james.maesandClaude Opus 4.7
1b2f067376
- Split config into LaunchSnapshot (frozen security keys: ollama, applescript, toolBlocklist, confirmationPolicy, logging) and PerTurnSnapshot (mutable: provider, tts, stt, featureFlags) per SEC-05 - OllamaConfig.init(from:) rejects non-localhost hosts at decode time with ConfigError.invalidOllamaHost (AGENT-05) - AppleScriptPolicy has no skipAllowlist/bypass/regex field (SEC-08); reflection test ConfigSplitTests.test_noSkipAllowlistKey enforces - FeatureFlags lives in PerTurnSnapshot only (OBS-05); reflection test LaunchSnapshotTests.test_featureFlagsNotInLaunchSnapshot enforces - SchemaMigrator: currentVersion=1, v1->v1 pass-through, future versions throw ConfigError.futureSchema - ConfigLoader.loadSnapshots: peek schemaVersion, migrate, decode both snapshots; wraps DecodingError into ConfigError.malformed - ConfigStore actor holds launch + streams perTurn updates (file- watcher wiring is Plan 03 scope) - Bundled default-config.json resource - Tests: 15/15 pass covering all behaviors listed in the plan - Deletes Plan 01 placeholders Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
13 lines
502 B
Swift
13 lines
502 B
Swift
import Foundation
|
|
|
|
public struct LaunchSnapshot: Sendable, Codable, Equatable {
|
|
public let schemaVersion: Int
|
|
public let ollama: OllamaConfig
|
|
public let applescript: AppleScriptPolicy
|
|
public let toolBlocklist: [String]
|
|
public let confirmationPolicy: ConfirmationPolicy
|
|
public let logging: LoggingLaunchConfig
|
|
// SEC-01: secrets live in Keychain only. OBS-05: per-turn fields live in PerTurnSnapshot.
|
|
// See ConfigSplitTests.swift for the reflection-based enforcement.
|
|
}
|