Align AOC tasks for Excititor and Concelier
This commit is contained in:
@@ -1,22 +1,22 @@
|
||||
# Entry-Point Runtime — Deno
|
||||
|
||||
## Signals to gather
|
||||
- `argv0` equals `deno` or path ends with `/bin/deno`.
|
||||
- Arguments include `run`, `task`, `serve`, or `compile` outputs.
|
||||
- Presence of `deno.json` / `deno.jsonc`, `import_map.json`, or cached modules (`/deno-dir`).
|
||||
- Environment (`DENO_DIR`, `DENO_AUTH_TOKENS`).
|
||||
|
||||
## Implementation notes
|
||||
- Resolve script URLs or local files; for remote sources record the URL as evidence.
|
||||
- Distinguish between `deno compile` executables and the Deno runtime invoking a script.
|
||||
- Recognise `deno task <name>` by reading tasks from `deno.json`.
|
||||
- ShellFlow should already collapse Docker official entrypoint (`/usr/bin/env deno task start`).
|
||||
|
||||
## Evidence & scoring
|
||||
- Boost for confirmed script/URL and config file presence.
|
||||
- Add evidence for permissions flags (`--allow-net`, `--allow-env`) to aid policy decisions.
|
||||
- Penalise when only the binary is present without scripts.
|
||||
|
||||
## Edge cases
|
||||
- Deno deploy shims or adapters may further wrap the runtime; rely on wrapper catalogue.
|
||||
- When `deno compile` emits a standalone binary, treat it as C/C++ unless metadata persists.
|
||||
# Entry-Point Runtime — Deno
|
||||
|
||||
## Signals to gather
|
||||
- `argv0` equals `deno` or path ends with `/bin/deno`.
|
||||
- Arguments include `run`, `task`, `serve`, or `compile` outputs.
|
||||
- Presence of `deno.json` / `deno.jsonc`, `import_map.json`, or cached modules (`/deno-dir`).
|
||||
- Environment (`DENO_DIR`, `DENO_AUTH_TOKENS`).
|
||||
|
||||
## Implementation notes
|
||||
- Resolve script URLs or local files; for remote sources record the URL as evidence.
|
||||
- Distinguish between `deno compile` executables and the Deno runtime invoking a script.
|
||||
- Recognise `deno task <name>` by reading tasks from `deno.json`.
|
||||
- ShellFlow should already collapse Docker official entrypoint (`/usr/bin/env deno task start`).
|
||||
|
||||
## Evidence & scoring
|
||||
- Boost for confirmed script/URL and config file presence.
|
||||
- Add evidence for permissions flags (`--allow-net`, `--allow-env`) to aid policy decisions.
|
||||
- Penalise when only the binary is present without scripts.
|
||||
|
||||
## Edge cases
|
||||
- Deno deploy shims or adapters may further wrap the runtime; rely on wrapper catalogue.
|
||||
- When `deno compile` emits a standalone binary, treat it as C/C++ unless metadata persists.
|
||||
|
||||
Reference in New Issue
Block a user