openAgent

1export * as Policy from "./policy"
2 
3import { makeLocationNode } from "./effect/app-node"
4import { Context, Effect as EffectRuntime, Layer, Schema } from "effect"
5import { Wildcard } from "./util/wildcard"
6import { Location } from "./location"
7 
8export const Effect = Schema.Literals(["allow", "deny"]).annotate({ identifier: "Policy.Effect" })
9export type Effect = typeof Effect.Type
10 
11export class Info extends Schema.Class<Info>("Policy.Info")({
12  action: Schema.String,
13  effect: Effect,
14  resource: Schema.String,
15}) {}
16 
17export interface Interface {
18  readonly load: (statements: Info[]) => EffectRuntime.Effect<void>
19  readonly evaluate: (action: string, resource: string, fallback: Effect) => EffectRuntime.Effect<Effect>
20  readonly hasStatements: () => boolean
21}
22 
23export class Service extends Context.Service<Service, Interface>()("@opencode/v2/Policy") {}
24 
25const layer = Layer.effect(
26  Service,
27  EffectRuntime.gen(function* () {
28    let statements: Info[] = []
29    yield* Location.Service
30 
31    return Service.of({
32      load: EffectRuntime.fn("Policy.load")(function* (input) {
33        statements = input
34      }),
35      hasStatements: () => statements.length > 0,
36      evaluate: EffectRuntime.fn("Policy.evaluate")(function* (action, resource, fallback) {
37        return (
38          statements.findLast(
39            (statement) => Wildcard.match(action, statement.action) && Wildcard.match(resource, statement.resource),
40          )?.effect ?? fallback
41        )
42      }),
43    })
44  }),
45)
46 
47export const locationLayer = layer
48 
49export const node = makeLocationNode({ service: Service, layer, deps: [Location.node] })
50