Repository navigation
feat(agent): add pluggable tool catalog retrieval and on-demand schema contract (T41) - #175
Merged
Conversation
…a contract (T41) Add an opt-in, backend-neutral tool catalog in argi-agent-framework: - ToolId (provider + name) gives tools a stable qualified identity that is also the model-facing name, so equal names from different providers never collide. - ToolCatalogProvider adapts any backend; InMemoryToolCatalogProvider is the reference catalog and can wrap an existing ToolRegistry. - ToolCatalog filters every summary through a trusted ToolCatalogAccessPolicy before ranking, re-checks access when releasing a schema, rejects guessed ids without revealing why, bounds results and offers, and only caches summaries per provider revision (never access decisions). - OfferedTool records the offered version and definition digest and maps to a tool_catalog DefinitionReference; resolveOffered never substitutes another version. - KeywordToolCatalogSearchStrategy provides dependency-free keyword and rule retrieval (with Han bigrams); other strategies plug in via ToolCatalogSearchStrategy. - ToolCatalogInterceptor discloses matched tools through the dynamic tool registry. Empty, unauthenticated or failed searches disclose nothing, and execution is still authorized at the tool execution boundary. - ModelRequest gains an optional typed trusted execution context that AgentLlmNode propagates from RunnableConfig. Refs agentic-ai-java#144
yangjj-iso
force-pushed
the
feat/tool-catalog-t41
branch
from
October 19, 2026 05:44
eeb7b25 to
014bc77
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Confirmed contribution to ARGI: adds an opt-in, backend-neutral tool catalog (provider-qualified ToolId, trusted access filtering before summary retrieval and again at on-demand schema release, version- and digest-pinned OfferedTool snapshots mapped to tool_catalog definition references, keyword/rule search strategy, reference in-memory provider, and a bounded fail-closed ToolCatalogInterceptor that leaves execution authorization to the tool boundary and keeps existing tools builder/ToolSelection/Skills behavior unchanged), closes #144.