玉澜andCursor
7773eb27f1
Move cmdcore to corecmd, declare attendance ContractFinal in helpers, keep Sheet destructive commands --yes-only, and align catalog/policy provenance. Co-authored-by: Cursor <cursoragent@cursor.com>
95 lines
2.8 KiB
Bash
Executable File
95 lines
2.8 KiB
Bash
Executable File
#!/bin/sh
|
|
set -eu
|
|
|
|
# Ensure catalog confirmation=user_required exactly matches executable truth:
|
|
# typed corecmd Contract SafetySpec declarations plus migration-only metadata
|
|
# runtime_gate != none entries.
|
|
|
|
ROOT="$(CDPATH= cd -- "$(dirname -- "$0")/../.." && pwd)"
|
|
cd "$ROOT"
|
|
|
|
metadata_dir="internal/cli/schema_hints/metadata"
|
|
|
|
if [ ! -d "$metadata_dir" ]; then
|
|
printf '%s\n' "missing agent metadata directory: $metadata_dir" >&2
|
|
exit 1
|
|
fi
|
|
|
|
tmp="$(mktemp -d)"
|
|
trap 'rm -rf "$tmp"' EXIT HUP INT TERM
|
|
|
|
# The release Catalog is committed as a per-product split; reassemble it into
|
|
# the single-document shape these jq queries consume.
|
|
catalog="$tmp/catalog-combined.json"
|
|
scripts/policy/with-catalog.sh >"$catalog"
|
|
|
|
jq -r '
|
|
.tools
|
|
| to_entries[]
|
|
| select((.value.runtime_gate // "none") != "none")
|
|
| .key
|
|
' "$metadata_dir"/*.json >"$tmp/metadata_gated"
|
|
|
|
jq -r '
|
|
.tools
|
|
| to_entries[]
|
|
| select(.value.confirmation == "user_required")
|
|
| select(.value.field_provenance.confirmation.source == "corecmd.contract")
|
|
| .key
|
|
' "$catalog" >"$tmp/contract_gated"
|
|
|
|
cat "$tmp/metadata_gated" "$tmp/contract_gated" | sort -u >"$tmp/truth_gated"
|
|
|
|
jq -r '
|
|
.tools
|
|
| to_entries[]
|
|
| select(.value.confirmation == "user_required")
|
|
| .key
|
|
' "$catalog" | sort >"$tmp/catalog_required"
|
|
|
|
if ! cmp -s "$tmp/truth_gated" "$tmp/catalog_required"; then
|
|
printf '%s\n' 'catalog confirmation=user_required differs from Contract SafetySpec + metadata runtime_gate truth' >&2
|
|
printf '%s\n' 'declare corecmd Safety.Confirmation or update migration-only metadata runtime_gate, then regenerate schema' >&2
|
|
diff -u "$tmp/truth_gated" "$tmp/catalog_required" || true
|
|
exit 1
|
|
fi
|
|
|
|
jq -s '
|
|
reduce .[] as $file ({};
|
|
. * (
|
|
$file.tools
|
|
| to_entries
|
|
| map({key: .key, value: (.value.runtime_gate // "none")})
|
|
| from_entries
|
|
)
|
|
)
|
|
' "$metadata_dir"/*.json >"$tmp/gates.json"
|
|
|
|
jq -r --slurpfile catalog "$catalog" '
|
|
. as $gate_map |
|
|
($catalog[0].tools) as $tools |
|
|
$gate_map
|
|
| to_entries[]
|
|
| .key as $canonical
|
|
| .value as $gate
|
|
| $tools[$canonical] as $tool
|
|
| select($tool != null)
|
|
| select($tool.field_provenance.confirmation.source != "corecmd.contract")
|
|
| select(
|
|
if $gate == "none" then
|
|
$tool.confirmation != "not_required" or $tool.risk == "high" or $tool.effect == "destructive"
|
|
else
|
|
$tool.confirmation != "user_required"
|
|
end
|
|
)
|
|
| "\(.key)\tgate=\(.value)\teffect=\($tool.effect // "MISSING")\trisk=\($tool.risk // "MISSING")\tconfirmation=\($tool.confirmation // "MISSING")"
|
|
' "$tmp/gates.json" >"$tmp/gate_problems" || true
|
|
|
|
if [ -s "$tmp/gate_problems" ]; then
|
|
printf '%s\n' 'schema_hints/metadata runtime_gate disagree with catalog effect/risk/confirmation' >&2
|
|
cat "$tmp/gate_problems" >&2
|
|
exit 1
|
|
fi
|
|
|
|
printf '%s\n' "runtime confirmation truth ok ($(wc -l <"$tmp/truth_gated" | tr -d ' ') gated)"
|