Add a disallow_fetch protected environment key.

If set to true, fetch will fail.

Part of #53. Part of #45.

README.md

@@ -504,6 +504,7 @@ Parameters:
 
 Environment:
 - `mock` - If true, will return a string representation of the request that would have been sent.
+- `disallow_fetch` - If true, then any fetches will fail. This is useful to disable dangerous behaviors in sub-graphs.
 
 #### property
 
@@ -903,6 +904,12 @@ If true, then `dynamic` seed references that are to a remote seed will fail, eve
 
 Note that you may never use `let` or `let-multi` to set this to false, only to true. This prevents sub-seeds from un-setting mock if a parent has turned it on.
 
+#### disallow_fetch
+
+If true, then `fetch` seed_types will fail.
+
+Note that you may never use `let` or `let-multi` to set this to false, only to true. This prevents sub-seeds from un-setting mock if a parent has turned it on.
+
 ### CLI
 
 The CLI can output a mermaid diagram. By default it prints the mermaid diagram definition to the console and exits.

config-schema.json

@@ -17,6 +17,9 @@
 		"disallow_remote": {
 			"type": "boolean"
 		},
+		"disallow_fetch": {
+			"type": "boolean"
+		},
 		"completion_model": {
 			"type": "string",
 			"enum": [

environment.SAMPLE.json

@@ -5,6 +5,7 @@
     "memory": "_default_memory",
     "store": "_default_store",
     "disallow_remote": false,
+    "disallow_fetch": false,
     "mock": false,
     "namespace": "",
     "key": 0,

seed-schema.json

@@ -24,6 +24,9 @@
 				"disallow_remote": {
 					"type": "boolean"
 				},
+				"disallow_fetch": {
+					"type": "boolean"
+				},
 				"completion_model": {
 					"type": "string",
 					"enum": [
@@ -2372,6 +2375,7 @@
 												"profile",
 												"mock",
 												"disallow_remote",
+												"disallow_fetch",
 												"completion_model",
 												"embedding_model",
 												"default_model_provider",

src/grow.ts

@@ -422,6 +422,9 @@ const growDynamic = async (seed : Seed<SeedDataDynamic>, env : Environment) : Pr
 
 const growFetch = async (seed : Seed<SeedDataFetch>, env : Environment) : Promise<string> => {
 	const data = seed.data;
+
+	if (env.getKnownProtectedKey('disallow_fetch')) throw new Error('Fetch is disabled because disallow_fetch is set to true');
+
 	const resource = extractString(await getProperty(seed, env, data.resource, ''));
 	if (!resource) throw new Error('no resource passed');
 	const rawMethod = extractString(await getProperty(seed, env, data.method, 'GET'));

src/types.ts

@@ -168,7 +168,8 @@ export const knownSecretEnvironmentData = z.object({
 
 const knownEnvironmentProtectedData = z.object({
 	mock: z.optional(z.boolean()),
-	disallow_remote: z.optional(z.boolean())
+	disallow_remote: z.optional(z.boolean()),
+	disallow_fetch: z.optional(z.boolean())
 });
 
 const knownEnvironmentNonSecretData = z.object({

test/base/test.ts

@@ -78,6 +78,7 @@ const loadTestGarden = (files?: string[], skipFetcher = false) : Garden => {
 		mock: true,
 		verbose: false,
 		disallow_remote: false,
+		disallow_fetch: false,
 		key: 0,
 		value: ''
 	};