fix(gateway): scope plugin subagent cleanup ownership

This commit is contained in:
Peter Steinberger
2026-04-27 10:36:06 +01:00
parent 600df95c8c
commit 72f7d7e4ea
11 changed files with 335 additions and 10 deletions

View File

@@ -117,6 +117,8 @@ register(api) {
Model overrides (`provider`/`model`) require operator opt-in via `plugins.entries.<id>.subagent.allowModelOverride: true` in config. Untrusted plugins can still run subagents, but override requests are rejected.
</Warning>
`deleteSession(...)` can delete sessions created by the same plugin through `api.runtime.subagent.run(...)`. Deleting arbitrary user or operator sessions still requires an admin-scoped Gateway request.
</Accordion>
<Accordion title="api.runtime.nodes">
List connected nodes and invoke a node-host command from Gateway-loaded plugin code or from plugin CLI commands. Use this when a plugin owns local work on a paired device, for example a browser or audio bridge on another Mac.