玉澜andCursor
5856a897d1
Own safety/gates/parameters in metadata/ and Agent prose in selection/, drop the monolithic Manual file, and keep confirmation aligned with per-tool runtime_gate. Co-authored-by: Cursor <cursoragent@cursor.com>
79 lines
2.2 KiB
Bash
Executable File
79 lines
2.2 KiB
Bash
Executable File
#!/bin/sh
|
|
set -eu
|
|
|
|
# Ensure catalog confirmation=user_required exactly matches metadata
|
|
# runtime_gate != none across schema_hints/metadata/*.json.
|
|
|
|
ROOT="$(CDPATH= cd -- "$(dirname -- "$0")/../.." && pwd)"
|
|
cd "$ROOT"
|
|
|
|
metadata_dir="internal/cli/schema_hints/metadata"
|
|
catalog="internal/cli/schema_catalog.json"
|
|
|
|
if [ ! -d "$metadata_dir" ]; then
|
|
printf '%s\n' "missing agent metadata directory: $metadata_dir" >&2
|
|
exit 1
|
|
fi
|
|
|
|
tmp="$(mktemp -d)"
|
|
trap 'rm -rf "$tmp"' EXIT HUP INT TERM
|
|
|
|
jq -r '
|
|
.tools
|
|
| to_entries[]
|
|
| select((.value.runtime_gate // "none") != "none")
|
|
| .key
|
|
' "$metadata_dir"/*.json | sort -u >"$tmp/truth_gated"
|
|
|
|
jq -r '
|
|
.tools
|
|
| to_entries[]
|
|
| select(.value.confirmation == "user_required")
|
|
| .key
|
|
' "$catalog" | sort >"$tmp/catalog_required"
|
|
|
|
if ! cmp -s "$tmp/truth_gated" "$tmp/catalog_required"; then
|
|
printf '%s\n' 'catalog confirmation=user_required differs from schema_hints/metadata runtime_gate!=none set' >&2
|
|
printf '%s\n' 'update internal/cli/schema_hints/metadata/<product>.json runtime_gate/confirmation, then regenerate schema' >&2
|
|
diff -u "$tmp/truth_gated" "$tmp/catalog_required" || true
|
|
exit 1
|
|
fi
|
|
|
|
jq -s '
|
|
reduce .[] as $file ({};
|
|
. * (
|
|
$file.tools
|
|
| to_entries
|
|
| map({key: .key, value: (.value.runtime_gate // "none")})
|
|
| from_entries
|
|
)
|
|
)
|
|
' "$metadata_dir"/*.json >"$tmp/gates.json"
|
|
|
|
jq -r --slurpfile catalog "$catalog" '
|
|
. as $gate_map |
|
|
($catalog[0].tools) as $tools |
|
|
$gate_map
|
|
| to_entries[]
|
|
| .key as $canonical
|
|
| .value as $gate
|
|
| $tools[$canonical] as $tool
|
|
| select($tool != null)
|
|
| select(
|
|
if $gate == "none" then
|
|
$tool.confirmation != "not_required" or $tool.risk == "high" or $tool.effect == "destructive"
|
|
else
|
|
$tool.confirmation != "user_required"
|
|
end
|
|
)
|
|
| "\(.key)\tgate=\(.value)\teffect=\($tool.effect // "MISSING")\trisk=\($tool.risk // "MISSING")\tconfirmation=\($tool.confirmation // "MISSING")"
|
|
' "$tmp/gates.json" >"$tmp/gate_problems" || true
|
|
|
|
if [ -s "$tmp/gate_problems" ]; then
|
|
printf '%s\n' 'schema_hints/metadata runtime_gate disagree with catalog effect/risk/confirmation' >&2
|
|
cat "$tmp/gate_problems" >&2
|
|
exit 1
|
|
fi
|
|
|
|
printf '%s\n' "runtime confirmation truth ok ($(wc -l <"$tmp/truth_gated" | tr -d ' ') gated)"
|