micro-contracts 0.15.0 → 0.15.2
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +62 -0
- package/cli-contract.yaml +622 -2
- package/dist/agents/context-builder.d.ts +5 -0
- package/dist/agents/context-builder.d.ts.map +1 -0
- package/dist/agents/context-builder.js +239 -0
- package/dist/agents/context-builder.js.map +1 -0
- package/dist/agents/formatter.d.ts +9 -0
- package/dist/agents/formatter.d.ts.map +1 -0
- package/dist/agents/formatter.js +124 -0
- package/dist/agents/formatter.js.map +1 -0
- package/dist/agents/index.d.ts +5 -0
- package/dist/agents/index.d.ts.map +1 -0
- package/dist/agents/index.js +3 -0
- package/dist/agents/index.js.map +1 -0
- package/dist/agents/orchestrator.d.ts +5 -0
- package/dist/agents/orchestrator.d.ts.map +1 -0
- package/dist/agents/orchestrator.js +105 -0
- package/dist/agents/orchestrator.js.map +1 -0
- package/dist/agents/types.d.ts +21 -0
- package/dist/agents/types.d.ts.map +1 -0
- package/dist/agents/types.js +2 -0
- package/dist/agents/types.js.map +1 -0
- package/dist/cli.d.ts +0 -6
- package/dist/cli.d.ts.map +1 -1
- package/dist/cli.js +814 -1161
- package/dist/cli.js.map +1 -1
- package/dist/commands/audit-guardrails.d.ts +13 -0
- package/dist/commands/audit-guardrails.d.ts.map +1 -0
- package/dist/commands/audit-guardrails.js +32 -0
- package/dist/commands/audit-guardrails.js.map +1 -0
- package/dist/commands/audit-openapi.d.ts +13 -0
- package/dist/commands/audit-openapi.d.ts.map +1 -0
- package/dist/commands/audit-openapi.js +32 -0
- package/dist/commands/audit-openapi.js.map +1 -0
- package/dist/commands/propose-overlays.d.ts +13 -0
- package/dist/commands/propose-overlays.d.ts.map +1 -0
- package/dist/commands/propose-overlays.js +32 -0
- package/dist/commands/propose-overlays.js.map +1 -0
- package/dist/commands/review-published.d.ts +13 -0
- package/dist/commands/review-published.d.ts.map +1 -0
- package/dist/commands/review-published.js +32 -0
- package/dist/commands/review-published.js.map +1 -0
- package/dist/generated/commands.d.ts +2 -0
- package/dist/generated/commands.d.ts.map +1 -0
- package/dist/generated/commands.js +2 -0
- package/dist/generated/commands.js.map +1 -0
- package/dist/generated/dsl/agents.d.ts +34 -0
- package/dist/generated/dsl/agents.d.ts.map +1 -0
- package/dist/generated/dsl/agents.js +98 -0
- package/dist/generated/dsl/agents.js.map +1 -0
- package/dist/generated/dsl/handoffs.d.ts +1209 -0
- package/dist/generated/dsl/handoffs.d.ts.map +1 -0
- package/dist/generated/dsl/handoffs.js +205 -0
- package/dist/generated/dsl/handoffs.js.map +1 -0
- package/dist/generated/dsl/index.d.ts +13 -0
- package/dist/generated/dsl/index.d.ts.map +1 -0
- package/dist/generated/dsl/index.js +10 -0
- package/dist/generated/dsl/index.js.map +1 -0
- package/dist/generated/dsl/tasks.d.ts +26 -0
- package/dist/generated/dsl/tasks.d.ts.map +1 -0
- package/dist/generated/dsl/tasks.js +133 -0
- package/dist/generated/dsl/tasks.js.map +1 -0
- package/dist/generated/dsl/workflows.d.ts +34 -0
- package/dist/generated/dsl/workflows.d.ts.map +1 -0
- package/dist/generated/dsl/workflows.js +84 -0
- package/dist/generated/dsl/workflows.js.map +1 -0
- package/dist/generated/index.d.ts +7 -0
- package/dist/generated/index.d.ts.map +1 -0
- package/dist/generated/index.js +7 -0
- package/dist/generated/index.js.map +1 -0
- package/dist/generated/policy-runtime.d.ts +114 -0
- package/dist/generated/policy-runtime.d.ts.map +1 -0
- package/dist/generated/policy-runtime.js +195 -0
- package/dist/generated/policy-runtime.js.map +1 -0
- package/dist/generated/policy.d.ts +619 -0
- package/dist/generated/policy.d.ts.map +1 -0
- package/dist/generated/policy.js +802 -0
- package/dist/generated/policy.js.map +1 -0
- package/dist/generated/program.d.ts +112 -0
- package/dist/generated/program.d.ts.map +1 -0
- package/dist/generated/program.js +266 -0
- package/dist/generated/program.js.map +1 -0
- package/dist/generated/schemas.d.ts +778 -0
- package/dist/generated/schemas.d.ts.map +1 -0
- package/dist/generated/schemas.js +1005 -0
- package/dist/generated/schemas.js.map +1 -0
- package/dist/generated/types.d.ts +395 -0
- package/dist/generated/types.d.ts.map +1 -0
- package/dist/generated/types.js +3 -0
- package/dist/generated/types.js.map +1 -0
- package/docs/cli-reference.md +300 -0
- package/package.json +24 -6
|
@@ -0,0 +1,114 @@
|
|
|
1
|
+
export type RiskLevel = "low" | "medium" | "high" | "critical";
|
|
2
|
+
export type ExecutionMode = "normal" | "long-running" | "watch" | "interactive" | "background";
|
|
3
|
+
interface EffectWrite {
|
|
4
|
+
target: string;
|
|
5
|
+
description?: string;
|
|
6
|
+
overwrite?: boolean;
|
|
7
|
+
destructive?: boolean;
|
|
8
|
+
idempotent?: boolean;
|
|
9
|
+
idempotency_key?: string;
|
|
10
|
+
idempotent_note?: string;
|
|
11
|
+
}
|
|
12
|
+
interface EffectRead {
|
|
13
|
+
target: string;
|
|
14
|
+
description?: string;
|
|
15
|
+
}
|
|
16
|
+
interface NetworkEffect {
|
|
17
|
+
description?: string;
|
|
18
|
+
domains?: string[];
|
|
19
|
+
idempotent?: boolean;
|
|
20
|
+
idempotency_key?: string;
|
|
21
|
+
idempotent_note?: string;
|
|
22
|
+
}
|
|
23
|
+
interface Effects {
|
|
24
|
+
risk_level?: RiskLevel;
|
|
25
|
+
reads?: EffectRead[];
|
|
26
|
+
writes?: EffectWrite[];
|
|
27
|
+
network?: NetworkEffect | boolean;
|
|
28
|
+
execution_mode?: ExecutionMode;
|
|
29
|
+
requires_confirmation?: boolean;
|
|
30
|
+
}
|
|
31
|
+
interface FileContract {
|
|
32
|
+
mode: "read" | "write" | "append" | "readWrite";
|
|
33
|
+
}
|
|
34
|
+
interface Option {
|
|
35
|
+
name: string;
|
|
36
|
+
schema?: {
|
|
37
|
+
type?: string;
|
|
38
|
+
[key: string]: unknown;
|
|
39
|
+
};
|
|
40
|
+
file?: FileContract;
|
|
41
|
+
effects?: Effects;
|
|
42
|
+
repeatable?: boolean;
|
|
43
|
+
}
|
|
44
|
+
interface EnvVar {
|
|
45
|
+
sensitive?: boolean;
|
|
46
|
+
}
|
|
47
|
+
export type DerivedReadEffect = {
|
|
48
|
+
kind: "option-file";
|
|
49
|
+
option: string;
|
|
50
|
+
path?: string;
|
|
51
|
+
source: string;
|
|
52
|
+
} | {
|
|
53
|
+
kind: "semantic";
|
|
54
|
+
target: string;
|
|
55
|
+
description?: string;
|
|
56
|
+
source: string;
|
|
57
|
+
};
|
|
58
|
+
export type DerivedWriteEffect = {
|
|
59
|
+
kind: "option-file";
|
|
60
|
+
option: string;
|
|
61
|
+
path?: string;
|
|
62
|
+
mode: string;
|
|
63
|
+
source: string;
|
|
64
|
+
} | {
|
|
65
|
+
kind: "semantic";
|
|
66
|
+
target: string;
|
|
67
|
+
description?: string;
|
|
68
|
+
overwrite?: boolean;
|
|
69
|
+
destructive?: boolean;
|
|
70
|
+
idempotent?: boolean;
|
|
71
|
+
idempotency_key?: string;
|
|
72
|
+
idempotent_note?: string;
|
|
73
|
+
source: string;
|
|
74
|
+
};
|
|
75
|
+
export interface DerivedNetworkEffect {
|
|
76
|
+
description?: string;
|
|
77
|
+
domains?: string[];
|
|
78
|
+
idempotent?: boolean;
|
|
79
|
+
idempotency_key?: string;
|
|
80
|
+
idempotent_note?: string;
|
|
81
|
+
source: string;
|
|
82
|
+
}
|
|
83
|
+
export interface DerivedPolicy {
|
|
84
|
+
risk_level: RiskLevel;
|
|
85
|
+
requires_confirmation: boolean;
|
|
86
|
+
idempotent: boolean;
|
|
87
|
+
side_effects: string[];
|
|
88
|
+
reads: DerivedReadEffect[];
|
|
89
|
+
writes: DerivedWriteEffect[];
|
|
90
|
+
network?: DerivedNetworkEffect[];
|
|
91
|
+
execution_mode?: ExecutionMode;
|
|
92
|
+
requires_secrets?: string[];
|
|
93
|
+
}
|
|
94
|
+
export interface IntrospectionResult {
|
|
95
|
+
command: string;
|
|
96
|
+
active_options: string[];
|
|
97
|
+
policy: DerivedPolicy;
|
|
98
|
+
}
|
|
99
|
+
export interface OptionInput {
|
|
100
|
+
value: unknown;
|
|
101
|
+
specified: boolean;
|
|
102
|
+
}
|
|
103
|
+
export interface PolicyDerivationInput {
|
|
104
|
+
command_id: string;
|
|
105
|
+
command_effects?: Effects;
|
|
106
|
+
options: Record<string, OptionInput & {
|
|
107
|
+
definition: Option;
|
|
108
|
+
}>;
|
|
109
|
+
env?: Record<string, EnvVar>;
|
|
110
|
+
}
|
|
111
|
+
export declare function isOptionActive(definition: Option, value: unknown, specified: boolean): boolean;
|
|
112
|
+
export declare function derivePolicy(input: PolicyDerivationInput): DerivedPolicy;
|
|
113
|
+
export {};
|
|
114
|
+
//# sourceMappingURL=policy-runtime.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"policy-runtime.d.ts","sourceRoot":"","sources":["../../src/generated/policy-runtime.ts"],"names":[],"mappings":"AAKA,MAAM,MAAM,SAAS,GAAG,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,UAAU,CAAC;AAC/D,MAAM,MAAM,aAAa,GAAG,QAAQ,GAAG,cAAc,GAAG,OAAO,GAAG,aAAa,GAAG,YAAY,CAAC;AAE/F,UAAU,WAAW;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,UAAU,UAAU;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,UAAU,aAAa;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,UAAU,OAAO;IACf,UAAU,CAAC,EAAE,SAAS,CAAC;IACvB,KAAK,CAAC,EAAE,UAAU,EAAE,CAAC;IACrB,MAAM,CAAC,EAAE,WAAW,EAAE,CAAC;IACvB,OAAO,CAAC,EAAE,aAAa,GAAG,OAAO,CAAC;IAClC,cAAc,CAAC,EAAE,aAAa,CAAC;IAC/B,qBAAqB,CAAC,EAAE,OAAO,CAAC;CACjC;AAED,UAAU,YAAY;IACpB,IAAI,EAAE,MAAM,GAAG,OAAO,GAAG,QAAQ,GAAG,WAAW,CAAC;CACjD;AAED,UAAU,MAAM;IACd,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;KAAE,CAAC;IACnD,IAAI,CAAC,EAAE,YAAY,CAAC;IACpB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB;AAED,UAAU,MAAM;IACd,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB;AAID,MAAM,MAAM,iBAAiB,GACzB;IAAE,IAAI,EAAE,aAAa,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACtE;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAE/E,MAAM,MAAM,kBAAkB,GAC1B;IACE,IAAI,EAAE,aAAa,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;CAChB,GACD;IACE,IAAI,EAAE,UAAU,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC;AAEN,MAAM,WAAW,oBAAoB;IACnC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,aAAa;IAC5B,UAAU,EAAE,SAAS,CAAC;IACtB,qBAAqB,EAAE,OAAO,CAAC;IAC/B,UAAU,EAAE,OAAO,CAAC;IACpB,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,KAAK,EAAE,iBAAiB,EAAE,CAAC;IAC3B,MAAM,EAAE,kBAAkB,EAAE,CAAC;IAC7B,OAAO,CAAC,EAAE,oBAAoB,EAAE,CAAC;IACjC,cAAc,CAAC,EAAE,aAAa,CAAC;IAC/B,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;CAC7B;AAED,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,MAAM,CAAC;IAChB,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,MAAM,EAAE,aAAa,CAAC;CACvB;AAED,MAAM,WAAW,WAAW;IAC1B,KAAK,EAAE,OAAO,CAAC;IACf,SAAS,EAAE,OAAO,CAAC;CACpB;AAED,MAAM,WAAW,qBAAqB;IACpC,UAAU,EAAE,MAAM,CAAC;IACnB,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,OAAO,EAAE,MAAM,CACb,MAAM,EACN,WAAW,GAAG;QAAE,UAAU,EAAE,MAAM,CAAA;KAAE,CACrC,CAAC;IACF,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC9B;AAuBD,wBAAgB,cAAc,CAC5B,UAAU,EAAE,MAAM,EAClB,KAAK,EAAE,OAAO,EACd,SAAS,EAAE,OAAO,GACjB,OAAO,CAYT;AAID,wBAAgB,YAAY,CAAC,KAAK,EAAE,qBAAqB,GAAG,aAAa,CA0LxE"}
|
|
@@ -0,0 +1,195 @@
|
|
|
1
|
+
// Standalone policy runtime. Copied by cli-contracts generate.
|
|
2
|
+
// This file is self-contained — no imports from cli-contracts internals.
|
|
3
|
+
// ─── Risk Level Ordering ────────────────────────────────────────
|
|
4
|
+
const RISK_ORDER = {
|
|
5
|
+
low: 0,
|
|
6
|
+
medium: 1,
|
|
7
|
+
high: 2,
|
|
8
|
+
critical: 3,
|
|
9
|
+
};
|
|
10
|
+
function maxRiskLevel(...levels) {
|
|
11
|
+
let max = "low";
|
|
12
|
+
for (const level of levels) {
|
|
13
|
+
if (RISK_ORDER[level] > RISK_ORDER[max]) {
|
|
14
|
+
max = level;
|
|
15
|
+
}
|
|
16
|
+
}
|
|
17
|
+
return max;
|
|
18
|
+
}
|
|
19
|
+
// ─── Active Determination ───────────────────────────────────────
|
|
20
|
+
export function isOptionActive(definition, value, specified) {
|
|
21
|
+
const schemaType = definition.schema?.type;
|
|
22
|
+
if (schemaType === "boolean") {
|
|
23
|
+
return value === true;
|
|
24
|
+
}
|
|
25
|
+
if (definition.repeatable) {
|
|
26
|
+
return specified && Array.isArray(value) && value.length > 0;
|
|
27
|
+
}
|
|
28
|
+
return specified && value != null;
|
|
29
|
+
}
|
|
30
|
+
// ─── Derive Policy ─────────────────────────────────────────────
|
|
31
|
+
export function derivePolicy(input) {
|
|
32
|
+
const sideEffects = new Set();
|
|
33
|
+
const reads = [];
|
|
34
|
+
const writes = [];
|
|
35
|
+
const networkEffects = [];
|
|
36
|
+
const riskLevels = [];
|
|
37
|
+
let executionMode;
|
|
38
|
+
let explicitConfirmation;
|
|
39
|
+
if (input.command_effects) {
|
|
40
|
+
const ce = input.command_effects;
|
|
41
|
+
riskLevels.push(ce.risk_level ?? "low");
|
|
42
|
+
if (ce.writes) {
|
|
43
|
+
sideEffects.add("file_write");
|
|
44
|
+
for (const w of ce.writes) {
|
|
45
|
+
writes.push({
|
|
46
|
+
kind: "semantic",
|
|
47
|
+
target: w.target,
|
|
48
|
+
description: w.description,
|
|
49
|
+
overwrite: w.overwrite,
|
|
50
|
+
destructive: w.destructive,
|
|
51
|
+
...(w.idempotent !== undefined ? { idempotent: w.idempotent } : {}),
|
|
52
|
+
...(w.idempotency_key ? { idempotency_key: w.idempotency_key } : {}),
|
|
53
|
+
...(w.idempotent_note ? { idempotent_note: w.idempotent_note } : {}),
|
|
54
|
+
source: `command:${input.command_id}`,
|
|
55
|
+
});
|
|
56
|
+
}
|
|
57
|
+
}
|
|
58
|
+
if (ce.reads) {
|
|
59
|
+
for (const r of ce.reads) {
|
|
60
|
+
reads.push({
|
|
61
|
+
kind: "semantic",
|
|
62
|
+
target: r.target,
|
|
63
|
+
description: r.description,
|
|
64
|
+
source: `command:${input.command_id}`,
|
|
65
|
+
});
|
|
66
|
+
}
|
|
67
|
+
}
|
|
68
|
+
if (ce.network) {
|
|
69
|
+
sideEffects.add("network");
|
|
70
|
+
if (typeof ce.network === "object") {
|
|
71
|
+
networkEffects.push({
|
|
72
|
+
...(ce.network.description ? { description: ce.network.description } : {}),
|
|
73
|
+
...(ce.network.domains ? { domains: ce.network.domains } : {}),
|
|
74
|
+
...(ce.network.idempotent !== undefined ? { idempotent: ce.network.idempotent } : {}),
|
|
75
|
+
...(ce.network.idempotency_key ? { idempotency_key: ce.network.idempotency_key } : {}),
|
|
76
|
+
...(ce.network.idempotent_note ? { idempotent_note: ce.network.idempotent_note } : {}),
|
|
77
|
+
source: `command:${input.command_id}`,
|
|
78
|
+
});
|
|
79
|
+
}
|
|
80
|
+
}
|
|
81
|
+
if (ce.execution_mode) {
|
|
82
|
+
executionMode = ce.execution_mode;
|
|
83
|
+
}
|
|
84
|
+
if (ce.requires_confirmation !== undefined) {
|
|
85
|
+
explicitConfirmation = ce.requires_confirmation;
|
|
86
|
+
}
|
|
87
|
+
}
|
|
88
|
+
for (const [optName, optInput] of Object.entries(input.options)) {
|
|
89
|
+
const { definition, value, specified } = optInput;
|
|
90
|
+
const active = isOptionActive(definition, value, specified);
|
|
91
|
+
if (!active)
|
|
92
|
+
continue;
|
|
93
|
+
if (definition.file) {
|
|
94
|
+
const filePath = typeof value === "string" ? value : undefined;
|
|
95
|
+
const mode = definition.file.mode;
|
|
96
|
+
if (mode === "read" || mode === "readWrite") {
|
|
97
|
+
reads.push({
|
|
98
|
+
kind: "option-file",
|
|
99
|
+
option: optName,
|
|
100
|
+
path: filePath,
|
|
101
|
+
source: `option:${optName}`,
|
|
102
|
+
});
|
|
103
|
+
}
|
|
104
|
+
if (mode === "write" || mode === "append" || mode === "readWrite") {
|
|
105
|
+
sideEffects.add("file_write");
|
|
106
|
+
writes.push({
|
|
107
|
+
kind: "option-file",
|
|
108
|
+
option: optName,
|
|
109
|
+
path: filePath,
|
|
110
|
+
mode,
|
|
111
|
+
source: `option:${optName}`,
|
|
112
|
+
});
|
|
113
|
+
}
|
|
114
|
+
}
|
|
115
|
+
if (definition.effects) {
|
|
116
|
+
const eff = definition.effects;
|
|
117
|
+
riskLevels.push(eff.risk_level ?? "low");
|
|
118
|
+
if (eff.writes) {
|
|
119
|
+
sideEffects.add("file_write");
|
|
120
|
+
for (const w of eff.writes) {
|
|
121
|
+
writes.push({
|
|
122
|
+
kind: "semantic",
|
|
123
|
+
target: w.target,
|
|
124
|
+
description: w.description,
|
|
125
|
+
overwrite: w.overwrite,
|
|
126
|
+
destructive: w.destructive,
|
|
127
|
+
...(w.idempotent !== undefined ? { idempotent: w.idempotent } : {}),
|
|
128
|
+
...(w.idempotency_key ? { idempotency_key: w.idempotency_key } : {}),
|
|
129
|
+
...(w.idempotent_note ? { idempotent_note: w.idempotent_note } : {}),
|
|
130
|
+
source: `option:${optName}`,
|
|
131
|
+
});
|
|
132
|
+
}
|
|
133
|
+
}
|
|
134
|
+
if (eff.reads) {
|
|
135
|
+
for (const r of eff.reads) {
|
|
136
|
+
reads.push({
|
|
137
|
+
kind: "semantic",
|
|
138
|
+
target: r.target,
|
|
139
|
+
description: r.description,
|
|
140
|
+
source: `option:${optName}`,
|
|
141
|
+
});
|
|
142
|
+
}
|
|
143
|
+
}
|
|
144
|
+
if (eff.network) {
|
|
145
|
+
sideEffects.add("network");
|
|
146
|
+
if (typeof eff.network === "object") {
|
|
147
|
+
networkEffects.push({
|
|
148
|
+
...(eff.network.description ? { description: eff.network.description } : {}),
|
|
149
|
+
...(eff.network.domains ? { domains: eff.network.domains } : {}),
|
|
150
|
+
...(eff.network.idempotent !== undefined ? { idempotent: eff.network.idempotent } : {}),
|
|
151
|
+
...(eff.network.idempotency_key ? { idempotency_key: eff.network.idempotency_key } : {}),
|
|
152
|
+
...(eff.network.idempotent_note ? { idempotent_note: eff.network.idempotent_note } : {}),
|
|
153
|
+
source: `option:${optName}`,
|
|
154
|
+
});
|
|
155
|
+
}
|
|
156
|
+
}
|
|
157
|
+
if (eff.execution_mode && !executionMode) {
|
|
158
|
+
executionMode = eff.execution_mode;
|
|
159
|
+
}
|
|
160
|
+
if (eff.requires_confirmation !== undefined && explicitConfirmation === undefined) {
|
|
161
|
+
explicitConfirmation = eff.requires_confirmation;
|
|
162
|
+
}
|
|
163
|
+
}
|
|
164
|
+
}
|
|
165
|
+
const finalRiskLevel = riskLevels.length > 0 ? maxRiskLevel(...riskLevels) : "low";
|
|
166
|
+
const requiresConfirmation = explicitConfirmation ??
|
|
167
|
+
(finalRiskLevel === "high" || finalRiskLevel === "critical");
|
|
168
|
+
let requiresSecrets;
|
|
169
|
+
if (input.env) {
|
|
170
|
+
const secrets = [];
|
|
171
|
+
for (const [envName, envVar] of Object.entries(input.env)) {
|
|
172
|
+
if (envVar.sensitive) {
|
|
173
|
+
secrets.push(envName);
|
|
174
|
+
}
|
|
175
|
+
}
|
|
176
|
+
if (secrets.length > 0) {
|
|
177
|
+
requiresSecrets = secrets;
|
|
178
|
+
}
|
|
179
|
+
}
|
|
180
|
+
const semanticWrites = writes.filter((w) => w.kind === "semantic");
|
|
181
|
+
const idempotent = semanticWrites.every((w) => w.idempotent === true) &&
|
|
182
|
+
networkEffects.every((n) => n.idempotent === true);
|
|
183
|
+
return {
|
|
184
|
+
risk_level: finalRiskLevel,
|
|
185
|
+
requires_confirmation: requiresConfirmation,
|
|
186
|
+
idempotent,
|
|
187
|
+
side_effects: [...sideEffects],
|
|
188
|
+
reads,
|
|
189
|
+
writes,
|
|
190
|
+
...(networkEffects.length > 0 ? { network: networkEffects } : {}),
|
|
191
|
+
...(executionMode ? { execution_mode: executionMode } : {}),
|
|
192
|
+
...(requiresSecrets ? { requires_secrets: requiresSecrets } : {}),
|
|
193
|
+
};
|
|
194
|
+
}
|
|
195
|
+
//# sourceMappingURL=policy-runtime.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"policy-runtime.js","sourceRoot":"","sources":["../../src/generated/policy-runtime.ts"],"names":[],"mappings":"AAAA,+DAA+D;AAC/D,yEAAyE;AA2HzE,mEAAmE;AAEnE,MAAM,UAAU,GAA8B;IAC5C,GAAG,EAAE,CAAC;IACN,MAAM,EAAE,CAAC;IACT,IAAI,EAAE,CAAC;IACP,QAAQ,EAAE,CAAC;CACZ,CAAC;AAEF,SAAS,YAAY,CAAC,GAAG,MAAmB;IAC1C,IAAI,GAAG,GAAc,KAAK,CAAC;IAC3B,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,UAAU,CAAC,KAAK,CAAC,GAAG,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACxC,GAAG,GAAG,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,mEAAmE;AAEnE,MAAM,UAAU,cAAc,CAC5B,UAAkB,EAClB,KAAc,EACd,SAAkB;IAElB,MAAM,UAAU,GAAG,UAAU,CAAC,MAAM,EAAE,IAAI,CAAC;IAE3C,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;QAC7B,OAAO,KAAK,KAAK,IAAI,CAAC;IACxB,CAAC;IAED,IAAI,UAAU,CAAC,UAAU,EAAE,CAAC;QAC1B,OAAO,SAAS,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;IAC/D,CAAC;IAED,OAAO,SAAS,IAAI,KAAK,IAAI,IAAI,CAAC;AACpC,CAAC;AAED,kEAAkE;AAElE,MAAM,UAAU,YAAY,CAAC,KAA4B;IACvD,MAAM,WAAW,GAAG,IAAI,GAAG,EAAU,CAAC;IACtC,MAAM,KAAK,GAAwB,EAAE,CAAC;IACtC,MAAM,MAAM,GAAyB,EAAE,CAAC;IACxC,MAAM,cAAc,GAA2B,EAAE,CAAC;IAClD,MAAM,UAAU,GAAgB,EAAE,CAAC;IACnC,IAAI,aAAwC,CAAC;IAC7C,IAAI,oBAAyC,CAAC;IAE9C,IAAI,KAAK,CAAC,eAAe,EAAE,CAAC;QAC1B,MAAM,EAAE,GAAG,KAAK,CAAC,eAAe,CAAC;QACjC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,UAAU,IAAI,KAAK,CAAC,CAAC;QAExC,IAAI,EAAE,CAAC,MAAM,EAAE,CAAC;YACd,WAAW,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;YAC9B,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,EAAE,CAAC;gBAC1B,MAAM,CAAC,IAAI,CAAC;oBACV,IAAI,EAAE,UAAU;oBAChB,MAAM,EAAE,CAAC,CAAC,MAAM;oBAChB,WAAW,EAAE,CAAC,CAAC,WAAW;oBAC1B,SAAS,EAAE,CAAC,CAAC,SAAS;oBACtB,WAAW,EAAE,CAAC,CAAC,WAAW;oBAC1B,GAAG,CAAC,CAAC,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACnE,GAAG,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,CAAC,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACpE,GAAG,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,CAAC,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACpE,MAAM,EAAE,WAAW,KAAK,CAAC,UAAU,EAAE;iBACtC,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,IAAI,EAAE,CAAC,KAAK,EAAE,CAAC;YACb,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,EAAE,CAAC;gBACzB,KAAK,CAAC,IAAI,CAAC;oBACT,IAAI,EAAE,UAAU;oBAChB,MAAM,EAAE,CAAC,CAAC,MAAM;oBAChB,WAAW,EAAE,CAAC,CAAC,WAAW;oBAC1B,MAAM,EAAE,WAAW,KAAK,CAAC,UAAU,EAAE;iBACtC,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,IAAI,EAAE,CAAC,OAAO,EAAE,CAAC;YACf,WAAW,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YAC3B,IAAI,OAAO,EAAE,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;gBACnC,cAAc,CAAC,IAAI,CAAC;oBAClB,GAAG,CAAC,EAAE,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,EAAE,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC1E,GAAG,CAAC,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC9D,GAAG,CAAC,EAAE,CAAC,OAAO,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,EAAE,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACrF,GAAG,CAAC,EAAE,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,EAAE,CAAC,OAAO,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACtF,GAAG,CAAC,EAAE,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,EAAE,CAAC,OAAO,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACtF,MAAM,EAAE,WAAW,KAAK,CAAC,UAAU,EAAE;iBACtC,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,IAAI,EAAE,CAAC,cAAc,EAAE,CAAC;YACtB,aAAa,GAAG,EAAE,CAAC,cAAc,CAAC;QACpC,CAAC;QAED,IAAI,EAAE,CAAC,qBAAqB,KAAK,SAAS,EAAE,CAAC;YAC3C,oBAAoB,GAAG,EAAE,CAAC,qBAAqB,CAAC;QAClD,CAAC;IACH,CAAC;IAED,KAAK,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QAChE,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,QAAQ,CAAC;QAClD,MAAM,MAAM,GAAG,cAAc,CAAC,UAAU,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC;QAC5D,IAAI,CAAC,MAAM;YAAE,SAAS;QAEtB,IAAI,UAAU,CAAC,IAAI,EAAE,CAAC;YACpB,MAAM,QAAQ,GACZ,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;YAChD,MAAM,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC;YAElC,IAAI,IAAI,KAAK,MAAM,IAAI,IAAI,KAAK,WAAW,EAAE,CAAC;gBAC5C,KAAK,CAAC,IAAI,CAAC;oBACT,IAAI,EAAE,aAAa;oBACnB,MAAM,EAAE,OAAO;oBACf,IAAI,EAAE,QAAQ;oBACd,MAAM,EAAE,UAAU,OAAO,EAAE;iBAC5B,CAAC,CAAC;YACL,CAAC;YACD,IAAI,IAAI,KAAK,OAAO,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,WAAW,EAAE,CAAC;gBAClE,WAAW,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;gBAC9B,MAAM,CAAC,IAAI,CAAC;oBACV,IAAI,EAAE,aAAa;oBACnB,MAAM,EAAE,OAAO;oBACf,IAAI,EAAE,QAAQ;oBACd,IAAI;oBACJ,MAAM,EAAE,UAAU,OAAO,EAAE;iBAC5B,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,IAAI,UAAU,CAAC,OAAO,EAAE,CAAC;YACvB,MAAM,GAAG,GAAG,UAAU,CAAC,OAAO,CAAC;YAC/B,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,IAAI,KAAK,CAAC,CAAC;YAEzC,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;gBACf,WAAW,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;gBAC9B,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;oBAC3B,MAAM,CAAC,IAAI,CAAC;wBACV,IAAI,EAAE,UAAU;wBAChB,MAAM,EAAE,CAAC,CAAC,MAAM;wBAChB,WAAW,EAAE,CAAC,CAAC,WAAW;wBAC1B,SAAS,EAAE,CAAC,CAAC,SAAS;wBACtB,WAAW,EAAE,CAAC,CAAC,WAAW;wBAC1B,GAAG,CAAC,CAAC,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;wBACnE,GAAG,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,CAAC,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;wBACpE,GAAG,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,CAAC,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;wBACpE,MAAM,EAAE,UAAU,OAAO,EAAE;qBAC5B,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YAED,IAAI,GAAG,CAAC,KAAK,EAAE,CAAC;gBACd,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,KAAK,EAAE,CAAC;oBAC1B,KAAK,CAAC,IAAI,CAAC;wBACT,IAAI,EAAE,UAAU;wBAChB,MAAM,EAAE,CAAC,CAAC,MAAM;wBAChB,WAAW,EAAE,CAAC,CAAC,WAAW;wBAC1B,MAAM,EAAE,UAAU,OAAO,EAAE;qBAC5B,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YAED,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;gBAChB,WAAW,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;gBAC3B,IAAI,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;oBACpC,cAAc,CAAC,IAAI,CAAC;wBAClB,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;wBAC5E,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;wBAChE,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,GAAG,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;wBACvF,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,GAAG,CAAC,OAAO,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;wBACxF,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,GAAG,CAAC,OAAO,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;wBACxF,MAAM,EAAE,UAAU,OAAO,EAAE;qBAC5B,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YAED,IAAI,GAAG,CAAC,cAAc,IAAI,CAAC,aAAa,EAAE,CAAC;gBACzC,aAAa,GAAG,GAAG,CAAC,cAAc,CAAC;YACrC,CAAC;YAED,IAAI,GAAG,CAAC,qBAAqB,KAAK,SAAS,IAAI,oBAAoB,KAAK,SAAS,EAAE,CAAC;gBAClF,oBAAoB,GAAG,GAAG,CAAC,qBAAqB,CAAC;YACnD,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,cAAc,GAClB,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;IAE9D,MAAM,oBAAoB,GACxB,oBAAoB;QACpB,CAAC,cAAc,KAAK,MAAM,IAAI,cAAc,KAAK,UAAU,CAAC,CAAC;IAE/D,IAAI,eAAqC,CAAC;IAC1C,IAAI,KAAK,CAAC,GAAG,EAAE,CAAC;QACd,MAAM,OAAO,GAAa,EAAE,CAAC;QAC7B,KAAK,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;YAC1D,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;gBACrB,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACxB,CAAC;QACH,CAAC;QACD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,eAAe,GAAG,OAAO,CAAC;QAC5B,CAAC;IACH,CAAC;IAED,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC;IACnE,MAAM,UAAU,GACd,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,IAAI,CAAC;QAClD,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,IAAI,CAAC,CAAC;IAErD,OAAO;QACL,UAAU,EAAE,cAAc;QAC1B,qBAAqB,EAAE,oBAAoB;QAC3C,UAAU;QACV,YAAY,EAAE,CAAC,GAAG,WAAW,CAAC;QAC9B,KAAK;QACL,MAAM;QACN,GAAG,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjE,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3D,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAClE,CAAC;AACJ,CAAC"}
|