Function checkMaxField

pkg/workflow/safe_outputs_max_validation.go:29–46

checkMaxField validates a single safe-output max field value. Returns an error if the max value is invalid (0 or negative, except -1). Returns nil if the max pointer is nil, the value is an expression, or is valid.

(toolName string, maxPtr *string)

// Returns an error if the max value is invalid (0 or negative, except -1).
// Returns nil if the max pointer is nil, the value is an expression, or is valid.
func checkMaxField(toolName string, maxPtr *string) error {
	if maxPtr == nil || isExpression(*maxPtr) {
		return nil
	}
	n, err := strconv.Atoi(*maxPtr)
	if err != nil {
		return nil
	}
	if isInvalidMaxValue(n) {
		toolDisplayName := strings.ReplaceAll(toolName, "_", "-")
		safeOutputsMaxValidationLog.Printf("Invalid max value %d for %s", n, toolDisplayName)
		return fmt.Errorf(
			"safe-outputs.%s: max must be a positive integer or -1 (unlimited), got %d%s",
			toolDisplayName, n, maxInvalidErrSuffix,
		)
	}
	return nil
}

// validateSafeOutputsMax validates that all max fields in safe-outputs configs hold valid values.
// Valid values are positive integers (n > 0) or -1 (unlimited per spec).