root/fusion
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

feat(FN-3731): add action-gate reload endpoint for reloadable exempt-tools

Browse Source 
Adds a reload endpoint for action-gate exempt tools, exposing `POST /api/system/reload-exempt-tools` on the dashboard to hot-reload the engine's mutable EXEMPT_TOOLS registry without a restart. The endpoint is wired through `agent-action-gate.ts` with test coverage for reloadable behavior.

Fusion-Task-Id: FN-3731
This commit is contained in:
Fusion
2026-05-08 07:12:40 -07:00
committed by gsxdsm
parent de78113bf2
commit 2005a0f6e8
7 changed files with 226 additions and 29 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
docs/agents.md
View File

@@ -87,6 +87,7 @@ Unknown/unclassified tool fallback:
- In permanent-agent sessions, unknown tools default to `require-approval` (fail-safe).
- Category `none` only yields `allow` when the tool is positively recognized as read-only.
- Internal Fusion runtime coordination tools (heartbeat completion, task/agent coordination, messaging, evaluations, identity reflection, memory bookkeeping) are exempt by design and always allowed so permanent-agent heartbeats can complete.
- Operators can reload the in-memory exempt-tool registry at runtime via `POST /api/action-gate/reload` (optional body `{ "tools": string[] }`) to apply exemption-list updates without restarting the engine process.
Interim enforcement behavior (persistence-integrated, pre-resume lifecycle):