Function getPolicy

kms/auth-mock/index.ts:41–49

()

type MockPolicy = 'allow-all' | 'deny-kms' | 'deny-app' | 'deny-all' | 'allowlist-device' | 'allowlist-mr';

function getPolicy(): MockPolicy {
  const policy = process.env.MOCK_POLICY || 'allow-all';
  const valid: MockPolicy[] = ['allow-all', 'deny-kms', 'deny-app', 'deny-all', 'allowlist-device', 'allowlist-mr'];
  if (!valid.includes(policy as MockPolicy)) {
    console.warn(`unknown MOCK_POLICY "${policy}", falling back to allow-all`);
    return 'allow-all';
  }
  return policy as MockPolicy;
}

function parseList(envVar: string): Set<string> {
  const raw = process.env[envVar] || '';