Add audited response apply rehearsal

This commit is contained in:
Luna 2026-07-09 05:56:25 -07:00
parent 51d52b5229
commit 0b010df514
No known key found for this signature in database
11 changed files with 198 additions and 28 deletions

View file

@ -13,7 +13,7 @@ RULE_ACTIONS = ("list", "show", "test", "docs")
BASELINE_ACTIONS = ("build", "accept", "revoke", "list")
INCIDENT_ACTIONS = ("list", "show", "export")
POSTURE_ACTIONS = ("check",)
RESPOND_ACTIONS = ("plan",)
RESPOND_ACTIONS = ("plan", "apply")
COMPLETION_SHELLS = ("bash", "zsh")
@ -47,7 +47,7 @@ _{prog.replace('-', '_')}_complete() {{
baseline) COMPREPLY=( $(compgen -W "{baseline_actions} --reason --expires --force --stale --json" -- "$cur") ) ;;
incident) COMPREPLY=( $(compgen -W "{incident_actions} --json" -- "$cur") ) ;;
posture) COMPREPLY=( $(compgen -W "{posture_actions} --json" -- "$cur") ) ;;
respond) COMPREPLY=( $(compgen -W "{respond_actions} --json" -- "$cur") ) ;;
respond) COMPREPLY=( $(compgen -W "{respond_actions} --json --dry-run" -- "$cur") ) ;;
completion) COMPREPLY=( $(compgen -W "{shells}" -- "$cur") ) ;;
check|fim-check|status) COMPREPLY=( $(compgen -W "--json --packages" -- "$cur") ) ;;
pkgdb-verify) COMPREPLY=( $(compgen -W "--sample" -- "$cur") ) ;;
@ -82,7 +82,7 @@ case $state in
baseline) _arguments '1:action:((build accept revoke list))' '2:kind:((fim pkgfile listener suid))' '--reason[reason]' '--expires[TTL]' '--force[force]' '--stale[stale]' '--json[emit JSON]' ;;
incident) _arguments '1:action:((list show export))' '--json[emit JSON]' ;;
posture) _arguments '1:action:((check))' '--json[emit JSON]' ;;
respond) _arguments '1:action:((plan))' '--json[emit JSON]' ;;
respond) _arguments '1:action:((plan apply))' '--json[emit JSON]' '--dry-run[rehearse apply without executing]' ;;
completion) _arguments '1:shell:((bash zsh))' ;;
check|status) _arguments '--json[emit JSON]' ;;
fim-check) _arguments '--packages[verify package-owned files]' ;;