From 43f30333c6edd648c71789d1755a27b2c4381ac9 Mon Sep 17 00:00:00 2001
From: Alexandre Pujol <alexandre@pujol.io>
Date: Sun, 24 Aug 2025 23:14:52 +0200
Subject: [PATCH] feat(aa): add support for prompt and priority rule.

---
 pkg/aa/base.go                     | 6 +++++-
 pkg/aa/parse.go                    | 8 +++++++-
 pkg/aa/templates/rule/qualifier.j2 | 3 +++
 3 files changed, 15 insertions(+), 2 deletions(-)

diff --git a/pkg/aa/base.go b/pkg/aa/base.go
index eaf69f71c..a712a5899 100644
--- a/pkg/aa/base.go
+++ b/pkg/aa/base.go
@@ -99,6 +99,7 @@ func (r Base) addLine(other Rule) bool {
 }
 
 type Qualifier struct {
+	Priority   string
 	Audit      bool
 	AccessType string
 }
@@ -109,6 +110,9 @@ func newQualifierFromLog(log map[string]string) Qualifier {
 }
 
 func (r Qualifier) Compare(o Qualifier) int {
+	if r := compare(r.Priority, o.Priority); r != 0 {
+		return r
+	}
 	if r := compare(r.Audit, o.Audit); r != 0 {
 		return r
 	}
@@ -116,7 +120,7 @@ func (r Qualifier) Compare(o Qualifier) int {
 }
 
 func (r Qualifier) Equal(o Qualifier) bool {
-	return r.Audit == o.Audit && r.AccessType == o.AccessType
+	return r.Priority == o.Priority && r.Audit == o.Audit && r.AccessType == o.AccessType
 }
 
 func (r Qualifier) getLenAudit() int {
diff --git a/pkg/aa/parse.go b/pkg/aa/parse.go
index e01696d74..3b737abfd 100644
--- a/pkg/aa/parse.go
+++ b/pkg/aa/parse.go
@@ -15,6 +15,8 @@ const (
 	tokALLOW        = "allow"
 	tokAUDIT        = "audit"
 	tokDENY         = "deny"
+	tokPROMPT       = "prompt"
+	tokPRIORITY     = "priority"
 	tokARROW        = "->"
 	tokEQUAL        = "="
 	tokLESS         = "<"
@@ -524,7 +526,11 @@ func newRules(rules []rule) (Rules, error) {
 			rule = rule[1:]
 			goto qualifier
 		// Qualifier
-		case tokALLOW, tokDENY:
+		case tokPRIORITY:
+			q.Priority = rule.GetValues(tokPRIORITY).GetString()
+			rule = rule[1:]
+			goto qualifier
+		case tokALLOW, tokDENY, tokPROMPT:
 			q.AccessType = rule.Get(0)
 			rule = rule[1:]
 			goto qualifier
diff --git a/pkg/aa/templates/rule/qualifier.j2 b/pkg/aa/templates/rule/qualifier.j2
index a0ff554ec..69181051a 100644
--- a/pkg/aa/templates/rule/qualifier.j2
+++ b/pkg/aa/templates/rule/qualifier.j2
@@ -3,6 +3,9 @@
 {{- /* SPDX-License-Identifier: GPL-2.0-only */ -}}
 
 {{- define "qualifier" -}}
+    {{- with .Priority -}}
+        {{- "priority=" -}}{{ . }}{{ " " }}
+    {{- end -}}
     {{- if .Audit -}}
         {{- "audit " -}}
     {{- end -}}