Method denySubagentMemoryWrite

internal/daemon/native_tools.go:5341–5374

(
	ctx context.Context,
	req toolspkg.CallRequest,
	location memoryToolLocation,
	actorKind nativeMemoryActorKind,
	targetID string,
)

}

func (n *daemonNativeTools) denySubagentMemoryWrite(
	ctx context.Context,
	req toolspkg.CallRequest,
	location memoryToolLocation,
	actorKind nativeMemoryActorKind,
	targetID string,
) error {
	if actorKind != nativeMemoryActorKindSubagent {
		return nil
	}
	cause := fmt.Errorf("%w: sub-agent memory writes are denied", toolspkg.ErrToolDenied)
	if location.Store != nil {
		if err := location.Store.RecordMemoryWriteRejected(ctx, memorypkg.WriteRejectedEvent{
			Scope:       location.Scope,
			WorkspaceID: location.WorkspaceID,
			AgentName:   location.AgentName,
			AgentTier:   location.AgentTier,
			SessionID:   strings.TrimSpace(req.SessionID),
			ActorKind:   string(actorKind),
			TargetID:    targetID,
			Reason:      string(toolspkg.ReasonMemorySubagentWriteDenied),
			ToolID:      string(req.ToolID),
		}); err != nil {
			cause = errors.Join(cause, err)
		}
	}
	return toolspkg.NewToolError(
		toolspkg.ErrorCodeDenied,
		req.ToolID,
		"sub-agent memory writes are denied",
		cause,
		toolspkg.ReasonMemorySubagentWriteDenied,
	)
}

func (n *daemonNativeTools) recordMemoryToolWrite(
	scope toolspkg.Scope,