Interface: KabooAccessPolicy¶

Access-control hooks for KabooAgentRunner.

kaboo-runtime ships no HTTP layer, so authentication stays in the host — but ownership is real data the runner records and serves. ownerOf tells the runner which subject owns a thread (typically parsed from the host's thread-id convention or session); the owner is persisted on the thread record and surfaced as createdById in KabooAgentRunner.listThreads, so host request filters can compare against a real field instead of re-deriving ownership.

Properties¶

allowClearAll?¶

optional allowClearAll?: boolean

Defined in: src/runner.ts:246

Whether KabooAgentRunner.clearThreads (which wipes the whole store) is allowed. Defaults to true for compatibility; multi-tenant hosts should set false.

ownerOf?¶

optional ownerOf?: (threadId) => string | null

Defined in: src/runner.ts:240

Resolve the owning subject for a thread (or null when unknown). Called when a run persists and when listing threads that have no recorded owner.

Parameters¶

threadId¶

string

Returns¶

string | null