&& の右側は誰が承認していたのか — コマンドを分解してから allow ルールに当てる

// segment.mjs — シェルコマンドを「承認単位」に分解する
export function splitSegments(command) {
  const segments = [];
  const substitutions = [];
  let buf = '';
  let quote = null;   // "'" または '"'
  let depth = 0;      // $( ) の入れ子の深さ
  let subBuf = '';
  let i = 0;
 
  const flush = () => {
    const t = buf.trim();
    if (t) segments.push(t);
    buf = '';
  };
 
  while (i < command.length) {
    const c = command[i];
    const two = command.slice(i, i + 2);
 
    if (quote) {
      // 単一引用符の中ではエスケープが効かない点に注意
      if (c === '\\' && quote === '"') { buf += c + (command[i + 1] ?? ''); i += 2; continue; }
      if (c === quote) quote = null;
      // 二重引用符の内側でもコマンド置換は起きる
      if (quote === '"' && two === '$(') { depth++; i += 2; buf += two; subBuf = ''; continue; }
      if (depth > 0) {
        if (c === ')') { depth--; if (depth === 0) substitutions.push(subBuf.trim()); }
        else subBuf += c;
      }
      buf += c; i++; continue;
    }
 
    if (depth > 0) {
      if (c === ')') { depth--; if (depth === 0) { substitutions.push(subBuf.trim()); subBuf = ''; } }
      else subBuf += c;
      buf += c; i++; continue;
    }
 
    if (c === "'" || c === '"') { quote = c; buf += c; i++; continue; }
    if (c === '\\') { buf += c + (command[i + 1] ?? ''); i += 2; continue; }
    if (two === '$(') { depth++; i += 2; buf += two; subBuf = ''; continue; }
 
    if (c === '`') {
      const end = command.indexOf('`', i + 1);
      const inner = end === -1 ? command.slice(i + 1) : command.slice(i + 1, end);
      substitutions.push(inner.trim());
      buf += command.slice(i, end === -1 ? command.length : end + 1);
      i = end === -1 ? command.length : end + 1;
      continue;
    }
 
    if (two === '&&' || two === '||') { flush(); i += 2; continue; }
    if (c === ';' || c === '|' || c === '\n') { flush(); i++; continue; }
 
    buf += c; i++;
  }
 
  flush();
  // 引用符や括弧が閉じていないものは、判定せず人間に回す
  if (quote || depth > 0) return { segments, substitutions, malformed: true };
  return { segments, substitutions, malformed: false };
}

const REDIRECT = /(?:^|\s)\d?>>?\s*("[^"]*"|'[^']*'|\S+)/g;
 
export function redirectTargets(segment) {
  const out = [];
  let m;
  REDIRECT.lastIndex = 0;
  while ((m = REDIRECT.exec(segment)) !== null) {
    const raw = m[1].replace(/^['"]|['"]$/g, '');
    if (raw !== '&1' && raw !== '&2' && raw !== '/dev/null') out.push(raw);
  }
  return out;
}

import { splitSegments, redirectTargets } from './segment.mjs';
 
export function parseRule(rule) {
  const m = /^Bash\((.+?)(:\*)?\)$/.exec(rule.trim());
  if (!m) throw new Error(`unparsable rule: ${rule}`);
  return { prefix: m[1].trim(), wildcard: Boolean(m[2]), raw: rule.trim() };
}
 
const norm = (s) => s.replace(/\s+/g, ' ').trim();
 
export function matchSegment(segment, rules) {
  const s = norm(segment);
  for (const r of rules) {
    if (r.wildcard ? (s === r.prefix || s.startsWith(r.prefix + ' ')) : s === r.prefix) return r;
  }
  return null;
}
 
export function evaluate(command, rules, opts = {}) {
  const writeRoots = opts.writeRoots ?? [];
  const { segments, substitutions, malformed } = splitSegments(command);
  if (malformed) return { verdict: 'REVIEW', reason: 'unbalanced-quote', segments, blockers: [] };
 
  const blockers = [];
  for (const seg of segments) {
    if (!matchSegment(seg, rules)) blockers.push({ kind: 'unmatched-segment', segment: seg });
    for (const t of redirectTargets(seg)) {
      if (!writeRoots.some((root) => t.startsWith(root))) {
        blockers.push({ kind: 'write-outside-root', segment: seg, target: t });
      }
    }
  }
  // 中身は実行前に確定しない。読めないものは許可しない
  for (const sub of substitutions) blockers.push({ kind: 'command-substitution', segment: sub });
 
  return {
    verdict: blockers.length === 0 ? 'ALLOW' : 'REVIEW',
    segments, substitutions, blockers,
  };
}