Updated
On this page
resolve_allow_list expands an agent's allow-list into concrete tool names: exact matches, `namespace.*` wildcards, `#tag` filters, and the universal `*`.
#scheduler.src.orxtra.scheduler._allow_resolver
#scheduler.src.orxtra.scheduler._allow_resolver
Resolve agent allow-lists with wildcards and tag filters.
#resolve_allow_list
python
def resolve_allow_list(allow: list[str], tool_names: dict[str, tuple[str, frozenset[str]]]) -> set[str]Resolve an allow list with wildcards and tag filters to concrete tool names.
Supports:
- Explicit names: "read", "write" -- exact match
- Namespace wildcards: "fs.*" -- all tools whose namespace starts with "fs."
(also matches "fs" exactly)
- Tag filters: "#readonly" -- all tools tagged "readonly"
- Universal wildcard: "*" -- all tools
Unknown explicit names are silently ignored (matches current behavior where an allow-list entry for a tool that doesn't exist simply has no effect).
Args:
allow: The agent's allow list entries.tool_names: Mapping of tool name to (namespace, tags).
Returns:
- Set of concrete tool names that passed the filter.