jeevesagent.security.hooks

User-registered lifecycle callbacks.

Hooks run in a timeout-shielded scope so a buggy callback can’t hang the loop. Pre-tool hooks can deny a call (first deny wins); post-tool hooks are best-effort and can never affect the result.

Attributes

EventHook
PostToolHook
PreToolHook

Classes

HookRegistry

Implements HookHost.

Module Contents

class jeevesagent.security.hooks.HookRegistry

Implements HookHost.

async on_event(event: jeevesagent.core.types.Event) → None

async post_tool(call: jeevesagent.core.types.ToolCall, result: jeevesagent.core.types.ToolResult) → None

Best-effort post-tool callbacks. Failures and timeouts are absorbed so they cannot affect the result the loop returns.

async pre_tool(call: jeevesagent.core.types.ToolCall) → jeevesagent.core.types.PermissionDecision

Run all pre-tool hooks. First deny wins; otherwise allow.

register_event(hook: EventHook) → EventHook

register_post_tool(hook: PostToolHook) → PostToolHook

register_pre_tool(hook: PreToolHook) → PreToolHook

event_hooks: list[EventHook] = []

hook_timeout_s: float = 5.0

post_tool_hooks: list[PostToolHook] = []

pre_tool_hooks: list[PreToolHook] = []

jeevesagent.security.hooks.EventHook

jeevesagent.security.hooks.PostToolHook

jeevesagent.security.hooks.PreToolHook