tf-types 0.1.8

Core semantic types, traits, and schemas powering the TrustForge protocol.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60

//! B8 glob tests — Rust mirror of TS b8-guard-policy.test.ts
//! (the bits applicable to AgentGuard).

use serde_json::json;
use tf_types::guard::{AgentGuard, GuardQuery};

#[test]
fn question_mark_in_pattern_no_longer_matches_one_fewer_char() {
    let guard = AgentGuard::from_contract(&json!({
        "contract_version": "1",
        "spec_version": "TF-0006-draft",
        "project": "b8",
        "trust_domain": "example.com",
        "actions": [{
            "name": "fs.write",
            "risk": "R0",
            "approval": "none",
            "reversible": true,
            "deny_actors": ["tf:actor:user?"],
        }],
    }));
    let a = guard.check(&GuardQuery {
        actor: Some("tf:actor:user?".to_string()),
        actor_claim: None,
        action: "fs.write".to_string(),
        target: None,
    });
    let b = guard.check(&GuardQuery {
        actor: Some("tf:actor:use".to_string()),
        actor_claim: None,
        action: "fs.write".to_string(),
        target: None,
    });
    assert_eq!(a.kind(), "deny");
    assert_eq!(b.kind(), "allow");
}

#[test]
fn non_ascii_glob_pattern_matches_non_ascii_actor() {
    let guard = AgentGuard::from_contract(&json!({
        "contract_version": "1",
        "spec_version": "TF-0006-draft",
        "project": "b8",
        "trust_domain": "example.com",
        "actions": [{
            "name": "fs.write",
            "risk": "R0",
            "approval": "none",
            "reversible": true,
            "allow_actors": ["tf:actor:human:example.com/résumé"],
        }],
    }));
    let ok = guard.check(&GuardQuery {
        actor: Some("tf:actor:human:example.com/résumé".to_string()),
        actor_claim: None,
        action: "fs.write".to_string(),
        target: None,
    });
    assert_eq!(ok.kind(), "allow");
}