harness-read 0.1.1

use harness_core::{PermissionPolicy, ToolError, ToolErrorCode};
use std::path::Path;

/// Simple fence: sensitive-pattern match → SENSITIVE; outside-root → OUTSIDE_WORKSPACE.
/// Mirrors the fence in grep/glob without the hook (autonomous policy
/// lives higher up; the cli bridges call directly in-process anyway).
pub fn fence_read(permissions: &PermissionPolicy, resolved: &Path) -> Option<ToolError> {
    let path_str = resolved.to_string_lossy();

    let is_sensitive = permissions
        .sensitive_patterns
        .iter()
        .any(|p| matches_pattern(&path_str, p));
    if is_sensitive && permissions.hook.is_none() {
        return Some(
            ToolError::new(
                ToolErrorCode::Sensitive,
                format!("Refusing to read sensitive path: {}", path_str),
            )
            .with_meta(serde_json::json!({ "path": path_str })),
        );
    }

    let inside = permissions
        .roots
        .iter()
        .any(|root| is_inside(&path_str, root));
    if !inside && !permissions.bypass_workspace_guard && permissions.hook.is_none() {
        return Some(
            ToolError::new(
                ToolErrorCode::OutsideWorkspace,
                format!(
                    "Path is outside all configured workspace roots: {}",
                    path_str
                ),
            )
            .with_meta(
                serde_json::json!({ "path": path_str, "roots": permissions.roots }),
            ),
        );
    }
    None
}

fn is_inside(candidate: &str, root: &str) -> bool {
    if candidate == root {
        return true;
    }
    candidate.starts_with(root)
        && (candidate.len() == root.len()
            || matches!(
                candidate.as_bytes().get(root.len()),
                Some(&b'/') | Some(&b'\\')
            ))
}

fn matches_pattern(path: &str, pattern: &str) -> bool {
    if path == pattern {
        return true;
    }
    if let Some(rest) = pattern.strip_prefix("**/") {
        if !rest.contains('/') && !rest.contains('*') {
            let bn = Path::new(path)
                .file_name()
                .and_then(|n| n.to_str())
                .unwrap_or("");
            if bn == rest {
                return true;
            }
            if path.ends_with(&format!("/{}", rest)) {
                return true;
            }
        }
        if let Some(suffix) = rest.strip_prefix("*.") {
            let bn = Path::new(path)
                .extension()
                .and_then(|e| e.to_str())
                .unwrap_or("");
            return bn == suffix;
        }
    }
    if let Some(ext) = pattern.strip_prefix("*.") {
        if !ext.contains('/') && !ext.contains('*') {
            let bn_ext = Path::new(path)
                .extension()
                .and_then(|e| e.to_str())
                .unwrap_or("");
            return bn_ext == ext;
        }
    }
    path.contains(pattern)
}

#[cfg(test)]
mod tests {
    use super::is_inside;

    #[test]
    fn posix_boundary() {
        assert!(is_inside("/a/b/c", "/a/b"));
        assert!(is_inside("/a/b", "/a/b"));
        assert!(!is_inside("/a/bc", "/a/b"));
    }

    #[test]
    fn windows_boundary() {
        // Canonicalize on Windows returns `\\?\C:\...` with `\` separators.
        assert!(is_inside(r"\\?\C:\Users\avife\tools\src\main.rs", r"\\?\C:\Users\avife\tools"));
        assert!(is_inside(r"C:\Users\avife\tools\src", r"C:\Users\avife\tools"));
        assert!(!is_inside(r"C:\Users\avife\tools2", r"C:\Users\avife\tools"));
    }
}