Module agent_door
Expand description
The door agents come in by from outside, as the person who owns it sees it: where an agent connects, which agents it let in and into which workspaces, and the person’s say over each of them.
An agent on another machine (Claude Code, Codex, any MCP client) reaches
the person’s workspaces over MCP at Door::endpoint. The person grants
it once, and the grant names the workspaces it may work in. Every change
it makes there is attributed to it in the workspace’s history
(super::workspace_activity), where its runs are read and undone.
The model is the MCP front door’s (crates/hosting/tilo-front-door): a
grant reaches every workspace of the person or exactly one, and each MCP
session through it is one run, named for the person (“Claude Code #2”) as
History names it. Whoever runs the door serves PROVIDER; a host
without one leaves the reads unanswered, and a view that follows them
says so. Revoking a grant (REVOKE) ends every run it carries and lets
none in again; stopping a run (STOP) ends that one session and keeps
the grant, so the agent can come back.
Structs§
- Door
- The door, as the person sees it.
- Grant
- One agent the door let in.
- Grant
Ref - Which grant
REVOKEtakes back. - Run
- One run of an agent through the door: one MCP session, open now.
- RunRef
- Which run
STOPends: the grant it came in by, and its name. - Workspace
- One of the person’s workspaces the door reaches.
Enums§
- Client
- An MCP client and the command that connects it to
Door::endpoint. - Maker
- Who made a workspace the door reaches.
- Reach
- Where a grant reaches, as the person chose when they let the agent in.
Constants§
- DOOR
- Live: the door and what it let in; answers
Door. - PROVIDER
- The provider the agent door is served under.
- RESOURCE
- The resource every action is an action of.
- REVOKE
- Take back a grant (
GrantbyGrant::id, asGrantRef): its runs end now and it lets none in again. - STOP
- End one run now, keeping its grant (
RunRef).