a3s-code-core 8.0.3

A3S Code Core - Embeddable AI agent library with tool execution
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117

use std::path::{Component, Path};

/// Return whether a workspace-relative path is excluded from source egress.
///
/// This is shared by manifest admission and the read-time source boundary so
/// a symlink or rename cannot cross into a path category that the manifest
/// would have rejected.
pub(crate) fn path_is_denied(path: &Path) -> bool {
    has_sensitive_component(path) || has_sensitive_file_name(path)
}

fn has_sensitive_component(path: &Path) -> bool {
    for component in path.components() {
        let name = match component {
            Component::CurDir => continue,
            Component::Normal(name) => name,
            Component::ParentDir | Component::RootDir | Component::Prefix(_) => return true,
        };
        if matches!(
            name.to_string_lossy().to_ascii_lowercase().as_str(),
            ".git"
                | ".a3s"
                | ".ssh"
                | ".aws"
                | ".azure"
                | ".claude"
                | ".codex"
                | ".docker"
                | ".gnupg"
                | ".kube"
                | "node_modules"
                | "target"
                | ".next"
                | "dist"
                | "build"
                | "coverage"
        ) {
            return true;
        }
    }
    false
}

fn has_sensitive_file_name(path: &Path) -> bool {
    let name = path
        .file_name()
        .and_then(|name| name.to_str())
        .unwrap_or_default()
        .to_ascii_lowercase();
    let extension = path
        .extension()
        .and_then(|extension| extension.to_str())
        .unwrap_or_default()
        .to_ascii_lowercase();

    matches!(
        extension.as_str(),
        "pem" | "key" | "ppk" | "p12" | "pfx" | "jks" | "keystore"
    ) || matches!(
        name.as_str(),
        ".env"
            | "credentials"
            | "credentials.json"
            | ".netrc"
            | ".npmrc"
            | ".pypirc"
            | ".git-credentials"
            | "auth.json"
            | "service-account.json"
            | "service_account.json"
            | "secrets.json"
            | "id_rsa"
            | "id_dsa"
            | "id_ecdsa"
            | "id_ed25519"
    ) || ((name.starts_with(".env")
        || name.starts_with("credentials.")
        || name.starts_with("secrets."))
        && !name.ends_with(".example")
        && !name.ends_with(".sample"))
}

#[cfg(test)]
mod tests {
    use super::*;

    #[test]
    fn source_egress_paths_cover_control_credentials_and_generated_trees() {
        for path in [
            ".env",
            "apps/api/.env.local",
            "apps/api/.envrc",
            ".git-credentials",
            ".a3s/config.acl",
            ".git/config",
            "target/generated.rs",
            "node_modules/pkg/index.js",
            "keys/service.pem",
            "nested/secrets.json",
            "../outside.rs",
            "/absolute.rs",
        ] {
            assert!(path_is_denied(Path::new(path)), "{path} should be denied");
        }
        for path in [
            "src/env.rs",
            "src/config.rs",
            ".env.example",
            "fixtures/credentials.sample",
        ] {
            assert!(
                !path_is_denied(Path::new(path)),
                "{path} should be admitted"
            );
        }
    }
}