Function MergeRuntimeInputs

pkg/policies/runtime_inputs.go:97–113

MergeRuntimeInputs returns the contract arguments with the runtime inputs merged in additively: when both define the same key, the runtime value is appended after the contract value (newline-separated) so file-sourced exemptions add to, rather than replace, contract-declared ones. The input maps are

(with, runtimeInputs map[string]string)

// maps are not mutated. Exported so callers assembling runtime inputs (e.g. the
// CLI's --policy-input-from-file handling) reuse the same multi-value encoding.
func MergeRuntimeInputs(with, runtimeInputs map[string]string) map[string]string {
	if len(runtimeInputs) == 0 {
		return with
	}

	merged := make(map[string]string, len(with)+len(runtimeInputs))
	maps.Copy(merged, with)
	for k, v := range runtimeInputs {
		if existing := merged[k]; existing != "" {
			merged[k] = existing + "\n" + v
		} else {
			merged[k] = v
		}
	}

	return merged
}

// scopeTracker records, concurrency-safely, which runtime-input scope keys were
// matched by at least one policy attachment during a material evaluation.