feat(FN-3560): add permanent agent gating enforcement in pi with tool class

The merge lands three major features: a permanent-agent gating system (FN-3560, 6 steps) that classifies and enforces tool access policies for permanent agents in the PI extension, with full test coverage and updated agent docs; an OpenClaw MCP bridge (FN-3717) adding MCP config, schema server, and

Fusion-Task-Id: FN-3560
This commit is contained in:
Fusion
2026-05-07 18:03:38 -07:00
committed by gsxdsm
parent 4c204c9485
commit 903830b9af
17 changed files with 647 additions and 124 deletions

View File

@@ -1883,11 +1883,11 @@ describe("Agent create/update routes", () => {
permissionPolicy: {
presetId: "approval-required",
rules: {
"git-write": "require-approval",
"file-write-delete": "require-approval",
"shell-command": "require-approval",
"network-api": "require-approval",
"task-agent-management": "require-approval",
git_write: "require-approval",
file_write_delete: "require-approval",
command_execution: "require-approval",
network_api: "require-approval",
task_agent_mutation: "require-approval",
},
},
instructionsPath: "docs/reviewer.md",
@@ -1936,11 +1936,11 @@ describe("Agent create/update routes", () => {
permissionPolicy: {
presetId: "locked-down",
rules: {
"git-write": "block",
"file-write-delete": "block",
"shell-command": "block",
"network-api": "block",
"task-agent-management": "block",
git_write: "block",
file_write_delete: "block",
command_execution: "block",
network_api: "block",
task_agent_mutation: "block",
},
},
totalInputTokens: 42,
@@ -2004,11 +2004,11 @@ describe("Agent create/update routes", () => {
expect(res.status).toBe(201);
expect(res.body.permissionPolicy.presetId).toBe("locked-down");
expect(res.body.permissionPolicy.rules).toEqual({
"git-write": "block",
"file-write-delete": "block",
"shell-command": "block",
"network-api": "block",
"task-agent-management": "block",
git_write: "block",
file_write_delete: "block",
command_execution: "block",
network_api: "block",
task_agent_mutation: "block",
});
});