openai4s/storage/permissions.py

• _canonical_json_sha256 · function · L16-L29 — def _canonical_json_sha256(value: Any) -> str
• permission_action_digest · function · L32-L72 — def permission_action_digest( *, root_frame_id: str | None, project_id: str | None, tool: str, target: str, side_effect_class: str | None, resource_keys: list[str] | tuple[str, ...] | None, dangerous: bool, canonical_arguments: Any, ) -> tuple[str, str]
• canonical_permission_action_digest · function · L75-L117 — def canonical_permission_action_digest(row: Any) -> str
• field · function · L78-L82 — def field(name: str) -> Any
• perm_match · function · L120-L131 — def perm_match(text: str, pattern: str) -> bool
• literal_permission_pattern · function · L137-L149 — def literal_permission_pattern(text: str) -> str
• PermissionRuleRepository · class · L217-L1005 — class PermissionRuleRepository
• init · method · L225-L240 — def init( self, connection: sqlite3.Connection, lock: Any, *, clock_ms: Callable[[], int], get_setting: Callable[[str, str | None], str | None], set_setting: Callable[[str, str], None], admit_action_group: Callable[[str, str], None] | None = None, ) -> None
• set_rule · method · L242-L285 — def set_rule( self, , scope: str, scope_id: str = "", tool: str, pattern: str = "", decision: str, ) -> str
• delete_rule · method · L287-L293 — def delete_rule(self, rule_id: str) -> None
• get_rule · method · L295-L300 — def get_rule(self, rule_id: str) -> dict | None
• get_rules · method · L302-L309 — def get_rules(self, *, scope: str, scope_id: str = "") -> list[dict]
• list_for_frame · method · L311-L330 — def list_for_frame( self, *, root_frame_id: str | None = None, project_id: str | None = None, ) -> dict
• resolve · method · L332-L376 — def resolve( self, *, root_frame_id: str | None = None, project_id: str | None = None, tool: str, pattern_input: str = "", ) -> str
• seed_defaults · method · L378-L452 — def seed_defaults(self, *, force: bool = False) -> None
• create_request · method · L455-L563 — def create_request( self, *, decision_id: str, tool: str, target: str = "", root_frame_id: str | None = None, frame_id: str | None = None, project_id: str | None = None, action_group_id: str | None = None, action_id: str | None = None, tool_call_id: str | None = None, side_effect_class: str | None = None, resource_keys: list[str] | tuple[str, ...] | None = None, payload: dict | None = None, dangerous: bool = False, canonical_arguments: Any = _MISSING, expires_at: int | None = None, created_at: int | None = None, ) -> dict
• resolve_request · method · L565-L670 — def resolve_request( self, decision_id: str, *, state: str, scope: str | None = None, pattern: str | None = None, message: str | None = None, resolution_context: str | None = None, continuation_required: bool = False, expected_action_digest: str | None = None, resolved_at: int | None = None, ) -> dict
• consume_restart_once_grant · method · L672-L773 — def consume_restart_once_grant( self, *, root_frame_id: str, tool: str, target: str = "", project_id: str | None = None, side_effect_class: str | None = None, resource_keys: list[str] | tuple[str, ...] | None = None, dangerous: bool = False, canonical_arguments: Any = _MISSING, consumed_at: int | None = None, ) -> dict | None
• activate_restart_continuation · method · L775-L813 — def activate_restart_continuation( self, decision_id: str, *, expires_at: int | None = None, ) -> dict
• get_request · method · L815-L821 — def get_request(self, decision_id: str) -> dict | None
• request_action_digest · method · L823-L826 — def request_action_digest(self, decision_id: str) -> str
• timeout_expired_requests · method · L828-L863 — def timeout_expired_requests(self, *, now: int | None = None) -> int
• list_requests · method · L865-L889 — def list_requests( self, *, root_frame_id: str | None = None, state: str | None = None, ) -> list[dict]
• _request_row_locked · method · L891-L898 — def _request_row_locked(self, decision_id: str)
• _assert_exact_action_envelope_locked · method · L901-L927 — def _assert_exact_action_envelope_locked( row, *, expected_action_digest: str | None = None, require: bool = False, ) -> str | None
• _normalize_request · method · L930-L942 — def _normalize_request(row) -> dict
• _append_permission_event_locked · method · L944-L1005 — def _append_permission_event_locked( self, *, group_id: str, event_type: str, decision_id: str, action_id: str | None, tool_call_id: str | None, side_effect_class: str | None, resource_keys: list[str], result: dict, created_at: int, ) -> None