Files
portal/tools
Дмитрий d75c8922aa fix(router-gate-v4): Stream H Task 9 — cosmetic path-format fixes (Cygwin /c/ prefix + PowerShell $env:VAR expansion)
Closes Stream H Task 9 (H3). Two cosmetic fixes in tools/path-normalization.mjs
for gate error messages observed during Smoke 5 Real Fix Re-test 2026-05-30
(steps 4 and 5). Both purely affect human-readable display in block messages
— security behaviour is unchanged (path-deny still fires correctly in all
the original test scenarios).

1. Cygwin/git-bash `/c/Users/...` prefix collapsed before path.resolve.
   On win32, path.resolve('/c/Users/x') treats `/c/...` as drive-relative
   and prepends cwd's drive letter, producing display paths like
   `c:/c/users/...` (doubled drive). The fix inserts a single-letter-drive
   normalization step BEFORE resolve when the input looks Cygwin-style.
   Guarded by `homedir matches ^[a-zA-Z]:` so POSIX test fixtures
   (homedir='/h') still get the original behaviour.

2. PowerShell `$env:USERPROFILE` syntax expanded in expandEnvVars.
   The expander handled `%NAME%`, `${NAME}`, and bare `$NAME` but not
   the PowerShell-native `$env:NAME` form, so messages displayed the
   literal `$env:USERPROFILE` instead of the expanded path. Added a
   case-insensitive matcher (PowerShell is case-insensitive) covering
   all ENV_WHITELIST names. Non-whitelisted `$env:SECRET` still passes
   through unchanged.

Regression: vitest tools 1776/1776 GREEN (was 1772; +4 new tests across
"pathNormalize" (+1 cygwin), "expandEnvVars — PowerShell $env:VAR
(Stream H Task 9 cosmetic)" (+3)). One pre-existing test ("case-folds on
win32") would have broken without the homedir-drive guard — guard
preserves it.

Stream H Task 9 of 11. Plan: docs/superpowers/plans/2026-05-30-router-gate-v4-stream-H.md
2026-05-30 11:43:31 +03:00
..