Function getNetworkFirewallCodemod

pkg/cli/codemod_network_firewall.go:13–42

getNetworkFirewallCodemod creates a codemod for migrating network.firewall to sandbox.agent

()

// getNetworkFirewallCodemod creates a codemod for migrating network.firewall to sandbox.agent
func getNetworkFirewallCodemod() Codemod {
	return newFieldRemovalCodemod(fieldRemovalCodemodConfig{
		ID:           "network-firewall-migration",
		Name:         "Migrate network.firewall to sandbox.agent",
		Description:  "Removes deprecated 'network.firewall' field (firewall is now always enabled via sandbox.agent: awf default)",
		IntroducedIn: "0.1.0",
		ParentKey:    "network",
		FieldKey:     "firewall",
		LogMsg:       "Applied network.firewall migration (firewall now always enabled via sandbox.agent: awf default)",
		Log:          networkFirewallCodemodLog,
		PostTransform: func(lines []string, frontmatter map[string]any, fieldValue any) []string {
			_, hasSandbox := frontmatter["sandbox"]

			if !hasSandbox {
				sandboxLines := sandboxAgentLinesFromFirewall(fieldValue)
				if len(sandboxLines) > 0 {
					lines = insertSandboxAfterNetworkBlock(lines, sandboxLines)
					networkFirewallCodemodLog.Print("Converted deprecated network.firewall to sandbox.agent")
				}
				return lines
			}

			lines, merged := mergeFirewallIntoExistingSandbox(lines, fieldValue)
			if merged {
				networkFirewallCodemodLog.Print("Merged deprecated network.firewall into existing sandbox.agent")
			}
			return lines
		},
	})
}

func sandboxAgentLinesFromFirewall(fieldValue any) []string {
	switch value := fieldValue.(type) {