runx-parser 0.6.19

Pure Rust parser parity crate for runx skills, graphs, and tool manifests.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122

use runx_contracts::JsonValue;
use runx_core::policy::{
    CwdPolicy, SandboxDeclaration, SandboxProfile, is_reserved_runx_sandbox_env_name,
    normalize_sandbox_declaration,
};

use crate::ValidationError;

use super::{FIELDS, SkillSandbox};

pub(super) fn validate_sandbox(
    value: Option<&JsonValue>,
) -> Result<Option<SkillSandbox>, ValidationError> {
    let Some(record) = value else {
        return Ok(None);
    };
    let record = FIELDS.required_object(Some(record), "sandbox")?;
    let profile = required_sandbox_profile(record.get("profile"), "sandbox.profile")?;
    let cwd_policy = optional_cwd_policy(record.get("cwd_policy"))?;
    let env_allowlist =
        FIELDS.optional_string_array(record.get("env_allowlist"), "sandbox.env_allowlist")?;
    validate_env_allowlist(env_allowlist.as_deref())?;
    let network = FIELDS.optional_bool(record.get("network"), "sandbox.network")?;
    let writable_paths = FIELDS
        .optional_string_array(record.get("writable_paths"), "sandbox.writable_paths")?
        .unwrap_or_default();
    let require_enforcement = FIELDS.optional_bool(
        record.get("require_enforcement"),
        "sandbox.require_enforcement",
    )?;
    let declaration = sandbox_declaration(
        &profile,
        cwd_policy.as_deref(),
        env_allowlist.clone(),
        network,
        Some(writable_paths.clone()),
        require_enforcement,
    )?;
    let normalized = normalize_sandbox_declaration(Some(&declaration));
    Ok(Some(SkillSandbox {
        profile: normalized.profile,
        cwd_policy: Some(normalized.cwd_policy),
        env_allowlist: normalized.env_allowlist,
        network: Some(normalized.network),
        writable_paths: normalized.writable_paths,
        require_enforcement,
        // TS currently preserves approvedEscalation only inside raw.
        approved_escalation: None,
        raw: record.clone(),
    }))
}

fn validate_env_allowlist(env_allowlist: Option<&[String]>) -> Result<(), ValidationError> {
    let Some(env_allowlist) = env_allowlist else {
        return Ok(());
    };
    for name in env_allowlist {
        if is_reserved_runx_sandbox_env_name(name) {
            return Err(FIELDS.validation_error(format!(
                "sandbox.env_allowlist cannot include reserved runx environment variable {name}."
            )));
        }
    }
    Ok(())
}

fn required_sandbox_profile(
    value: Option<&JsonValue>,
    field: &str,
) -> Result<String, ValidationError> {
    let profile = FIELDS.required_string(value, field)?;
    if matches!(
        profile.as_str(),
        "readonly" | "workspace-write" | "network" | "unrestricted-local-dev"
    ) {
        return Ok(profile);
    }
    Err(FIELDS.validation_error(format!(
        "{field} must be readonly, workspace-write, network, or unrestricted-local-dev."
    )))
}

fn optional_cwd_policy(value: Option<&JsonValue>) -> Result<Option<String>, ValidationError> {
    let Some(value) = FIELDS.optional_string(value, "sandbox.cwd_policy")? else {
        return Ok(None);
    };
    if matches!(value.as_str(), "skill-directory" | "workspace" | "custom") {
        return Ok(Some(value));
    }
    Err(FIELDS
        .validation_error("sandbox.cwd_policy must be skill-directory, workspace, or custom."))
}

fn sandbox_declaration(
    profile: &str,
    cwd_policy: Option<&str>,
    env_allowlist: Option<Vec<String>>,
    network: Option<bool>,
    writable_paths: Option<Vec<String>>,
    require_enforcement: Option<bool>,
) -> Result<SandboxDeclaration, ValidationError> {
    Ok(SandboxDeclaration {
        profile: match profile {
            "readonly" => SandboxProfile::Readonly,
            "workspace-write" => SandboxProfile::WorkspaceWrite,
            "network" => SandboxProfile::Network,
            "unrestricted-local-dev" => SandboxProfile::UnrestrictedLocalDev,
            _ => return Err(FIELDS.validation_error("sandbox.profile is invalid.")),
        },
        cwd_policy: match cwd_policy {
            None => None,
            Some("skill-directory") => Some(CwdPolicy::SkillDirectory),
            Some("workspace") => Some(CwdPolicy::Workspace),
            Some("custom") => Some(CwdPolicy::Custom),
            Some(_) => return Err(FIELDS.validation_error("sandbox.cwd_policy is invalid.")),
        },
        env_allowlist,
        network,
        writable_paths,
        require_enforcement,
    })
}