116 lines
3.1 KiB
JSON
116 lines
3.1 KiB
JSON
{
|
|
"$schema": "http://json-schema.org/draft-07/schema#",
|
|
"title": "CommandExecutionRequestApprovalResponse",
|
|
"type": "object",
|
|
"required": [
|
|
"decision"
|
|
],
|
|
"properties": {
|
|
"decision": {
|
|
"$ref": "#/definitions/CommandExecutionApprovalDecision"
|
|
}
|
|
},
|
|
"definitions": {
|
|
"CommandExecutionApprovalDecision": {
|
|
"oneOf": [
|
|
{
|
|
"description": "User approved the command.",
|
|
"type": "string",
|
|
"enum": [
|
|
"accept"
|
|
]
|
|
},
|
|
{
|
|
"description": "User approved the command and future prompts in the same session-scoped approval cache should run without prompting.",
|
|
"type": "string",
|
|
"enum": [
|
|
"acceptForSession"
|
|
]
|
|
},
|
|
{
|
|
"description": "User approved the command, and wants to apply the proposed execpolicy amendment so future matching commands can run without prompting.",
|
|
"type": "object",
|
|
"required": [
|
|
"acceptWithExecpolicyAmendment"
|
|
],
|
|
"properties": {
|
|
"acceptWithExecpolicyAmendment": {
|
|
"type": "object",
|
|
"required": [
|
|
"execpolicy_amendment"
|
|
],
|
|
"properties": {
|
|
"execpolicy_amendment": {
|
|
"type": "array",
|
|
"items": {
|
|
"type": "string"
|
|
}
|
|
}
|
|
}
|
|
}
|
|
},
|
|
"additionalProperties": false,
|
|
"title": "AcceptWithExecpolicyAmendmentCommandExecutionApprovalDecision"
|
|
},
|
|
{
|
|
"description": "User chose a persistent network policy rule (allow/deny) for this host.",
|
|
"type": "object",
|
|
"required": [
|
|
"applyNetworkPolicyAmendment"
|
|
],
|
|
"properties": {
|
|
"applyNetworkPolicyAmendment": {
|
|
"type": "object",
|
|
"required": [
|
|
"network_policy_amendment"
|
|
],
|
|
"properties": {
|
|
"network_policy_amendment": {
|
|
"$ref": "#/definitions/NetworkPolicyAmendment"
|
|
}
|
|
}
|
|
}
|
|
},
|
|
"additionalProperties": false,
|
|
"title": "ApplyNetworkPolicyAmendmentCommandExecutionApprovalDecision"
|
|
},
|
|
{
|
|
"description": "User denied the command. The agent will continue the turn.",
|
|
"type": "string",
|
|
"enum": [
|
|
"decline"
|
|
]
|
|
},
|
|
{
|
|
"description": "User denied the command. The turn will also be immediately interrupted.",
|
|
"type": "string",
|
|
"enum": [
|
|
"cancel"
|
|
]
|
|
}
|
|
]
|
|
},
|
|
"NetworkPolicyAmendment": {
|
|
"type": "object",
|
|
"required": [
|
|
"action",
|
|
"host"
|
|
],
|
|
"properties": {
|
|
"action": {
|
|
"$ref": "#/definitions/NetworkPolicyRuleAction"
|
|
},
|
|
"host": {
|
|
"type": "string"
|
|
}
|
|
}
|
|
},
|
|
"NetworkPolicyRuleAction": {
|
|
"type": "string",
|
|
"enum": [
|
|
"allow",
|
|
"deny"
|
|
]
|
|
}
|
|
}
|
|
} |