Documentation
¶
Overview ¶
Package scriptlayer is the MCP surface of the managed-script feature: the manage_script tool and everything it needs to resolve, authorize, edit, validate, and dry-run a script.
It owns the assembly (the Postgres-backed script store) and the tool, and it depends on pkg/script for the domain rules and internal/platform/scriptrun for the engine. Nothing here decides what Starlark means and nothing here re-implements the edit gate; both live one layer down, so the tool is a translation from MCP arguments into domain calls.
The MCP server is captured at RegisterTool rather than at construction: the store must exist early, while the server exists only once the platform has assembled it, and run_draft needs that server to open its in-memory session.
Index ¶
Constants ¶
const ( // DefaultWaitSeconds is how long run_script waits for a run to finish when // the caller names no window. DefaultWaitSeconds = 120 // MaxWaitSeconds caps the wait. Past it the tool answers with the run id and // a pending status rather than holding a request open for the ten minutes an // approved run is allowed to take. MaxWaitSeconds = 300 )
Waiting policy for run_script.
const ToolNameManageScript = "manage_script"
ToolNameManageScript is the MCP tool name of the script-management tool, exported for composition roots that bind UI apps to it.
const ToolNameRunScript = "run_script"
ToolNameRunScript is the MCP tool name of the approved-execution tool, exported for composition roots that bind UI apps to it.
const ToolNameShowScripts = "show_scripts"
ToolNameShowScripts is the MCP tool name of the presentation-only trigger that opens the portal's script pages for the human.
Variables ¶
This section is empty.
Functions ¶
This section is empty.
Types ¶
type Config ¶
type Config struct {
// DB backs the script store; nil leaves the store nil and manage_script
// unregistered (there is nowhere to keep a script).
DB *sql.DB
// Store, when non-nil, is used directly instead of building a Postgres
// store from DB. Production passes DB and leaves this nil.
Store script.Store
// Runs is the run queue run_script enqueues onto and the run history the
// run commands read. nil leaves run_script unregistered, which is the
// correct shape for a deployment that cannot execute scripts at all.
Runs script.RunStore
// AdminPersona is the persona name that grants authority over scripts at
// every scope; matched against the caller's persona in each command.
AdminPersona string
// PortalURL is the deployment's public portal address, used by show_scripts
// to name where the script pages are. Empty leaves the tool registered and
// linkless: a deployment that has not been told its own address cannot be
// given one by guessing.
PortalURL string
}
Config carries the resolved values the owner needs to assemble the script layer. The caller translates its own config into this shape so this package stays free of the platform's config types.
type Handle ¶
type Handle struct {
// contains filtered or unexported fields
}
Handle owns the assembled script layer. All accessors are nil-safe, so a deployment without a database holds a Handle that registers nothing.
func (*Handle) RegisterTool ¶
RegisterTool registers manage_script; where the deployment can execute approved versions, run_script; and the presentation-only show_scripts. It also captures the server the two run paths open their in-memory sessions against. No-op on a nil Handle or a no-database deployment (there is nowhere to keep a script).
Source Files