645f63a4f6
- EPIC-202: Build Claw-Architecture Agent - TICKET-203: ToolPermissionContext - TICKET-204: ExecutionRegistry - TICKET-205: Session Persistence Replaces idle Allegro-Primus with real work capability.
40 lines
979 B
Markdown
40 lines
979 B
Markdown
# TICKET-203: Implement ToolPermissionContext
|
|
|
|
**Epic:** EPIC-202
|
|
**Priority:** P0
|
|
**Status:** Ready
|
|
**Assignee:** Allegro
|
|
**Estimate:** 4 hours
|
|
|
|
## Description
|
|
|
|
Implement the ToolPermissionContext pattern from Claw Code for fine-grained tool access control.
|
|
|
|
## Acceptance Criteria
|
|
|
|
- [ ] `ToolPermissionContext` dataclass created
|
|
- [ ] `deny_tools: set[str]` field
|
|
- [ ] `deny_prefixes: tuple[str, ...]` field
|
|
- [ ] `blocks(tool_name: str) -> bool` method
|
|
- [ ] Integration with Hermes tool registry
|
|
- [ ] Tests pass
|
|
|
|
## Implementation Notes
|
|
|
|
```python
|
|
@dataclass(frozen=True)
|
|
class ToolPermissionContext:
|
|
deny_tools: set[str] = field(default_factory=set)
|
|
deny_prefixes: tuple[str, ...] = ()
|
|
|
|
def blocks(self, tool_name: str) -> bool:
|
|
if tool_name in self.deny_tools:
|
|
return True
|
|
return any(tool_name.startswith(p) for p in self.deny_prefixes)
|
|
```
|
|
|
|
## References
|
|
|
|
- Claw: `src/permissions.py`
|
|
- Hermes: `tools/registry.py`
|