openmoat 0.13.0

Policy checks for AI coding agents: decides allow, defer, ask or deny for every tool call from Claude Code, Codex, Cursor, OpenClaw, GitHub Copilot CLI, pi and Gemini CLI, configures Claude Code's, Codex's and Cursor's own OS sandboxes from the same policy, and keeps a local audit log.
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73

use openmoat_hosts::AutoStart;

use super::*;

fn reader() -> &'static dyn McpAutoStart {
    "claude-code"
        .parse::<Host>()
        .unwrap()
        .spec()
        .mcp
        .as_ref()
        .unwrap()
        .auto_start
        .unwrap()
}

#[test]
fn a_named_or_every_server_starts_unless_turned_off() {
    let mut started = Started::default();
    started.add(
        "/p/.claude/settings.local.json",
        vec![AutoStart::Named {
            key: "enabledMcpjsonServers",
            name: "db".to_owned(),
        }],
    );
    assert!(started.by("db").unwrap().contains("settings.local.json"));
    assert_eq!(started.by("web"), None);
    let root = serde_json::json!({"enableAllProjectMcpServers": true,
        "disabledMcpjsonServers": ["web"]});
    started.add(
        "/u/settings.json",
        reader().settings(root.as_object().unwrap()),
    );
    assert!(
        started
            .by("other")
            .unwrap()
            .contains("enableAllProjectMcpServers")
    );
    assert_eq!(started.by("web"), None, "turned off wins");
    assert!(started.by("db").unwrap().contains("enabledMcpjsonServers"));
}

#[test]
fn each_kind_says_what_to_do() {
    let row = |kind| Outside {
        host: "claude-code".parse().unwrap(),
        name: "gh".to_owned(),
        file: PathBuf::from("/h/.claude.json"),
        kind,
    };
    assert!(
        row(Kind::Unwrapped { user: true })
            .describe()
            .contains("openmoat mcp wrap gh")
    );
    assert!(
        row(Kind::Unwrapped { user: false })
            .describe()
            .contains("project's server")
    );
    assert!(
        row(Kind::Unsandboxed)
            .describe()
            .contains("without the sandbox")
    );
    let by = row(Kind::AutoStarted {
        by: "`x` in f".to_owned(),
    })
    .describe();
    assert!(by.contains("without asking (`x` in f)"), "{by}");
}