artifact-contracts 0.2.2 → 0.30.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +1 -1
- package/cli-contract.yaml +59 -58
- package/dist/core/lookup.d.ts +1 -1
- package/dist/core/lookup.d.ts.map +1 -1
- package/dist/core/lookup.js +1 -1
- package/dist/core/lookup.js.map +1 -1
- package/dist/core/resolver.d.ts +1 -1
- package/dist/core/resolver.d.ts.map +1 -1
- package/dist/core/resolver.js +1 -1
- package/dist/core/resolver.js.map +1 -1
- package/dist/core/schema.d.ts +3 -3
- package/dist/core/schema.js +1 -1
- package/dist/core/schema.js.map +1 -1
- package/dist/core/validator.js +1 -1
- package/dist/core/validator.js.map +1 -1
- package/dist/generated/dsl/handoffs.d.ts +42 -42
- package/dist/generated/dsl/handoffs.js +5 -5
- package/dist/generated/dsl/handoffs.js.map +1 -1
- package/dist/generated/policy-runtime.d.ts +19 -19
- package/dist/generated/policy-runtime.d.ts.map +1 -1
- package/dist/generated/policy-runtime.js +28 -28
- package/dist/generated/policy-runtime.js.map +1 -1
- package/dist/generated/policy.d.ts +17 -39
- package/dist/generated/policy.d.ts.map +1 -1
- package/dist/generated/policy.js +25 -47
- package/dist/generated/policy.js.map +1 -1
- package/dist/generated/schemas.d.ts +10 -10
- package/dist/generated/schemas.js +11 -11
- package/dist/generated/schemas.js.map +1 -1
- package/dist/generated/types.d.ts +7 -7
- package/dist/generated/types.d.ts.map +1 -1
- package/package.json +4 -4
- package/schemas/2026A.json +2 -2
|
@@ -17,7 +17,7 @@ export const ArtifactAuditRequestSchema = z.object({
|
|
|
17
17
|
// ---------------------------------------------------------------------------
|
|
18
18
|
export const ArtifactAuditResultSchema = z.object({
|
|
19
19
|
summary: z.string(),
|
|
20
|
-
|
|
20
|
+
risk_level: z.enum(["none", "low", "medium", "high", "critical"]),
|
|
21
21
|
findings: z.array(z.object({
|
|
22
22
|
id: z.string(),
|
|
23
23
|
severity: z.enum(["critical", "error", "warning", "info"]),
|
|
@@ -34,15 +34,15 @@ export const ArtifactAuditResultSchema = z.object({
|
|
|
34
34
|
reasoning: z.string().optional(),
|
|
35
35
|
})).optional(),
|
|
36
36
|
})),
|
|
37
|
-
|
|
37
|
+
recommended_actions: z.array(z.object({
|
|
38
38
|
action: z.string(),
|
|
39
39
|
priority: z.enum(["high", "medium", "low"]),
|
|
40
40
|
description: z.string().optional(),
|
|
41
41
|
})),
|
|
42
42
|
metadata: z.object({
|
|
43
|
-
|
|
44
|
-
|
|
45
|
-
|
|
43
|
+
total_artifacts: z.number().optional(),
|
|
44
|
+
analyzed_artifacts: z.number().optional(),
|
|
45
|
+
analysis_scope: z.string().optional(),
|
|
46
46
|
}).optional(),
|
|
47
47
|
});
|
|
48
48
|
// ---------------------------------------------------------------------------
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"handoffs.js","sourceRoot":"","sources":["../../../src/generated/dsl/handoffs.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,8EAA8E;AAC9E,yBAAyB;AACzB,8EAA8E;AAE9E,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC;IACjD,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE;IAC1B,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE;CAChC,CAAC,CAAC;AAIH,8EAA8E;AAC9E,wBAAwB;AACxB,8EAA8E;AAE9E,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChD,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,
|
|
1
|
+
{"version":3,"file":"handoffs.js","sourceRoot":"","sources":["../../../src/generated/dsl/handoffs.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,8EAA8E;AAC9E,yBAAyB;AACzB,8EAA8E;AAE9E,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC;IACjD,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE;IAC1B,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE;CAChC,CAAC,CAAC;AAIH,8EAA8E;AAC9E,wBAAwB;AACxB,8EAA8E;AAE9E,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChD,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,UAAU,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC;IACjE,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;QAC3B,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;QACd,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;QAC1D,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;QACpB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;QACjB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;QACvB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC7B,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QACrC,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;YAC3B,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;YAC5D,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;YAC7B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;YAC/B,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;YAC9B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;SACjC,CAAC,CAAC,CAAC,QAAQ,EAAE;KACb,CAAC,CAAC;IACD,mBAAmB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;QACtC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;QAClB,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;QAC3C,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KACnC,CAAC,CAAC;IACD,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC;QACnB,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QACtC,kBAAkB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QACzC,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KACtC,CAAC,CAAC,QAAQ,EAAE;CACZ,CAAC,CAAC;AAIH,8EAA8E;AAC9E,kBAAkB;AAClB,8EAA8E;AAE9E,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,wBAAwB,EAAE,0BAA0B;IACpD,uBAAuB,EAAE,yBAAyB;CAC1C,CAAC;AAcX,8EAA8E;AAC9E,qEAAqE;AACrE,8EAA8E;AAE9E,MAAM,CAAC,MAAM,QAAQ,GAAG;IACtB,oBAAoB,CAAC,OAA6B;QAChD,OAAO;YACL,IAAI,EAAE,wBAAiC;YACvC,OAAO,EAAE,CAAC;YACV,OAAO,EAAE,0BAA0B,CAAC,KAAK,CAAC,OAAO,CAAC;SACnD,CAAC;IACJ,CAAC;IACD,mBAAmB,CAAC,OAA4B;QAC9C,OAAO;YACL,IAAI,EAAE,uBAAgC;YACtC,OAAO,EAAE,CAAC;YACV,OAAO,EAAE,yBAAyB,CAAC,KAAK,CAAC,OAAO,CAAC;SAClD,CAAC;IACJ,CAAC;CACO,CAAC"}
|
|
@@ -6,8 +6,8 @@ interface EffectWrite {
|
|
|
6
6
|
overwrite?: boolean;
|
|
7
7
|
destructive?: boolean;
|
|
8
8
|
idempotent?: boolean;
|
|
9
|
-
|
|
10
|
-
|
|
9
|
+
idempotency_key?: string;
|
|
10
|
+
idempotent_note?: string;
|
|
11
11
|
}
|
|
12
12
|
interface EffectRead {
|
|
13
13
|
target: string;
|
|
@@ -17,16 +17,16 @@ interface NetworkEffect {
|
|
|
17
17
|
description?: string;
|
|
18
18
|
domains?: string[];
|
|
19
19
|
idempotent?: boolean;
|
|
20
|
-
|
|
21
|
-
|
|
20
|
+
idempotency_key?: string;
|
|
21
|
+
idempotent_note?: string;
|
|
22
22
|
}
|
|
23
23
|
interface Effects {
|
|
24
|
-
|
|
24
|
+
risk_level?: RiskLevel;
|
|
25
25
|
reads?: EffectRead[];
|
|
26
26
|
writes?: EffectWrite[];
|
|
27
27
|
network?: NetworkEffect | boolean;
|
|
28
|
-
|
|
29
|
-
|
|
28
|
+
execution_mode?: ExecutionMode;
|
|
29
|
+
requires_confirmation?: boolean;
|
|
30
30
|
}
|
|
31
31
|
interface FileContract {
|
|
32
32
|
mode: "read" | "write" | "append" | "readWrite";
|
|
@@ -68,32 +68,32 @@ export type DerivedWriteEffect = {
|
|
|
68
68
|
overwrite?: boolean;
|
|
69
69
|
destructive?: boolean;
|
|
70
70
|
idempotent?: boolean;
|
|
71
|
-
|
|
72
|
-
|
|
71
|
+
idempotency_key?: string;
|
|
72
|
+
idempotent_note?: string;
|
|
73
73
|
source: string;
|
|
74
74
|
};
|
|
75
75
|
export interface DerivedNetworkEffect {
|
|
76
76
|
description?: string;
|
|
77
77
|
domains?: string[];
|
|
78
78
|
idempotent?: boolean;
|
|
79
|
-
|
|
80
|
-
|
|
79
|
+
idempotency_key?: string;
|
|
80
|
+
idempotent_note?: string;
|
|
81
81
|
source: string;
|
|
82
82
|
}
|
|
83
83
|
export interface DerivedPolicy {
|
|
84
|
-
|
|
85
|
-
|
|
84
|
+
risk_level: RiskLevel;
|
|
85
|
+
requires_confirmation: boolean;
|
|
86
86
|
idempotent: boolean;
|
|
87
|
-
|
|
87
|
+
side_effects: string[];
|
|
88
88
|
reads: DerivedReadEffect[];
|
|
89
89
|
writes: DerivedWriteEffect[];
|
|
90
90
|
network?: DerivedNetworkEffect[];
|
|
91
|
-
|
|
92
|
-
|
|
91
|
+
execution_mode?: ExecutionMode;
|
|
92
|
+
requires_secrets?: string[];
|
|
93
93
|
}
|
|
94
94
|
export interface IntrospectionResult {
|
|
95
95
|
command: string;
|
|
96
|
-
|
|
96
|
+
active_options: string[];
|
|
97
97
|
policy: DerivedPolicy;
|
|
98
98
|
}
|
|
99
99
|
export interface OptionInput {
|
|
@@ -101,8 +101,8 @@ export interface OptionInput {
|
|
|
101
101
|
specified: boolean;
|
|
102
102
|
}
|
|
103
103
|
export interface PolicyDerivationInput {
|
|
104
|
-
|
|
105
|
-
|
|
104
|
+
command_id: string;
|
|
105
|
+
command_effects?: Effects;
|
|
106
106
|
options: Record<string, OptionInput & {
|
|
107
107
|
definition: Option;
|
|
108
108
|
}>;
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"policy-runtime.d.ts","sourceRoot":"","sources":["../../src/generated/policy-runtime.ts"],"names":[],"mappings":"AAKA,MAAM,MAAM,SAAS,GAAG,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,UAAU,CAAC;AAC/D,MAAM,MAAM,aAAa,GAAG,QAAQ,GAAG,cAAc,GAAG,OAAO,GAAG,aAAa,GAAG,YAAY,CAAC;AAE/F,UAAU,WAAW;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,
|
|
1
|
+
{"version":3,"file":"policy-runtime.d.ts","sourceRoot":"","sources":["../../src/generated/policy-runtime.ts"],"names":[],"mappings":"AAKA,MAAM,MAAM,SAAS,GAAG,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,UAAU,CAAC;AAC/D,MAAM,MAAM,aAAa,GAAG,QAAQ,GAAG,cAAc,GAAG,OAAO,GAAG,aAAa,GAAG,YAAY,CAAC;AAE/F,UAAU,WAAW;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,UAAU,UAAU;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,UAAU,aAAa;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,UAAU,OAAO;IACf,UAAU,CAAC,EAAE,SAAS,CAAC;IACvB,KAAK,CAAC,EAAE,UAAU,EAAE,CAAC;IACrB,MAAM,CAAC,EAAE,WAAW,EAAE,CAAC;IACvB,OAAO,CAAC,EAAE,aAAa,GAAG,OAAO,CAAC;IAClC,cAAc,CAAC,EAAE,aAAa,CAAC;IAC/B,qBAAqB,CAAC,EAAE,OAAO,CAAC;CACjC;AAED,UAAU,YAAY;IACpB,IAAI,EAAE,MAAM,GAAG,OAAO,GAAG,QAAQ,GAAG,WAAW,CAAC;CACjD;AAED,UAAU,MAAM;IACd,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;KAAE,CAAC;IACnD,IAAI,CAAC,EAAE,YAAY,CAAC;IACpB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB;AAED,UAAU,MAAM;IACd,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB;AAID,MAAM,MAAM,iBAAiB,GACzB;IAAE,IAAI,EAAE,aAAa,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACtE;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAE/E,MAAM,MAAM,kBAAkB,GAC1B;IACE,IAAI,EAAE,aAAa,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;CAChB,GACD;IACE,IAAI,EAAE,UAAU,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC;AAEN,MAAM,WAAW,oBAAoB;IACnC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,aAAa;IAC5B,UAAU,EAAE,SAAS,CAAC;IACtB,qBAAqB,EAAE,OAAO,CAAC;IAC/B,UAAU,EAAE,OAAO,CAAC;IACpB,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,KAAK,EAAE,iBAAiB,EAAE,CAAC;IAC3B,MAAM,EAAE,kBAAkB,EAAE,CAAC;IAC7B,OAAO,CAAC,EAAE,oBAAoB,EAAE,CAAC;IACjC,cAAc,CAAC,EAAE,aAAa,CAAC;IAC/B,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;CAC7B;AAED,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,MAAM,CAAC;IAChB,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,MAAM,EAAE,aAAa,CAAC;CACvB;AAED,MAAM,WAAW,WAAW;IAC1B,KAAK,EAAE,OAAO,CAAC;IACf,SAAS,EAAE,OAAO,CAAC;CACpB;AAED,MAAM,WAAW,qBAAqB;IACpC,UAAU,EAAE,MAAM,CAAC;IACnB,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,OAAO,EAAE,MAAM,CACb,MAAM,EACN,WAAW,GAAG;QAAE,UAAU,EAAE,MAAM,CAAA;KAAE,CACrC,CAAC;IACF,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC9B;AAuBD,wBAAgB,cAAc,CAC5B,UAAU,EAAE,MAAM,EAClB,KAAK,EAAE,OAAO,EACd,SAAS,EAAE,OAAO,GACjB,OAAO,CAYT;AAID,wBAAgB,YAAY,CAAC,KAAK,EAAE,qBAAqB,GAAG,aAAa,CA0LxE"}
|
|
@@ -36,9 +36,9 @@ export function derivePolicy(input) {
|
|
|
36
36
|
const riskLevels = [];
|
|
37
37
|
let executionMode;
|
|
38
38
|
let explicitConfirmation;
|
|
39
|
-
if (input.
|
|
40
|
-
const ce = input.
|
|
41
|
-
riskLevels.push(ce.
|
|
39
|
+
if (input.command_effects) {
|
|
40
|
+
const ce = input.command_effects;
|
|
41
|
+
riskLevels.push(ce.risk_level ?? "low");
|
|
42
42
|
if (ce.writes) {
|
|
43
43
|
sideEffects.add("file_write");
|
|
44
44
|
for (const w of ce.writes) {
|
|
@@ -49,9 +49,9 @@ export function derivePolicy(input) {
|
|
|
49
49
|
overwrite: w.overwrite,
|
|
50
50
|
destructive: w.destructive,
|
|
51
51
|
...(w.idempotent !== undefined ? { idempotent: w.idempotent } : {}),
|
|
52
|
-
...(w.
|
|
53
|
-
...(w.
|
|
54
|
-
source: `command:${input.
|
|
52
|
+
...(w.idempotency_key ? { idempotency_key: w.idempotency_key } : {}),
|
|
53
|
+
...(w.idempotent_note ? { idempotent_note: w.idempotent_note } : {}),
|
|
54
|
+
source: `command:${input.command_id}`,
|
|
55
55
|
});
|
|
56
56
|
}
|
|
57
57
|
}
|
|
@@ -61,7 +61,7 @@ export function derivePolicy(input) {
|
|
|
61
61
|
kind: "semantic",
|
|
62
62
|
target: r.target,
|
|
63
63
|
description: r.description,
|
|
64
|
-
source: `command:${input.
|
|
64
|
+
source: `command:${input.command_id}`,
|
|
65
65
|
});
|
|
66
66
|
}
|
|
67
67
|
}
|
|
@@ -72,17 +72,17 @@ export function derivePolicy(input) {
|
|
|
72
72
|
...(ce.network.description ? { description: ce.network.description } : {}),
|
|
73
73
|
...(ce.network.domains ? { domains: ce.network.domains } : {}),
|
|
74
74
|
...(ce.network.idempotent !== undefined ? { idempotent: ce.network.idempotent } : {}),
|
|
75
|
-
...(ce.network.
|
|
76
|
-
...(ce.network.
|
|
77
|
-
source: `command:${input.
|
|
75
|
+
...(ce.network.idempotency_key ? { idempotency_key: ce.network.idempotency_key } : {}),
|
|
76
|
+
...(ce.network.idempotent_note ? { idempotent_note: ce.network.idempotent_note } : {}),
|
|
77
|
+
source: `command:${input.command_id}`,
|
|
78
78
|
});
|
|
79
79
|
}
|
|
80
80
|
}
|
|
81
|
-
if (ce.
|
|
82
|
-
executionMode = ce.
|
|
81
|
+
if (ce.execution_mode) {
|
|
82
|
+
executionMode = ce.execution_mode;
|
|
83
83
|
}
|
|
84
|
-
if (ce.
|
|
85
|
-
explicitConfirmation = ce.
|
|
84
|
+
if (ce.requires_confirmation !== undefined) {
|
|
85
|
+
explicitConfirmation = ce.requires_confirmation;
|
|
86
86
|
}
|
|
87
87
|
}
|
|
88
88
|
for (const [optName, optInput] of Object.entries(input.options)) {
|
|
@@ -114,7 +114,7 @@ export function derivePolicy(input) {
|
|
|
114
114
|
}
|
|
115
115
|
if (definition.effects) {
|
|
116
116
|
const eff = definition.effects;
|
|
117
|
-
riskLevels.push(eff.
|
|
117
|
+
riskLevels.push(eff.risk_level ?? "low");
|
|
118
118
|
if (eff.writes) {
|
|
119
119
|
sideEffects.add("file_write");
|
|
120
120
|
for (const w of eff.writes) {
|
|
@@ -125,8 +125,8 @@ export function derivePolicy(input) {
|
|
|
125
125
|
overwrite: w.overwrite,
|
|
126
126
|
destructive: w.destructive,
|
|
127
127
|
...(w.idempotent !== undefined ? { idempotent: w.idempotent } : {}),
|
|
128
|
-
...(w.
|
|
129
|
-
...(w.
|
|
128
|
+
...(w.idempotency_key ? { idempotency_key: w.idempotency_key } : {}),
|
|
129
|
+
...(w.idempotent_note ? { idempotent_note: w.idempotent_note } : {}),
|
|
130
130
|
source: `option:${optName}`,
|
|
131
131
|
});
|
|
132
132
|
}
|
|
@@ -148,17 +148,17 @@ export function derivePolicy(input) {
|
|
|
148
148
|
...(eff.network.description ? { description: eff.network.description } : {}),
|
|
149
149
|
...(eff.network.domains ? { domains: eff.network.domains } : {}),
|
|
150
150
|
...(eff.network.idempotent !== undefined ? { idempotent: eff.network.idempotent } : {}),
|
|
151
|
-
...(eff.network.
|
|
152
|
-
...(eff.network.
|
|
151
|
+
...(eff.network.idempotency_key ? { idempotency_key: eff.network.idempotency_key } : {}),
|
|
152
|
+
...(eff.network.idempotent_note ? { idempotent_note: eff.network.idempotent_note } : {}),
|
|
153
153
|
source: `option:${optName}`,
|
|
154
154
|
});
|
|
155
155
|
}
|
|
156
156
|
}
|
|
157
|
-
if (eff.
|
|
158
|
-
executionMode = eff.
|
|
157
|
+
if (eff.execution_mode && !executionMode) {
|
|
158
|
+
executionMode = eff.execution_mode;
|
|
159
159
|
}
|
|
160
|
-
if (eff.
|
|
161
|
-
explicitConfirmation = eff.
|
|
160
|
+
if (eff.requires_confirmation !== undefined && explicitConfirmation === undefined) {
|
|
161
|
+
explicitConfirmation = eff.requires_confirmation;
|
|
162
162
|
}
|
|
163
163
|
}
|
|
164
164
|
}
|
|
@@ -181,15 +181,15 @@ export function derivePolicy(input) {
|
|
|
181
181
|
const idempotent = semanticWrites.every((w) => w.idempotent === true) &&
|
|
182
182
|
networkEffects.every((n) => n.idempotent === true);
|
|
183
183
|
return {
|
|
184
|
-
|
|
185
|
-
requiresConfirmation,
|
|
184
|
+
risk_level: finalRiskLevel,
|
|
185
|
+
requires_confirmation: requiresConfirmation,
|
|
186
186
|
idempotent,
|
|
187
|
-
|
|
187
|
+
side_effects: [...sideEffects],
|
|
188
188
|
reads,
|
|
189
189
|
writes,
|
|
190
190
|
...(networkEffects.length > 0 ? { network: networkEffects } : {}),
|
|
191
|
-
...(executionMode ? { executionMode } : {}),
|
|
192
|
-
...(requiresSecrets ? { requiresSecrets } : {}),
|
|
191
|
+
...(executionMode ? { execution_mode: executionMode } : {}),
|
|
192
|
+
...(requiresSecrets ? { requires_secrets: requiresSecrets } : {}),
|
|
193
193
|
};
|
|
194
194
|
}
|
|
195
195
|
//# sourceMappingURL=policy-runtime.js.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"policy-runtime.js","sourceRoot":"","sources":["../../src/generated/policy-runtime.ts"],"names":[],"mappings":"AAAA,+DAA+D;AAC/D,yEAAyE;AA2HzE,mEAAmE;AAEnE,MAAM,UAAU,GAA8B;IAC5C,GAAG,EAAE,CAAC;IACN,MAAM,EAAE,CAAC;IACT,IAAI,EAAE,CAAC;IACP,QAAQ,EAAE,CAAC;CACZ,CAAC;AAEF,SAAS,YAAY,CAAC,GAAG,MAAmB;IAC1C,IAAI,GAAG,GAAc,KAAK,CAAC;IAC3B,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,UAAU,CAAC,KAAK,CAAC,GAAG,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACxC,GAAG,GAAG,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,mEAAmE;AAEnE,MAAM,UAAU,cAAc,CAC5B,UAAkB,EAClB,KAAc,EACd,SAAkB;IAElB,MAAM,UAAU,GAAG,UAAU,CAAC,MAAM,EAAE,IAAI,CAAC;IAE3C,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;QAC7B,OAAO,KAAK,KAAK,IAAI,CAAC;IACxB,CAAC;IAED,IAAI,UAAU,CAAC,UAAU,EAAE,CAAC;QAC1B,OAAO,SAAS,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;IAC/D,CAAC;IAED,OAAO,SAAS,IAAI,KAAK,IAAI,IAAI,CAAC;AACpC,CAAC;AAED,kEAAkE;AAElE,MAAM,UAAU,YAAY,CAAC,KAA4B;IACvD,MAAM,WAAW,GAAG,IAAI,GAAG,EAAU,CAAC;IACtC,MAAM,KAAK,GAAwB,EAAE,CAAC;IACtC,MAAM,MAAM,GAAyB,EAAE,CAAC;IACxC,MAAM,cAAc,GAA2B,EAAE,CAAC;IAClD,MAAM,UAAU,GAAgB,EAAE,CAAC;IACnC,IAAI,aAAwC,CAAC;IAC7C,IAAI,oBAAyC,CAAC;IAE9C,IAAI,KAAK,CAAC,
|
|
1
|
+
{"version":3,"file":"policy-runtime.js","sourceRoot":"","sources":["../../src/generated/policy-runtime.ts"],"names":[],"mappings":"AAAA,+DAA+D;AAC/D,yEAAyE;AA2HzE,mEAAmE;AAEnE,MAAM,UAAU,GAA8B;IAC5C,GAAG,EAAE,CAAC;IACN,MAAM,EAAE,CAAC;IACT,IAAI,EAAE,CAAC;IACP,QAAQ,EAAE,CAAC;CACZ,CAAC;AAEF,SAAS,YAAY,CAAC,GAAG,MAAmB;IAC1C,IAAI,GAAG,GAAc,KAAK,CAAC;IAC3B,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,UAAU,CAAC,KAAK,CAAC,GAAG,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACxC,GAAG,GAAG,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,mEAAmE;AAEnE,MAAM,UAAU,cAAc,CAC5B,UAAkB,EAClB,KAAc,EACd,SAAkB;IAElB,MAAM,UAAU,GAAG,UAAU,CAAC,MAAM,EAAE,IAAI,CAAC;IAE3C,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;QAC7B,OAAO,KAAK,KAAK,IAAI,CAAC;IACxB,CAAC;IAED,IAAI,UAAU,CAAC,UAAU,EAAE,CAAC;QAC1B,OAAO,SAAS,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;IAC/D,CAAC;IAED,OAAO,SAAS,IAAI,KAAK,IAAI,IAAI,CAAC;AACpC,CAAC;AAED,kEAAkE;AAElE,MAAM,UAAU,YAAY,CAAC,KAA4B;IACvD,MAAM,WAAW,GAAG,IAAI,GAAG,EAAU,CAAC;IACtC,MAAM,KAAK,GAAwB,EAAE,CAAC;IACtC,MAAM,MAAM,GAAyB,EAAE,CAAC;IACxC,MAAM,cAAc,GAA2B,EAAE,CAAC;IAClD,MAAM,UAAU,GAAgB,EAAE,CAAC;IACnC,IAAI,aAAwC,CAAC;IAC7C,IAAI,oBAAyC,CAAC;IAE9C,IAAI,KAAK,CAAC,eAAe,EAAE,CAAC;QAC1B,MAAM,EAAE,GAAG,KAAK,CAAC,eAAe,CAAC;QACjC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,UAAU,IAAI,KAAK,CAAC,CAAC;QAExC,IAAI,EAAE,CAAC,MAAM,EAAE,CAAC;YACd,WAAW,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;YAC9B,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,EAAE,CAAC;gBAC1B,MAAM,CAAC,IAAI,CAAC;oBACV,IAAI,EAAE,UAAU;oBAChB,MAAM,EAAE,CAAC,CAAC,MAAM;oBAChB,WAAW,EAAE,CAAC,CAAC,WAAW;oBAC1B,SAAS,EAAE,CAAC,CAAC,SAAS;oBACtB,WAAW,EAAE,CAAC,CAAC,WAAW;oBAC1B,GAAG,CAAC,CAAC,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACnE,GAAG,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,CAAC,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACpE,GAAG,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,CAAC,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACpE,MAAM,EAAE,WAAW,KAAK,CAAC,UAAU,EAAE;iBACtC,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,IAAI,EAAE,CAAC,KAAK,EAAE,CAAC;YACb,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,EAAE,CAAC;gBACzB,KAAK,CAAC,IAAI,CAAC;oBACT,IAAI,EAAE,UAAU;oBAChB,MAAM,EAAE,CAAC,CAAC,MAAM;oBAChB,WAAW,EAAE,CAAC,CAAC,WAAW;oBAC1B,MAAM,EAAE,WAAW,KAAK,CAAC,UAAU,EAAE;iBACtC,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,IAAI,EAAE,CAAC,OAAO,EAAE,CAAC;YACf,WAAW,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YAC3B,IAAI,OAAO,EAAE,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;gBACnC,cAAc,CAAC,IAAI,CAAC;oBAClB,GAAG,CAAC,EAAE,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,EAAE,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC1E,GAAG,CAAC,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC9D,GAAG,CAAC,EAAE,CAAC,OAAO,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,EAAE,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACrF,GAAG,CAAC,EAAE,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,EAAE,CAAC,OAAO,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACtF,GAAG,CAAC,EAAE,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,EAAE,CAAC,OAAO,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACtF,MAAM,EAAE,WAAW,KAAK,CAAC,UAAU,EAAE;iBACtC,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,IAAI,EAAE,CAAC,cAAc,EAAE,CAAC;YACtB,aAAa,GAAG,EAAE,CAAC,cAAc,CAAC;QACpC,CAAC;QAED,IAAI,EAAE,CAAC,qBAAqB,KAAK,SAAS,EAAE,CAAC;YAC3C,oBAAoB,GAAG,EAAE,CAAC,qBAAqB,CAAC;QAClD,CAAC;IACH,CAAC;IAED,KAAK,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QAChE,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,QAAQ,CAAC;QAClD,MAAM,MAAM,GAAG,cAAc,CAAC,UAAU,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC;QAC5D,IAAI,CAAC,MAAM;YAAE,SAAS;QAEtB,IAAI,UAAU,CAAC,IAAI,EAAE,CAAC;YACpB,MAAM,QAAQ,GACZ,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;YAChD,MAAM,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC;YAElC,IAAI,IAAI,KAAK,MAAM,IAAI,IAAI,KAAK,WAAW,EAAE,CAAC;gBAC5C,KAAK,CAAC,IAAI,CAAC;oBACT,IAAI,EAAE,aAAa;oBACnB,MAAM,EAAE,OAAO;oBACf,IAAI,EAAE,QAAQ;oBACd,MAAM,EAAE,UAAU,OAAO,EAAE;iBAC5B,CAAC,CAAC;YACL,CAAC;YACD,IAAI,IAAI,KAAK,OAAO,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,WAAW,EAAE,CAAC;gBAClE,WAAW,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;gBAC9B,MAAM,CAAC,IAAI,CAAC;oBACV,IAAI,EAAE,aAAa;oBACnB,MAAM,EAAE,OAAO;oBACf,IAAI,EAAE,QAAQ;oBACd,IAAI;oBACJ,MAAM,EAAE,UAAU,OAAO,EAAE;iBAC5B,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,IAAI,UAAU,CAAC,OAAO,EAAE,CAAC;YACvB,MAAM,GAAG,GAAG,UAAU,CAAC,OAAO,CAAC;YAC/B,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,IAAI,KAAK,CAAC,CAAC;YAEzC,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;gBACf,WAAW,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;gBAC9B,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;oBAC3B,MAAM,CAAC,IAAI,CAAC;wBACV,IAAI,EAAE,UAAU;wBAChB,MAAM,EAAE,CAAC,CAAC,MAAM;wBAChB,WAAW,EAAE,CAAC,CAAC,WAAW;wBAC1B,SAAS,EAAE,CAAC,CAAC,SAAS;wBACtB,WAAW,EAAE,CAAC,CAAC,WAAW;wBAC1B,GAAG,CAAC,CAAC,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;wBACnE,GAAG,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,CAAC,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;wBACpE,GAAG,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,CAAC,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;wBACpE,MAAM,EAAE,UAAU,OAAO,EAAE;qBAC5B,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YAED,IAAI,GAAG,CAAC,KAAK,EAAE,CAAC;gBACd,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,KAAK,EAAE,CAAC;oBAC1B,KAAK,CAAC,IAAI,CAAC;wBACT,IAAI,EAAE,UAAU;wBAChB,MAAM,EAAE,CAAC,CAAC,MAAM;wBAChB,WAAW,EAAE,CAAC,CAAC,WAAW;wBAC1B,MAAM,EAAE,UAAU,OAAO,EAAE;qBAC5B,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YAED,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;gBAChB,WAAW,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;gBAC3B,IAAI,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;oBACpC,cAAc,CAAC,IAAI,CAAC;wBAClB,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;wBAC5E,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;wBAChE,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,GAAG,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;wBACvF,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,GAAG,CAAC,OAAO,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;wBACxF,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,GAAG,CAAC,OAAO,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;wBACxF,MAAM,EAAE,UAAU,OAAO,EAAE;qBAC5B,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YAED,IAAI,GAAG,CAAC,cAAc,IAAI,CAAC,aAAa,EAAE,CAAC;gBACzC,aAAa,GAAG,GAAG,CAAC,cAAc,CAAC;YACrC,CAAC;YAED,IAAI,GAAG,CAAC,qBAAqB,KAAK,SAAS,IAAI,oBAAoB,KAAK,SAAS,EAAE,CAAC;gBAClF,oBAAoB,GAAG,GAAG,CAAC,qBAAqB,CAAC;YACnD,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,cAAc,GAClB,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;IAE9D,MAAM,oBAAoB,GACxB,oBAAoB;QACpB,CAAC,cAAc,KAAK,MAAM,IAAI,cAAc,KAAK,UAAU,CAAC,CAAC;IAE/D,IAAI,eAAqC,CAAC;IAC1C,IAAI,KAAK,CAAC,GAAG,EAAE,CAAC;QACd,MAAM,OAAO,GAAa,EAAE,CAAC;QAC7B,KAAK,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;YAC1D,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;gBACrB,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACxB,CAAC;QACH,CAAC;QACD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,eAAe,GAAG,OAAO,CAAC;QAC5B,CAAC;IACH,CAAC;IAED,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC;IACnE,MAAM,UAAU,GACd,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,IAAI,CAAC;QAClD,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,IAAI,CAAC,CAAC;IAErD,OAAO;QACL,UAAU,EAAE,cAAc;QAC1B,qBAAqB,EAAE,oBAAoB;QAC3C,UAAU;QACV,YAAY,EAAE,CAAC,GAAG,WAAW,CAAC;QAC9B,KAAK;QACL,MAAM;QACN,GAAG,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjE,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3D,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAClE,CAAC;AACJ,CAAC"}
|
|
@@ -3,15 +3,9 @@ export type { DerivedPolicy, IntrospectionResult };
|
|
|
3
3
|
export declare const commandDefinitions: {
|
|
4
4
|
readonly validate: {
|
|
5
5
|
readonly effects: {
|
|
6
|
-
readonly
|
|
7
|
-
readonly reads: readonly [
|
|
8
|
-
|
|
9
|
-
readonly description: "artifact-contracts.yaml and config";
|
|
10
|
-
}, {
|
|
11
|
-
readonly target: "repository-files";
|
|
12
|
-
readonly description: "All tracked files via git ls-files. Only read when --check-files is specified.";
|
|
13
|
-
}];
|
|
14
|
-
readonly executionMode: "normal";
|
|
6
|
+
readonly risk_level: "low";
|
|
7
|
+
readonly reads: readonly ["artifact-definitions", "repository-files"];
|
|
8
|
+
readonly execution_mode: "normal";
|
|
15
9
|
};
|
|
16
10
|
readonly options: readonly [{
|
|
17
11
|
readonly name: "config";
|
|
@@ -24,12 +18,9 @@ export declare const commandDefinitions: {
|
|
|
24
18
|
};
|
|
25
19
|
readonly resolve: {
|
|
26
20
|
readonly effects: {
|
|
27
|
-
readonly
|
|
28
|
-
readonly reads: readonly [
|
|
29
|
-
|
|
30
|
-
readonly description: "artifact-contracts.yaml and config";
|
|
31
|
-
}];
|
|
32
|
-
readonly executionMode: "normal";
|
|
21
|
+
readonly risk_level: "low";
|
|
22
|
+
readonly reads: readonly ["artifact-definitions"];
|
|
23
|
+
readonly execution_mode: "normal";
|
|
33
24
|
};
|
|
34
25
|
readonly options: readonly [{
|
|
35
26
|
readonly name: "config";
|
|
@@ -43,12 +34,9 @@ export declare const commandDefinitions: {
|
|
|
43
34
|
};
|
|
44
35
|
readonly list: {
|
|
45
36
|
readonly effects: {
|
|
46
|
-
readonly
|
|
47
|
-
readonly reads: readonly [
|
|
48
|
-
|
|
49
|
-
readonly description: "artifact-contracts.yaml and config";
|
|
50
|
-
}];
|
|
51
|
-
readonly executionMode: "normal";
|
|
37
|
+
readonly risk_level: "low";
|
|
38
|
+
readonly reads: readonly ["artifact-definitions"];
|
|
39
|
+
readonly execution_mode: "normal";
|
|
52
40
|
};
|
|
53
41
|
readonly options: readonly [{
|
|
54
42
|
readonly name: "config";
|
|
@@ -70,12 +58,9 @@ export declare const commandDefinitions: {
|
|
|
70
58
|
};
|
|
71
59
|
readonly explain: {
|
|
72
60
|
readonly effects: {
|
|
73
|
-
readonly
|
|
74
|
-
readonly reads: readonly [
|
|
75
|
-
|
|
76
|
-
readonly description: "artifact-contracts.yaml and config";
|
|
77
|
-
}];
|
|
78
|
-
readonly executionMode: "normal";
|
|
61
|
+
readonly risk_level: "low";
|
|
62
|
+
readonly reads: readonly ["artifact-definitions"];
|
|
63
|
+
readonly execution_mode: "normal";
|
|
79
64
|
};
|
|
80
65
|
readonly options: readonly [{
|
|
81
66
|
readonly name: "config";
|
|
@@ -89,21 +74,14 @@ export declare const commandDefinitions: {
|
|
|
89
74
|
};
|
|
90
75
|
readonly audit: {
|
|
91
76
|
readonly effects: {
|
|
92
|
-
readonly
|
|
93
|
-
readonly reads: readonly [
|
|
94
|
-
|
|
95
|
-
readonly description: "artifact-contracts.yaml and config";
|
|
96
|
-
}];
|
|
97
|
-
readonly writes: readonly [{
|
|
98
|
-
readonly target: "output-file";
|
|
99
|
-
readonly description: "Written only when --output is specified";
|
|
100
|
-
readonly overwrite: true;
|
|
101
|
-
}];
|
|
77
|
+
readonly risk_level: "medium";
|
|
78
|
+
readonly reads: readonly ["artifact-definitions"];
|
|
79
|
+
readonly writes: readonly ["audit-report"];
|
|
102
80
|
readonly network: {
|
|
103
81
|
readonly description: "LLM API calls to configured provider";
|
|
104
82
|
readonly idempotent: false;
|
|
105
83
|
};
|
|
106
|
-
readonly
|
|
84
|
+
readonly execution_mode: "normal";
|
|
107
85
|
};
|
|
108
86
|
readonly options: readonly [{
|
|
109
87
|
readonly name: "config";
|
|
@@ -142,5 +120,5 @@ export declare const commandDefinitions: {
|
|
|
142
120
|
}];
|
|
143
121
|
};
|
|
144
122
|
};
|
|
145
|
-
export declare function deriveCommandPolicy(
|
|
123
|
+
export declare function deriveCommandPolicy(command_id: string, optionValues: Record<string, unknown>): IntrospectionResult;
|
|
146
124
|
//# sourceMappingURL=policy.d.ts.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"policy.d.ts","sourceRoot":"","sources":["../../src/generated/policy.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,aAAa,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAE9E,YAAY,EAAE,aAAa,EAAE,mBAAmB,EAAE,CAAC;AAEnD,eAAO,MAAM,kBAAkB
|
|
1
|
+
{"version":3,"file":"policy.d.ts","sourceRoot":"","sources":["../../src/generated/policy.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,aAAa,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAE9E,YAAY,EAAE,aAAa,EAAE,mBAAmB,EAAE,CAAC;AAEnD,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA0LrB,CAAC;AAEX,wBAAgB,mBAAmB,CACjC,UAAU,EAAE,MAAM,EAClB,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GACpC,mBAAmB,CA0BrB"}
|
package/dist/generated/policy.js
CHANGED
|
@@ -3,18 +3,12 @@ import { derivePolicy, isOptionActive } from "./policy-runtime.js";
|
|
|
3
3
|
export const commandDefinitions = {
|
|
4
4
|
"validate": {
|
|
5
5
|
"effects": {
|
|
6
|
-
"
|
|
6
|
+
"risk_level": "low",
|
|
7
7
|
"reads": [
|
|
8
|
-
|
|
9
|
-
|
|
10
|
-
"description": "artifact-contracts.yaml and config"
|
|
11
|
-
},
|
|
12
|
-
{
|
|
13
|
-
"target": "repository-files",
|
|
14
|
-
"description": "All tracked files via git ls-files. Only read when --check-files is specified."
|
|
15
|
-
}
|
|
8
|
+
"artifact-definitions",
|
|
9
|
+
"repository-files"
|
|
16
10
|
],
|
|
17
|
-
"
|
|
11
|
+
"execution_mode": "normal"
|
|
18
12
|
},
|
|
19
13
|
"options": [
|
|
20
14
|
{
|
|
@@ -30,14 +24,11 @@ export const commandDefinitions = {
|
|
|
30
24
|
},
|
|
31
25
|
"resolve": {
|
|
32
26
|
"effects": {
|
|
33
|
-
"
|
|
27
|
+
"risk_level": "low",
|
|
34
28
|
"reads": [
|
|
35
|
-
|
|
36
|
-
"target": "artifact-definitions",
|
|
37
|
-
"description": "artifact-contracts.yaml and config"
|
|
38
|
-
}
|
|
29
|
+
"artifact-definitions"
|
|
39
30
|
],
|
|
40
|
-
"
|
|
31
|
+
"execution_mode": "normal"
|
|
41
32
|
},
|
|
42
33
|
"options": [
|
|
43
34
|
{
|
|
@@ -57,14 +48,11 @@ export const commandDefinitions = {
|
|
|
57
48
|
},
|
|
58
49
|
"list": {
|
|
59
50
|
"effects": {
|
|
60
|
-
"
|
|
51
|
+
"risk_level": "low",
|
|
61
52
|
"reads": [
|
|
62
|
-
|
|
63
|
-
"target": "artifact-definitions",
|
|
64
|
-
"description": "artifact-contracts.yaml and config"
|
|
65
|
-
}
|
|
53
|
+
"artifact-definitions"
|
|
66
54
|
],
|
|
67
|
-
"
|
|
55
|
+
"execution_mode": "normal"
|
|
68
56
|
},
|
|
69
57
|
"options": [
|
|
70
58
|
{
|
|
@@ -100,14 +88,11 @@ export const commandDefinitions = {
|
|
|
100
88
|
},
|
|
101
89
|
"explain": {
|
|
102
90
|
"effects": {
|
|
103
|
-
"
|
|
91
|
+
"risk_level": "low",
|
|
104
92
|
"reads": [
|
|
105
|
-
|
|
106
|
-
"target": "artifact-definitions",
|
|
107
|
-
"description": "artifact-contracts.yaml and config"
|
|
108
|
-
}
|
|
93
|
+
"artifact-definitions"
|
|
109
94
|
],
|
|
110
|
-
"
|
|
95
|
+
"execution_mode": "normal"
|
|
111
96
|
},
|
|
112
97
|
"options": [
|
|
113
98
|
{
|
|
@@ -128,25 +113,18 @@ export const commandDefinitions = {
|
|
|
128
113
|
},
|
|
129
114
|
"audit": {
|
|
130
115
|
"effects": {
|
|
131
|
-
"
|
|
116
|
+
"risk_level": "medium",
|
|
132
117
|
"reads": [
|
|
133
|
-
|
|
134
|
-
"target": "artifact-definitions",
|
|
135
|
-
"description": "artifact-contracts.yaml and config"
|
|
136
|
-
}
|
|
118
|
+
"artifact-definitions"
|
|
137
119
|
],
|
|
138
120
|
"writes": [
|
|
139
|
-
|
|
140
|
-
"target": "output-file",
|
|
141
|
-
"description": "Written only when --output is specified",
|
|
142
|
-
"overwrite": true
|
|
143
|
-
}
|
|
121
|
+
"audit-report"
|
|
144
122
|
],
|
|
145
123
|
"network": {
|
|
146
124
|
"description": "LLM API calls to configured provider",
|
|
147
125
|
"idempotent": false
|
|
148
126
|
},
|
|
149
|
-
"
|
|
127
|
+
"execution_mode": "normal"
|
|
150
128
|
},
|
|
151
129
|
"options": [
|
|
152
130
|
{
|
|
@@ -209,28 +187,28 @@ export const commandDefinitions = {
|
|
|
209
187
|
]
|
|
210
188
|
},
|
|
211
189
|
};
|
|
212
|
-
export function deriveCommandPolicy(
|
|
213
|
-
const def = commandDefinitions[
|
|
190
|
+
export function deriveCommandPolicy(command_id, optionValues) {
|
|
191
|
+
const def = commandDefinitions[command_id];
|
|
214
192
|
if (!def)
|
|
215
|
-
throw new Error(`Unknown command: ${
|
|
193
|
+
throw new Error(`Unknown command: ${command_id}`);
|
|
216
194
|
// eslint-disable-next-line @typescript-eslint/no-explicit-any
|
|
217
195
|
const cmdDef = def;
|
|
218
196
|
const options = {};
|
|
219
|
-
const
|
|
197
|
+
const active_options = [];
|
|
220
198
|
for (const optDef of cmdDef.options ?? []) {
|
|
221
199
|
const value = optionValues[optDef.name];
|
|
222
200
|
const specified = optDef.name in optionValues && value !== undefined;
|
|
223
201
|
options[optDef.name] = { value, specified, definition: optDef };
|
|
224
202
|
if (isOptionActive(optDef, value, specified)) {
|
|
225
|
-
|
|
203
|
+
active_options.push(optDef.name);
|
|
226
204
|
}
|
|
227
205
|
}
|
|
228
206
|
const policy = derivePolicy({
|
|
229
|
-
|
|
230
|
-
|
|
207
|
+
command_id,
|
|
208
|
+
command_effects: cmdDef.effects,
|
|
231
209
|
options,
|
|
232
210
|
env: cmdDef.env,
|
|
233
211
|
});
|
|
234
|
-
return { command:
|
|
212
|
+
return { command: command_id, active_options, policy };
|
|
235
213
|
}
|
|
236
214
|
//# sourceMappingURL=policy.js.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"policy.js","sourceRoot":"","sources":["../../src/generated/policy.ts"],"names":[],"mappings":"AAAA,gDAAgD;AAChD,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAKnE,MAAM,CAAC,MAAM,kBAAkB,GAAG;IAChC,UAAU,EAAE;QACV,SAAS,EAAE;YACT,
|
|
1
|
+
{"version":3,"file":"policy.js","sourceRoot":"","sources":["../../src/generated/policy.ts"],"names":[],"mappings":"AAAA,gDAAgD;AAChD,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAKnE,MAAM,CAAC,MAAM,kBAAkB,GAAG;IAChC,UAAU,EAAE;QACV,SAAS,EAAE;YACT,YAAY,EAAE,KAAK;YACnB,OAAO,EAAE;gBACP,sBAAsB;gBACtB,kBAAkB;aACnB;YACD,gBAAgB,EAAE,QAAQ;SAC3B;QACD,SAAS,EAAE;YACT;gBACE,MAAM,EAAE,QAAQ;aACjB;YACD;gBACE,MAAM,EAAE,aAAa;gBACrB,QAAQ,EAAE;oBACR,MAAM,EAAE,SAAS;iBAClB;aACF;SACF;KACF;IACD,SAAS,EAAE;QACT,SAAS,EAAE;YACT,YAAY,EAAE,KAAK;YACnB,OAAO,EAAE;gBACP,sBAAsB;aACvB;YACD,gBAAgB,EAAE,QAAQ;SAC3B;QACD,SAAS,EAAE;YACT;gBACE,MAAM,EAAE,QAAQ;aACjB;YACD;gBACE,MAAM,EAAE,QAAQ;gBAChB,QAAQ,EAAE;oBACR,MAAM,EAAE,QAAQ;oBAChB,MAAM,EAAE;wBACN,MAAM;wBACN,MAAM;qBACP;iBACF;aACF;SACF;KACF;IACD,MAAM,EAAE;QACN,SAAS,EAAE;YACT,YAAY,EAAE,KAAK;YACnB,OAAO,EAAE;gBACP,sBAAsB;aACvB;YACD,gBAAgB,EAAE,QAAQ;SAC3B;QACD,SAAS,EAAE;YACT;gBACE,MAAM,EAAE,QAAQ;aACjB;YACD;gBACE,MAAM,EAAE,WAAW;gBACnB,QAAQ,EAAE;oBACR,MAAM,EAAE,QAAQ;oBAChB,MAAM,EAAE;wBACN,WAAW;wBACX,SAAS;wBACT,WAAW;wBACX,SAAS;qBACV;iBACF;aACF;YACD;gBACE,MAAM,EAAE,MAAM;aACf;YACD;gBACE,MAAM,EAAE,QAAQ;gBAChB,QAAQ,EAAE;oBACR,MAAM,EAAE,QAAQ;oBAChB,MAAM,EAAE;wBACN,MAAM;wBACN,MAAM;wBACN,MAAM;qBACP;iBACF;aACF;SACF;KACF;IACD,SAAS,EAAE;QACT,SAAS,EAAE;YACT,YAAY,EAAE,KAAK;YACnB,OAAO,EAAE;gBACP,sBAAsB;aACvB;YACD,gBAAgB,EAAE,QAAQ;SAC3B;QACD,SAAS,EAAE;YACT;gBACE,MAAM,EAAE,QAAQ;aACjB;YACD;gBACE,MAAM,EAAE,QAAQ;gBAChB,QAAQ,EAAE;oBACR,MAAM,EAAE,QAAQ;oBAChB,MAAM,EAAE;wBACN,MAAM;wBACN,MAAM;wBACN,MAAM;qBACP;iBACF;aACF;SACF;KACF;IACD,OAAO,EAAE;QACP,SAAS,EAAE;YACT,YAAY,EAAE,QAAQ;YACtB,OAAO,EAAE;gBACP,sBAAsB;aACvB;YACD,QAAQ,EAAE;gBACR,cAAc;aACf;YACD,SAAS,EAAE;gBACT,aAAa,EAAE,sCAAsC;gBACrD,YAAY,EAAE,KAAK;aACpB;YACD,gBAAgB,EAAE,QAAQ;SAC3B;QACD,SAAS,EAAE;YACT;gBACE,MAAM,EAAE,QAAQ;aACjB;YACD;gBACE,MAAM,EAAE,SAAS;gBACjB,QAAQ,EAAE;oBACR,MAAM,EAAE,QAAQ;oBAChB,MAAM,EAAE;wBACN,MAAM;wBACN,QAAQ;wBACR,QAAQ;wBACR,QAAQ;wBACR,QAAQ;qBACT;iBACF;aACF;YACD;gBACE,MAAM,EAAE,OAAO;aAChB;YACD;gBACE,MAAM,EAAE,aAAa;gBACrB,QAAQ,EAAE;oBACR,MAAM,EAAE,SAAS;iBAClB;aACF;YACD;gBACE,MAAM,EAAE,SAAS;gBACjB,QAAQ,EAAE;oBACR,MAAM,EAAE,SAAS;iBAClB;aACF;YACD;gBACE,MAAM,EAAE,SAAS;gBACjB,QAAQ,EAAE;oBACR,MAAM,EAAE,QAAQ;oBAChB,MAAM,EAAE;wBACN,MAAM;wBACN,SAAS;wBACT,OAAO;wBACP,UAAU;qBACX;iBACF;aACF;YACD;gBACE,MAAM,EAAE,QAAQ;aACjB;YACD;gBACE,MAAM,EAAE,eAAe;gBACvB,QAAQ,EAAE;oBACR,MAAM,EAAE,QAAQ;oBAChB,MAAM,EAAE;wBACN,MAAM;wBACN,MAAM;wBACN,MAAM;qBACP;iBACF;aACF;SACF;KACF;CACO,CAAC;AAEX,MAAM,UAAU,mBAAmB,CACjC,UAAkB,EAClB,YAAqC;IAErC,MAAM,GAAG,GAAG,kBAAkB,CAAC,UAA6C,CAAC,CAAC;IAC9E,IAAI,CAAC,GAAG;QAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,UAAU,EAAE,CAAC,CAAC;IAE5D,8DAA8D;IAC9D,MAAM,MAAM,GAAG,GAAU,CAAC;IAC1B,MAAM,OAAO,GAA4E,EAAE,CAAC;IAC5F,MAAM,cAAc,GAAa,EAAE,CAAC;IAEpC,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,OAAO,IAAI,EAAE,EAAE,CAAC;QAC1C,MAAM,KAAK,GAAG,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACxC,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,IAAI,YAAY,IAAI,KAAK,KAAK,SAAS,CAAC;QACrE,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC;QAChE,IAAI,cAAc,CAAC,MAAM,EAAE,KAAK,EAAE,SAAS,CAAC,EAAE,CAAC;YAC7C,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACnC,CAAC;IACH,CAAC;IAED,MAAM,MAAM,GAAG,YAAY,CAAC;QAC1B,UAAU;QACV,eAAe,EAAE,MAAM,CAAC,OAAO;QAC/B,OAAO;QACP,GAAG,EAAE,MAAM,CAAC,GAAG;KAChB,CAAC,CAAC;IAEH,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,EAAE,CAAC;AACzD,CAAC"}
|