mirror of
https://github.com/hanzoai/python-sdk.git
synced 2026-10-27 04:20:09 +00:00
zooqueenandHanzo Dev
b144973bfc
Fix 35 ruff errors (E722, F841, B904, B905, B007, E741, S202, S310, S306, S110, TID251, UP042, F401) and run black on 526 files. Co-authored-by: Hanzo Dev <[email protected]>
87 lines
2.3 KiB
Python
87 lines
2.3 KiB
Python
"""Permission management for filesystem tools."""
|
|
|
|
import os
|
|
from typing import Optional
|
|
from pathlib import Path
|
|
|
|
|
|
class PermissionManager:
|
|
"""Manages filesystem permissions for tools.
|
|
|
|
Controls which paths tools are allowed to access.
|
|
"""
|
|
|
|
def __init__(
|
|
self,
|
|
allowed_paths: Optional[list[str | Path]] = None,
|
|
deny_patterns: Optional[list[str]] = None,
|
|
):
|
|
"""Initialize permission manager.
|
|
|
|
Args:
|
|
allowed_paths: List of allowed base paths (defaults to cwd)
|
|
deny_patterns: Patterns to deny (e.g., '.git', 'node_modules')
|
|
"""
|
|
self.allowed_paths: list[Path] = []
|
|
if allowed_paths:
|
|
for p in allowed_paths:
|
|
self.allowed_paths.append(Path(p).resolve())
|
|
else:
|
|
self.allowed_paths.append(Path.cwd())
|
|
|
|
self.deny_patterns = deny_patterns or [
|
|
".git",
|
|
"__pycache__",
|
|
".pyc",
|
|
"node_modules",
|
|
".env",
|
|
".secrets",
|
|
]
|
|
|
|
def is_path_allowed(self, path: str | Path) -> bool:
|
|
"""Check if a path is allowed.
|
|
|
|
Args:
|
|
path: Path to check
|
|
|
|
Returns:
|
|
True if path is within allowed paths and not denied
|
|
"""
|
|
try:
|
|
resolved = Path(path).resolve()
|
|
|
|
# Check if path is under any allowed path
|
|
is_under_allowed = any(
|
|
self._is_subpath(resolved, allowed) for allowed in self.allowed_paths
|
|
)
|
|
|
|
if not is_under_allowed:
|
|
return False
|
|
|
|
# Check deny patterns
|
|
path_str = str(resolved)
|
|
for pattern in self.deny_patterns:
|
|
if pattern in path_str:
|
|
return False
|
|
|
|
return True
|
|
|
|
except Exception:
|
|
return False
|
|
|
|
def _is_subpath(self, path: Path, parent: Path) -> bool:
|
|
"""Check if path is under parent."""
|
|
try:
|
|
path.relative_to(parent)
|
|
return True
|
|
except ValueError:
|
|
return False
|
|
|
|
def add_allowed_path(self, path: str | Path) -> None:
|
|
"""Add a path to the allowed list."""
|
|
self.allowed_paths.append(Path(path).resolve())
|
|
|
|
def add_deny_pattern(self, pattern: str) -> None:
|
|
"""Add a deny pattern."""
|
|
self.deny_patterns.append(pattern)
|