shepherd-core 6.6.0

The harness-agnostic shepherd engine: domain types, configuration schema, and run state. Knows nothing about any CLI, harness, or process.
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83

//! Repository paths preserve case; role, run, lane, and agent IDs keep their
//! independent lowercase grammars. This suite never normalizes filesystem names.

#![cfg(feature = "alloc")]

use shepherd_core::dispatch::{PathAuthority, path_in_write_scope};

#[test]
fn exact_repository_scopes_accept_canonical_mixed_case_file_names() {
    for path in [
        "Cargo.toml",
        "Cargo.lock",
        "README.md",
        "crates/cli/Cargo.toml",
        "docs/ApiContract.md",
    ] {
        let authority = PathAuthority::exact(path).expect("case-preserving repository path");
        assert_eq!(authority.as_str(), path);
        assert!(authority.contains(path).expect("exact path match"));
        assert!(
            !authority
                .contains(&path.to_ascii_lowercase())
                .expect("different case stays distinct")
        );
    }
}

#[test]
fn repository_globs_match_case_exactly_and_keep_segment_boundaries() {
    let authority = PathAuthority::new("Docs/*.md").expect("case-preserving bounded glob");
    assert!(
        authority
            .contains("Docs/README.md")
            .expect("matching parent and extension")
    );
    assert!(
        !authority
            .contains("docs/README.md")
            .expect("parent case is not folded")
    );
    assert!(
        !authority
            .contains("Docs/README.MD")
            .expect("extension case is not folded")
    );
    assert!(
        !authority
            .contains("Docs/nested/README.md")
            .expect("one segment is not recursive")
    );
    assert!(
        !path_in_write_scope("Cargo.toml", &["cargo.toml".into()]).expect("exact case comparison")
    );
}

#[test]
fn mixed_case_paths_do_not_relax_windows_or_traversal_denials() {
    for path in [
        "",
        "*",
        "**",
        "/Cargo.toml",
        "../Cargo.toml",
        "docs/../Cargo.toml",
        "./Cargo.toml",
        "docs//Cargo.toml",
        "C:/repo/Cargo.toml",
        "C:\\repo\\Cargo.toml",
        "\\\\host\\share\\Cargo.toml",
        "Cargo.toml:stream",
        "Cargo.toml.",
        "Cargo.toml ",
        "DOCS~1/Cargo.toml",
        "Docs/Cargo.toml\0",
        "Docs/Cargo.toml\n",
        "Döcs/Cargo.toml",
    ] {
        assert!(
            PathAuthority::new(path).is_err(),
            "unsafe authority must remain denied: {path:?}"
        );
    }
}