rusty-pwgen 0.1.0

Generate pronounceable or random passwords from the OS CSPRNG — a Rust port of Theodore Ts'o's `pwgen` with strict-compat mode, deterministic `-H` reproducible mode (SHA256 + ChaCha20), and a typed library API.
Documentation
//! Compatibility mode resolution (FR-022).
//!
//! Precedence ladder:
//! 1. Explicit `--strict` / `--no-strict` flag wins.
//! 2. `RUSTY_PWGEN_STRICT=1` env var.
//! 3. `argv[0]` basename equals `pwgen` (after `.exe` strip on Windows).
//! 4. Default mode.

use crate::CompatibilityMode;
use std::ffi::OsStr;
use std::path::Path;

pub fn resolve(
    strict_flag: Option<bool>,
    env_strict: Option<&OsStr>,
    argv0: Option<&OsStr>,
) -> CompatibilityMode {
    if let Some(flag) = strict_flag {
        return if flag {
            CompatibilityMode::Strict
        } else {
            CompatibilityMode::Default
        };
    }
    if let Some(value) = env_strict {
        if env_var_is_truthy(value) {
            return CompatibilityMode::Strict;
        }
    }
    if let Some(arg0) = argv0 {
        if argv0_implies_strict(arg0) {
            return CompatibilityMode::Strict;
        }
    }
    CompatibilityMode::Default
}

fn env_var_is_truthy(value: &OsStr) -> bool {
    let Some(s) = value.to_str() else {
        return false;
    };
    matches!(
        s.trim().to_ascii_lowercase().as_str(),
        "1" | "true" | "yes" | "on"
    )
}

fn argv0_implies_strict(arg0: &OsStr) -> bool {
    let Some(stem) = Path::new(arg0).file_stem() else {
        return false;
    };
    stem == OsStr::new("pwgen")
}

#[cfg(test)]
mod tests {
    use super::*;

    #[test]
    fn explicit_strict_wins() {
        assert_eq!(resolve(Some(true), None, None), CompatibilityMode::Strict);
        assert_eq!(
            resolve(
                Some(false),
                Some(OsStr::new("1")),
                Some(OsStr::new("pwgen"))
            ),
            CompatibilityMode::Default
        );
    }

    #[test]
    fn env_var_truthy() {
        for v in ["1", "true", "yes", "on", "TRUE", " 1 "] {
            assert_eq!(
                resolve(None, Some(OsStr::new(v)), None),
                CompatibilityMode::Strict
            );
        }
    }

    #[test]
    fn env_var_falsy() {
        for v in ["0", "false", "no", "", "off"] {
            assert_eq!(
                resolve(None, Some(OsStr::new(v)), None),
                CompatibilityMode::Default
            );
        }
    }

    #[test]
    fn argv0_pwgen_implies_strict() {
        assert_eq!(
            resolve(None, None, Some(OsStr::new("pwgen"))),
            CompatibilityMode::Strict
        );
        assert_eq!(
            resolve(None, None, Some(OsStr::new("/usr/local/bin/pwgen"))),
            CompatibilityMode::Strict
        );
        assert_eq!(
            resolve(None, None, Some(OsStr::new("pwgen.exe"))),
            CompatibilityMode::Strict
        );
    }

    #[test]
    fn argv0_rusty_pwgen_does_not_imply_strict() {
        assert_eq!(
            resolve(None, None, Some(OsStr::new("rusty-pwgen"))),
            CompatibilityMode::Default
        );
        assert_eq!(
            resolve(None, None, Some(OsStr::new("rusty-pwgen.exe"))),
            CompatibilityMode::Default
        );
    }

    #[test]
    fn default_when_nothing_set() {
        assert_eq!(resolve(None, None, None), CompatibilityMode::Default);
    }

    #[test]
    fn ladder_strict_flag_beats_env() {
        assert_eq!(
            resolve(Some(false), Some(OsStr::new("1")), None),
            CompatibilityMode::Default
        );
    }

    #[test]
    fn ladder_env_beats_argv0() {
        assert_eq!(
            resolve(None, Some(OsStr::new("1")), Some(OsStr::new("rusty-pwgen"))),
            CompatibilityMode::Strict
        );
    }
}