root/fusion
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

feat(FN-3560): add permanent agent gating enforcement in pi with tool class

Browse Source 
The merge lands three major features: a permanent-agent gating system (FN-3560, 6 steps) that classifies and enforces tool access policies for permanent agents in the PI extension, with full test coverage and updated agent docs; an OpenClaw MCP bridge (FN-3717) adding MCP config, schema server, and

Fusion-Task-Id: FN-3560
This commit is contained in:
Fusion
2026-05-07 18:03:38 -07:00
committed by gsxdsm
parent 836ca6807a
commit 2e3be32f1b
17 changed files with 647 additions and 124 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
packages/engine/src/agent-action-gate.ts
View File

@@ -183,25 +183,25 @@ export function evaluateAgentActionGate(params: {
const command = extractShellCommand(args);
const git = classifyGitCommand(command);
if (git?.write) {
category = "git-write";
category = "git_write";
operation = git.operation;
resourceType = "git";
} else {
category = "shell-command";
category = "command_execution";
operation = git?.operation ?? "shell command";
resourceType = git ? "git" : "command";
}
} else if (params.toolName === "write" || params.toolName === "edit") {
category = "file-write-delete";
category = "file_write_delete";
operation = params.toolName;
resourceType = "file";
resourceId = typeof args.path === "string" ? args.path : undefined;
} else if (TASK_AGENT_MANAGEMENT_TOOLS.has(params.toolName)) {
category = "task-agent-management";
category = "task_agent_mutation";
operation = params.toolName;
resourceType = params.toolName.includes("agent") || params.toolName.includes("spawn") ? "agent" : "task";
} else if (NETWORK_API_TOOLS.has(params.toolName)) {
category = "network-api";
category = "network_api";
operation = params.toolName;
resourceType = "research";
} else if (EXEMPT_TOOLS.has(params.toolName)) {