bonsai-ninja-lang-ruby 0.2.13

Ruby language adapter.
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74

use bonsai_db::AnalyzerDb;
use bonsai_lang_api::LanguageRegistry;
use bonsai_lang_ruby::RubyAdapter;
use bonsai_vfs::Vfs;
use std::sync::Arc;

fn index(source: &str) -> Arc<bonsai_lang_api::DeclIndex> {
    let vfs = Arc::new(Vfs::new());
    let file = vfs.write("guard.rb".to_string(), Arc::<str>::from(source));
    let registry = Arc::new(LanguageRegistry::new());
    registry.register(Arc::new(RubyAdapter::new()));
    AnalyzerDb::new(vfs, registry)
        .decl_index(file)
        .expect("Ruby declaration index")
}

#[test]
fn terminal_compound_static_allowlist_retains_exact_syntax_evidence() {
    let index = index(
        r#"class Gateway
  APPROVED = %w[api.example hooks.example].freeze

  def self.fetch(input)
    endpoint = Endpoint.parse(input) rescue nil
    return "" unless endpoint.is_a?(Endpoint::Secure) && APPROVED.include?(endpoint.server)

    Client.start(endpoint.server, endpoint.port, encrypted: true)
  end
end
"#,
    );
    let fact = index
        .compiler_guards
        .iter()
        .find(|fact| fact.capability == "terminal-predicate.compound-static-allowlist")
        .unwrap_or_else(|| panic!("missing compiler guard: {:#?}", index.compiler_guards));
    for expected in [
        "guarded-argument:0=predicate-component:server",
        "predicate-complete:true",
        "finite-static-string-membership:true",
        "parser-call:Endpoint.parse",
        "type-predicate-call:is_a?",
        "type-predicate-value:place:Endpoint::Secure",
        "membership-call:include?",
        "membership-component:server",
        "guarded-named-argument:2:encrypted=boolean:true",
    ] {
        assert!(
            fact.evidence.iter().any(|evidence| evidence == expected),
            "missing {expected}: {fact:#?}"
        );
    }
}

#[test]
fn mutable_or_dynamic_collection_does_not_claim_complete_guard() {
    let index = index(
        r#"class Gateway
  APPROVED = configured_hosts

  def self.fetch(input)
    endpoint = Endpoint.parse(input) rescue nil
    return "" unless endpoint.is_a?(Endpoint::Secure) && APPROVED.include?(endpoint.server)
    Client.start(endpoint.server, endpoint.port, encrypted: true)
  end
end
"#,
    );
    assert!(
        index.compiler_guards.is_empty(),
        "dynamic collection must fail closed: {:#?}",
        index.compiler_guards
    );
}