Function check_glob_syntax

crates/openshell-supervisor-network/src/l7/mod.rs:406–442

Check a glob pattern for obvious syntax issues. Returns `Some(warning_message)` if the pattern looks malformed. OPA's `glob.match` is forgiving, so these are warnings (not errors) to surface likely typos without blocking policy loading.

(pattern: &str)

/// OPA's `glob.match` is forgiving, so these are warnings (not errors)
/// to surface likely typos without blocking policy loading.
fn check_glob_syntax(pattern: &str) -> Option<String> {
    let mut bracket_depth: i32 = 0;
    for c in pattern.chars() {
        match c {
            '[' => bracket_depth += 1,
            ']' => {
                if bracket_depth == 0 {
                    return Some(format!("glob pattern '{pattern}' has unmatched ']'"));
                }
                bracket_depth -= 1;
            }
            _ => {}
        }
    }
    if bracket_depth > 0 {
        return Some(format!("glob pattern '{pattern}' has unclosed '['"));
    }

    let mut brace_depth: i32 = 0;
    for c in pattern.chars() {
        match c {
            '{' => brace_depth += 1,
            '}' => {
                if brace_depth == 0 {
                    return Some(format!("glob pattern '{pattern}' has unmatched '}}'"));
                }
                brace_depth -= 1;
            }
            _ => {}
        }
    }
    if brace_depth > 0 {
        return Some(format!("glob pattern '{pattern}' has unclosed '{{'"));
    }

    None
}

fn validate_host_wildcard(errors: &mut Vec<String>, loc: &str, host: &str) {
    if !host.contains('*') {