Method __init__

codewiki/src/be/caw_backend.py:126–149

(self, config: Config)

# Custom MCP-server tools (added via `--mcp-config`) are not auto-approved under
# `acceptEdits`, and `bypassPermissions` may be disabled by an org managed
# policy (see the cwd note below), so caw's `--dangerously-skip-permissions`
# alone is not enough: CodeWiki's own toolkit (str_replace_editor,
# read_code_components, generate_sub_module_documentation) gets denied
# ("you haven't granted it yet"), the agent writes nothing, and the run
# "succeeds" with an empty module tree.  Grant the toolkit explicitly with
# `--allowedTools` using the permission rule syntax:
#   https://code.claude.com/docs/en/settings#permission-rule-syntax
#   `--allowedTools` flag: https://code.claude.com/docs/en/cli-reference
# caw's ClaudeCodeSession only ever emits `--disallowedTools`, so rewrite its
# `claude` command to add `--allowedTools mcp__<server>` for every server in
# the --mcp-config.  The patch swaps the `subprocess` module reference INSIDE
# caw.providers.claude_code for a thin proxy — the global subprocess.Popen
# class stays untouched (isinstance / subclass safe) and no other claude
# invocation in this process is affected.  Belongs upstream in caw; remove
# once it grows a first-class allowed_tools knob for its toolkit servers.
_CLAUDE_ALLOWED_PATCH_APPLIED = False


def _with_allowed_tools(cmd):
    """Append ``--allowedTools mcp__<server>,...`` to a ``claude`` command.

    Pure ``list -> list`` transform.  Applies only when *cmd* is a claude
    invocation carrying ``--mcp-config`` and no explicit allow-list already;
    otherwise (or on any error) *cmd* is returned unchanged.
    """
    import json