Kit Langton
83 lines
2.7 KiB
TypeScript
83 lines
2.7 KiB
TypeScript
import { runPromiseInstance } from "@/effect/runtime"
|
|
import { Config } from "@/config/config"
|
|
import { fn } from "@/util/fn"
|
|
import { Wildcard } from "@/util/wildcard"
|
|
import os from "os"
|
|
import { PermissionEffect as S } from "./effect"
|
|
|
|
export namespace PermissionNext {
|
|
function expand(pattern: string): string {
|
|
if (pattern.startsWith("~/")) return os.homedir() + pattern.slice(1)
|
|
if (pattern === "~") return os.homedir()
|
|
if (pattern.startsWith("$HOME/")) return os.homedir() + pattern.slice(5)
|
|
if (pattern.startsWith("$HOME")) return os.homedir() + pattern.slice(5)
|
|
return pattern
|
|
}
|
|
|
|
export const Action = S.Action
|
|
export type Action = S.Action
|
|
export const Rule = S.Rule
|
|
export type Rule = S.Rule
|
|
export const Ruleset = S.Ruleset
|
|
export type Ruleset = S.Ruleset
|
|
export const Request = S.Request
|
|
export type Request = S.Request
|
|
export const Reply = S.Reply
|
|
export type Reply = S.Reply
|
|
export const Approval = S.Approval
|
|
export const Event = S.Event
|
|
export const Service = S.Service
|
|
export const RejectedError = S.RejectedError
|
|
export const CorrectedError = S.CorrectedError
|
|
export const DeniedError = S.DeniedError
|
|
|
|
export function fromConfig(permission: Config.Permission) {
|
|
const ruleset: Ruleset = []
|
|
for (const [key, value] of Object.entries(permission)) {
|
|
if (typeof value === "string") {
|
|
ruleset.push({
|
|
permission: key,
|
|
action: value,
|
|
pattern: "*",
|
|
})
|
|
continue
|
|
}
|
|
ruleset.push(
|
|
...Object.entries(value).map(([pattern, action]) => ({ permission: key, pattern: expand(pattern), action })),
|
|
)
|
|
}
|
|
return ruleset
|
|
}
|
|
|
|
export function merge(...rulesets: Ruleset[]): Ruleset {
|
|
return rulesets.flat()
|
|
}
|
|
|
|
export const ask = fn(S.AskInput, async (input) => runPromiseInstance(S.Service.use((service) => service.ask(input))))
|
|
|
|
export const reply = fn(S.ReplyInput, async (input) =>
|
|
runPromiseInstance(S.Service.use((service) => service.reply(input))),
|
|
)
|
|
|
|
export async function list() {
|
|
return runPromiseInstance(S.Service.use((service) => service.list()))
|
|
}
|
|
|
|
export function evaluate(permission: string, pattern: string, ...rulesets: Ruleset[]): Rule {
|
|
return S.evaluate(permission, pattern, ...rulesets)
|
|
}
|
|
|
|
const EDIT_TOOLS = ["edit", "write", "patch", "multiedit"]
|
|
|
|
export function disabled(tools: string[], ruleset: Ruleset): Set<string> {
|
|
const result = new Set<string>()
|
|
for (const tool of tools) {
|
|
const permission = EDIT_TOOLS.includes(tool) ? "edit" : tool
|
|
const rule = ruleset.findLast((rule) => Wildcard.match(permission, rule.permission))
|
|
if (!rule) continue
|
|
if (rule.pattern === "*" && rule.action === "deny") result.add(tool)
|
|
}
|
|
return result
|
|
}
|
|
}
|