perf: cache permitted tools per API key #24

New issue

Open

opened 2026-02-20 03:02:22 +00:00 by Clotho · 0 comments

Clotho commented

2026-02-20 03:02:22 +00:00

Member

Issue

Services/AgentToolRegistry.php::forApiKey() iterates all tools on every request.

Current Behavior

O(n) filter operation executed on each API request to determine permitted tools.

Expected Behavior

Cache permitted tools per API key to avoid repeated filtering.

Acceptance Criteria

Add caching to forApiKey() method
Invalidate cache when API key permissions change
Add TTL to cache (e.g., 1 hour)
Add tests for cache behavior
Measure performance improvement

References

TODO.md: PERF-002
Related to SEC-004 (rate limiting)

## Issue `Services/AgentToolRegistry.php::forApiKey()` iterates all tools on every request. ## Current Behavior O(n) filter operation executed on each API request to determine permitted tools. ## Expected Behavior Cache permitted tools per API key to avoid repeated filtering. ## Acceptance Criteria - [ ] Add caching to `forApiKey()` method - [ ] Invalidate cache when API key permissions change - [ ] Add TTL to cache (e.g., 1 hour) - [ ] Add tests for cache behavior - [ ] Measure performance improvement ## References - TODO.md: PERF-002 - Related to SEC-004 (rate limiting)