition_nodes = list(tab.definition.nodes)
-    exact_match = next(
-        (node for node in definition_nodes if node.id == node_ref),
-        None,
-    )
-    if exact_match is not None:
-        return exact_match.id, tab_id
-    named_matches = [
-        node
-        for node in definition_nodes
-        if isinstance(node.config.get("name"), str) and node.config["name"] == node_ref
-    ]
-    if len(named_matches) == 1:
-        return named_matches[0].id, tab_id
-    if 4 <= len(node_ref) < 36:
-        prefix_matches = [
-            node for node in definition_nodes if node.id.startswith(node_ref)
-        ]
-        if len(prefix_matches) == 1:
-            return prefix_matches[0].id, tab_id
-    return None
 class ConnectTool(Tool):
     name = "connect"
     description = (
@@ -76,24 +36,21 @@ class ConnectTool(Tool):
                 "description": "Target input port key",
                 "default": "in",
             },
-            "kind": {
-                "type": "string",
-                "enum": ["control", "data", "event"],
-                "description": "Workflow edge kind",
-                "default": "control",
-            },
         },
         "required": ["from", "to"],
     }
     def execute(self, agent: Agent, args: dict[str, Any], **_kwargs: Any) -> str:
-        from flowent.graph_service import create_edge, is_tab_leader
+        from flowent.graph_service import (
+            create_edge,
+            is_tab_leader,
+            resolve_workflow_node_ref,
+        )
         from_ref = args.get("from")
         to_ref = args.get("to")
         from_port_key = args.get("from_port_key", "out")
         to_port_key = args.get("to_port_key", "in")
-        kind = args.get("kind", "control")
         if not isinstance(from_ref, str) or not from_ref:
             return json.dumps({"error": "from must be a non-empty string"})
@@ -103,52 +60,39 @@ class ConnectTool(Tool):
             return json.dumps({"error": "from_port_key must be a non-empty string"})
         if not isinstance(to_port_key, str) or not to_port_key.strip():
             return json.dumps({"error": "to_port_key must be a non-empty string"})
-        if kind not in {"control", "data", "event"}:
-            return json.dumps({"error": "kind must be control, data, or event"})
         if not agent.config.tab_id:
             return json.dumps(
                 {"error": "Only a workflow Leader may connect task nodes"}
             )
-        source = _resolve_workflow_node_ref(
+        source_id = resolve_workflow_node_ref(
             tab_id=agent.config.tab_id,
             node_ref=from_ref,
         )
-        target = _resolve_workflow_node_ref(
+        target_id = resolve_workflow_node_ref(
             tab_id=agent.config.tab_id,
             node_ref=to_ref,
         )
-        if source is None:
+        if source_id is None:
             return json.dumps({"error": f"Node '{from_ref}' not found"})
-        if target is None:
+        if target_id is None:
             return json.dumps({"error": f"Node '{to_ref}' not found"})
-        source_id, source_tab_id = source
-        target_id, target_tab_id = target
-        if source_tab_id != target_tab_id:
-            return json.dumps({"error": "Both nodes must belong to the same workflow"})
         if agent.node_type == NodeType.ASSISTANT:
             return json.dumps(
                 {"error": "Assistant may not rewire a Workflow Graph directly"}
             )
-        if agent.config.tab_id != source_tab_id:
-            return json.dumps(
-                {
-                    "error": "A workflow Leader may only connect peers inside its own workflow"
-                }
-            )
         if not is_tab_leader(node_id=agent.uuid, tab_id=agent.config.tab_id):
             return json.dumps(
                 {"error": "Only a workflow Leader may connect task nodes"}
             )
         edge, error = create_edge(
-            tab_id=source_tab_id,
+            tab_id=agent.config.tab_id,
             from_node_id=source_id,
             from_port_key=from_port_key,
             to_node_id=target_id,
             to_port_key=to_port_key,
-            kind=kind,
         )
         if error is not None or edge is None:
             return json.dumps({"error": error or "Failed to connect nodes"})

package/backend/src/flowent/tools/contacts.py CHANGED Viewed

@@ -11,7 +11,7 @@ if TYPE_CHECKING:
 class ContactsTool(Tool):
     name = "contacts"
-    description = "List the agents this node can message directly right now."
+    description = "List current contacts and output-port paths."
     parameters: ClassVar[dict[str, Any]] = {
         "type": "object",
         "properties": {},

package/backend/src/flowent/tools/create_agent.py CHANGED Viewed

@@ -5,7 +5,6 @@ from typing import TYPE_CHECKING, Any, ClassVar
 from flowent.graph_service import create_agent_node
 from flowent.models import NodeType
-from flowent.settings import build_assistant_write_dirs, resolve_path
 from flowent.tools import Tool
 if TYPE_CHECKING:
@@ -31,16 +30,6 @@ class CreateAgentTool(Tool):
                 "items": {"type": "string"},
                 "description": "Optional additional tools",
             },
-            "write_dirs": {
-                "type": "array",
-                "items": {"type": "string"},
-                "description": "Optional writable directories",
-            },
-            "allow_network": {
-                "type": "boolean",
-                "description": "Whether the node can access the network",
-                "default": False,
-            },
             "placement": {
                 "type": "string",
                 "enum": ["standalone", "after", "between"],
@@ -68,6 +57,15 @@ class CreateAgentTool(Tool):
     def execute(self, agent: Agent, args: dict[str, Any], **_kwargs: Any) -> str:
         if "workflow_id" in args or "tab_id" in args:
             return json.dumps({"error": "create_agent does not accept workflow_id"})
+        if "write_dirs" in args or "allow_network" in args:
+            return json.dumps(
+                {
+                    "error": (
+                        "create_agent uses the current workflow permissions; "
+                        "update the workflow permissions instead"
+                    )
+                }
+            )
         if "connect_to_creator" in args:
             return json.dumps(
                 {
@@ -77,8 +75,6 @@ class CreateAgentTool(Tool):
         role_name = args.get("role_name")
         name = args.get("name")
         tools = args.get("tools", [])
-        write_dirs = args.get("write_dirs", [])
-        allow_network = args.get("allow_network", False)
         placement = args.get("placement", "standalone")
         after_node_id = args.get("after_node_id")
         between_from_node_id = args.get("between_from_node_id")
@@ -92,12 +88,6 @@ class CreateAgentTool(Tool):
             isinstance(item, str) for item in tools
         ):
             return json.dumps({"error": "tools must be an array of strings"})
-        if not isinstance(write_dirs, list) or not all(
-            isinstance(item, str) for item in write_dirs
-        ):
-            return json.dumps({"error": "write_dirs must be an array of strings"})
-        if not isinstance(allow_network, bool):
-            return json.dumps({"error": "allow_network must be a boolean"})
         if placement not in {"standalone", "after", "between"}:
             return json.dumps(
                 {"error": "placement must be standalone, after, or between"}
@@ -110,13 +100,6 @@ class CreateAgentTool(Tool):
             return json.dumps({"error": "between_from_node_id must be a string"})
         if between_to_node_id is not None and not isinstance(between_to_node_id, str):
             return json.dumps({"error": "between_to_node_id must be a string"})
-        try:
-            write_dirs = build_assistant_write_dirs(
-                write_dirs,
-                field_name="write_dirs",
-            )
-        except ValueError as exc:
-            return json.dumps({"error": str(exc)})
         normalized_role_name = role_name.strip()
         if agent.node_type == NodeType.ASSISTANT:
             return json.dumps(
@@ -142,76 +125,14 @@ class CreateAgentTool(Tool):
         leader = registry.get(leader_id)
         leader_record = workspace_store.get_node_record(leader_id)
-        leader_config = (
-            agent.config
-            if agent.uuid == leader_id
-            else (
-                leader.config
-                if leader is not None
-                else (leader_record.config if leader_record is not None else None)
-            )
-        )
         if leader is None and leader_record is None:
             return json.dumps({"error": f"Leader '{leader_id}' was not found"})
-        leader_write_dirs_source = (
-            leader_config.write_dirs if leader_config is not None else []
-        )
-        leader_allow_network = (
-            leader_config.allow_network if leader_config is not None else False
-        )
-        parent_write_dirs = [resolve_path(path) for path in agent.config.write_dirs]
-        invalid_write_dirs = sorted(
-            path
-            for path in write_dirs
-            if not any(
-                resolve_path(path).is_relative_to(parent_path)
-                for parent_path in parent_write_dirs
-            )
-        )
-        if invalid_write_dirs:
-            return json.dumps(
-                {
-                    "error": "write_dirs boundary exceeded: "
-                    + ", ".join(invalid_write_dirs)
-                }
-            )
-        if allow_network and not agent.config.allow_network:
-            return json.dumps(
-                {
-                    "error": "allow_network boundary exceeded: parent disallows network access"
-                }
-            )
-        leader_write_dirs = [resolve_path(path) for path in leader_write_dirs_source]
-        leader_invalid_write_dirs = sorted(
-            path
-            for path in write_dirs
-            if not any(
-                resolve_path(path).is_relative_to(parent_path)
-                for parent_path in leader_write_dirs
-            )
-        )
-        if leader_invalid_write_dirs:
-            return json.dumps(
-                {
-                    "error": "write_dirs boundary exceeded: "
-                    + ", ".join(leader_invalid_write_dirs)
-                }
-            )
-        if allow_network and not leader_allow_network:
-            return json.dumps(
-                {
-                    "error": "allow_network boundary exceeded: workflow Leader disallows network access"
-                }
-            )
         record, error = create_agent_node(
             role_name=normalized_role_name,
             tab_id=agent.config.tab_id,
             name=name,
             tools=tools,
-            write_dirs=write_dirs,
-            allow_network=allow_network,
         )
         if error is not None or record is None:
             return json.dumps({"error": error or "Failed to create agent"})

package/backend/src/flowent/tools/create_tab.py CHANGED Viewed

@@ -4,6 +4,7 @@ import json
 from typing import TYPE_CHECKING, Any, ClassVar
 from flowent.graph_service import create_tab, serialize_tab_summary
+from flowent.models import NodeType
 from flowent.tools import Tool
 if TYPE_CHECKING:
@@ -12,9 +13,7 @@ if TYPE_CHECKING:
 class CreateTabTool(Tool):
     name = "create_workflow"
-    description = (
-        "Create a new workflow with its bound Leader and empty Workflow Graph."
-    )
+    description = "Create a new workflow with its own permission boundary."
     parameters: ClassVar[dict[str, Any]] = {
         "type": "object",
         "properties": {
@@ -24,18 +23,21 @@ class CreateTabTool(Tool):
             },
             "allow_network": {
                 "type": "boolean",
-                "description": "Whether the workflow's leader should have network access (default False)",
+                "description": "Whether this workflow should have network access (default False)",
             },
             "write_dirs": {
                 "type": "array",
                 "items": {"type": "string"},
-                "description": "List of directory paths the workflow's leader is allowed to write to",
+                "description": "List of directory paths this workflow is allowed to write to",
             },
         },
         "required": ["title"],
     }
     def execute(self, agent: Agent, args: dict[str, Any], **_kwargs: Any) -> str:
+        if agent.node_type != NodeType.ASSISTANT:
+            return json.dumps({"error": "Only the Assistant may create workflows"})
         title = args.get("title")
         allow_network = args.get("allow_network", False)
         write_dirs = args.get("write_dirs", [])

package/backend/src/flowent/tools/exec.py CHANGED Viewed

@@ -36,17 +36,18 @@ class ExecTool(Tool):
     def execute(self, agent: Agent, args: dict[str, Any], **kwargs: Any) -> str:
         on_output: Callable[[str], None] | None = kwargs.get("on_output")
+        from flowent.graph_service import resolve_effective_permissions_for_agent
         from flowent.settings import get_runtime_working_dir_path
         command = args["command"]
         timeout = int(args.get("timeout", 30))
-        write_dirs = agent.config.write_dirs
+        allow_network, write_dirs = resolve_effective_permissions_for_agent(agent)
         cwd = Path(get_runtime_working_dir_path())
         bwrap_cmd = build_bwrap_cmd(
             write_dirs,
             command,
-            allow_network=agent.config.allow_network,
+            allow_network=allow_network,
             cwd=cwd,
         )

package/backend/src/flowent/tools/list_roles.py CHANGED Viewed

@@ -19,18 +19,43 @@ class ListRolesTool(Tool):
     }
     def execute(self, agent: Agent, args: dict[str, Any], **_kwargs: Any) -> str:
+        from flowent.models import NodeType
         from flowent.settings import get_settings, normalize_tool_names
-        from flowent.tools import MINIMUM_TOOLS, build_tool_registry
+        from flowent.tools import (
+            MINIMUM_TOOLS,
+            build_tool_registry,
+            is_assistant_only_mcp_tool_name,
+            is_assistant_only_tool_name,
+        )
         settings = get_settings()
         tool_registry = build_tool_registry()
-        all_tool_names = [
-            tool.name for tool in tool_registry.list_tools(agent_visible_only=True)
-        ]
+        all_tool_names: list[str] = []
+        for tool in tool_registry.list_tools(agent_visible_only=True):
+            descriptor = getattr(tool, "_descriptor", None)
+            descriptor_tool_name = getattr(descriptor, "tool_name", None)
+            if isinstance(
+                descriptor_tool_name, str
+            ) and is_assistant_only_mcp_tool_name(descriptor_tool_name):
+                continue
+            all_tool_names.append(tool.name)
+        if agent.node_type != NodeType.ASSISTANT:
+            all_tool_names = [
+                tool_name
+                for tool_name in all_tool_names
+                if not is_assistant_only_tool_name(tool_name)
+            ]
         payload: list[dict[str, object]] = []
         for role in settings.roles:
             builtin_tools = normalize_tool_names([*MINIMUM_TOOLS, *role.included_tools])
+            if agent.node_type != NodeType.ASSISTANT:
+                builtin_tools = [
+                    tool_name
+                    for tool_name in builtin_tools
+                    if not is_assistant_only_tool_name(tool_name)
+                    and not is_assistant_only_mcp_tool_name(tool_name)
+                ]
             optional_tools = [
                 tool_name
                 for tool_name in all_tool_names

package/backend/src/flowent/tools/list_tabs.py CHANGED Viewed

@@ -10,6 +10,7 @@ from flowent.graph_service import (
     list_workflow_nodes,
     serialize_tab_summary,
 )
+from flowent.models import NodeType
 from flowent.tools import Tool
 from flowent.workspace_store import workspace_store
@@ -32,6 +33,9 @@ class ListTabsTool(Tool):
     }
     def execute(self, agent: Agent, args: dict[str, Any], **_kwargs: Any) -> str:
+        if agent.node_type != NodeType.ASSISTANT:
+            return json.dumps({"error": "Only the Assistant may list workflows"})
         workflow_id = args.get("workflow_id")
         if workflow_id is not None and not isinstance(workflow_id, str):
             return json.dumps({"error": "workflow_id must be a string"})

package/backend/src/flowent/tools/list_tools.py CHANGED Viewed

@@ -19,6 +19,10 @@ class ListToolsTool(Tool):
     }
     def execute(self, agent: Agent, args: dict[str, Any], **_kwargs: Any) -> str:
+        from flowent.models import NodeType
         from flowent.tools import list_agent_visible_tool_descriptors
-        return json.dumps(list_agent_visible_tool_descriptors())
+        descriptors = list_agent_visible_tool_descriptors(
+            include_assistant_only=agent.node_type == NodeType.ASSISTANT
+        )
+        return json.dumps(descriptors)