Function resolveToolkitPolicy

packages/plugins/toolkits/src/server.ts:153–178

(
  toolId: string,
  connections: readonly ToolkitConnectionRecord[],
  policies: readonly ToolkitPolicyRecord[],
  defaultRequiresApproval?: boolean,
)

};

const resolveToolkitPolicy = (
  toolId: string,
  connections: readonly ToolkitConnectionRecord[],
  policies: readonly ToolkitPolicyRecord[],
  defaultRequiresApproval?: boolean,
): EffectivePolicy => {
  const legacyPolicyIds = legacyConnectionPolicyIds(policies, connections);
  const connected =
    connections.some((connection) => matchPattern(connection.pattern, toolId)) ||
    policies.some(
      (policy) => legacyPolicyIds.has(policy.id) && matchPattern(policy.pattern, toolId),
    );
  if (!connected) return blockedPolicy();

  for (const policy of [...policies].sort(comparePositioned)) {
    if (legacyPolicyIds.has(policy.id)) continue;
    if (!matchPattern(policy.pattern, toolId)) continue;
    return {
      action: policy.action,
      source: "user",
      pattern: policy.pattern,
      policyId: policy.id,
    };
  }
  return pluginDefaultPolicy(defaultRequiresApproval);
};

const legacyConnectionPolicyIds = (
  policies: readonly ToolkitPolicyRecord[],