Elydora-Go-SDK/cmd/elydora/plugins/qwen_contract.go

package plugins

import (
	"path/filepath"
	"runtime"
	"sort"
)

const (
	qwenAgentKey        = "qwen"
	qwenGuardScript     = "guard.js"
	qwenAuditScript     = "hook.js"
	qwenGuardHookName   = "elydora-guard"
	qwenAuditHookName   = "elydora-audit"
	qwenHookTimeout     = float64(10_000)
	qwenOwnedFileMarker = "// Managed by Elydora"
)

var qwenManagedEvents = [...]string{
	"PreToolUse",
	"PostToolUse",
	"PostToolUseFailure",
}

var qwenEventContracts = [...]struct {
	event, script, name string
}{
	{"PreToolUse", qwenGuardScript, qwenGuardHookName},
	{"PostToolUse", qwenAuditScript, qwenAuditHookName},
	{"PostToolUseFailure", qwenAuditScript, qwenAuditHookName},
}

type qwenHookSettings map[string]any

type qwenManagedRemoval struct {
	event          string
	groupIndex     int
	handlerIndexes []int
	removeGroup    bool
}

func qwenExpectedShell() string {
	if runtime.GOOS == "windows" {
		return "powershell"
	}
	return "bash"
}

func buildQwenGroup(nodePath, scriptPath, name string) map[string]any {
	return map[string]any{
		"hooks": []any{map[string]any{
			"type":    "command",
			"name":    name,
			"command": buildShellCommand(nodePath, scriptPath),
			"shell":   qwenExpectedShell(),
			"timeout": qwenHookTimeout,
		}},
	}
}

func qwenRuntimeReferenceForCommand(
	command, scriptName, runtimeRoot string,
) *managedScriptReference {
	executable, scriptPath, ok := parseShellCommand(command)
	if !ok || !filepath.IsAbs(executable) || !isNodeExecutable(executable) {
		return nil
	}
	return managedScriptWithin(scriptPath, scriptName, runtimeRoot)
}

func currentQwenReference(
	handler map[string]any,
	scriptName, hookName, runtimeRoot string,
) *managedScriptReference {
	if len(handler) != 5 || handler["type"] != "command" ||
		handler["name"] != hookName || handler["shell"] != qwenExpectedShell() ||
		handler["timeout"] != qwenHookTimeout {
		return nil
	}
	command, ok := handler["command"].(string)
	if !ok {
		return nil
	}
	return qwenRuntimeReferenceForCommand(command, scriptName, runtimeRoot)
}

// legacyQwenReference reads the pre-2.1 unnamed handler.
func legacyQwenReference(
	handler map[string]any,
	scriptName, runtimeRoot string,
) *managedScriptReference {
	if len(handler) != 4 || handler["type"] != "command" ||
		handler["shell"] != qwenExpectedShell() ||
		handler["timeout"] != qwenHookTimeout {
		return nil
	}
	command, ok := handler["command"].(string)
	if !ok {
		return nil
	}
	return qwenRuntimeReferenceForCommand(command, scriptName, runtimeRoot)
}

func managedQwenReference(
	handler map[string]any,
	scriptName, hookName, runtimeRoot string,
	includeLegacy bool,
) *managedScriptReference {
	if reference := currentQwenReference(
		handler,
		scriptName,
		hookName,
		runtimeRoot,
	); reference != nil {
		return reference
	}
	if includeLegacy {
		return legacyQwenReference(handler, scriptName, runtimeRoot)
	}
	return nil
}

func exactCurrentQwenGroup(group map[string]any) bool {
	_, hasHooks := group["hooks"]
	return len(group) == 1 && hasHooks
}

func exactLegacyQwenGroup(group map[string]any) bool {
	_, hasHooks := group["hooks"]
	return len(group) == 2 && hasHooks && group["matcher"] == "*"
}

func managedQwenRemovals(
	settings qwenHookSettings,
	agentID, runtimeRoot string,
) []qwenManagedRemoval {
	removals := make([]qwenManagedRemoval, 0)
	for _, contract := range qwenEventContracts {
		groups, _ := settings[contract.event].([]any)
		for groupIndex, groupValue := range groups {
			group := groupValue.(map[string]any)
			handlers := group["hooks"].([]any)
			indexes := make([]int, 0)
			for handlerIndex, handlerValue := range handlers {
				reference := managedQwenReference(
					handlerValue.(map[string]any),
					contract.script,
					contract.name,
					runtimeRoot,
					true,
				)
				if reference != nil &&
					(agentID == "" || sameManagedAgentID(reference.agentID, agentID)) {
					indexes = append(indexes, handlerIndex)
				}
			}
			if len(indexes) == 0 {
				continue
			}
			removeGroup := (exactCurrentQwenGroup(group) || exactLegacyQwenGroup(group)) &&
				len(indexes) == len(handlers)
			removals = append(removals, qwenManagedRemoval{
				event: contract.event, groupIndex: groupIndex,
				handlerIndexes: indexes, removeGroup: removeGroup,
			})
		}
	}
	return removals
}

func qwenReferencesForEvent(
	settings qwenHookSettings,
	event, scriptName, hookName, runtimeRoot string,
) map[string][]managedScriptReference {
	references := map[string][]managedScriptReference{}
	groups, _ := settings[event].([]any)
	for _, groupValue := range groups {
		group := groupValue.(map[string]any)
		if !exactCurrentQwenGroup(group) {
			continue
		}
		for _, handlerValue := range group["hooks"].([]any) {
			reference := currentQwenReference(
				handlerValue.(map[string]any),
				scriptName,
				hookName,
				runtimeRoot,
			)
			if reference == nil {
				continue
			}
			key := managedReferenceKey(reference.agentID)
			references[key] = append(references[key], *reference)
		}
	}
	return references
}

func qwenRuntimeContracts(
	settings qwenHookSettings,
	runtimeRoot string,
) []managedRuntimeContract {
	guards := qwenReferencesForEvent(
		settings,
		"PreToolUse",
		qwenGuardScript,
		qwenGuardHookName,
		runtimeRoot,
	)
	posts := qwenReferencesForEvent(
		settings,
		"PostToolUse",
		qwenAuditScript,
		qwenAuditHookName,
		runtimeRoot,
	)
	failures := qwenReferencesForEvent(
		settings,
		"PostToolUseFailure",
		qwenAuditScript,
		qwenAuditHookName,
		runtimeRoot,
	)
	contracts := make([]managedRuntimeContract, 0)
	for key, guard := range guards {
		post := posts[key]
		failure := failures[key]
		if len(guard) != 1 || len(post) != 1 || len(failure) != 1 ||
			!sameManagedPath(post[0].scriptPath, failure[0].scriptPath) {
			continue
		}
		contracts = append(contracts, managedRuntimeContract{
			agentID:   guard[0].agentID,
			guardPath: guard[0].scriptPath,
			auditPath: post[0].scriptPath,
		})
	}
	sort.Slice(contracts, func(left, right int) bool {
		return managedReferenceKey(contracts[left].agentID) <
			managedReferenceKey(contracts[right].agentID)
	})
	return contracts
}