ahmido
1fec9c6f9d
Some checks failed
Main Confidence / confidence (push) Failing after 45s
## Summary - introduce surface-aware compressed governance outcomes and reuse the shared truth/explanation seams for operator-first summaries - apply the compressed outcome hierarchy across baseline, evidence, review, review-pack, canonical review/evidence, and artifact-oriented operation-run surfaces - expand spec 214 fixtures and Pest coverage, and fix tenant-panel route assertions by generating explicit tenant-panel URLs in the affected Filament tests ## Validation - `cd apps/platform && ./vendor/bin/sail bin pint --dirty --format agent` - focused governance compression suite from `specs/214-governance-outcome-compression/quickstart.md` passed (`68` tests, `445` assertions) - `cd apps/platform && ./vendor/bin/sail artisan test --compact tests/Feature/Filament/InventoryItemResourceTest.php tests/Feature/Filament/BackupSetUiEnforcementTest.php tests/Feature/Filament/RestoreRunUiEnforcementTest.php` passed (`18` tests, `81` assertions) Co-authored-by: Ahmed Darrazi <ahmed.darrazi@live.de> Reviewed-on: #253
71 lines
1.8 KiB
Plaintext
71 lines
1.8 KiB
Plaintext
/*
|
|
MIT License http://www.opensource.org/licenses/mit-license.php
|
|
Author Ivan Kopeykin @vankop
|
|
*/
|
|
|
|
"use strict";
|
|
|
|
/** @typedef {import("./Resolver")} Resolver */
|
|
/** @typedef {import("./Resolver").ResolveStepHook} ResolveStepHook */
|
|
|
|
const slashCode = "/".charCodeAt(0);
|
|
const backslashCode = "\\".charCodeAt(0);
|
|
|
|
/**
|
|
* @param {string} path path
|
|
* @param {string} parent parent path
|
|
* @returns {boolean} true, if path is inside of parent
|
|
*/
|
|
const isInside = (path, parent) => {
|
|
if (!path.startsWith(parent)) return false;
|
|
if (path.length === parent.length) return true;
|
|
const charCode = path.charCodeAt(parent.length);
|
|
return charCode === slashCode || charCode === backslashCode;
|
|
};
|
|
|
|
module.exports = class RestrictionsPlugin {
|
|
/**
|
|
* @param {string | ResolveStepHook} source source
|
|
* @param {Set<string | RegExp>} restrictions restrictions
|
|
*/
|
|
constructor(source, restrictions) {
|
|
this.source = source;
|
|
this.restrictions = restrictions;
|
|
}
|
|
|
|
/**
|
|
* @param {Resolver} resolver the resolver
|
|
* @returns {void}
|
|
*/
|
|
apply(resolver) {
|
|
resolver
|
|
.getHook(this.source)
|
|
.tapAsync("RestrictionsPlugin", (request, resolveContext, callback) => {
|
|
if (typeof request.path === "string") {
|
|
const { path } = request;
|
|
for (const rule of this.restrictions) {
|
|
if (typeof rule === "string") {
|
|
if (!isInside(path, rule)) {
|
|
if (resolveContext.log) {
|
|
resolveContext.log(
|
|
`${path} is not inside of the restriction ${rule}`,
|
|
);
|
|
}
|
|
return callback(null, null);
|
|
}
|
|
} else if (!rule.test(path)) {
|
|
if (resolveContext.log) {
|
|
resolveContext.log(
|
|
`${path} doesn't match the restriction ${rule}`,
|
|
);
|
|
}
|
|
return callback(null, null);
|
|
}
|
|
}
|
|
}
|
|
|
|
callback();
|
|
});
|
|
}
|
|
};
|