[Content Safety] Evolve Unified Moderate to Agent Hooks-native preview

.github/workflows/src/package-name-approval/policy.ts

@@ -1,6 +1,6 @@
 import { readFile } from "node:fs/promises";
 import { join } from "node:path";
-import yaml from "js-yaml";
+import { parse } from "yaml";
 
 export const ALLOWED_BOT_LOGINS = ["github-actions[bot]", "azure-sdk"];
 export const UNPROTECTED_PLANE = "unprotected";
@@ -142,7 +142,7 @@
   path: string = join(process.cwd(), ".github", "protected-labels.yml"),
 ): Promise<PackageNamePolicy> => {
   const content = await readFile(path, "utf8");
-  return parsePackageNamePolicy(yaml.load(content));
+  return parsePackageNamePolicy(parse(content));
 };
 
 export const evaluatePackageNameAuthorization = ({

.github/workflows/test/package-name-approval/policy.test.ts

@@ -1,9 +1,64 @@
-import { describe, expect, it } from "vitest";
+import { mkdtemp, rm, writeFile } from "node:fs/promises";
+import { tmpdir } from "node:os";
+import { join } from "node:path";
+import { afterEach, beforeEach, describe, expect, it } from "vitest";
 import {
   evaluatePackageNameAuthorization,
+  loadPackageNamePolicy,
   parsePackageNamePolicy,
 } from "../../src/package-name-approval/policy.ts";
 
+describe("loading package-name policy", () => {
+  let folder: string;
+  let path: string;
+
+  beforeEach(async () => {
+    folder = await mkdtemp(join(tmpdir(), "package-name-policy-"));
+    path = join(folder, "protected-labels.yml");
+  });
+
+  afterEach(async () => {
+    await rm(folder, { recursive: true, force: true });
+  });
+
+  it("loads YAML aliases and plane-specific approval policy", async () => {
+    await writeFile(
+      path,
+      `global-approvers: [global]
+data-plane-review-signoff: &reviewers [reviewer]
+package-name-java-approved:
+  data-plane: *reviewers
+  management-plane: unprotected
+tier1:
+  data-plane: [java]
+`,
+    );
+
+    expect(await loadPackageNamePolicy(path)).toEqual({
+      globalApprovers: ["global"],
+      labels: {
+        "package-name-java-approved": {
+          "data-plane": ["reviewer"],
+          "management-plane": "unprotected",
+        },
+      },
+      tier1: { "data-plane": ["java"] },
+    });
+  });
+
+  it("rejects malformed YAML rather than defaulting to an empty policy", async () => {
+    await writeFile(path, "global-approvers: [unfinished");
+    await expect(loadPackageNamePolicy(path)).rejects.toThrow();
+  });
+
+  it("validates the policy after parsing YAML", async () => {
+    await writeFile(path, "global-approvers: not-a-list\n");
+    await expect(loadPackageNamePolicy(path)).rejects.toThrow(
+      '"global-approvers" must map to an array of non-empty strings',
+    );
+  });
+});
+
 describe("package-name policy", () => {
   it("projects only package-name-owned entries", () => {
     const policy = parsePackageNamePolicy({

specification/cognitiveservices/cspell.yaml

@@ -93,6 +93,7 @@ words:
   - khtml
   - knda
   - laoo
+  - liamcrumm
   - listprebuilts
   - logit
   - logprobs