kintsugi-core 0.1.0

Kintsugi core: shared types, deterministic rule engine, policy, decision memory, and the append-only hash-chained event log.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34

//! Decision-memory helpers.
//!
//! The mutable store itself lives on [`crate::EventLog`] (same SQLite file);
//! this module holds the small pure pieces: how a command is hashed into a
//! stable key for the per-repo always-allow / always-deny memory.

use sha2::{Digest, Sha256};

/// Stable hash of a raw command line, used as the memory key within a repo.
///
/// The exact command text is hashed (not the argv), so "always allow this exact
/// command in this repo" means exactly that — a different command, even by a
/// space, is a different key.
pub fn command_hash(raw: &str) -> String {
    let mut hasher = Sha256::new();
    hasher.update(raw.trim().as_bytes());
    hex::encode(hasher.finalize())
}

#[cfg(test)]
mod tests {
    use super::command_hash;

    #[test]
    fn stable_and_trim_insensitive() {
        assert_eq!(command_hash("rm -rf x"), command_hash("  rm -rf x  "));
    }

    #[test]
    fn distinguishes_different_commands() {
        assert_ne!(command_hash("rm -rf x"), command_hash("rm -rf y"));
        assert_eq!(command_hash("ls").len(), 64);
    }
}