bamboo-agent 2026.6.23

A fully self-contained AI agent backend framework with built-in web services, multi-LLM provider support, and comprehensive tool execution
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76

use bamboo_config::paths::{is_safe_workflow_name, workflows_dir};
use std::fs;

/// Save a workflow to disk
pub async fn save_workflow(name: String, content: String) -> Result<String, String> {
    if !is_safe_workflow_name(&name) {
        return Err("Invalid workflow name".to_string());
    }

    let dir = workflows_dir();
    fs::create_dir_all(&dir).map_err(|e| format!("Failed to create workflows dir: {e}"))?;

    let file_path = dir.join(format!("{name}.md"));
    fs::write(&file_path, content).map_err(|e| format!("Failed to save workflow: {e}"))?;

    Ok(file_path.to_string_lossy().to_string())
}

/// Delete a workflow from disk
pub async fn delete_workflow(name: String) -> Result<(), String> {
    if !is_safe_workflow_name(&name) {
        return Err("Invalid workflow name".to_string());
    }

    let dir = workflows_dir();
    let file_path = dir.join(format!("{name}.md"));

    if !file_path.exists() {
        return Err("Workflow not found".to_string());
    }

    fs::remove_file(&file_path).map_err(|e| format!("Failed to delete workflow: {e}"))?;

    Ok(())
}

#[cfg(test)]
mod tests {
    // The name validator itself (`is_safe_workflow_name`) now lives in
    // `bamboo_config::paths` and is unit-tested there (#97). These tests cover the
    // command layer: that save/delete reject unsafe names before touching disk.
    use super::*;

    #[tokio::test]
    async fn save_workflow_rejects_unsafe_names() {
        for bad in ["test/workflow", "test\\workflow", "..workflow", "", "wf@#$"] {
            let result = save_workflow(bad.to_string(), "content".to_string()).await;
            assert!(
                result
                    .as_ref()
                    .is_err_and(|e| e.contains("Invalid workflow name")),
                "save_workflow must reject {bad:?}, got {result:?}"
            );
        }
    }

    #[tokio::test]
    async fn delete_workflow_rejects_unsafe_names() {
        for bad in ["test/workflow", "test\\workflow", "..workflow", "", "wf@#$"] {
            let result = delete_workflow(bad.to_string()).await;
            assert!(
                result
                    .as_ref()
                    .is_err_and(|e| e.contains("Invalid workflow name")),
                "delete_workflow must reject {bad:?}, got {result:?}"
            );
        }
    }

    #[tokio::test]
    async fn delete_workflow_fails_for_nonexistent_workflow() {
        let result = delete_workflow("nonexistent-workflow-12345".to_string()).await;
        assert!(result.is_err());
        assert!(result.unwrap_err().contains("Workflow not found"));
    }
}