Agents: validate persisted tool-call names

src/agents/pi-embedded-runner/tool-name-allowlist.ts

@@ -0,0 +1,26 @@
+import type { AgentTool } from "@mariozechner/pi-agent-core";
+import type { ClientToolDefinition } from "./run/params.js";
+
+function addName(names: Set<string>, value: unknown): void {
+  if (typeof value !== "string") {
+    return;
+  }
+  const trimmed = value.trim();
+  if (trimmed) {
+    names.add(trimmed);
+  }
+}
+
+export function collectAllowedToolNames(params: {
+  tools: AgentTool[];
+  clientTools?: ClientToolDefinition[];
+}): Set<string> {
+  const names = new Set<string>();
+  for (const tool of params.tools) {
+    addName(names, tool.name);
+  }
+  for (const tool of params.clientTools ?? []) {
+    addName(names, tool.function?.name);
+  }
+  return names;
+}