@archpilotlabs/archpilot 0.2.2 → 0.2.4
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +538 -0
- package/README.md +1 -0
- package/dist/archpilot-cli.js +850 -159
- package/dist/cli/src/archpilot-cli.js +5523 -0
- package/dist/cli/src/archpilot-cli.js.map +1 -0
- package/dist/core/src/adr/adrLoader.js +97 -0
- package/dist/core/src/adr/adrLoader.js.map +1 -0
- package/dist/core/src/adr/adrParser.js +77 -0
- package/dist/core/src/adr/adrParser.js.map +1 -0
- package/dist/core/src/adr/adrTemplate.js +45 -0
- package/dist/core/src/adr/adrTemplate.js.map +1 -0
- package/dist/core/src/adr/adrTypes.js +3 -0
- package/dist/core/src/adr/adrTypes.js.map +1 -0
- package/dist/core/src/adr/adrValidation.js +160 -0
- package/dist/core/src/adr/adrValidation.js.map +1 -0
- package/dist/core/src/adr/index.js +9 -0
- package/dist/core/src/adr/index.js.map +1 -0
- package/dist/core/src/adrManagement.js +174 -0
- package/dist/core/src/adrManagement.js.map +1 -0
- package/dist/core/src/adrRequirementStatus.js +62 -0
- package/dist/core/src/adrRequirementStatus.js.map +1 -0
- package/dist/core/src/adrScaffoldGeneration.js +325 -0
- package/dist/core/src/adrScaffoldGeneration.js.map +1 -0
- package/dist/core/src/apiDesignAnalysis.js +869 -0
- package/dist/core/src/apiDesignAnalysis.js.map +1 -0
- package/dist/core/src/applicationLayeringAnalysis.js +920 -0
- package/dist/core/src/applicationLayeringAnalysis.js.map +1 -0
- package/dist/core/src/applyRulePack.js +117 -0
- package/dist/core/src/applyRulePack.js.map +1 -0
- package/dist/core/src/architectureBaseline.js +271 -0
- package/dist/core/src/architectureBaseline.js.map +1 -0
- package/dist/core/src/architectureComponentDiscoveryDefaults.js +139 -0
- package/dist/core/src/architectureComponentDiscoveryDefaults.js.map +1 -0
- package/dist/core/src/architectureDependencyContext.js +316 -0
- package/dist/core/src/architectureDependencyContext.js.map +1 -0
- package/dist/core/src/architectureDriftDetection.js +96 -0
- package/dist/core/src/architectureDriftDetection.js.map +1 -0
- package/dist/core/src/architectureDriftTimeline.js +221 -0
- package/dist/core/src/architectureDriftTimeline.js.map +1 -0
- package/dist/core/src/architectureGovernanceBaseline.js +469 -0
- package/dist/core/src/architectureGovernanceBaseline.js.map +1 -0
- package/dist/core/src/architectureHealthHistory.js +208 -0
- package/dist/core/src/architectureHealthHistory.js.map +1 -0
- package/dist/core/src/architectureHealthScore.js +657 -0
- package/dist/core/src/architectureHealthScore.js.map +1 -0
- package/dist/core/src/architectureInit.js +826 -0
- package/dist/core/src/architectureInit.js.map +1 -0
- package/dist/core/src/architectureMap.js +727 -0
- package/dist/core/src/architectureMap.js.map +1 -0
- package/dist/core/src/architectureMigrationPreview.js +467 -0
- package/dist/core/src/architectureMigrationPreview.js.map +1 -0
- package/dist/core/src/architectureModelRefresh.js +209 -0
- package/dist/core/src/architectureModelRefresh.js.map +1 -0
- package/dist/core/src/architectureReportWorkflow.js +139 -0
- package/dist/core/src/architectureReportWorkflow.js.map +1 -0
- package/dist/core/src/architectureValidation.js +3879 -0
- package/dist/core/src/architectureValidation.js.map +1 -0
- package/dist/core/src/architectureWorkspaceModel.js +166 -0
- package/dist/core/src/architectureWorkspaceModel.js.map +1 -0
- package/dist/core/src/authorizationTenantAnalysis.js +652 -0
- package/dist/core/src/authorizationTenantAnalysis.js.map +1 -0
- package/dist/core/src/bootstrapArchitectureConfig.js +150 -0
- package/dist/core/src/bootstrapArchitectureConfig.js.map +1 -0
- package/dist/core/src/changeRisk/changeRiskAssessment.js +251 -0
- package/dist/core/src/changeRisk/changeRiskAssessment.js.map +1 -0
- package/dist/core/src/changeRisk/changeRiskTypes.js +3 -0
- package/dist/core/src/changeRisk/changeRiskTypes.js.map +1 -0
- package/dist/core/src/changeRisk/index.js +6 -0
- package/dist/core/src/changeRisk/index.js.map +1 -0
- package/dist/core/src/ci/githubInlineAnnotations.js +245 -0
- package/dist/core/src/ci/githubInlineAnnotations.js.map +1 -0
- package/dist/core/src/ci/githubPrCommentAdapter.js +232 -0
- package/dist/core/src/ci/githubPrCommentAdapter.js.map +1 -0
- package/dist/core/src/ciWorkflowTemplates.js +1042 -0
- package/dist/core/src/ciWorkflowTemplates.js.map +1 -0
- package/dist/core/src/compliance/complianceExportBuilder.js +122 -0
- package/dist/core/src/compliance/complianceExportBuilder.js.map +1 -0
- package/dist/core/src/compliance/complianceExportTypes.js +3 -0
- package/dist/core/src/compliance/complianceExportTypes.js.map +1 -0
- package/dist/core/src/compliance/complianceExportWriter.js +48 -0
- package/dist/core/src/compliance/complianceExportWriter.js.map +1 -0
- package/dist/core/src/compliance/complianceRulePackResolver.js +62 -0
- package/dist/core/src/compliance/complianceRulePackResolver.js.map +1 -0
- package/dist/core/src/config/index.js +17 -0
- package/dist/core/src/config/index.js.map +1 -0
- package/dist/core/src/config/projectConfig.js +224 -0
- package/dist/core/src/config/projectConfig.js.map +1 -0
- package/dist/core/src/config/projectIdentity.js +160 -0
- package/dist/core/src/config/projectIdentity.js.map +1 -0
- package/dist/core/src/dataQueryRiskDetection.js +1203 -0
- package/dist/core/src/dataQueryRiskDetection.js.map +1 -0
- package/dist/core/src/dependencyValidation.js +2557 -0
- package/dist/core/src/dependencyValidation.js.map +1 -0
- package/dist/core/src/discoverAdrs.js +15 -0
- package/dist/core/src/discoverAdrs.js.map +1 -0
- package/dist/core/src/drift/driftComparator.js +49 -0
- package/dist/core/src/drift/driftComparator.js.map +1 -0
- package/dist/core/src/drift/driftSnapshotLoader.js +136 -0
- package/dist/core/src/drift/driftSnapshotLoader.js.map +1 -0
- package/dist/core/src/drift/driftSnapshotTypes.js +3 -0
- package/dist/core/src/drift/driftSnapshotTypes.js.map +1 -0
- package/dist/core/src/drift/driftSnapshotWriter.js +48 -0
- package/dist/core/src/drift/driftSnapshotWriter.js.map +1 -0
- package/dist/core/src/drift/index.js +6 -0
- package/dist/core/src/drift/index.js.map +1 -0
- package/dist/core/src/eventArchitectureAnalysis.js +925 -0
- package/dist/core/src/eventArchitectureAnalysis.js.map +1 -0
- package/dist/core/src/findingTargetResolution.js +117 -0
- package/dist/core/src/findingTargetResolution.js.map +1 -0
- package/dist/core/src/generateArchitectureDiagrams.js +57 -0
- package/dist/core/src/generateArchitectureDiagrams.js.map +1 -0
- package/dist/core/src/generateImpactAnalysis.js +366 -0
- package/dist/core/src/generateImpactAnalysis.js.map +1 -0
- package/dist/core/src/generateOnboardingDocs.js +262 -0
- package/dist/core/src/generateOnboardingDocs.js.map +1 -0
- package/dist/core/src/governance/cloudConnection.js +203 -0
- package/dist/core/src/governance/cloudConnection.js.map +1 -0
- package/dist/core/src/governance/governanceContracts.js +129 -0
- package/dist/core/src/governance/governanceContracts.js.map +1 -0
- package/dist/core/src/governance/governanceGitMetadata.js +78 -0
- package/dist/core/src/governance/governanceGitMetadata.js.map +1 -0
- package/dist/core/src/governance/governanceUploadClient.js +119 -0
- package/dist/core/src/governance/governanceUploadClient.js.map +1 -0
- package/dist/core/src/governance/governanceUploadLimitErrorFormatting.js +155 -0
- package/dist/core/src/governance/governanceUploadLimitErrorFormatting.js.map +1 -0
- package/dist/core/src/governance/governanceUploadPayload.js +439 -0
- package/dist/core/src/governance/governanceUploadPayload.js.map +1 -0
- package/dist/core/src/governance/runGovernanceUpload.js +103 -0
- package/dist/core/src/governance/runGovernanceUpload.js.map +1 -0
- package/dist/core/src/impactAnalysisEngine.js +376 -0
- package/dist/core/src/impactAnalysisEngine.js.map +1 -0
- package/dist/core/src/initializationState.js +99 -0
- package/dist/core/src/initializationState.js.map +1 -0
- package/dist/core/src/managedArtifacts.js +151 -0
- package/dist/core/src/managedArtifacts.js.map +1 -0
- package/dist/core/src/moduleContractValidation.js +266 -0
- package/dist/core/src/moduleContractValidation.js.map +1 -0
- package/dist/core/src/moduleContractsGenerator.js +337 -0
- package/dist/core/src/moduleContractsGenerator.js.map +1 -0
- package/dist/core/src/moduleDiscovery.js +416 -0
- package/dist/core/src/moduleDiscovery.js.map +1 -0
- package/dist/core/src/moduleScope.js +426 -0
- package/dist/core/src/moduleScope.js.map +1 -0
- package/dist/core/src/onboardingGuidance.js +74 -0
- package/dist/core/src/onboardingGuidance.js.map +1 -0
- package/dist/core/src/operationalLogging.js +7 -0
- package/dist/core/src/operationalLogging.js.map +1 -0
- package/dist/core/src/packageVersion.js +52 -0
- package/dist/core/src/packageVersion.js.map +1 -0
- package/dist/core/src/policy/effectivePolicyResolver.js +91 -0
- package/dist/core/src/policy/effectivePolicyResolver.js.map +1 -0
- package/dist/core/src/policy/exceptionLoader.js +285 -0
- package/dist/core/src/policy/exceptionLoader.js.map +1 -0
- package/dist/core/src/policy/remotePolicyLoader.js +227 -0
- package/dist/core/src/policy/remotePolicyLoader.js.map +1 -0
- package/dist/core/src/policy/remotePolicyTypes.js +3 -0
- package/dist/core/src/policy/remotePolicyTypes.js.map +1 -0
- package/dist/core/src/policy/riskPolicyConfig.js +206 -0
- package/dist/core/src/policy/riskPolicyConfig.js.map +1 -0
- package/dist/core/src/policy/riskPolicyEnforcement.js +203 -0
- package/dist/core/src/policy/riskPolicyEnforcement.js.map +1 -0
- package/dist/core/src/policy/riskPolicyExitCode.js +16 -0
- package/dist/core/src/policy/riskPolicyExitCode.js.map +1 -0
- package/dist/core/src/policy/riskPolicyInitializer.js +90 -0
- package/dist/core/src/policy/riskPolicyInitializer.js.map +1 -0
- package/dist/core/src/quickFix/quickFixEngine.js +132 -0
- package/dist/core/src/quickFix/quickFixEngine.js.map +1 -0
- package/dist/core/src/quickFix/quickFixMessaging.js +15 -0
- package/dist/core/src/quickFix/quickFixMessaging.js.map +1 -0
- package/dist/core/src/quickFix/quickFixProviders.js +87 -0
- package/dist/core/src/quickFix/quickFixProviders.js.map +1 -0
- package/dist/core/src/quickFix/quickFixTypes.js +3 -0
- package/dist/core/src/quickFix/quickFixTypes.js.map +1 -0
- package/dist/core/src/remediation/fileHelpers.js +86 -0
- package/dist/core/src/remediation/fileHelpers.js.map +1 -0
- package/dist/core/src/remediation/fixRegistry.js +645 -0
- package/dist/core/src/remediation/fixRegistry.js.map +1 -0
- package/dist/core/src/remediation/index.js +8 -0
- package/dist/core/src/remediation/index.js.map +1 -0
- package/dist/core/src/remediation/remediationEngine.js +207 -0
- package/dist/core/src/remediation/remediationEngine.js.map +1 -0
- package/dist/core/src/reporting/adrReporter.js +59 -0
- package/dist/core/src/reporting/adrReporter.js.map +1 -0
- package/dist/core/src/reporting/architectureBaselineReporter.js +64 -0
- package/dist/core/src/reporting/architectureBaselineReporter.js.map +1 -0
- package/dist/core/src/reporting/architectureDiagramReporter.js +148 -0
- package/dist/core/src/reporting/architectureDiagramReporter.js.map +1 -0
- package/dist/core/src/reporting/architectureDriftTimelineReporter.js +44 -0
- package/dist/core/src/reporting/architectureDriftTimelineReporter.js.map +1 -0
- package/dist/core/src/reporting/architectureHealthHistoryReporter.js +51 -0
- package/dist/core/src/reporting/architectureHealthHistoryReporter.js.map +1 -0
- package/dist/core/src/reporting/architectureMapReporter.js +228 -0
- package/dist/core/src/reporting/architectureMapReporter.js.map +1 -0
- package/dist/core/src/reporting/architecturePrCommentReporter.js +324 -0
- package/dist/core/src/reporting/architecturePrCommentReporter.js.map +1 -0
- package/dist/core/src/reporting/architecturePrReviewReporter.js +389 -0
- package/dist/core/src/reporting/architecturePrReviewReporter.js.map +1 -0
- package/dist/core/src/reporting/architectureReportArtifacts.js +166 -0
- package/dist/core/src/reporting/architectureReportArtifacts.js.map +1 -0
- package/dist/core/src/reporting/architectureReviewReportGenerator.js +382 -0
- package/dist/core/src/reporting/architectureReviewReportGenerator.js.map +1 -0
- package/dist/core/src/reporting/architectureReviewReporter.js +1633 -0
- package/dist/core/src/reporting/architectureReviewReporter.js.map +1 -0
- package/dist/core/src/reporting/architectureRiskAssessment.js +101 -0
- package/dist/core/src/reporting/architectureRiskAssessment.js.map +1 -0
- package/dist/core/src/reporting/architectureScoreBadge.js +177 -0
- package/dist/core/src/reporting/architectureScoreBadge.js.map +1 -0
- package/dist/core/src/reporting/architectureSupplementalReporters.js +124 -0
- package/dist/core/src/reporting/architectureSupplementalReporters.js.map +1 -0
- package/dist/core/src/reporting/changeRiskAssessment.js +6 -0
- package/dist/core/src/reporting/changeRiskAssessment.js.map +1 -0
- package/dist/core/src/reporting/changeRiskTypes.js +3 -0
- package/dist/core/src/reporting/changeRiskTypes.js.map +1 -0
- package/dist/core/src/reporting/impactAnalysisReporter.js +111 -0
- package/dist/core/src/reporting/impactAnalysisReporter.js.map +1 -0
- package/dist/core/src/reporting/onboardingDocsReporter.js +113 -0
- package/dist/core/src/reporting/onboardingDocsReporter.js.map +1 -0
- package/dist/core/src/reporting/rulePackReporter.js +61 -0
- package/dist/core/src/reporting/rulePackReporter.js.map +1 -0
- package/dist/core/src/reporting/safetyControlsDetection.js +343 -0
- package/dist/core/src/reporting/safetyControlsDetection.js.map +1 -0
- package/dist/core/src/resolveRuleAdrs.js +31 -0
- package/dist/core/src/resolveRuleAdrs.js.map +1 -0
- package/dist/core/src/reviewGenerationWorkflow.js +220 -0
- package/dist/core/src/reviewGenerationWorkflow.js.map +1 -0
- package/dist/core/src/rulePacks/index.js +17 -0
- package/dist/core/src/rulePacks/index.js.map +1 -0
- package/dist/core/src/rulePacks/layeredMonolithRulePack.js +45 -0
- package/dist/core/src/rulePacks/layeredMonolithRulePack.js.map +1 -0
- package/dist/core/src/rulePacks/modularMonolithRulePack.js +41 -0
- package/dist/core/src/rulePacks/modularMonolithRulePack.js.map +1 -0
- package/dist/core/src/rulePacks/types.js +3 -0
- package/dist/core/src/rulePacks/types.js.map +1 -0
- package/dist/core/src/setupNextSteps.js +939 -0
- package/dist/core/src/setupNextSteps.js.map +1 -0
- package/dist/core/src/setupRefresh.js +152 -0
- package/dist/core/src/setupRefresh.js.map +1 -0
- package/dist/core/src/smartInit/apiDbHintDetection.js +836 -0
- package/dist/core/src/smartInit/apiDbHintDetection.js.map +1 -0
- package/dist/core/src/smartInit/architectureProposalBuilder.js +1215 -0
- package/dist/core/src/smartInit/architectureProposalBuilder.js.map +1 -0
- package/dist/core/src/smartInit/architectureStyleDetection.js +472 -0
- package/dist/core/src/smartInit/architectureStyleDetection.js.map +1 -0
- package/dist/core/src/smartInit/archpilotIgnore.js +139 -0
- package/dist/core/src/smartInit/archpilotIgnore.js.map +1 -0
- package/dist/core/src/smartInit/componentDetection.js +1084 -0
- package/dist/core/src/smartInit/componentDetection.js.map +1 -0
- package/dist/core/src/smartInit/implementationProfileResolution.js +53 -0
- package/dist/core/src/smartInit/implementationProfileResolution.js.map +1 -0
- package/dist/core/src/smartInit/index.js +31 -0
- package/dist/core/src/smartInit/index.js.map +1 -0
- package/dist/core/src/smartInit/moduleDetection.js +982 -0
- package/dist/core/src/smartInit/moduleDetection.js.map +1 -0
- package/dist/core/src/smartInit/projectKindDetection.js +437 -0
- package/dist/core/src/smartInit/projectKindDetection.js.map +1 -0
- package/dist/core/src/smartInit/repoTopologyDetection.js +470 -0
- package/dist/core/src/smartInit/repoTopologyDetection.js.map +1 -0
- package/dist/core/src/smartInit/runContext.js +112 -0
- package/dist/core/src/smartInit/runContext.js.map +1 -0
- package/dist/core/src/smartInit/smartInitEngine.js +94 -0
- package/dist/core/src/smartInit/smartInitEngine.js.map +1 -0
- package/dist/core/src/smartInit/stackDetection.js +503 -0
- package/dist/core/src/smartInit/stackDetection.js.map +1 -0
- package/dist/core/src/smartInit/toolingHintDetection.js +345 -0
- package/dist/core/src/smartInit/toolingHintDetection.js.map +1 -0
- package/dist/core/src/sourceScopeClassification.js +83 -0
- package/dist/core/src/sourceScopeClassification.js.map +1 -0
- package/dist/core/src/stackAdapters.js +2475 -0
- package/dist/core/src/stackAdapters.js.map +1 -0
- package/dist/core/src/stackMetadata.js +157 -0
- package/dist/core/src/stackMetadata.js.map +1 -0
- package/dist/core/src/suppressions/index.js +3 -0
- package/dist/core/src/suppressions/index.js.map +1 -0
- package/dist/core/src/suppressions/suppressionReporter.js +38 -0
- package/dist/core/src/suppressions/suppressionReporter.js.map +1 -0
- package/dist/core/src/suppressions/suppressionTypes.js +3 -0
- package/dist/core/src/suppressions/suppressionTypes.js.map +1 -0
- package/dist/core/src/suppressions/suppressionValidator.js +119 -0
- package/dist/core/src/suppressions/suppressionValidator.js.map +1 -0
- package/dist/core/src/transactionDomainAnalysis.js +1416 -0
- package/dist/core/src/transactionDomainAnalysis.js.map +1 -0
- package/dist/core/src/validation/changedFilesResolver.js +165 -0
- package/dist/core/src/validation/changedFilesResolver.js.map +1 -0
- package/dist/core/src/validationProfiling.js +33 -0
- package/dist/core/src/validationProfiling.js.map +1 -0
- package/dist/core/src/validationRuleExplanations.js +69 -0
- package/dist/core/src/validationRuleExplanations.js.map +1 -0
- package/dist/core/src/validationSourceInventory.js +200 -0
- package/dist/core/src/validationSourceInventory.js.map +1 -0
- package/dist/core/src/validationSuppressions.js +231 -0
- package/dist/core/src/validationSuppressions.js.map +1 -0
- package/dist/core/src/validationTypeScriptAstCache.js +82 -0
- package/dist/core/src/validationTypeScriptAstCache.js.map +1 -0
- package/dist/core/src/validationWorkflow.js +222 -0
- package/dist/core/src/validationWorkflow.js.map +1 -0
- package/dist/core/src/workspaceRoot.js +68 -0
- package/dist/core/src/workspaceRoot.js.map +1 -0
- package/package.json +3 -2
|
@@ -0,0 +1,206 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
|
|
3
|
+
if (k2 === undefined) k2 = k;
|
|
4
|
+
var desc = Object.getOwnPropertyDescriptor(m, k);
|
|
5
|
+
if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
|
|
6
|
+
desc = { enumerable: true, get: function() { return m[k]; } };
|
|
7
|
+
}
|
|
8
|
+
Object.defineProperty(o, k2, desc);
|
|
9
|
+
}) : (function(o, m, k, k2) {
|
|
10
|
+
if (k2 === undefined) k2 = k;
|
|
11
|
+
o[k2] = m[k];
|
|
12
|
+
}));
|
|
13
|
+
var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
|
|
14
|
+
Object.defineProperty(o, "default", { enumerable: true, value: v });
|
|
15
|
+
}) : function(o, v) {
|
|
16
|
+
o["default"] = v;
|
|
17
|
+
});
|
|
18
|
+
var __importStar = (this && this.__importStar) || (function () {
|
|
19
|
+
var ownKeys = function(o) {
|
|
20
|
+
ownKeys = Object.getOwnPropertyNames || function (o) {
|
|
21
|
+
var ar = [];
|
|
22
|
+
for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
|
|
23
|
+
return ar;
|
|
24
|
+
};
|
|
25
|
+
return ownKeys(o);
|
|
26
|
+
};
|
|
27
|
+
return function (mod) {
|
|
28
|
+
if (mod && mod.__esModule) return mod;
|
|
29
|
+
var result = {};
|
|
30
|
+
if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
|
|
31
|
+
__setModuleDefault(result, mod);
|
|
32
|
+
return result;
|
|
33
|
+
};
|
|
34
|
+
})();
|
|
35
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
36
|
+
exports.readRiskPolicyConfig = readRiskPolicyConfig;
|
|
37
|
+
const path = __importStar(require("node:path"));
|
|
38
|
+
const node_fs_1 = require("node:fs");
|
|
39
|
+
const riskPolicyEnforcement_1 = require("./riskPolicyEnforcement");
|
|
40
|
+
const policyFileRelativePath = '.archpilot/policy.json';
|
|
41
|
+
const validRiskLevels = ['low', 'moderate', 'high', 'critical'];
|
|
42
|
+
const validRegressionMinimumLevels = [
|
|
43
|
+
'warn',
|
|
44
|
+
'require-adr',
|
|
45
|
+
'fail',
|
|
46
|
+
];
|
|
47
|
+
function isRiskLevel(value) {
|
|
48
|
+
return typeof value === 'string' && validRiskLevels.includes(value);
|
|
49
|
+
}
|
|
50
|
+
function isRegressionMinimumLevel(value) {
|
|
51
|
+
return (typeof value === 'string' &&
|
|
52
|
+
validRegressionMinimumLevels.includes(value));
|
|
53
|
+
}
|
|
54
|
+
function riskLevelOrder(level) {
|
|
55
|
+
if (level === 'low') {
|
|
56
|
+
return 0;
|
|
57
|
+
}
|
|
58
|
+
if (level === 'moderate') {
|
|
59
|
+
return 1;
|
|
60
|
+
}
|
|
61
|
+
if (level === 'high') {
|
|
62
|
+
return 2;
|
|
63
|
+
}
|
|
64
|
+
return 3;
|
|
65
|
+
}
|
|
66
|
+
function normalizePolicyConfig(raw) {
|
|
67
|
+
if (!raw || typeof raw !== 'object' || Array.isArray(raw)) {
|
|
68
|
+
return undefined;
|
|
69
|
+
}
|
|
70
|
+
const typed = raw;
|
|
71
|
+
const rawEnforcementLevels = typed.enforcementLevels;
|
|
72
|
+
if (rawEnforcementLevels !== undefined &&
|
|
73
|
+
(!rawEnforcementLevels ||
|
|
74
|
+
typeof rawEnforcementLevels !== 'object' ||
|
|
75
|
+
Array.isArray(rawEnforcementLevels))) {
|
|
76
|
+
return undefined;
|
|
77
|
+
}
|
|
78
|
+
const rawRiskThresholds = typed.riskThresholds;
|
|
79
|
+
if (rawRiskThresholds !== undefined &&
|
|
80
|
+
(!rawRiskThresholds || typeof rawRiskThresholds !== 'object' || Array.isArray(rawRiskThresholds))) {
|
|
81
|
+
return undefined;
|
|
82
|
+
}
|
|
83
|
+
const rawRequireAdr = typed.requireADR;
|
|
84
|
+
if (rawRequireAdr !== undefined &&
|
|
85
|
+
(!rawRequireAdr || typeof rawRequireAdr !== 'object' || Array.isArray(rawRequireAdr))) {
|
|
86
|
+
return undefined;
|
|
87
|
+
}
|
|
88
|
+
const rawBaselineRegression = typed.baselineRegression;
|
|
89
|
+
if (rawBaselineRegression !== undefined &&
|
|
90
|
+
(!rawBaselineRegression ||
|
|
91
|
+
typeof rawBaselineRegression !== 'object' ||
|
|
92
|
+
Array.isArray(rawBaselineRegression))) {
|
|
93
|
+
return undefined;
|
|
94
|
+
}
|
|
95
|
+
if (typed.allowOverrideWithJustification !== undefined &&
|
|
96
|
+
typeof typed.allowOverrideWithJustification !== 'boolean') {
|
|
97
|
+
return undefined;
|
|
98
|
+
}
|
|
99
|
+
const warnAt = rawEnforcementLevels?.warnAt ?? rawRiskThresholds?.warn;
|
|
100
|
+
const requireAdrAt = rawEnforcementLevels?.requireAdrAt ?? rawRequireAdr?.level;
|
|
101
|
+
const failAt = rawEnforcementLevels?.failAt ?? rawRiskThresholds?.block;
|
|
102
|
+
const regressionMinimum = rawBaselineRegression?.minimumLevelOnRegression;
|
|
103
|
+
const warn = rawRiskThresholds?.warn;
|
|
104
|
+
const block = rawRiskThresholds?.block;
|
|
105
|
+
const requireAdrLevel = rawRequireAdr?.level;
|
|
106
|
+
if (warnAt !== undefined && !isRiskLevel(warnAt)) {
|
|
107
|
+
return undefined;
|
|
108
|
+
}
|
|
109
|
+
if (requireAdrAt !== undefined && !isRiskLevel(requireAdrAt)) {
|
|
110
|
+
return undefined;
|
|
111
|
+
}
|
|
112
|
+
if (failAt !== undefined && !isRiskLevel(failAt)) {
|
|
113
|
+
return undefined;
|
|
114
|
+
}
|
|
115
|
+
if (warn !== undefined && !isRiskLevel(warn)) {
|
|
116
|
+
return undefined;
|
|
117
|
+
}
|
|
118
|
+
if (block !== undefined && !isRiskLevel(block)) {
|
|
119
|
+
return undefined;
|
|
120
|
+
}
|
|
121
|
+
if (requireAdrLevel !== undefined && !isRiskLevel(requireAdrLevel)) {
|
|
122
|
+
return undefined;
|
|
123
|
+
}
|
|
124
|
+
if (rawBaselineRegression?.elevateOnRegression !== undefined &&
|
|
125
|
+
typeof rawBaselineRegression.elevateOnRegression !== 'boolean') {
|
|
126
|
+
return undefined;
|
|
127
|
+
}
|
|
128
|
+
if (regressionMinimum !== undefined && !isRegressionMinimumLevel(regressionMinimum)) {
|
|
129
|
+
return undefined;
|
|
130
|
+
}
|
|
131
|
+
const normalizedWarnAt = warnAt ?? riskPolicyEnforcement_1.defaultPolicyConfig.enforcementLevels.warnAt;
|
|
132
|
+
const normalizedRequireAdrAt = requireAdrAt ??
|
|
133
|
+
riskPolicyEnforcement_1.defaultPolicyConfig.enforcementLevels.requireAdrAt;
|
|
134
|
+
const normalizedFailAt = failAt ?? riskPolicyEnforcement_1.defaultPolicyConfig.enforcementLevels.failAt;
|
|
135
|
+
if (riskLevelOrder(normalizedWarnAt) > riskLevelOrder(normalizedRequireAdrAt) ||
|
|
136
|
+
riskLevelOrder(normalizedRequireAdrAt) > riskLevelOrder(normalizedFailAt)) {
|
|
137
|
+
return undefined;
|
|
138
|
+
}
|
|
139
|
+
return {
|
|
140
|
+
enforcementLevels: {
|
|
141
|
+
warnAt: normalizedWarnAt,
|
|
142
|
+
requireAdrAt: normalizedRequireAdrAt,
|
|
143
|
+
failAt: normalizedFailAt,
|
|
144
|
+
},
|
|
145
|
+
riskThresholds: {
|
|
146
|
+
warn: normalizedWarnAt,
|
|
147
|
+
block: normalizedFailAt,
|
|
148
|
+
},
|
|
149
|
+
requireADR: {
|
|
150
|
+
level: normalizedRequireAdrAt,
|
|
151
|
+
},
|
|
152
|
+
baselineRegression: {
|
|
153
|
+
elevateOnRegression: rawBaselineRegression?.elevateOnRegression ??
|
|
154
|
+
riskPolicyEnforcement_1.defaultPolicyConfig.baselineRegression.elevateOnRegression,
|
|
155
|
+
minimumLevelOnRegression: regressionMinimum ??
|
|
156
|
+
riskPolicyEnforcement_1.defaultPolicyConfig.baselineRegression.minimumLevelOnRegression,
|
|
157
|
+
},
|
|
158
|
+
allowOverrideWithJustification: typed.allowOverrideWithJustification ?? riskPolicyEnforcement_1.defaultPolicyConfig.allowOverrideWithJustification,
|
|
159
|
+
};
|
|
160
|
+
}
|
|
161
|
+
async function readRiskPolicyConfig(workspaceRoot) {
|
|
162
|
+
const policyPath = path.join(workspaceRoot, '.archpilot', 'policy.json');
|
|
163
|
+
let contents;
|
|
164
|
+
try {
|
|
165
|
+
contents = await node_fs_1.promises.readFile(policyPath, { encoding: 'utf8' });
|
|
166
|
+
}
|
|
167
|
+
catch (error) {
|
|
168
|
+
if (error.code === 'ENOENT') {
|
|
169
|
+
return {
|
|
170
|
+
config: riskPolicyEnforcement_1.defaultPolicyConfig,
|
|
171
|
+
source: 'default',
|
|
172
|
+
};
|
|
173
|
+
}
|
|
174
|
+
return {
|
|
175
|
+
config: riskPolicyEnforcement_1.defaultPolicyConfig,
|
|
176
|
+
source: 'fallback-default',
|
|
177
|
+
configError: error instanceof Error
|
|
178
|
+
? `ArchPilot policy configuration could not be read. ${error.message}`
|
|
179
|
+
: `ArchPilot policy configuration could not be read. Please verify ${policyFileRelativePath}.`,
|
|
180
|
+
};
|
|
181
|
+
}
|
|
182
|
+
let parsed;
|
|
183
|
+
try {
|
|
184
|
+
parsed = JSON.parse(contents);
|
|
185
|
+
}
|
|
186
|
+
catch {
|
|
187
|
+
return {
|
|
188
|
+
config: riskPolicyEnforcement_1.defaultPolicyConfig,
|
|
189
|
+
source: 'fallback-default',
|
|
190
|
+
configError: 'ArchPilot policy configuration is invalid JSON. Please fix .archpilot/policy.json.',
|
|
191
|
+
};
|
|
192
|
+
}
|
|
193
|
+
const normalized = normalizePolicyConfig(parsed);
|
|
194
|
+
if (!normalized) {
|
|
195
|
+
return {
|
|
196
|
+
config: riskPolicyEnforcement_1.defaultPolicyConfig,
|
|
197
|
+
source: 'fallback-default',
|
|
198
|
+
configError: 'ArchPilot policy configuration is invalid: .archpilot/policy.json must define valid enforcement levels, baseline regression settings, and policy flags.',
|
|
199
|
+
};
|
|
200
|
+
}
|
|
201
|
+
return {
|
|
202
|
+
config: normalized,
|
|
203
|
+
source: 'policy-file',
|
|
204
|
+
};
|
|
205
|
+
}
|
|
206
|
+
//# sourceMappingURL=riskPolicyConfig.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"riskPolicyConfig.js","sourceRoot":"","sources":["../../../../../core/src/policy/riskPolicyConfig.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAiMA,oDAiDC;AAlPD,gDAAkC;AAClC,qCAAyC;AACzC,mEAKiC;AA4BjC,MAAM,sBAAsB,GAAG,wBAAwB,CAAC;AAExD,MAAM,eAAe,GAAyB,CAAC,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC;AACtF,MAAM,4BAA4B,GAAgD;IACjF,MAAM;IACN,aAAa;IACb,MAAM;CACN,CAAC;AAEF,SAAS,WAAW,CAAC,KAAc;IAClC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,eAAe,CAAC,QAAQ,CAAC,KAAkB,CAAC,CAAC;AAClF,CAAC;AAED,SAAS,wBAAwB,CAChC,KAAc;IAEd,OAAO,CACN,OAAO,KAAK,KAAK,QAAQ;QACzB,4BAA4B,CAAC,QAAQ,CAAC,KAAyC,CAAC,CAChF,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,KAAgB;IACvC,IAAI,KAAK,KAAK,KAAK,EAAE,CAAC;QACrB,OAAO,CAAC,CAAC;IACV,CAAC;IACD,IAAI,KAAK,KAAK,UAAU,EAAE,CAAC;QAC1B,OAAO,CAAC,CAAC;IACV,CAAC;IACD,IAAI,KAAK,KAAK,MAAM,EAAE,CAAC;QACtB,OAAO,CAAC,CAAC;IACV,CAAC;IACD,OAAO,CAAC,CAAC;AACV,CAAC;AAED,SAAS,qBAAqB,CAAC,GAAY;IAC1C,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QAC3D,OAAO,SAAS,CAAC;IAClB,CAAC;IAED,MAAM,KAAK,GAAG,GAAsB,CAAC;IACrC,MAAM,oBAAoB,GAAG,KAAK,CAAC,iBAAiB,CAAC;IACrD,IACC,oBAAoB,KAAK,SAAS;QAClC,CAAC,CAAC,oBAAoB;YACrB,OAAO,oBAAoB,KAAK,QAAQ;YACxC,KAAK,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC,EACpC,CAAC;QACF,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,MAAM,iBAAiB,GAAG,KAAK,CAAC,cAAc,CAAC;IAC/C,IACC,iBAAiB,KAAK,SAAS;QAC/B,CAAC,CAAC,iBAAiB,IAAI,OAAO,iBAAiB,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC,EAChG,CAAC;QACF,OAAO,SAAS,CAAC;IAClB,CAAC;IAED,MAAM,aAAa,GAAG,KAAK,CAAC,UAAU,CAAC;IACvC,IACC,aAAa,KAAK,SAAS;QAC3B,CAAC,CAAC,aAAa,IAAI,OAAO,aAAa,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,EACpF,CAAC;QACF,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,MAAM,qBAAqB,GAAG,KAAK,CAAC,kBAAkB,CAAC;IACvD,IACC,qBAAqB,KAAK,SAAS;QACnC,CAAC,CAAC,qBAAqB;YACtB,OAAO,qBAAqB,KAAK,QAAQ;YACzC,KAAK,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAC,EACrC,CAAC;QACF,OAAO,SAAS,CAAC;IAClB,CAAC;IAED,IACC,KAAK,CAAC,8BAA8B,KAAK,SAAS;QAClD,OAAO,KAAK,CAAC,8BAA8B,KAAK,SAAS,EACxD,CAAC;QACF,OAAO,SAAS,CAAC;IAClB,CAAC;IAED,MAAM,MAAM,GAAG,oBAAoB,EAAE,MAAM,IAAI,iBAAiB,EAAE,IAAI,CAAC;IACvE,MAAM,YAAY,GAAG,oBAAoB,EAAE,YAAY,IAAI,aAAa,EAAE,KAAK,CAAC;IAChF,MAAM,MAAM,GAAG,oBAAoB,EAAE,MAAM,IAAI,iBAAiB,EAAE,KAAK,CAAC;IACxE,MAAM,iBAAiB,GAAG,qBAAqB,EAAE,wBAAwB,CAAC;IAC1E,MAAM,IAAI,GAAG,iBAAiB,EAAE,IAAI,CAAC;IACrC,MAAM,KAAK,GAAG,iBAAiB,EAAE,KAAK,CAAC;IACvC,MAAM,eAAe,GAAG,aAAa,EAAE,KAAK,CAAC;IAE7C,IAAI,MAAM,KAAK,SAAS,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC;QAClD,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,IAAI,YAAY,KAAK,SAAS,IAAI,CAAC,WAAW,CAAC,YAAY,CAAC,EAAE,CAAC;QAC9D,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,IAAI,MAAM,KAAK,SAAS,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC;QAClD,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,IAAI,IAAI,KAAK,SAAS,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC;QAC9C,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,IAAI,KAAK,KAAK,SAAS,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC;QAChD,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,IAAI,eAAe,KAAK,SAAS,IAAI,CAAC,WAAW,CAAC,eAAe,CAAC,EAAE,CAAC;QACpE,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,IACC,qBAAqB,EAAE,mBAAmB,KAAK,SAAS;QACxD,OAAO,qBAAqB,CAAC,mBAAmB,KAAK,SAAS,EAC7D,CAAC;QACF,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,IAAI,iBAAiB,KAAK,SAAS,IAAI,CAAC,wBAAwB,CAAC,iBAAiB,CAAC,EAAE,CAAC;QACrF,OAAO,SAAS,CAAC;IAClB,CAAC;IAED,MAAM,gBAAgB,GACpB,MAAgC,IAAI,2CAAmB,CAAC,iBAAiB,CAAC,MAAM,CAAC;IACnF,MAAM,sBAAsB,GAC1B,YAAsC;QACvC,2CAAmB,CAAC,iBAAiB,CAAC,YAAY,CAAC;IACpD,MAAM,gBAAgB,GACpB,MAAgC,IAAI,2CAAmB,CAAC,iBAAiB,CAAC,MAAM,CAAC;IACnF,IACC,cAAc,CAAC,gBAAgB,CAAC,GAAG,cAAc,CAAC,sBAAsB,CAAC;QACzE,cAAc,CAAC,sBAAsB,CAAC,GAAG,cAAc,CAAC,gBAAgB,CAAC,EACxE,CAAC;QACF,OAAO,SAAS,CAAC;IAClB,CAAC;IAED,OAAO;QACN,iBAAiB,EAAE;YAClB,MAAM,EAAE,gBAAgB;YACxB,YAAY,EAAE,sBAAsB;YACpC,MAAM,EAAE,gBAAgB;SACxB;QACD,cAAc,EAAE;YACf,IAAI,EAAE,gBAAgB;YACtB,KAAK,EAAE,gBAAgB;SACvB;QACD,UAAU,EAAE;YACX,KAAK,EAAE,sBAAsB;SAC7B;QACD,kBAAkB,EAAE;YACnB,mBAAmB,EAClB,qBAAqB,EAAE,mBAAmB;gBAC1C,2CAAmB,CAAC,kBAAkB,CAAC,mBAAmB;YAC3D,wBAAwB,EACtB,iBAAkE;gBACnE,2CAAmB,CAAC,kBAAkB,CAAC,wBAAwB;SAChE;QACD,8BAA8B,EAC7B,KAAK,CAAC,8BAA8B,IAAI,2CAAmB,CAAC,8BAA8B;KAC3F,CAAC;AACH,CAAC;AAEM,KAAK,UAAU,oBAAoB,CACzC,aAAqB;IAErB,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,YAAY,EAAE,aAAa,CAAC,CAAC;IACzE,IAAI,QAAgB,CAAC;IACrB,IAAI,CAAC;QACJ,QAAQ,GAAG,MAAM,kBAAE,CAAC,QAAQ,CAAC,UAAU,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;IAChE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACxD,OAAO;gBACN,MAAM,EAAE,2CAAmB;gBAC3B,MAAM,EAAE,SAAS;aACjB,CAAC;QACH,CAAC;QACD,OAAO;YACN,MAAM,EAAE,2CAAmB;YAC3B,MAAM,EAAE,kBAAkB;YAC1B,WAAW,EACV,KAAK,YAAY,KAAK;gBACrB,CAAC,CAAC,qDAAqD,KAAK,CAAC,OAAO,EAAE;gBACtE,CAAC,CAAC,mEAAmE,sBAAsB,GAAG;SAChG,CAAC;IACH,CAAC;IAED,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACJ,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAY,CAAC;IAC1C,CAAC;IAAC,MAAM,CAAC;QACR,OAAO;YACN,MAAM,EAAE,2CAAmB;YAC3B,MAAM,EAAE,kBAAkB;YAC1B,WAAW,EAAE,oFAAoF;SACjG,CAAC;IACH,CAAC;IAED,MAAM,UAAU,GAAG,qBAAqB,CAAC,MAAM,CAAC,CAAC;IACjD,IAAI,CAAC,UAAU,EAAE,CAAC;QACjB,OAAO;YACN,MAAM,EAAE,2CAAmB;YAC3B,MAAM,EAAE,kBAAkB;YAC1B,WAAW,EACV,yJAAyJ;SAC1J,CAAC;IACH,CAAC;IAED,OAAO;QACN,MAAM,EAAE,UAAU;QAClB,MAAM,EAAE,aAAa;KACrB,CAAC;AACH,CAAC"}
|
|
@@ -0,0 +1,203 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
+
exports.defaultPolicyConfig = void 0;
|
|
4
|
+
exports.evaluateRiskPolicy = evaluateRiskPolicy;
|
|
5
|
+
const riskLevelOrder = {
|
|
6
|
+
low: 0,
|
|
7
|
+
moderate: 1,
|
|
8
|
+
high: 2,
|
|
9
|
+
critical: 3,
|
|
10
|
+
};
|
|
11
|
+
exports.defaultPolicyConfig = {
|
|
12
|
+
enforcementLevels: {
|
|
13
|
+
warnAt: 'moderate',
|
|
14
|
+
requireAdrAt: 'high',
|
|
15
|
+
failAt: 'critical',
|
|
16
|
+
},
|
|
17
|
+
riskThresholds: {
|
|
18
|
+
warn: 'moderate',
|
|
19
|
+
block: 'critical',
|
|
20
|
+
},
|
|
21
|
+
requireADR: {
|
|
22
|
+
level: 'high',
|
|
23
|
+
},
|
|
24
|
+
baselineRegression: {
|
|
25
|
+
elevateOnRegression: false,
|
|
26
|
+
minimumLevelOnRegression: 'warn',
|
|
27
|
+
},
|
|
28
|
+
allowOverrideWithJustification: true,
|
|
29
|
+
};
|
|
30
|
+
function isAtOrAboveRiskLevel(current, threshold) {
|
|
31
|
+
return riskLevelOrder[current] >= riskLevelOrder[threshold];
|
|
32
|
+
}
|
|
33
|
+
function toUpperRiskLevel(level) {
|
|
34
|
+
return level.toUpperCase();
|
|
35
|
+
}
|
|
36
|
+
function policyLevelToAction(policyLevel) {
|
|
37
|
+
if (policyLevel === 'fail') {
|
|
38
|
+
return 'fail';
|
|
39
|
+
}
|
|
40
|
+
if (policyLevel === 'require-adr') {
|
|
41
|
+
return 'require-adr';
|
|
42
|
+
}
|
|
43
|
+
if (policyLevel === 'warn') {
|
|
44
|
+
return 'warn';
|
|
45
|
+
}
|
|
46
|
+
return 'pass';
|
|
47
|
+
}
|
|
48
|
+
function policyLevelRank(level) {
|
|
49
|
+
if (level === 'advisory') {
|
|
50
|
+
return 0;
|
|
51
|
+
}
|
|
52
|
+
if (level === 'warn') {
|
|
53
|
+
return 1;
|
|
54
|
+
}
|
|
55
|
+
if (level === 'require-adr') {
|
|
56
|
+
return 2;
|
|
57
|
+
}
|
|
58
|
+
return 3;
|
|
59
|
+
}
|
|
60
|
+
function toDefaultRequiredActions(policyLevel) {
|
|
61
|
+
if (policyLevel === 'fail') {
|
|
62
|
+
return ['Reduce architecture risk below block threshold before merge.'];
|
|
63
|
+
}
|
|
64
|
+
if (policyLevel === 'require-adr') {
|
|
65
|
+
return ['Add or update an ADR for this architecture change before merge.'];
|
|
66
|
+
}
|
|
67
|
+
return undefined;
|
|
68
|
+
}
|
|
69
|
+
function resolveBasePolicyLevel(risk, config, thresholdSource) {
|
|
70
|
+
const riskLevelLabel = toUpperRiskLevel(risk.level);
|
|
71
|
+
if (isAtOrAboveRiskLevel(risk.level, config.enforcementLevels.failAt)) {
|
|
72
|
+
return {
|
|
73
|
+
policyLevel: 'fail',
|
|
74
|
+
reason: `Risk level ${riskLevelLabel} meets or exceeds fail threshold ${toUpperRiskLevel(config.enforcementLevels.failAt)}.`,
|
|
75
|
+
matchedThreshold: {
|
|
76
|
+
id: 'fail-at',
|
|
77
|
+
source: thresholdSource,
|
|
78
|
+
configuredValue: config.enforcementLevels.failAt.toUpperCase(),
|
|
79
|
+
matchedValue: riskLevelLabel,
|
|
80
|
+
},
|
|
81
|
+
};
|
|
82
|
+
}
|
|
83
|
+
if (isAtOrAboveRiskLevel(risk.level, config.enforcementLevels.requireAdrAt)) {
|
|
84
|
+
return {
|
|
85
|
+
policyLevel: 'require-adr',
|
|
86
|
+
reason: `Risk level ${riskLevelLabel} meets or exceeds ADR threshold ${toUpperRiskLevel(config.enforcementLevels.requireAdrAt)}.`,
|
|
87
|
+
matchedThreshold: {
|
|
88
|
+
id: 'require-adr-at',
|
|
89
|
+
source: thresholdSource,
|
|
90
|
+
configuredValue: config.enforcementLevels.requireAdrAt.toUpperCase(),
|
|
91
|
+
matchedValue: riskLevelLabel,
|
|
92
|
+
},
|
|
93
|
+
};
|
|
94
|
+
}
|
|
95
|
+
if (isAtOrAboveRiskLevel(risk.level, config.enforcementLevels.warnAt)) {
|
|
96
|
+
return {
|
|
97
|
+
policyLevel: 'warn',
|
|
98
|
+
reason: `Risk level ${riskLevelLabel} meets or exceeds warning threshold ${toUpperRiskLevel(config.enforcementLevels.warnAt)}.`,
|
|
99
|
+
matchedThreshold: {
|
|
100
|
+
id: 'warn-at',
|
|
101
|
+
source: thresholdSource,
|
|
102
|
+
configuredValue: config.enforcementLevels.warnAt.toUpperCase(),
|
|
103
|
+
matchedValue: riskLevelLabel,
|
|
104
|
+
},
|
|
105
|
+
};
|
|
106
|
+
}
|
|
107
|
+
return {
|
|
108
|
+
policyLevel: 'advisory',
|
|
109
|
+
reason: 'Risk level is below configured enforcement thresholds.',
|
|
110
|
+
matchedThreshold: {
|
|
111
|
+
id: 'below-threshold',
|
|
112
|
+
source: thresholdSource,
|
|
113
|
+
configuredValue: config.enforcementLevels.warnAt.toUpperCase(),
|
|
114
|
+
matchedValue: riskLevelLabel,
|
|
115
|
+
},
|
|
116
|
+
};
|
|
117
|
+
}
|
|
118
|
+
function resolveCiExitBehavior(action) {
|
|
119
|
+
if (action === 'fail') {
|
|
120
|
+
return {
|
|
121
|
+
blocking: true,
|
|
122
|
+
exitCode: 1,
|
|
123
|
+
reason: 'Policy level FAIL is blocking in CI.',
|
|
124
|
+
};
|
|
125
|
+
}
|
|
126
|
+
return {
|
|
127
|
+
blocking: false,
|
|
128
|
+
exitCode: 0,
|
|
129
|
+
reason: action === 'require-adr'
|
|
130
|
+
? 'Policy level REQUIRE-ADR is advisory in CI (non-blocking).'
|
|
131
|
+
: action === 'warn'
|
|
132
|
+
? 'Policy level WARN is non-blocking in CI.'
|
|
133
|
+
: 'Policy level ADVISORY is non-blocking in CI.',
|
|
134
|
+
};
|
|
135
|
+
}
|
|
136
|
+
function evaluateRiskPolicy(risk, config, options) {
|
|
137
|
+
const thresholdSource = options?.thresholdSource ?? 'default';
|
|
138
|
+
const baseLevel = resolveBasePolicyLevel(risk, config, thresholdSource);
|
|
139
|
+
let policyLevel = baseLevel.policyLevel;
|
|
140
|
+
let matchedThreshold = baseLevel.matchedThreshold;
|
|
141
|
+
let baselineContribution;
|
|
142
|
+
if (config.baselineRegression.elevateOnRegression &&
|
|
143
|
+
options?.baselineStatus === 'REGRESSED') {
|
|
144
|
+
const baselineMinimum = config.baselineRegression.minimumLevelOnRegression;
|
|
145
|
+
if (policyLevelRank(baselineMinimum) > policyLevelRank(policyLevel)) {
|
|
146
|
+
baselineContribution = {
|
|
147
|
+
enabled: true,
|
|
148
|
+
baselineStatus: options.baselineStatus,
|
|
149
|
+
elevated: true,
|
|
150
|
+
previousPolicyLevel: policyLevel,
|
|
151
|
+
resultingPolicyLevel: baselineMinimum,
|
|
152
|
+
reason: `Baseline status REGRESSED elevated policy level from ${policyLevel.toUpperCase()} to ${baselineMinimum.toUpperCase()}.`,
|
|
153
|
+
};
|
|
154
|
+
policyLevel = baselineMinimum;
|
|
155
|
+
matchedThreshold = {
|
|
156
|
+
id: 'baseline-regression',
|
|
157
|
+
source: thresholdSource,
|
|
158
|
+
configuredValue: baselineMinimum.toUpperCase(),
|
|
159
|
+
matchedValue: options.baselineStatus,
|
|
160
|
+
};
|
|
161
|
+
}
|
|
162
|
+
else {
|
|
163
|
+
baselineContribution = {
|
|
164
|
+
enabled: true,
|
|
165
|
+
baselineStatus: options.baselineStatus,
|
|
166
|
+
elevated: false,
|
|
167
|
+
resultingPolicyLevel: policyLevel,
|
|
168
|
+
reason: `Baseline status REGRESSED did not elevate policy level because current level ${policyLevel.toUpperCase()} already meets baseline minimum ${baselineMinimum.toUpperCase()}.`,
|
|
169
|
+
};
|
|
170
|
+
}
|
|
171
|
+
}
|
|
172
|
+
else {
|
|
173
|
+
baselineContribution = {
|
|
174
|
+
enabled: config.baselineRegression.elevateOnRegression,
|
|
175
|
+
...(options?.baselineStatus ? { baselineStatus: options.baselineStatus } : {}),
|
|
176
|
+
elevated: false,
|
|
177
|
+
resultingPolicyLevel: policyLevel,
|
|
178
|
+
reason: config.baselineRegression.elevateOnRegression
|
|
179
|
+
? 'Baseline regression elevation is enabled but no REGRESSED baseline status was detected.'
|
|
180
|
+
: 'Baseline regression elevation is disabled by policy.',
|
|
181
|
+
};
|
|
182
|
+
}
|
|
183
|
+
const action = policyLevelToAction(policyLevel);
|
|
184
|
+
const ciExitBehavior = resolveCiExitBehavior(action);
|
|
185
|
+
const reasons = [baseLevel.reason];
|
|
186
|
+
if (baselineContribution?.elevated && baselineContribution.reason) {
|
|
187
|
+
reasons.push(baselineContribution.reason);
|
|
188
|
+
}
|
|
189
|
+
return {
|
|
190
|
+
action,
|
|
191
|
+
policyLevel,
|
|
192
|
+
enforcementDecision: action.toUpperCase(),
|
|
193
|
+
matchedThreshold,
|
|
194
|
+
reasons,
|
|
195
|
+
thresholdSource,
|
|
196
|
+
baselineContribution,
|
|
197
|
+
ciExitBehavior,
|
|
198
|
+
...(toDefaultRequiredActions(policyLevel)
|
|
199
|
+
? { requiredActions: toDefaultRequiredActions(policyLevel) }
|
|
200
|
+
: {}),
|
|
201
|
+
};
|
|
202
|
+
}
|
|
203
|
+
//# sourceMappingURL=riskPolicyEnforcement.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"riskPolicyEnforcement.js","sourceRoot":"","sources":["../../../../../core/src/policy/riskPolicyEnforcement.ts"],"names":[],"mappings":";;;AAqNA,gDAyEC;AA9ND,MAAM,cAAc,GAA8B;IACjD,GAAG,EAAE,CAAC;IACN,QAAQ,EAAE,CAAC;IACX,IAAI,EAAE,CAAC;IACP,QAAQ,EAAE,CAAC;CACX,CAAC;AAEW,QAAA,mBAAmB,GAAiB;IAChD,iBAAiB,EAAE;QAClB,MAAM,EAAE,UAAU;QAClB,YAAY,EAAE,MAAM;QACpB,MAAM,EAAE,UAAU;KAClB;IACD,cAAc,EAAE;QACf,IAAI,EAAE,UAAU;QAChB,KAAK,EAAE,UAAU;KACjB;IACD,UAAU,EAAE;QACX,KAAK,EAAE,MAAM;KACb;IACD,kBAAkB,EAAE;QACnB,mBAAmB,EAAE,KAAK;QAC1B,wBAAwB,EAAE,MAAM;KAChC;IACD,8BAA8B,EAAE,IAAI;CACpC,CAAC;AAEF,SAAS,oBAAoB,CAAC,OAAkB,EAAE,SAAoB;IACrE,OAAO,cAAc,CAAC,OAAO,CAAC,IAAI,cAAc,CAAC,SAAS,CAAC,CAAC;AAC7D,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAgB;IACzC,OAAO,KAAK,CAAC,WAAW,EAAE,CAAC;AAC5B,CAAC;AAED,SAAS,mBAAmB,CAAC,WAAwB;IACpD,IAAI,WAAW,KAAK,MAAM,EAAE,CAAC;QAC5B,OAAO,MAAM,CAAC;IACf,CAAC;IACD,IAAI,WAAW,KAAK,aAAa,EAAE,CAAC;QACnC,OAAO,aAAa,CAAC;IACtB,CAAC;IACD,IAAI,WAAW,KAAK,MAAM,EAAE,CAAC;QAC5B,OAAO,MAAM,CAAC;IACf,CAAC;IACD,OAAO,MAAM,CAAC;AACf,CAAC;AAED,SAAS,eAAe,CAAC,KAAkB;IAC1C,IAAI,KAAK,KAAK,UAAU,EAAE,CAAC;QAC1B,OAAO,CAAC,CAAC;IACV,CAAC;IACD,IAAI,KAAK,KAAK,MAAM,EAAE,CAAC;QACtB,OAAO,CAAC,CAAC;IACV,CAAC;IACD,IAAI,KAAK,KAAK,aAAa,EAAE,CAAC;QAC7B,OAAO,CAAC,CAAC;IACV,CAAC;IACD,OAAO,CAAC,CAAC;AACV,CAAC;AAED,SAAS,wBAAwB,CAAC,WAAwB;IACzD,IAAI,WAAW,KAAK,MAAM,EAAE,CAAC;QAC5B,OAAO,CAAC,8DAA8D,CAAC,CAAC;IACzE,CAAC;IACD,IAAI,WAAW,KAAK,aAAa,EAAE,CAAC;QACnC,OAAO,CAAC,iEAAiE,CAAC,CAAC;IAC5E,CAAC;IACD,OAAO,SAAS,CAAC;AAClB,CAAC;AAED,SAAS,sBAAsB,CAC9B,IAA8B,EAC9B,MAAoB,EACpB,eAAqD;IAMrD,MAAM,cAAc,GAAG,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACpD,IAAI,oBAAoB,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,iBAAiB,CAAC,MAAM,CAAC,EAAE,CAAC;QACvE,OAAO;YACN,WAAW,EAAE,MAAM;YACnB,MAAM,EAAE,cAAc,cAAc,oCAAoC,gBAAgB,CAAC,MAAM,CAAC,iBAAiB,CAAC,MAAM,CAAC,GAAG;YAC5H,gBAAgB,EAAE;gBACjB,EAAE,EAAE,SAAS;gBACb,MAAM,EAAE,eAAe;gBACvB,eAAe,EAAE,MAAM,CAAC,iBAAiB,CAAC,MAAM,CAAC,WAAW,EAAE;gBAC9D,YAAY,EAAE,cAAc;aAC5B;SACD,CAAC;IACH,CAAC;IACD,IAAI,oBAAoB,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,iBAAiB,CAAC,YAAY,CAAC,EAAE,CAAC;QAC7E,OAAO;YACN,WAAW,EAAE,aAAa;YAC1B,MAAM,EAAE,cAAc,cAAc,mCAAmC,gBAAgB,CAAC,MAAM,CAAC,iBAAiB,CAAC,YAAY,CAAC,GAAG;YACjI,gBAAgB,EAAE;gBACjB,EAAE,EAAE,gBAAgB;gBACpB,MAAM,EAAE,eAAe;gBACvB,eAAe,EAAE,MAAM,CAAC,iBAAiB,CAAC,YAAY,CAAC,WAAW,EAAE;gBACpE,YAAY,EAAE,cAAc;aAC5B;SACD,CAAC;IACH,CAAC;IACD,IAAI,oBAAoB,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,iBAAiB,CAAC,MAAM,CAAC,EAAE,CAAC;QACvE,OAAO;YACN,WAAW,EAAE,MAAM;YACnB,MAAM,EAAE,cAAc,cAAc,uCAAuC,gBAAgB,CAAC,MAAM,CAAC,iBAAiB,CAAC,MAAM,CAAC,GAAG;YAC/H,gBAAgB,EAAE;gBACjB,EAAE,EAAE,SAAS;gBACb,MAAM,EAAE,eAAe;gBACvB,eAAe,EAAE,MAAM,CAAC,iBAAiB,CAAC,MAAM,CAAC,WAAW,EAAE;gBAC9D,YAAY,EAAE,cAAc;aAC5B;SACD,CAAC;IACH,CAAC;IACD,OAAO;QACN,WAAW,EAAE,UAAU;QACvB,MAAM,EAAE,wDAAwD;QAChE,gBAAgB,EAAE;YACjB,EAAE,EAAE,iBAAiB;YACrB,MAAM,EAAE,eAAe;YACvB,eAAe,EAAE,MAAM,CAAC,iBAAiB,CAAC,MAAM,CAAC,WAAW,EAAE;YAC9D,YAAY,EAAE,cAAc;SAC5B;KACD,CAAC;AACH,CAAC;AAED,SAAS,qBAAqB,CAAC,MAAyB;IACvD,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QACvB,OAAO;YACN,QAAQ,EAAE,IAAI;YACd,QAAQ,EAAE,CAAC;YACX,MAAM,EAAE,sCAAsC;SAC9C,CAAC;IACH,CAAC;IACD,OAAO;QACN,QAAQ,EAAE,KAAK;QACf,QAAQ,EAAE,CAAC;QACX,MAAM,EACL,MAAM,KAAK,aAAa;YACvB,CAAC,CAAC,4DAA4D;YAC9D,CAAC,CAAC,MAAM,KAAK,MAAM;gBAClB,CAAC,CAAC,0CAA0C;gBAC5C,CAAC,CAAC,8CAA8C;KACnD,CAAC;AACH,CAAC;AAED,SAAgB,kBAAkB,CACjC,IAA8B,EAC9B,MAAoB,EACpB,OAGC;IAED,MAAM,eAAe,GAAG,OAAO,EAAE,eAAe,IAAI,SAAS,CAAC;IAC9D,MAAM,SAAS,GAAG,sBAAsB,CAAC,IAAI,EAAE,MAAM,EAAE,eAAe,CAAC,CAAC;IACxE,IAAI,WAAW,GAAG,SAAS,CAAC,WAAW,CAAC;IACxC,IAAI,gBAAgB,GAAG,SAAS,CAAC,gBAAgB,CAAC;IAClD,IAAI,oBAAsD,CAAC;IAC3D,IACC,MAAM,CAAC,kBAAkB,CAAC,mBAAmB;QAC7C,OAAO,EAAE,cAAc,KAAK,WAAW,EACtC,CAAC;QACF,MAAM,eAAe,GAAG,MAAM,CAAC,kBAAkB,CAAC,wBAAwB,CAAC;QAC3E,IAAI,eAAe,CAAC,eAAe,CAAC,GAAG,eAAe,CAAC,WAAW,CAAC,EAAE,CAAC;YACrE,oBAAoB,GAAG;gBACtB,OAAO,EAAE,IAAI;gBACb,cAAc,EAAE,OAAO,CAAC,cAAc;gBACtC,QAAQ,EAAE,IAAI;gBACd,mBAAmB,EAAE,WAAW;gBAChC,oBAAoB,EAAE,eAAe;gBACrC,MAAM,EAAE,wDAAwD,WAAW,CAAC,WAAW,EAAE,OAAO,eAAe,CAAC,WAAW,EAAE,GAAG;aAChI,CAAC;YACF,WAAW,GAAG,eAAe,CAAC;YAC9B,gBAAgB,GAAG;gBAClB,EAAE,EAAE,qBAAqB;gBACzB,MAAM,EAAE,eAAe;gBACvB,eAAe,EAAE,eAAe,CAAC,WAAW,EAAE;gBAC9C,YAAY,EAAE,OAAO,CAAC,cAAc;aACpC,CAAC;QACH,CAAC;aAAM,CAAC;YACP,oBAAoB,GAAG;gBACtB,OAAO,EAAE,IAAI;gBACb,cAAc,EAAE,OAAO,CAAC,cAAc;gBACtC,QAAQ,EAAE,KAAK;gBACf,oBAAoB,EAAE,WAAW;gBACjC,MAAM,EAAE,gFAAgF,WAAW,CAAC,WAAW,EAAE,mCAAmC,eAAe,CAAC,WAAW,EAAE,GAAG;aACpL,CAAC;QACH,CAAC;IACF,CAAC;SAAM,CAAC;QACP,oBAAoB,GAAG;YACtB,OAAO,EAAE,MAAM,CAAC,kBAAkB,CAAC,mBAAmB;YACtD,GAAG,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC9E,QAAQ,EAAE,KAAK;YACf,oBAAoB,EAAE,WAAW;YACjC,MAAM,EAAE,MAAM,CAAC,kBAAkB,CAAC,mBAAmB;gBACpD,CAAC,CAAC,yFAAyF;gBAC3F,CAAC,CAAC,sDAAsD;SACzD,CAAC;IACH,CAAC;IACD,MAAM,MAAM,GAAG,mBAAmB,CAAC,WAAW,CAAC,CAAC;IAChD,MAAM,cAAc,GAAG,qBAAqB,CAAC,MAAM,CAAC,CAAC;IACrD,MAAM,OAAO,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IACnC,IAAI,oBAAoB,EAAE,QAAQ,IAAI,oBAAoB,CAAC,MAAM,EAAE,CAAC;QACnE,OAAO,CAAC,IAAI,CAAC,oBAAoB,CAAC,MAAM,CAAC,CAAC;IAC3C,CAAC;IACD,OAAO;QACN,MAAM;QACN,WAAW;QACX,mBAAmB,EAAE,MAAM,CAAC,WAAW,EAAE;QACzC,gBAAgB;QAChB,OAAO;QACP,eAAe;QACf,oBAAoB;QACpB,cAAc;QACd,GAAG,CAAC,wBAAwB,CAAC,WAAW,CAAC;YACxC,CAAC,CAAC,EAAE,eAAe,EAAE,wBAAwB,CAAC,WAAW,CAAC,EAAE;YAC5D,CAAC,CAAC,EAAE,CAAC;KACN,CAAC;AACH,CAAC"}
|
|
@@ -0,0 +1,16 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
+
exports.resolveValidateExitCode = resolveValidateExitCode;
|
|
4
|
+
function resolveValidateExitCode(input) {
|
|
5
|
+
if (input.hasReportWriteError) {
|
|
6
|
+
return 1;
|
|
7
|
+
}
|
|
8
|
+
if (input.ciMode) {
|
|
9
|
+
if (input.enforcement.ciExitBehavior) {
|
|
10
|
+
return input.enforcement.ciExitBehavior.exitCode;
|
|
11
|
+
}
|
|
12
|
+
return input.enforcement.action === 'fail' ? 1 : 0;
|
|
13
|
+
}
|
|
14
|
+
return input.validationErrors > 0 ? 1 : 0;
|
|
15
|
+
}
|
|
16
|
+
//# sourceMappingURL=riskPolicyExitCode.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"riskPolicyExitCode.js","sourceRoot":"","sources":["../../../../../core/src/policy/riskPolicyExitCode.ts"],"names":[],"mappings":";;AAAA,0DAwBC;AAxBD,SAAgB,uBAAuB,CAAC,KAWvC;IACA,IAAI,KAAK,CAAC,mBAAmB,EAAE,CAAC;QAC/B,OAAO,CAAC,CAAC;IACV,CAAC;IAED,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;QAClB,IAAI,KAAK,CAAC,WAAW,CAAC,cAAc,EAAE,CAAC;YACtC,OAAO,KAAK,CAAC,WAAW,CAAC,cAAc,CAAC,QAAQ,CAAC;QAClD,CAAC;QACD,OAAO,KAAK,CAAC,WAAW,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACpD,CAAC;IAED,OAAO,KAAK,CAAC,gBAAgB,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC3C,CAAC"}
|
|
@@ -0,0 +1,90 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
|
|
3
|
+
if (k2 === undefined) k2 = k;
|
|
4
|
+
var desc = Object.getOwnPropertyDescriptor(m, k);
|
|
5
|
+
if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
|
|
6
|
+
desc = { enumerable: true, get: function() { return m[k]; } };
|
|
7
|
+
}
|
|
8
|
+
Object.defineProperty(o, k2, desc);
|
|
9
|
+
}) : (function(o, m, k, k2) {
|
|
10
|
+
if (k2 === undefined) k2 = k;
|
|
11
|
+
o[k2] = m[k];
|
|
12
|
+
}));
|
|
13
|
+
var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
|
|
14
|
+
Object.defineProperty(o, "default", { enumerable: true, value: v });
|
|
15
|
+
}) : function(o, v) {
|
|
16
|
+
o["default"] = v;
|
|
17
|
+
});
|
|
18
|
+
var __importStar = (this && this.__importStar) || (function () {
|
|
19
|
+
var ownKeys = function(o) {
|
|
20
|
+
ownKeys = Object.getOwnPropertyNames || function (o) {
|
|
21
|
+
var ar = [];
|
|
22
|
+
for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
|
|
23
|
+
return ar;
|
|
24
|
+
};
|
|
25
|
+
return ownKeys(o);
|
|
26
|
+
};
|
|
27
|
+
return function (mod) {
|
|
28
|
+
if (mod && mod.__esModule) return mod;
|
|
29
|
+
var result = {};
|
|
30
|
+
if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
|
|
31
|
+
__setModuleDefault(result, mod);
|
|
32
|
+
return result;
|
|
33
|
+
};
|
|
34
|
+
})();
|
|
35
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
36
|
+
exports.getRiskPolicyPath = getRiskPolicyPath;
|
|
37
|
+
exports.buildDefaultRiskPolicyTemplate = buildDefaultRiskPolicyTemplate;
|
|
38
|
+
exports.riskPolicyFileExists = riskPolicyFileExists;
|
|
39
|
+
exports.ensureRiskPolicyFile = ensureRiskPolicyFile;
|
|
40
|
+
const path = __importStar(require("node:path"));
|
|
41
|
+
const node_fs_1 = require("node:fs");
|
|
42
|
+
const riskPolicyEnforcement_1 = require("./riskPolicyEnforcement");
|
|
43
|
+
function getRiskPolicyPath(workspaceRoot) {
|
|
44
|
+
return path.join(workspaceRoot, '.archpilot', 'policy.json');
|
|
45
|
+
}
|
|
46
|
+
function buildDefaultRiskPolicyTemplate() {
|
|
47
|
+
return `${JSON.stringify({
|
|
48
|
+
enforcementLevels: {
|
|
49
|
+
warnAt: riskPolicyEnforcement_1.defaultPolicyConfig.enforcementLevels.warnAt,
|
|
50
|
+
requireAdrAt: riskPolicyEnforcement_1.defaultPolicyConfig.enforcementLevels.requireAdrAt,
|
|
51
|
+
failAt: riskPolicyEnforcement_1.defaultPolicyConfig.enforcementLevels.failAt,
|
|
52
|
+
},
|
|
53
|
+
baselineRegression: {
|
|
54
|
+
elevateOnRegression: riskPolicyEnforcement_1.defaultPolicyConfig.baselineRegression.elevateOnRegression,
|
|
55
|
+
minimumLevelOnRegression: riskPolicyEnforcement_1.defaultPolicyConfig.baselineRegression.minimumLevelOnRegression,
|
|
56
|
+
},
|
|
57
|
+
allowOverrideWithJustification: riskPolicyEnforcement_1.defaultPolicyConfig.allowOverrideWithJustification,
|
|
58
|
+
}, null, 2)}\n`;
|
|
59
|
+
}
|
|
60
|
+
async function riskPolicyFileExists(workspaceRoot) {
|
|
61
|
+
const policyPath = getRiskPolicyPath(workspaceRoot);
|
|
62
|
+
try {
|
|
63
|
+
await node_fs_1.promises.access(policyPath);
|
|
64
|
+
return true;
|
|
65
|
+
}
|
|
66
|
+
catch {
|
|
67
|
+
return false;
|
|
68
|
+
}
|
|
69
|
+
}
|
|
70
|
+
async function ensureRiskPolicyFile(workspaceRoot) {
|
|
71
|
+
const policyPath = getRiskPolicyPath(workspaceRoot);
|
|
72
|
+
const policyDir = path.dirname(policyPath);
|
|
73
|
+
await node_fs_1.promises.mkdir(policyDir, { recursive: true });
|
|
74
|
+
try {
|
|
75
|
+
await node_fs_1.promises.access(policyPath);
|
|
76
|
+
return {
|
|
77
|
+
policyPath,
|
|
78
|
+
created: false,
|
|
79
|
+
};
|
|
80
|
+
}
|
|
81
|
+
catch {
|
|
82
|
+
// File does not exist yet; create it using defaults.
|
|
83
|
+
}
|
|
84
|
+
await node_fs_1.promises.writeFile(policyPath, buildDefaultRiskPolicyTemplate(), { encoding: 'utf8' });
|
|
85
|
+
return {
|
|
86
|
+
policyPath,
|
|
87
|
+
created: true,
|
|
88
|
+
};
|
|
89
|
+
}
|
|
90
|
+
//# sourceMappingURL=riskPolicyInitializer.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"riskPolicyInitializer.js","sourceRoot":"","sources":["../../../../../core/src/policy/riskPolicyInitializer.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AASA,8CAEC;AAED,wEAkBC;AAED,oDAQC;AAED,oDAqBC;AAhED,gDAAkC;AAClC,qCAAyC;AACzC,mEAA8D;AAO9D,SAAgB,iBAAiB,CAAC,aAAqB;IACtD,OAAO,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,YAAY,EAAE,aAAa,CAAC,CAAC;AAC9D,CAAC;AAED,SAAgB,8BAA8B;IAC7C,OAAO,GAAG,IAAI,CAAC,SAAS,CACvB;QACC,iBAAiB,EAAE;YAClB,MAAM,EAAE,2CAAmB,CAAC,iBAAiB,CAAC,MAAM;YACpD,YAAY,EAAE,2CAAmB,CAAC,iBAAiB,CAAC,YAAY;YAChE,MAAM,EAAE,2CAAmB,CAAC,iBAAiB,CAAC,MAAM;SACpD;QACD,kBAAkB,EAAE;YACnB,mBAAmB,EAAE,2CAAmB,CAAC,kBAAkB,CAAC,mBAAmB;YAC/E,wBAAwB,EACvB,2CAAmB,CAAC,kBAAkB,CAAC,wBAAwB;SAChE;QACD,8BAA8B,EAAE,2CAAmB,CAAC,8BAA8B;KAClF,EACD,IAAI,EACJ,CAAC,CACD,IAAI,CAAC;AACP,CAAC;AAEM,KAAK,UAAU,oBAAoB,CAAC,aAAqB;IAC/D,MAAM,UAAU,GAAG,iBAAiB,CAAC,aAAa,CAAC,CAAC;IACpD,IAAI,CAAC;QACJ,MAAM,kBAAE,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QAC5B,OAAO,IAAI,CAAC;IACb,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,KAAK,CAAC;IACd,CAAC;AACF,CAAC;AAEM,KAAK,UAAU,oBAAoB,CACzC,aAAqB;IAErB,MAAM,UAAU,GAAG,iBAAiB,CAAC,aAAa,CAAC,CAAC;IACpD,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAC3C,MAAM,kBAAE,CAAC,KAAK,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC/C,IAAI,CAAC;QACJ,MAAM,kBAAE,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QAC5B,OAAO;YACN,UAAU;YACV,OAAO,EAAE,KAAK;SACd,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACR,qDAAqD;IACtD,CAAC;IAED,MAAM,kBAAE,CAAC,SAAS,CAAC,UAAU,EAAE,8BAA8B,EAAE,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;IACvF,OAAO;QACN,UAAU;QACV,OAAO,EAAE,IAAI;KACb,CAAC;AACH,CAAC"}
|