agent-policy-kit 0.1.0 → 0.2.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/AGENT_INSTALL.md +9 -5
- package/CHANGELOG.md +40 -0
- package/README.md +21 -4
- package/bin/agent-policy.mjs +25 -10
- package/docs/architecture.md +1 -1
- package/docs/compatibility.md +2 -0
- package/docs/configuration-page.md +12 -6
- package/docs/deployment.md +31 -0
- package/docs/design/2026-11-01-grok-build-support.md +30 -0
- package/docs/development.md +1 -1
- package/docs/installation.md +9 -1
- package/docs/model-catalog.md +44 -36
- package/docs/npm-release.md +4 -2
- package/docs/policy.md +3 -3
- package/docs/releases.md +4 -4
- package/docs/verification.md +23 -2
- package/models/catalog.json +44 -0
- package/package.json +7 -3
- package/policies/balanced.json +23 -0
- package/policies/fast.json +12 -1
- package/policies/quality.json +28 -7
- package/schema/policy.schema.json +98 -0
- package/site/index.html +237 -84
- package/src/detect.mjs +2 -1
- package/src/explicit.mjs +14 -7
- package/src/inspect.mjs +203 -0
- package/src/install.mjs +20 -4
- package/src/native.mjs +8 -4
- package/src/output.mjs +108 -0
- package/src/policy.mjs +3 -2
- package/src/release.mjs +1 -1
- package/src/share.mjs +47 -16
package/src/share.mjs
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
// Pure URL state codec, also embedded in the offline configuration page.
|
|
2
2
|
const SHARE_BYTES=65536,SHARE_TOKEN=87384;
|
|
3
|
-
const SHARE_VERSION
|
|
3
|
+
const SHARE_VERSION=/^(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)(?:-(?:0|[1-9]\d*|\d*[A-Za-z-][0-9A-Za-z-]*)(?:\.(?:0|[1-9]\d*|\d*[A-Za-z-][0-9A-Za-z-]*))*)?$/;
|
|
4
4
|
const SHARE_UNSAFE=new Set(['__proto__','constructor','prototype']);
|
|
5
5
|
function invalidShare(){throw Object.assign(new Error('Invalid shared configuration link.'),{code:'INVALID_SHARE_LINK'});}
|
|
6
6
|
|
|
@@ -46,46 +46,67 @@ function shareRelease(release){
|
|
|
46
46
|
}
|
|
47
47
|
for(const preset of release.presets){
|
|
48
48
|
shareRecord(preset);if(typeof preset.id!=='string'||!preset.id||preset.id==='custom'||SHARE_UNSAFE.has(preset.id)||presets.has(preset.id))invalidShare();
|
|
49
|
-
shareRecord(shareRecord(preset.preferences).clients);
|
|
49
|
+
shareRecord(shareRecord(preset.preferences).clients);
|
|
50
|
+
if(preset.topModels!==undefined&&Object.values(shareRecord(preset.topModels)).some(model=>typeof model!=='string'))invalidShare();
|
|
51
|
+
presets.set(preset.id,preset);
|
|
50
52
|
}
|
|
51
53
|
if(!presets.has(release.preset))invalidShare();
|
|
52
54
|
return {clients,roles,presets,catalog};
|
|
53
55
|
}
|
|
54
56
|
function shareChoice(choice,id,metadata){
|
|
55
57
|
shareRecord(choice,['model','effort']);
|
|
56
|
-
if(typeof choice.model!=='string'||choice.model.length>128||(choice.effort!==null&&(
|
|
58
|
+
if(typeof choice.model!=='string'||choice.model.length>128||(choice.effort!==null&&(['agy','grok'].includes(id)||!metadata.catalog[id].efforts.includes(choice.effort))))invalidShare();
|
|
57
59
|
return {model:choice.model,effort:choice.effort};
|
|
58
60
|
}
|
|
59
61
|
function sharePayload(payload,release,metadata){
|
|
60
|
-
shareRecord(payload
|
|
61
|
-
if(payload.v!==
|
|
62
|
-
|
|
63
|
-
if(
|
|
62
|
+
shareRecord(payload);const legacy=payload.v===1;
|
|
63
|
+
if(!legacy&&payload.v!==2)invalidShare();
|
|
64
|
+
shareRecord(payload,legacy?['v','release','roles','tools','scope','maxConcurrent']:['v','release','roles','tools','scope']);
|
|
65
|
+
if(typeof payload.release!=='string'||payload.release.length>128||!SHARE_VERSION.test(payload.release))invalidShare();
|
|
66
|
+
if(legacy&&(!Number.isInteger(payload.maxConcurrent)||payload.maxConcurrent<1||payload.maxConcurrent>32))invalidShare();
|
|
67
|
+
if(payload.release!==release.version){
|
|
68
|
+
// Validate the wire shape without imposing today's models or preset values on
|
|
69
|
+
// an older release. Invalid links must never turn into navigation.
|
|
70
|
+
const identifier=value=>typeof value==='string'&&/^[A-Za-z0-9][A-Za-z0-9_-]{0,63}$/.test(value);
|
|
71
|
+
if(!Array.isArray(payload.roles)||payload.roles.length>1000||payload.roles.some(role=>!identifier(role)))invalidShare();
|
|
72
|
+
const roles=shareList(payload.roles,payload.roles),ids=[];
|
|
73
|
+
if(!Array.isArray(payload.tools)||payload.tools.length>32)invalidShare();
|
|
74
|
+
for(const tool of payload.tools){
|
|
75
|
+
shareRecord(tool,legacy?['id','mode','base','choices']:['id','mode','base','choices','maxConcurrent']);if(!legacy&&(!Number.isInteger(tool.maxConcurrent)||tool.maxConcurrent<1||tool.maxConcurrent>32))invalidShare();if(!identifier(tool.id)||ids.includes(tool.id)||!identifier(tool.base)||(tool.mode!==null&&!identifier(tool.mode)))invalidShare();ids.push(tool.id);
|
|
76
|
+
shareRecord(tool.choices,roles);for(const role of roles){const choice=shareRecord(tool.choices[role],['model','effort']);if(typeof choice.model!=='string'||choice.model.length>128||(choice.effort!==null&&(typeof choice.effort!=='string'||choice.effort.length>32)))invalidShare();}
|
|
77
|
+
}
|
|
78
|
+
if(payload.scope!==null&&(typeof payload.scope!=='string'||(payload.scope==='all'?ids.length<2:!ids.includes(payload.scope))))invalidShare();
|
|
79
|
+
throw Object.assign(new Error('This link uses a different release.'),{code:'SHARE_RELEASE_MISMATCH',releaseVersion:payload.release});
|
|
80
|
+
}
|
|
64
81
|
const roles=shareList(payload.roles,[...metadata.roles.keys()]);
|
|
65
82
|
if(!Array.isArray(payload.tools)||payload.tools.length>metadata.clients.length)invalidShare();
|
|
66
83
|
const selected=[];
|
|
67
84
|
const tools=payload.tools.map(tool=>{
|
|
68
|
-
shareRecord(tool,['id','mode','base','choices']);
|
|
85
|
+
shareRecord(tool,legacy?['id','mode','base','choices']:['id','mode','base','choices','maxConcurrent']);if(!legacy&&(!Number.isInteger(tool.maxConcurrent)||tool.maxConcurrent<1||tool.maxConcurrent>32))invalidShare();
|
|
69
86
|
const {id,mode,base}=tool;
|
|
70
87
|
if(!metadata.clients.includes(id)||selected.includes(id)||!metadata.presets.has(base)||(mode!==null&&mode!=='custom'&&!metadata.presets.has(mode)))invalidShare();
|
|
71
88
|
selected.push(id);shareRecord(tool.choices,roles);
|
|
72
89
|
const choices=Object.fromEntries(roles.map(role=>[role,shareChoice(tool.choices[role],id,metadata)]));
|
|
73
90
|
if(mode!==null&&mode!=='custom'){
|
|
74
91
|
if(mode!==base)invalidShare();
|
|
75
|
-
const
|
|
92
|
+
const named=metadata.presets.get(mode),preset=named.preferences,clients=preset.clients;
|
|
93
|
+
if(!legacy&&tool.maxConcurrent!==(clients[id]?.maxConcurrent??preset.maxConcurrent))invalidShare();
|
|
76
94
|
if(!Object.hasOwn(clients,id))invalidShare();
|
|
77
|
-
const preferences=shareRecord(clients[id]);
|
|
95
|
+
const preferences=shareRecord(clients[id]),own=role=>preferences.roles&&Object.hasOwn(preferences.roles,role);
|
|
96
|
+
// A preset's optional top model replaces every shared code role that has no role-specific choice, or none of them.
|
|
97
|
+
const top=named.topModels&&Object.hasOwn(named.topModels,id)?named.topModels[id]:null;
|
|
98
|
+
const topRoles=roles.filter(role=>metadata.roles.get(role).kind==='code'&&!own(role)),topped=top!==null&&topRoles.some(role=>choices[role].model===top);
|
|
78
99
|
for(const role of roles){
|
|
79
|
-
const expected=
|
|
80
|
-
const choice=shareChoice(expected,id,metadata);
|
|
100
|
+
const expected=own(role)?preferences.roles[role]:preferences[metadata.roles.get(role).kind];
|
|
101
|
+
const choice=shareChoice(expected,id,metadata);if(topped&&topRoles.includes(role))choice.model=top;
|
|
81
102
|
if(choice.model!==choices[role].model||choice.effort!==choices[role].effort)invalidShare();
|
|
82
103
|
}
|
|
83
104
|
}
|
|
84
|
-
return {id,mode,base,choices};
|
|
105
|
+
return {id,mode,base,choices,...(legacy?{}:{maxConcurrent:tool.maxConcurrent})};
|
|
85
106
|
});
|
|
86
107
|
const scope=payload.scope;
|
|
87
108
|
if(scope!==null&&(typeof scope!=='string'||(scope==='all'?tools.length<2:!selected.includes(scope))))invalidShare();
|
|
88
|
-
return {v:
|
|
109
|
+
return {v:payload.v,release:payload.release,roles,tools,scope,...(legacy?{maxConcurrent:payload.maxConcurrent}:{})};
|
|
89
110
|
}
|
|
90
111
|
function shareBase64(bytes){return btoa(Array.from(bytes,byte=>String.fromCharCode(byte)).join('')).replaceAll('+','-').replaceAll('/','_').replace(/=+$/,'');}
|
|
91
112
|
function shareJson(text){
|
|
@@ -111,15 +132,16 @@ export function encodeFormState(snapshot,release){
|
|
|
111
132
|
shareData(snapshot);shareRecord(snapshot);
|
|
112
133
|
const metadata=shareRelease(release),state=shareRecord(snapshot.state),profiles=shareRecord(state.profiles),jobs=shareRecord(state.jobs);
|
|
113
134
|
const roles=shareList(snapshot.helpers,[...metadata.roles.keys()]),selected=shareList(snapshot.pickedTools,metadata.clients);
|
|
135
|
+
const modern=Object.values(profiles).some(profile=>Object.hasOwn(profile,'maxConcurrent'));
|
|
114
136
|
const tools=selected.map(id=>{
|
|
115
137
|
if(!Object.hasOwn(profiles,id)||!Object.hasOwn(jobs,id))invalidShare();
|
|
116
138
|
const profile=shareRecord(profiles[id]),choices=shareRecord(jobs[id]);
|
|
117
139
|
if(typeof profile.custom!=='boolean'||(profile.modeSelected!==undefined&&typeof profile.modeSelected!=='boolean'))invalidShare();
|
|
118
|
-
return {id,mode:profile.modeSelected===false?null:profile.custom?'custom':profile.presetId,base:profile.presetId,choices:Object.fromEntries(roles.map(role=>{
|
|
140
|
+
return {id,...(modern?{maxConcurrent:Object.hasOwn(profile,'maxConcurrent')?profile.maxConcurrent:state.maxConcurrent}:{}),mode:profile.modeSelected===false?null:profile.custom?'custom':profile.presetId,base:profile.presetId,choices:Object.fromEntries(roles.map(role=>{
|
|
119
141
|
if(!Object.hasOwn(choices,role))invalidShare();return [role,shareChoice(choices[role],id,metadata)];
|
|
120
142
|
}))};
|
|
121
143
|
});
|
|
122
|
-
const payload=sharePayload({v:1,release:release.version,roles,tools,scope:snapshot.selectedScope
|
|
144
|
+
const payload=sharePayload({v:modern?2:1,release:release.version,roles,tools,scope:snapshot.selectedScope,...(modern?{}:{maxConcurrent:state.maxConcurrent})},release,metadata);
|
|
123
145
|
if(!roles.length&&!tools.length)return '';
|
|
124
146
|
const bytes=new TextEncoder().encode(JSON.stringify(payload));if(bytes.length>SHARE_BYTES)invalidShare();
|
|
125
147
|
const token=shareBase64(bytes);if(token.length>SHARE_TOKEN)invalidShare();return '#setup='+token;
|
|
@@ -139,3 +161,12 @@ export function decodeFormState(fragment,release){
|
|
|
139
161
|
return sharePayload(payload,release,shareRelease(release));
|
|
140
162
|
}catch(error){if(error?.code==='INVALID_SHARE_LINK'||error?.code==='SHARE_RELEASE_MISMATCH')throw error;invalidShare();}
|
|
141
163
|
}
|
|
164
|
+
|
|
165
|
+
export function archivedReleaseUrl(error,href,hostedReleases=[]){
|
|
166
|
+
if(error?.code!=='SHARE_RELEASE_MISMATCH'||typeof error.releaseVersion!=='string'||error.releaseVersion.length>128||!SHARE_VERSION.test(error.releaseVersion)||!Array.isArray(hostedReleases)||!hostedReleases.includes(error.releaseVersion))return null;
|
|
167
|
+
try{
|
|
168
|
+
const current=new URL(href);if(!['http:','https:'].includes(current.protocol)||current.username||current.password||current.pathname!=='/'||!current.hash.startsWith('#setup='))return null;
|
|
169
|
+
const target=new URL(`/v/${error.releaseVersion}/`,current.origin);target.hash=current.hash;
|
|
170
|
+
return target.origin===current.origin?target.href:null;
|
|
171
|
+
}catch{return null;}
|
|
172
|
+
}
|