feat(policies): add option to ignore CLI compatibility when resolving policies
Merged
MI
4mo ago+117+117+012345678901234567890123456789-17-17-01234567890123456789
Adds a WithIgnoreCLICompatibility resolve option to the policy provider client. When set, it forwards the include_all_versions query parameter to the policy provider, which makes the provider skip CLI-version compatibility resolution and return the true latest revision of a policy or policy group instead of the latest revision compatible with the requesting CLI version.
The control-plane contract-save validation path now uses this option because it is a non-CLI caller and should resolve the true latest revision. The attestation RPC path (a CLI caller) keeps the default CLI-compatibility behavior.
This contribution was developed with the assistance of Claude Code.
š¤ Posted by Maximus bot (Claude Code) on behalf of @migmartri