Graphorin API reference v0.15.1

---

Graphorin API reference / @graphorin/security / / ToolSecretsContext

Interface: ToolSecretsContext

Defined in: packages/security/src/secrets/acl.ts:18

Stable

Per-call context kept in AsyncLocalStorage. Carries the current tool's allowlist, identifier, and run/session bookkeeping that the audit log uses for attribution.

Properties

Property	Modifier	Type	Description	Defined in
agentId?	readonly	string	Identifier of the agent owning the scope, if known.	packages/security/src/secrets/acl.ts:26
parent?	readonly	ToolSecretsContext	Lightweight pointer to the parent scope, for sub-agent isolation.	packages/security/src/secrets/acl.ts:30
runId?	readonly	string	Stable identifier of the run that initiated this scope.	packages/security/src/secrets/acl.ts:22
secretsAllowed	readonly	readonly string[]	Effective allowlist for the current scope.	packages/security/src/secrets/acl.ts:28
sessionId?	readonly	string	Identifier of the session, if known.	packages/security/src/secrets/acl.ts:24
toolName	readonly	string	Stable name of the currently-executing tool.	packages/security/src/secrets/acl.ts:20