f89ba94cb7
Gate manual and AI commands by per-agent clearance, auto-elevate stuck hosts to L4 when AI mode allows, and surface clearance in Access Depth and LOTL timeline.
59 lines
1.7 KiB
TypeScript
59 lines
1.7 KiB
TypeScript
/** Security clearance L0–L4 (mirrors server/internal/clearance). */
|
||
|
||
export const CLEARANCE_MIN = 0;
|
||
export const CLEARANCE_MAX = 4;
|
||
|
||
export interface ClearanceEventRecord {
|
||
id: number;
|
||
agent_id: string;
|
||
from_level: number;
|
||
to_level: number;
|
||
reason: string;
|
||
source: string;
|
||
ts: string;
|
||
}
|
||
|
||
export function clearanceLabel(level: number): string {
|
||
const n = Math.max(CLEARANCE_MIN, Math.min(CLEARANCE_MAX, level));
|
||
return `L${n}`;
|
||
}
|
||
|
||
export function clearancePermissions(level: number): string {
|
||
switch (Math.max(CLEARANCE_MIN, Math.min(CLEARANCE_MAX, level))) {
|
||
case 0:
|
||
return 'Stats and read-only probes';
|
||
case 1:
|
||
return 'Mining: pause, resume, restart';
|
||
case 2:
|
||
return 'Spread: discover_and_join, spread_now, stage_fetch';
|
||
case 3:
|
||
return 'Shell: exec_shell, agent_command';
|
||
case 4:
|
||
return 'Forge: set_agent_version, reorder_tiers fleet-wide';
|
||
default:
|
||
return 'Unknown clearance';
|
||
}
|
||
}
|
||
|
||
export function formatClearanceElevation(event: {
|
||
to_level: number;
|
||
source?: string;
|
||
reason?: string;
|
||
}): string {
|
||
const level = clearanceLabel(event.to_level);
|
||
if (event.source === 'ai_scheduler') {
|
||
return `AI requested ${level} — approved`;
|
||
}
|
||
if (event.reason?.trim()) {
|
||
return `${level} — ${event.reason.trim()}`;
|
||
}
|
||
return `Elevated to ${level}`;
|
||
}
|
||
|
||
export function clearanceTimelineSummary(event: ClearanceEventRecord): string {
|
||
const from = clearanceLabel(event.from_level);
|
||
const to = clearanceLabel(event.to_level);
|
||
const who = event.source === 'ai_scheduler' ? 'AI' : event.source || 'system';
|
||
return `${who}: ${from} → ${to}${event.reason ? ` (${event.reason})` : ''}`;
|
||
}
|