openmoat-core 0.18.0

Policy model and decision engine for OpenMoat. Pure: no I/O, no OS calls.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115

use super::*;
use crate::RepoPolicy;

const USER: &str = "version: 1\nrequire:\n  protection: hook-and-os-sandbox\n  \
    agents:\n    gemini-cli: hook-only\n";

fn level(p: &Policy, host: Option<&str>) -> Option<RequiredLevel> {
    p.required_for(host).map(|r| r.level)
}

#[test]
fn levels_order_from_weakest_to_strongest() {
    assert!(RequiredLevel::HookOnly < RequiredLevel::HookAndOsSandbox);
    assert_eq!(
        RequiredLevel::HookAndOsSandbox.as_str(),
        "hook-and-os-sandbox"
    );
    assert_eq!(RequiredLevel::HookOnly.as_str(), "hook-only");
}

#[test]
fn absent_means_no_requirement() {
    let p = Policy::parse("version: 1\n").unwrap();
    assert_eq!(p.required_for(Some("codex")), None);
    assert_eq!(p.required_for(None), None);
    let p = Policy::parse(crate::DEFAULT_POLICY).unwrap();
    assert_eq!(p.require, None, "the default policy requires nothing");
    assert_eq!(p.required_for(Some("claude-code")), None);
}

#[test]
fn an_agents_own_level_takes_the_place_of_protection_in_the_same_file() {
    let p = Policy::parse(USER).unwrap();
    assert_eq!(
        level(&p, Some("codex")),
        Some(RequiredLevel::HookAndOsSandbox)
    );
    assert_eq!(level(&p, Some("gemini-cli")), Some(RequiredLevel::HookOnly));
    // A program that is no known agent gets `protection` alone.
    assert_eq!(level(&p, None), Some(RequiredLevel::HookAndOsSandbox));
    assert_eq!(
        p.required_for(Some("codex")).unwrap().by,
        RequiredBy::Policy
    );
}

#[test]
fn bad_levels_ids_and_keys_are_rejected() {
    for bad in [
        "version: 1\nrequire:\n  protection: os-sandbox\n",
        "version: 1\nrequire:\n  protection: none\n",
        "version: 1\nrequire:\n  level: hook-only\n",
        "version: 1\nrequire:\n  agents:\n    Claude Code: hook-only\n",
        "version: 1\nrequire:\n  agents:\n    codex: sandbox\n",
        "version: 1\nrequire: hook-only\n",
    ] {
        assert!(Policy::parse(bad).is_err(), "{bad} must be rejected");
    }
}

#[test]
fn a_repository_raises_the_level_and_never_lowers_it() {
    let user = Policy::parse(USER).unwrap();
    // Every way a repository could try to lower it: a lower level for
    // all agents, for one agent, and for the agent the user lowered.
    for lower in [
        "version: 1\nrequire:\n  protection: hook-only\n",
        "version: 1\nrequire:\n  agents:\n    codex: hook-only\n",
        "version: 1\nrequire: {}\n",
    ] {
        let repo = RepoPolicy::parse(lower).unwrap();
        for trusted in [false, true] {
            let merged = repo.merge(&user, trusted).unwrap();
            assert_eq!(
                merged.required_for(Some("codex")),
                user.required_for(Some("codex")),
                "{lower}"
            );
            assert_eq!(merged.required_for(None), user.required_for(None));
        }
    }
    // Raising: the agent the user lowered, and every agent of a user
    // policy that requires nothing.
    let raise =
        RepoPolicy::parse("version: 1\nrequire:\n  protection: hook-and-os-sandbox\n").unwrap();
    let merged = raise.merge(&user, false).unwrap();
    let gemini = merged.required_for(Some("gemini-cli")).unwrap();
    assert_eq!(gemini.level, RequiredLevel::HookAndOsSandbox);
    assert_eq!(gemini.by, RequiredBy::Repository);
    // An equal level keeps the person's own policy as its source.
    assert_eq!(
        merged.required_for(Some("codex")).unwrap().by,
        RequiredBy::Policy
    );
    let none = Policy::parse("version: 1\n").unwrap();
    let merged = raise.merge_deny(&none).unwrap();
    assert_eq!(
        level(&merged, Some("pi")),
        Some(RequiredLevel::HookAndOsSandbox)
    );
}

#[test]
fn the_strictest_of_every_source_applies() {
    let mut p = Policy::parse("version: 1\nrequire:\n  protection: hook-only\n").unwrap();
    let pack = Require {
        protection: None,
        agents: [("codex".to_owned(), RequiredLevel::HookAndOsSandbox)].into(),
    };
    p.add_requirement(RequiredBy::Pack("team".into()), &pack);
    let codex = p.required_for(Some("codex")).unwrap();
    assert_eq!(codex.level, RequiredLevel::HookAndOsSandbox);
    assert_eq!(codex.by, RequiredBy::Pack("team".into()));
    assert_eq!(level(&p, Some("cursor")), Some(RequiredLevel::HookOnly));
}