openmoat 0.7.0

Policy checks for AI coding agents: decides allow, defer, ask or deny for every tool call from Claude Code, Codex and Cursor, configures Claude Code's and Codex's own OS sandboxes from the same policy, and keeps a local audit log.
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118

//! `moat doctor --format json`: every check as one document, for tools that
//! show them (the `MoatBar` app). The same rows and exit code as the text output.

use anyhow::Result;
use serde::Serialize;

use super::Area;
use crate::exit::Code;
use crate::render;

/// How a row reads.
#[derive(Debug, Clone, Copy, PartialEq, Eq, Serialize)]
#[serde(rename_all = "snake_case")]
pub(super) enum Status {
    /// `✔`: fine.
    Ok,
    /// `✗`: a problem; the exit code is not 0.
    Problem,
    /// `!`: needs a look, the exit code stays 0.
    Warning,
    /// `·`: information.
    Note,
}

/// One row: the text output's line, split into its label and the rest.
#[derive(Debug, Clone, PartialEq, Eq, Serialize)]
pub(super) struct Row {
    status: Status,
    #[serde(skip_serializing_if = "Option::is_none")]
    area: Option<Area>,
    /// The left column (`policy`, `lock`, `Claude Code`), without its padding.
    name: String,
    /// The rest of the line.
    detail: String,
}

impl Row {
    /// The text output pads a label to a column, then the detail follows after
    /// at least two spaces; a line without such a gap is all detail.
    pub(super) fn new(status: Status, area: Option<Area>, text: &str) -> Self {
        let (name, detail) = match text.find("  ") {
            Some(at) => (text[..at].trim(), text[at..].trim()),
            None => ("", text.trim()),
        };
        Self {
            status,
            area,
            name: name.to_owned(),
            detail: detail.to_owned(),
        }
    }
}

#[derive(Serialize)]
struct Document<'a> {
    healthy: bool,
    problems: usize,
    checks: &'a [Row],
}

/// Print the document; the exit code is the text output's.
pub(super) fn finish(rows: &[Row], problems: usize) -> Result<Code> {
    render::json(&Document {
        healthy: problems == 0,
        problems,
        checks: rows,
    })?;
    Ok(if problems == 0 { Code::Ok } else { Code::Usage })
}

#[cfg(test)]
mod tests {
    use super::*;

    #[test]
    fn a_row_splits_its_label_from_the_detail() {
        let row = Row::new(
            Status::Ok,
            Some(Area::Policy),
            "policy           /home/u/.moat/policy.yaml",
        );
        assert_eq!(
            (row.name.as_str(), row.detail.as_str()),
            ("policy", "/home/u/.moat/policy.yaml")
        );
        let row = Row::new(
            Status::Note,
            None,
            "Claude Code      protection: hook + sandbox",
        );
        assert_eq!(row.name, "Claude Code");
        let row = Row::new(Status::Warning, None, "healthy");
        assert_eq!((row.name.as_str(), row.detail.as_str()), ("", "healthy"));
    }

    #[test]
    fn the_document_names_each_status() {
        let rows = [
            Row::new(Status::Ok, Some(Area::Lock), "lock             intact"),
            Row::new(
                Status::Problem,
                Some(Area::Hook),
                "Codex            hook missing",
            ),
        ];
        let value = serde_json::to_value(Document {
            healthy: false,
            problems: 1,
            checks: &rows,
        })
        .unwrap();
        assert_eq!(value["checks"][0]["status"], "ok");
        assert_eq!(value["checks"][0]["area"], "lock");
        assert_eq!(value["checks"][1]["status"], "problem");
        assert_eq!(value["checks"][1]["detail"], "hook missing");
        assert_eq!(value["healthy"], false);
    }
}