Class: Textus::Doctor::Check::HandlerAllowlist

Inherits:
Textus::Doctor::Check show all
Defined in:
lib/textus/doctor/check/handler_allowlist.rb

Overview

For every entry with an ‘intake.handler`, look up its handler_allowlist policy (if any) and verify the declared handler is allowed. Emits a failure when the handler is rejected by policy.

Instance Method Summary collapse

Methods inherited from Textus::Doctor::Check

#initialize, name_key

Constructor Details

This class inherits a constructor from Textus::Doctor::Check

Instance Method Details

#call ⇒ Object 



8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
 
# File 'lib/textus/doctor/check/handler_allowlist.rb', line 8

def call
  out = []
  store.manifest.entries.each do |mentry|
    handler = mentry.intake_handler
    next if handler.nil?

    allow = store.manifest.policies_for(mentry.key).handler_allowlist
    next if allow.nil?
    next if allow.allows?(handler)

    out << {
      "code" => "policy.handler_not_allowed",
      "level" => "error",
      "subject" => mentry.key,
      "message" => "entry '#{mentry.key}' declares intake.handler='#{handler}' but the " \
                   "handler_allowlist policy permits only: #{allow.handlers.join(", ")}",
      "fix" => "either change intake.handler to one of [#{allow.handlers.join(", ")}], " \
               "or extend the handler_allowlist policy in .textus/manifest.yaml",
    }
  end
  out
end