open-edison 0.1.17__py3-none-any.whl → 0.1.26__py3-none-any.whl

src/permissions.py

@@ -0,0 +1,292 @@
+"""
+Permissions management for Open Edison
+
+Simple JSON-based permissions for single-user MCP proxy.
+Reads tool, resource, and prompt permission files and provides a singleton interface.
+"""
+
+import json
+from dataclasses import dataclass
+from pathlib import Path
+from typing import Any
+
+from loguru import logger as log
+
+from src.config import Config, get_config_dir
+
+# Detect repository root (same logic as in src.config)
+_ROOT_DIR = Path(__file__).parent.parent
+
+
+def _default_permissions_dir() -> Path:
+    """Resolve default permissions directory.
+
+    In development (repo checkout with pyproject.toml), prefer repository root so
+    we use repo-local tool/resource/prompt permissions JSON files. Otherwise fall
+    back to the standard user config directory.
+    """
+    try:
+        if (_ROOT_DIR / "pyproject.toml").exists():
+            return _ROOT_DIR
+    except Exception:
+        pass
+    return get_config_dir()
+
+
+# ACL ranking for permission levels
+ACL_RANK: dict[str, int] = {"PUBLIC": 0, "PRIVATE": 1, "SECRET": 2}
+
+
+class PermissionsError(Exception):
+    """Exception raised for permissions-related errors"""
+
+    def __init__(self, message: str, permissions_path: Path | None = None):
+        self.message = message
+        self.permissions_path = permissions_path
+        super().__init__(self.message)
+
+
+@dataclass
+class ToolPermission:
+    """Individual tool permission configuration"""
+
+    enabled: bool = False
+    write_operation: bool = False
+    read_private_data: bool = False
+    read_untrusted_public_data: bool = False
+    acl: str = "PUBLIC"
+    description: str | None = None
+
+
+@dataclass
+class ResourcePermission:
+    """Individual resource permission configuration"""
+
+    enabled: bool = False
+    write_operation: bool = False
+    read_private_data: bool = False
+    read_untrusted_public_data: bool = False
+
+
+@dataclass
+class PromptPermission:
+    """Individual prompt permission configuration"""
+
+    enabled: bool = False
+    write_operation: bool = False
+    read_private_data: bool = False
+    read_untrusted_public_data: bool = False
+
+
+@dataclass
+class PermissionsMetadata:
+    """Metadata for permissions files"""
+
+    description: str
+    last_updated: str  # noqa
+
+
+@dataclass
+class Permissions:
+    """Main permissions class"""
+
+    tool_permissions: dict[str, ToolPermission]
+    resource_permissions: dict[str, ResourcePermission]
+    prompt_permissions: dict[str, PromptPermission]
+    tool_metadata: PermissionsMetadata | None = None
+    resource_metadata: PermissionsMetadata | None = None
+    prompt_metadata: PermissionsMetadata | None = None
+
+    def __init__(
+        self,
+        permissions_dir: Path | None = None,
+        *,
+        tool_permissions: dict[str, ToolPermission] | None = None,
+        resource_permissions: dict[str, ResourcePermission] | None = None,
+        prompt_permissions: dict[str, PromptPermission] | None = None,
+    ) -> None:
+        """Load permissions from JSON files or provide them directly."""
+        if permissions_dir is None:
+            permissions_dir = _default_permissions_dir()
+
+        if tool_permissions is None:
+            tool_permissions_path = permissions_dir / "tool_permissions.json"
+            tool_permissions, tool_metadata = self._load_permission_file(
+                tool_permissions_path, ToolPermission
+            )
+            self.tool_metadata = tool_metadata
+
+        if resource_permissions is None:
+            resource_permissions_path = permissions_dir / "resource_permissions.json"
+            resource_permissions, resource_metadata = self._load_permission_file(
+                resource_permissions_path, ResourcePermission
+            )
+            self.resource_metadata = resource_metadata
+
+        if prompt_permissions is None:
+            prompt_permissions_path = permissions_dir / "prompt_permissions.json"
+            prompt_permissions, prompt_metadata = self._load_permission_file(
+                prompt_permissions_path, PromptPermission
+            )
+            self.prompt_metadata = prompt_metadata
+
+        self.tool_permissions = tool_permissions
+        self.resource_permissions = resource_permissions
+        self.prompt_permissions = prompt_permissions
+
+    @classmethod
+    def _extract_metadata(cls, data: dict[str, Any]) -> PermissionsMetadata | None:
+        """Extract metadata from permission file data."""
+        metadata_data = data.get("_metadata", {})
+        if not metadata_data:
+            return None
+
+        return PermissionsMetadata(
+            description=str(metadata_data.get("description", "")),
+            last_updated=str(metadata_data.get("last_updated", "")),
+        )
+
+    @classmethod
+    def _validate_server_data(cls, server_name: str, server_items_data: Any) -> None:
+        """Validate server data structure."""
+        if not isinstance(server_items_data, dict):
+            log.warning(
+                f"Invalid server data for {server_name}: expected dict, got {type(server_items_data)}"
+            )
+            raise PermissionsError(
+                f"Invalid server data for {server_name}: expected dict, got {type(server_items_data)}"
+            )
+
+    @classmethod
+    def _validate_item_data(cls, server_name: str, item_name: str, item_data: Any) -> None:
+        """Validate item data structure."""
+        if not isinstance(item_data, dict):
+            log.warning(
+                f"Invalid item permissions for {server_name}/{item_name}: expected dict, got {type(item_data)}"
+            )
+            raise PermissionsError(
+                f"Invalid item permissions for {server_name}/{item_name}: expected dict, got {type(item_data)}"
+            )
+
+    @classmethod
+    def _load_permission_file(
+        cls,
+        file_path: Path,
+        permission_class: type[ToolPermission] | type[ResourcePermission] | type[PromptPermission],
+    ) -> tuple[dict[str, Any], PermissionsMetadata | None]:
+        """Load permissions from a single JSON file.
+
+        Returns a tuple of (permissions_dict, metadata)
+        """
+        permissions: dict[str, Any] = {}
+        metadata: PermissionsMetadata | None = None
+
+        if not file_path.exists():
+            raise PermissionsError(f"Permissions file not found at {file_path}")
+
+        with open(file_path) as f:
+            data: dict[str, Any] = json.load(f)
+
+        # Extract metadata
+        metadata = cls._extract_metadata(data)
+
+        # Parse permissions with duplicate checking
+        for server_name, server_items_data in data.items():
+            if server_name == "_metadata":
+                continue
+
+            cls._validate_server_data(server_name, server_items_data)
+
+            for item_name, item_data in server_items_data.items():  # type: ignore
+                cls._validate_item_data(server_name, item_name, item_data)
+
+                # Type casting for clarity
+                item_name_str: str = str(item_name)  # type: ignore
+                item_data_dict: dict[str, Any] = item_data  # type: ignore
+
+                # Create permission object (flat structure)
+                permissions[server_name + "_" + item_name_str] = permission_class(**item_data_dict)
+
+        log.debug(f"Loaded {len(permissions)} items from {len(data)} servers in {file_path}")
+
+        return permissions, metadata
+
+    def get_tool_permission(self, tool_name: str) -> ToolPermission:
+        """Get permission for a specific tool"""
+        if tool_name not in self.tool_permissions:
+            raise PermissionsError(f"Tool '{tool_name}' not found in permissions")
+        return self.tool_permissions[tool_name]
+
+    def get_resource_permission(self, resource_name: str) -> ResourcePermission:
+        """Get permission for a specific resource"""
+        if resource_name not in self.resource_permissions:
+            raise PermissionsError(f"Resource '{resource_name}' not found in permissions")
+        return self.resource_permissions[resource_name]
+
+    def get_prompt_permission(self, prompt_name: str) -> PromptPermission:
+        """Get permission for a specific prompt"""
+        if prompt_name not in self.prompt_permissions:
+            raise PermissionsError(f"Prompt '{prompt_name}' not found in permissions")
+        return self.prompt_permissions[prompt_name]
+
+    def is_tool_enabled(self, tool_name: str) -> bool:
+        """Check if a tool is enabled
+        Also checks if the server is enabled"""
+        permission = self.get_tool_permission(tool_name)
+        server_name = self.server_name_from_tool_name(tool_name)
+        server_enabled = self.is_server_enabled(server_name)
+        return permission.enabled and server_enabled
+
+    def is_resource_enabled(self, resource_name: str) -> bool:
+        """Check if a resource is enabled
+        Also checks if the server is enabled"""
+        permission = self.get_resource_permission(resource_name)
+        server_name = self.server_name_from_tool_name(resource_name)
+        server_enabled = self.is_server_enabled(server_name)
+        return permission.enabled and server_enabled
+
+    def is_prompt_enabled(self, prompt_name: str) -> bool:
+        """Check if a prompt is enabled
+        Also checks if the server is enabled"""
+        permission = self.get_prompt_permission(prompt_name)
+        server_name = self.server_name_from_tool_name(prompt_name)
+        server_enabled = self.is_server_enabled(server_name)
+        return permission.enabled and server_enabled
+
+    @staticmethod
+    def server_name_from_tool_name(tool_name: str) -> str:
+        """Get the server name from a tool name"""
+        parts = tool_name.split("_")
+        if len(parts) == 0:
+            raise PermissionsError(f"Tool name {tool_name} is invalid")
+        if parts[0] == "builtin":
+            return "builtin"
+
+        server_names = {s.name for s in Config().mcp_servers}
+        for i in range(len(parts)):
+            server_name = "_".join(parts[:i])
+            if server_name in server_names:
+                return server_name
+        raise PermissionsError(f"Server name not found for tool {tool_name}")
+
+    @staticmethod
+    def is_server_enabled(server_name: str) -> bool:
+        """Check if a server is enabled"""
+        if server_name == "builtin":
+            return True
+        server_config = next((s for s in Config().mcp_servers if s.name == server_name), None)
+        return server_config is not None and server_config.enabled
+
+
+def normalize_acl(value: str | None, *, default: str = "PUBLIC") -> str:
+    """Normalize ACL string, defaulting and uppercasing; validate against known values."""
+    try:
+        if value is None:
+            return default
+        acl = str(value).upper().strip()
+        if acl not in ACL_RANK:
+            # Fallback to default if invalid
+            return default
+        return acl
+    except Exception:
+        return default