@intentius/plywood 0.3.2 → 0.3.7

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@intentius/plywood",
-  "version": "0.3.2",
+  "version": "0.3.7",
   "description": "Pulumi ops and governance.",
   "license": "Apache-2.0",
   "type": "module",
@@ -34,10 +34,10 @@
     "prepack": "node scripts/build-cli.mjs"
   },
   "dependencies": {
-    "@intentius/chant": "0.124.67",
-    "@intentius/chant-lexicon-forgejo": "0.124.67",
-    "@intentius/chant-lexicon-github": "0.124.67",
-    "@intentius/chant-lexicon-gitlab": "0.124.67",
-    "@intentius/chant-lexicon-pulumi": "0.124.67"
+    "@intentius/chant": "0.124.84",
+    "@intentius/chant-lexicon-forgejo": "0.124.84",
+    "@intentius/chant-lexicon-github": "0.124.84",
+    "@intentius/chant-lexicon-gitlab": "0.124.84",
+    "@intentius/chant-lexicon-pulumi": "0.124.84"
   }
 }

package/plywood.schema.json

@@ -219,8 +219,8 @@
     },
     "preview": {
       "type": "boolean",
-      "default": false,
-      "description": "true: plywood init sets approvals.preview in the waves spec, so a merged wave applies only the plans its pull request previewed, or exits 4. Known limits: plywood#55 (the second of two disjoint merges is refused) and plywood#56 (a pull request that creates an autonamed resource is refused)."
+      "default": true,
+      "description": "true (the default): plywood init sets approvals.preview in the waves spec, so a merged wave applies only the plans its pull request previewed, or exits 4. false leaves it out."
     },
     "approval_rules": {
       "type": "object",
@@ -286,7 +286,7 @@
             "repo",
             "ref"
           ],
-          "description": "A shared rule set from a git ref, fetched by the job at the ref the base names (chant >= the release after 0.124.54). packs are then paths inside it.",
+          "description": "A shared rule set from a git ref, fetched by the job at the ref the base names. packs are then paths inside it.",
           "properties": {
             "repo": {
               "type": "string",

package/templates/agent-guard/bin/plunge

@@ -1,27 +0,0 @@
-#!/bin/sh
-# plywood's agent guard wrapper for plunge (plywood#19), written by 'plywood guard install'.
-# First on PATH in an agent session: with PLYWOOD_AGENT_GUARD=1 or CLAUDECODE=1
-# it refuses 'plunge up', 'plunge update' and 'plunge destroy', and runs every other
-# command with the real plunge further down PATH.
-self_dir=$(cd "$(dirname "$0")" && pwd)
-if [ "${PLYWOOD_AGENT_GUARD:-}" = "1" ] || [ "${CLAUDECODE:-}" = "1" ]; then
-  skip=0
-  for arg in "$@"; do
-    if [ "$skip" = 1 ]; then skip=0; continue; fi
-    case "$arg" in
-      -C|--cwd|-s|--stack|--color|--config-file|--logflow|-v|--verbose|--tracing|--profiling|--memprofilerate) skip=1 ;;
-      -*) ;;
-      up|update|destroy)
-        echo "plywood guard: an agent session does not run 'plunge $arg'. Open a pull request; plywood previews it, and the update runs after a person approves the digest." >&2
-        exit 1 ;;
-      *) break ;;
-    esac
-  done
-fi
-IFS=:
-for dir in $PATH; do
-  [ "$(cd "$dir" 2>/dev/null && pwd)" = "$self_dir" ] && continue
-  if [ -x "$dir/plunge" ]; then exec "$dir/plunge" "$@"; fi
-done
-echo "plywood guard: no plunge on PATH after $self_dir" >&2
-exit 127

package/templates/agent-guard/bin/pulumi

@@ -1,27 +0,0 @@
-#!/bin/sh
-# plywood's agent guard wrapper for pulumi (plywood#19), written by 'plywood guard install'.
-# First on PATH in an agent session: with PLYWOOD_AGENT_GUARD=1 or CLAUDECODE=1
-# it refuses 'pulumi up', 'pulumi update' and 'pulumi destroy', and runs every other
-# command with the real pulumi further down PATH.
-self_dir=$(cd "$(dirname "$0")" && pwd)
-if [ "${PLYWOOD_AGENT_GUARD:-}" = "1" ] || [ "${CLAUDECODE:-}" = "1" ]; then
-  skip=0
-  for arg in "$@"; do
-    if [ "$skip" = 1 ]; then skip=0; continue; fi
-    case "$arg" in
-      -C|--cwd|-s|--stack|--color|--config-file|--logflow|-v|--verbose|--tracing|--profiling|--memprofilerate) skip=1 ;;
-      -*) ;;
-      up|update|destroy)
-        echo "plywood guard: an agent session does not run 'pulumi $arg'. Open a pull request; plywood previews it, and the update runs after a person approves the digest." >&2
-        exit 1 ;;
-      *) break ;;
-    esac
-  done
-fi
-IFS=:
-for dir in $PATH; do
-  [ "$(cd "$dir" 2>/dev/null && pwd)" = "$self_dir" ] && continue
-  if [ -x "$dir/pulumi" ]; then exec "$dir/pulumi" "$@"; fi
-done
-echo "plywood guard: no pulumi on PATH after $self_dir" >&2
-exit 127

package/templates/agent-guard/plywood-guard.mjs

@@ -1,60 +0,0 @@
-#!/usr/bin/env node
-// plywood's agent guard, a Claude Code PreToolUse hook on Bash (plywood#19).
-// Written by `plywood guard install`; `plywood guard install` writes it again.
-// It blocks a command line that runs `pulumi up`, `pulumi destroy` or
-// `plunge up` (and `update`, their alias): an agent opens a pull request,
-// and the update runs after a person approves its digest. Exit 2 is Claude
-// Code's code for a blocked call; its stderr goes back to the agent.
-
-const GUARDED = { pulumi: ["up", "update", "destroy"], plunge: ["up", "update", "destroy"] };
-const VALUED_GLOBALS = new Set(["-C", "--cwd", "-s", "--stack", "--color", "--config-file", "--logflow", "-v", "--verbose", "--tracing", "--profiling", "--memprofilerate"]);
-const LAUNCHERS = new Set(["env", "npx", "sudo", "command", "exec", "nohup", "time", "xargs"]);
-
-function segments(line) {
-  return line
-    .split(/\|\||&&|[;|\n`]|\$\(|\)/)
-    .map((seg) => (seg.match(/'[^']*'|"[^"]*"|\S+/g) ?? []).map((t) => t.replace(/^['"]|['"]$/g, "")))
-    .filter((t) => t.length > 0);
-}
-
-/** The refused engine and subcommand, or undefined. Kept in step with src/guard.ts `guardVerdict`. */
-export function verdict(line) {
-  for (const words of segments(line)) {
-    let i = 0;
-    while (i < words.length && (LAUNCHERS.has(words[i]) || /^[A-Za-z_][A-Za-z0-9_]*=/.test(words[i]) || (words[i - 1] === "env" && words[i].startsWith("-")))) i++;
-    const bin = (words[i] ?? "").split("/").pop();
-    const refused = GUARDED[bin];
-    if (!refused) continue;
-    for (let j = i + 1; j < words.length; j++) {
-      const w = words[j];
-      if (w.startsWith("-")) {
-        if (VALUED_GLOBALS.has(w)) j++;
-        continue;
-      }
-      if (refused.includes(w)) return { engine: bin, subcommand: w };
-      break;
-    }
-  }
-  return undefined;
-}
-
-async function main() {
-  let input = "";
-  for await (const chunk of process.stdin) input += chunk;
-  let call;
-  try {
-    call = JSON.parse(input);
-  } catch {
-    return 0;
-  }
-  const command = call?.tool_input?.command;
-  if (typeof command !== "string") return 0;
-  const v = verdict(command);
-  if (!v) return 0;
-  process.stderr.write(`plywood guard: an agent session does not run '${v.engine} ${v.subcommand}'. Open a pull request; plywood previews it, and the update runs after a person approves the digest.\n`);
-  return 2;
-}
-
-if (process.argv[1] && import.meta.url.endsWith("/plywood-guard.mjs") && process.argv[1].endsWith("plywood-guard.mjs")) {
-  main().then((code) => process.exit(code));
-}