FilesExpand file tree

master

/

check-agent-lifecycle-boundaries.mjs

Copy path

Blame

More file actions

Blame

More file actions

Latest commit

 

History

History

History

50 lines (48 loc) · 2.84 KB

master

/

check-agent-lifecycle-boundaries.mjs

Copy path

Top

File metadata and controls

• Code
• Blame

50 lines (48 loc) · 2.84 KB

Raw

Copy raw file

Download raw file

Open symbols panel

Edit and raw actions

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

30

31

32

33

34

35

36

37

38

39

40

41

42

43

44

45

46

47

48

49

50

import { readdirSync, readFileSync } from "node:fs";

import { resolve, relative } from "node:path";

import { fileURLToPath } from "node:url";

const protectedFields = new Set(["pauseReason", "pausedAt", "lifecycleState", "lifecycleVersion", "lifecycleError", "lifecycleOperation", "lifecycleRequiredPluginIds", "lifecycleHolds", "adapterType", "adapterConfig", "runtimeConfig", "defaultEnvironmentId"]);

export function agentLifecycleWriteViolations(source, file = "") {

const aliases = [...source.matchAll(/\bagents(?:\s+as\s+(\w+))?\s*[,}]/g)].map(match => match[1] ?? "agents");

const violations = [];

const text = source.replace(/\/\*[\s\S]*?\*\//g, "").replace(/^[ \t]*\/\/.*$/gm, "");

for (const alias of new Set(aliases)) {

for (const match of text.matchAll(new RegExp(`\\.(insert|delete|update)\\(\\s*${alias}\\s*\\)([^;]*)`, "g"))) {

const [, operation, chain] = match;

if (operation !== "update") { violations.push(operation === "delete"

? "Use the agent lifecycle module to delete an agent"

: "Use the agent lifecycle module to insert an agent"); continue; }

for (const field of protectedFields) {

// The offline seed copy disables timers before any server can verify or run an agent.

if (field === "runtimeConfig" && file === "cli/src/commands/worktree.ts") continue;

if (new RegExp(`(?<![\\w.])${field}\\s*(?=:|[,}])`).test(chain)) violations.push(`Use the agent lifecycle module to change ${field}`);

}

if (/\bstatus\s*:/.test(chain) && !chain.includes(`eq(${alias}.lifecycleState, "ready")`)) {

violations.push("An execution status write must require lifecycleState ready");

}

}

}

return violations;

}

export function scanAgentLifecycleBoundaries(root = resolve(fileURLToPath(new URL("..", import.meta.url)))) {

const violations = [];

function walk(directory) {

for (const entry of readdirSync(directory, { withFileTypes: true })) {

if (["node_modules", "dist", "__tests__"].includes(entry.name)) continue;

const path = resolve(directory, entry.name);

const label = relative(root, path);

if (label.includes("modules/agent-lifecycle/")) continue;

if (entry.isDirectory()) walk(path);

else if (/\.tsx?$/.test(entry.name) && !/\.(test|spec)\./.test(entry.name)) {

for (const reason of agentLifecycleWriteViolations(readFileSync(path, "utf8"), label)) violations.push(`${label}: ${reason}`);

}

}

}

for (const directory of ["server/src", "server/scripts", "cli/src", "packages/db/src"]) walk(resolve(root, directory));

return violations;

}

if (resolve(process.argv[1] ?? "") === fileURLToPath(import.meta.url)) {

const violations = scanAgentLifecycleBoundaries();

if (violations.length) { console.error(violations.join("\n")); process.exitCode = 1; }

else console.log("Agent lifecycle write boundary check passed.");

}