46 lines
1.5 KiB
TypeScript
46 lines
1.5 KiB
TypeScript
export type CommandAuthorizer = {
|
|
configured: boolean;
|
|
allowed: boolean;
|
|
};
|
|
|
|
export type CommandGatingModeWhenAccessGroupsOff = "allow" | "deny" | "configured";
|
|
|
|
export function resolveCommandAuthorizedFromAuthorizers(params: {
|
|
useAccessGroups: boolean;
|
|
authorizers: CommandAuthorizer[];
|
|
modeWhenAccessGroupsOff?: CommandGatingModeWhenAccessGroupsOff;
|
|
}): boolean {
|
|
const { useAccessGroups, authorizers } = params;
|
|
const mode = params.modeWhenAccessGroupsOff ?? "allow";
|
|
if (!useAccessGroups) {
|
|
if (mode === "allow") {
|
|
return true;
|
|
}
|
|
if (mode === "deny") {
|
|
return false;
|
|
}
|
|
const anyConfigured = authorizers.some((entry) => entry.configured);
|
|
if (!anyConfigured) {
|
|
return true;
|
|
}
|
|
return authorizers.some((entry) => entry.configured && entry.allowed);
|
|
}
|
|
return authorizers.some((entry) => entry.configured && entry.allowed);
|
|
}
|
|
|
|
export function resolveControlCommandGate(params: {
|
|
useAccessGroups: boolean;
|
|
authorizers: CommandAuthorizer[];
|
|
allowTextCommands: boolean;
|
|
hasControlCommand: boolean;
|
|
modeWhenAccessGroupsOff?: CommandGatingModeWhenAccessGroupsOff;
|
|
}): { commandAuthorized: boolean; shouldBlock: boolean } {
|
|
const commandAuthorized = resolveCommandAuthorizedFromAuthorizers({
|
|
useAccessGroups: params.useAccessGroups,
|
|
authorizers: params.authorizers,
|
|
modeWhenAccessGroupsOff: params.modeWhenAccessGroupsOff,
|
|
});
|
|
const shouldBlock = params.allowTextCommands && params.hasControlCommand && !commandAuthorized;
|
|
return { commandAuthorized, shouldBlock };
|
|
}
|