Class: Legion::Sandbox::Policy

Inherits:
Object
  • Object
show all
Defined in:
lib/legion/sandbox.rb

Constant Summary collapse

CAPABILITIES = 
%w[
  network:outbound network:inbound
  filesystem:read filesystem:write
  llm:invoke llm:embed
  data:read data:write
  cache:read cache:write
  transport:publish transport:subscribe
].freeze

Instance Attribute Summary collapse

Instance Method Summary collapse

Constructor Details

#initialize(extension_name:, capabilities: [], allowed_domains: nil) ⇒ Policy

Returns a new instance of Policy.



17
18
19
20
21
 
# File 'lib/legion/sandbox.rb', line 17

def initialize(extension_name:, capabilities: [], allowed_domains: nil)
  @extension_name = extension_name
  @capabilities = capabilities.select { |c| CAPABILITIES.include?(c) }.freeze
  @allowed_domains = allowed_domains&.map(&:to_s)&.freeze
end

Instance Attribute Details

#allowed_domains ⇒ Object (readonly)

Returns the value of attribute allowed_domains.



15
16
17
 
# File 'lib/legion/sandbox.rb', line 15

def allowed_domains
  @allowed_domains
end

#capabilities ⇒ Object (readonly)

Returns the value of attribute capabilities.



15
16
17
 
# File 'lib/legion/sandbox.rb', line 15

def capabilities
  @capabilities
end

#extension_name ⇒ Object (readonly)

Returns the value of attribute extension_name.



15
16
17
 
# File 'lib/legion/sandbox.rb', line 15

def extension_name
  @extension_name
end

Instance Method Details

#allowed?(capability) ⇒ Boolean

Returns:

  • (Boolean) 


23
24
25
 
# File 'lib/legion/sandbox.rb', line 23

def allowed?(capability)
  capabilities.include?(capability.to_s)
end

#domain_allowed?(agent_domain) ⇒ Boolean

Returns:

  • (Boolean) 


27
28
29
30
31
 
# File 'lib/legion/sandbox.rb', line 27

def domain_allowed?(agent_domain)
  return true if allowed_domains.nil? || allowed_domains.empty?

  allowed_domains.include?(agent_domain.to_s)
end