rebecca-core 0.3.0

use std::path::Path;

use crate::protection::{ProtectionAssessment, ProtectionPolicy};

pub const PATH_DOES_NOT_EXIST_REASON: &str = "path does not exist";

#[derive(Debug, Clone, PartialEq, Eq)]
pub enum PathDisposition {
    Allowed,
    Missing,
    Skipped(String),
    Blocked(String),
}

impl PathDisposition {
    pub fn is_allowed(&self) -> bool {
        matches!(self, Self::Allowed)
    }
}

pub fn assess_path(path: &Path) -> PathDisposition {
    assess_path_with_policy(path, ProtectionPolicy::new())
}

pub fn assess_path_with_policy(path: &Path, policy: ProtectionPolicy<'_>) -> PathDisposition {
    match policy.assess_path(path) {
        ProtectionAssessment::Allowed => PathDisposition::Allowed,
        ProtectionAssessment::Blocked(block) => PathDisposition::Blocked(block.message),
    }
}

pub fn assess_existing_path(path: &Path) -> PathDisposition {
    assess_existing_path_with_policy(path, ProtectionPolicy::new())
}

pub fn assess_existing_path_with_policy(
    path: &Path,
    policy: ProtectionPolicy<'_>,
) -> PathDisposition {
    let path_disposition = assess_path_with_policy(path, policy);
    if !path_disposition.is_allowed() {
        return path_disposition;
    }

    match std::fs::symlink_metadata(path) {
        Ok(metadata) => {
            if is_reparse_like(&metadata) {
                return PathDisposition::Blocked("reparse-point traversal is disabled".to_string());
            }

            PathDisposition::Allowed
        }
        Err(err) if err.kind() == std::io::ErrorKind::NotFound => PathDisposition::Missing,
        Err(err) => PathDisposition::Skipped(format!("failed to inspect path metadata: {err}")),
    }
}

pub fn is_reparse_like(metadata: &std::fs::Metadata) -> bool {
    #[cfg(windows)]
    {
        use std::os::windows::fs::MetadataExt;

        const FILE_ATTRIBUTE_REPARSE_POINT: u32 = 0x0400;
        (metadata.file_attributes() & FILE_ATTRIBUTE_REPARSE_POINT) != 0
            || metadata.file_type().is_symlink()
    }

    #[cfg(not(windows))]
    {
        metadata.file_type().is_symlink()
    }
}