sboxd 0.1.4

Policy-driven command runner for sandboxed dependency installation
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109

use sbox::dispatch::{command_string, matches};

#[test]
fn command_string_joins_with_single_space() {
    assert_eq!(
        command_string(&["cargo".into(), "build".into()]),
        "cargo build"
    );
    assert_eq!(
        command_string(&["npm".into(), "install".into(), "--save".into()]),
        "npm install --save"
    );
}

#[test]
fn command_string_handles_empty_arguments() {
    assert_eq!(command_string(&[]), "");
    assert_eq!(command_string(&["single".into()]), "single");
}

#[test]
fn exact_match_requires_full_string_equality() {
    assert!(matches("npm install", "npm install"));
    assert!(!matches("npm install", "npm install lodash"));
    assert!(!matches("npm install", "npm"));
}

#[test]
fn wildcard_prefix_matches_substring() {
    assert!(matches("*install", "npm install"));
    assert!(matches("*install", "cargo install"));
    assert!(matches("*install", "npm uninstall"));
}

#[test]
fn wildcard_suffix_requires_match_at_end() {
    assert!(matches("npm *", "npm install lodash"));
    assert!(matches("npm *", "npm install"));
}

#[test]
fn wildcard_both_ends_matches_substring() {
    assert!(matches("*install*", "npm install"));
    assert!(matches("*install*", "cargo install"));
    assert!(matches("*install*", "pip install --upgrade pip install"));
    assert!(matches("*install*", "npm uninstall"));
}

#[test]
fn wildcard_middle_matches_substring() {
    assert!(matches("npm * install", "npm ci install"));
    assert!(matches("npm * install", "npm install install"));
    assert!(!matches("npm * install", "npm ci"));
}

#[test]
fn multiple_wildcards_work_together() {
    assert!(matches("cargo * *", "cargo install --help"));
    assert!(matches("npm * --save", "npm install lodash --save"));
}

#[test]
fn pure_wildcard_matches_anything() {
    assert!(matches("*", "anything"));
    assert!(matches("*", ""));
    assert!(matches("*", "cargo npm pip python"));
}

#[test]
fn special_regex_characters_are_literal() {
    assert!(matches("npm install.", "npm install."));
    assert!(matches("pip install[", "pip install["));
    assert!(matches("curl http://", "curl http://"));
}

#[test]
fn cargo_build_patterns() {
    assert!(matches("cargo build", "cargo build"));
    assert!(matches("cargo build*", "cargo build"));
    assert!(matches("cargo build*", "cargo build --release"));
    assert!(matches(
        "cargo build*",
        "cargo build --release --target x86_64"
    ));
    assert!(!matches("cargo build*", "cargo test"));
}

#[test]
fn python_patterns() {
    assert!(matches("python *", "python -m pytest"));
    assert!(matches("python *", "python script.py"));
    assert!(matches("pip *", "pip install requests"));
    assert!(matches("uv *", "uv sync"));
}

#[test]
fn node_patterns() {
    assert!(matches("npm *", "npm install"));
    assert!(matches("npm *", "npm ci"));
    assert!(matches("npm *", "npm run build"));
    assert!(matches("pnpm *", "pnpm install"));
    assert!(matches("yarn *", "yarn install"));
}

#[test]
fn case_sensitive_matching() {
    assert!(matches("Cargo Build", "Cargo Build"));
    assert!(!matches("Cargo Build", "cargo build"));
}