jpmschweitzer/odysseus
1
0
Fork 0
mirror of https://github.com/pewdiepie-archdaemon/odysseus.git synced 2026-10-07 23:42:21 +02:00
Code Issues Packages Projects Releases Wiki Activity

feat(runtime): bind process and job resources to authority

Browse Source
This commit is contained in:
Alexandre Teixeira
2026-10-02 18:54:09 +01:00
parent 7b8ac6f631
commit db41d7e822
36 changed files with 2251 additions and 174 deletions
Download Patch File Download Diff File Expand all files Collapse all files
tests/test_tool_approvals.py
+9
View File
@@ -32,6 +32,15 @@ def _pending(store, **overrides):
"capabilities": capabilities_for_action("bash", "printf exact"),
}
values.update(overrides)
if "request_authority" not in values:
import tempfile
from src.agent_runtime.authority import RequestAuthority, OperationGrant
from src.agent_runtime.resources import ProcessLaunchScope, FilesystemRoot, NativeBackendResource
from src.containment import DEFAULT_REQUIRED
tool = values["tool_name"]
scopes = (ProcessLaunchScope(NativeBackendResource(tool), FilesystemRoot.seal(tempfile.mkdtemp(prefix="w3-approval-fixture-")), DEFAULT_REQUIRED),) if tool in {"bash", "python"} else ()
values["request_authority"] = RequestAuthority("standalone-test-request", str(values["owner"]).casefold(),
str(values["session_id"] or ""), str(values["workspace"] or ""), (OperationGrant(tool),), launch_scopes=scopes)
return store.create(**values)