harn-vm 0.10.120

Async bytecode virtual machine for the Harn programming language
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57

use super::ToolApprovalPolicy;

const EVIDENCE_MAX_CHARS: usize = 240;

const DEFAULT_PATTERNS: &[&str] = &[
    ".env",
    ".env.*",
    "**/.env",
    "**/.env.*",
    "id_rsa",
    "id_ed25519",
    "**/.aws/credentials",
    "**/.npmrc",
    "**/.netrc",
    "*.pem",
    "*.key",
];

pub(super) fn first_candidate(
    policy: &ToolApprovalPolicy,
    candidates: &[String],
) -> Option<String> {
    let custom = &policy.sensitive_path_patterns;
    candidates
        .iter()
        .find(|candidate| {
            if custom.is_empty() {
                is_candidate(candidate, DEFAULT_PATTERNS.iter().copied())
            } else {
                is_candidate(candidate, custom.iter().map(String::as_str))
            }
        })
        .cloned()
}

/// Keep the basename that justified a denial visible while bounding host/model
/// evidence. Prefix-only evidence is both noisy and unable to explain a match
/// at the end of a long path.
pub(super) fn bounded_evidence(path: &str) -> String {
    crate::text::truncate_start(path, EVIDENCE_MAX_CHARS)
}

fn is_candidate<'a>(candidate: &str, patterns: impl IntoIterator<Item = &'a str>) -> bool {
    let normalized = candidate.replace('\\', "/").to_ascii_lowercase();
    let basename = normalized.rsplit('/').next().unwrap_or(normalized.as_str());
    patterns.into_iter().any(|pattern| {
        let pattern = pattern.to_ascii_lowercase();
        harn_glob::match_path(&pattern, &normalized)
            || harn_glob::match_path(&pattern, basename)
            // `sensitive_path_patterns` historically accepted the full flat
            // glob grammar. Keep character classes/alternates and the old
            // slash-crossing `*` behavior as a compatibility superset while
            // adding the path-aware matcher above for new policies.
            || harn_glob::match_name(&pattern, &normalized)
            || harn_glob::match_name(&pattern, basename)
    })
}