Package com.tnsai.skills

Class SkillScopedToolCallFilter

java.lang.Object

com.tnsai.skills.SkillScopedToolCallFilter

All Implemented Interfaces:

ToolCallFilter

public final class SkillScopedToolCallFilter
extends Object
implements ToolCallFilter

ToolCallFilter that enforces the allowed-tools field of each active skill (TNS-289).

Semantics

• No skills active — filter is permissive: every tool call is allowed. The agent's full tool catalog applies.
• One or more skills active, none declare allowed-tools — still permissive. allowed-tools is opt-in scoping; an active skill that doesn't declare it doesn't constrain anything.
• One or more skills declare allowed-tools — the union of those lists is the whitelist. Any tool not in the union is blocked with a guide message naming the active skills.

Composes with other filters: callers wrap this filter together with their own (e.g. via a chain) when they have additional permission rules. The class doesn't try to be the only filter on the agent.

Since:

0.10.0 (TNS-289)

Constructor Summary

Constructors

Constructor	Description
SkillScopedToolCallFilter(SkillManager manager)

Method Summary

Modifier and Type	Method	Description
ToolCallAction	evaluate(String toolName, Map<String,Object> arguments)	Evaluates a tool call and returns a steering action.
boolean	isAllowed(String toolName, Map<String,Object> arguments)	Checks whether a tool call is allowed to execute.
Set<String>	unionAllowedTools()	Lower-cased union of allowed-tools declared by every active skill.

Methods inherited from class java.lang.Object

equals, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

SkillScopedToolCallFilter

public SkillScopedToolCallFilter(SkillManager manager)

Method Details

isAllowed

public boolean isAllowed(String toolName,
 Map<String,Object> arguments)

Description copied from interface: ToolCallFilter

Checks whether a tool call is allowed to execute.

Specified by:

isAllowed in interface ToolCallFilter

Parameters:

toolName - the name of the tool being called

arguments - the arguments passed to the tool

Returns:

true if the tool call should proceed, false to block it

evaluate

public ToolCallAction evaluate(String toolName,
 Map<String,Object> arguments)

Description copied from interface: ToolCallFilter

Evaluates a tool call and returns a steering action.

Override this method to provide richer feedback than allow/block:

• ToolCallAction.allow() — proceed as-is
• ToolCallAction.block() — reject the call
• ToolCallAction.guide(String) — don't execute, provide corrective feedback
• ToolCallAction.fallback(String) — suggest an alternative tool

The default implementation delegates to ToolCallFilter.isAllowed(String, Map).

Specified by:

evaluate in interface ToolCallFilter

Parameters:

toolName - the name of the tool being called

arguments - the arguments passed to the tool

Returns:

the action to take

unionAllowedTools

public Set<String> unionAllowedTools()

Lower-cased union of allowed-tools declared by every active skill. Empty when no active skill declares the field — which the filter treats as "no restriction".