fix(agentic): validate tools settings

packages/agentic/src/__tests__/validation.test.ts

@@ -632,6 +632,39 @@ describe('validateWorkflow', () => {
       expect(result.success).toBe(true);
     });
 
+    it('validates settings of non-task (bound) defs against their action schema', () => {
+      const buildWorkflow = (settings: Record<string, unknown>) => ({
+        defs: {
+          retrieve_rag_content: {
+            kind: 'tools',
+            action: 'retrieve_rag_content',
+            settings,
+          },
+        },
+        flow: [],
+        outputs: {},
+      });
+      const options = {
+        bindingKinds,
+        actions: {
+          retrieve_rag_content: {
+            settingSchema: z.strictObject({
+              include_inactive: z.boolean().optional(),
+            }),
+          },
+        },
+      };
+
+      expect(
+        validateWorkflow(buildWorkflow({ include_inactivdse: false }), options)
+          .success,
+      ).toBe(false);
+      expect(
+        validateWorkflow(buildWorkflow({ include_inactive: false }), options)
+          .success,
+      ).toBe(true);
+    });
+
     it('reports missing actions with code, actionName and path', () => {
       const workflow = {
         defs: mergeTaskDefs({

packages/agentic/src/bindings/base-binding.ts

@@ -16,6 +16,7 @@ export type BindingActionPolicy = 'forbidden' | 'optional' | 'required';
 
 export type BindingValidationActionMetadata = {
   supportedBindings?: readonly string[];
+  settingSchema?: z.ZodTypeAny;
 };
 
 export type BindingKindDescriptor<
@@ -341,6 +342,17 @@ export const validateAndResolveBindings = (
     }
 
     parsedSettingsByDefName.set(defName, parsedPayload.data);
+
+    const actionSchema = defDefinition.action
+      ? actions?.[defDefinition.action]?.settingSchema
+      : undefined;
+    const actionParsed = actionSchema?.safeParse(defDefinition.settings);
+
+    if (actionParsed && !actionParsed.success) {
+      issues.push(
+        ...toBindingSettingsIssues(actionParsed.error.issues, defName),
+      );
+    }
   }
 
   for (const [defName, defDefinition] of Object.entries(defs)) {