Seam request: EgressClassGuard: make the inference-tool match configurable
Maintainers usually reply within 11 days
Nobody has claimed this yet.
Assessment
- Difficulty
- 2/5
- Estimated time
- 1-3 hours
- Newbie friendliness
- 78/100
- Issue type
- Feature
- Clarity
- Clearly specified
- Activity status
- Active
- Tech stack
- typescript
Research direction
Start with hooks/EgressClassGuard.hook.ts:104, where the two literal filenames are gated, and inspect how this project loads configuration. Add a configurable name or pattern list with the current filenames as the default, then verify renamed, wrapped, and additional Tier-2 tools are covered. Done means the active patterns are logged once at load and matching no longer depends solely on OpenRouter.ts or Cerberus.ts.
Written by the indexing model from the issue text.
Description
Problem. hooks/EgressClassGuard.hook.ts:104 gates only commands that match the literal filenames OpenRouter.ts or Cerberus.ts. If an install renames or wraps the tool (to add a proxy, for example), the guard stops covering it with no signal. If it adds a second Tier-2 inference tool, that tool is never covered.
Proposed change. Read the list of gated tool names or patterns from config (canon default: the current two), for example [egress.tier2_tools]. Log once at load which patterns are active.
Why canon benefits. The egress guard keeps covering the real inference path after any rename or addition, so it fails closed, not silently open.
- Dominant language
- TypeScript
- Stars
- 19.4k
- Forks
- 2.5k
- PR merge metrics
- No merged PRs in 30d
Getting set up
This project ships no dev container, Dockerfile or contributing guide, so setting up is up to you: start from its README, and see our first-contribution guide for the general steps.
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
More from danielmiessler/LifeOS
-
Difficulty 1/5 Under an hour Newbie friendliness 94/100
danielmiessler/LifeOS#2338 ·
Maintainers usually reply within 11 days
-
Difficulty 2/5 1-3 hours Newbie friendliness 88/100
danielmiessler/LifeOS#2337 ·
Maintainers usually reply within 11 days
-
Difficulty 2/5 1-3 hours Newbie friendliness 90/100
danielmiessler/LifeOS#2336 ·
Maintainers usually reply within 11 days
-
Difficulty 2/5 1-3 hours Newbie friendliness 88/100
danielmiessler/LifeOS#2335 ·
Maintainers usually reply within 11 days
-
Difficulty 1/5 Under an hour Newbie friendliness 96/100
danielmiessler/LifeOS#2334 ·
Maintainers usually reply within 11 days
All issues in danielmiessler/LifeOS
Similar issues
-
Difficulty 2/5 1-3 hours Newbie friendliness 65/100
Maintainers usually reply within 1 day
-
auth: agent-bearer --manager-call is told to use the MCP instance argument on an ambiguous managerOpen
Difficulty 2/5 1-3 hours Newbie friendliness 80/100
Maintainers usually reply within 1 day
-
bug module: playback
Difficulty 2/5 1-3 hours Newbie friendliness 68/100
chthollyphile/folia-major#739 · 2 comments ·
Maintainers usually reply within 1 day
-
Difficulty 1/5 Under an hour Newbie friendliness 90/100
-
Difficulty 2/5 1-3 hours Newbie friendliness 78/100
agilepathway/label-checker#773 · 2 comments ·
Maintainers usually reply within 1 day