openmoat 0.8.0

Policy checks for AI coding agents: decides allow, defer, ask or deny for every tool call from Claude Code, Codex and Cursor, configures Claude Code's and Codex's own OS sandboxes from the same policy, and keeps a local audit log.
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47

//! How each host sends one tool call and reads the hook's reply. The host
//! adapters (`openmoat_hosts::bench`) know each host; this module only maps
//! the hook process's end to what they read.

use openmoat_core::Verdict;
use openmoat_hosts::Host;
use openmoat_hosts::bench::Exit;
pub use openmoat_hosts::bench::{Answer, Place};

use super::Call;
use super::hook::Reply;

/// The answer a host must end up with for `verdict` on `call` ([`Host::seen`]).
pub fn seen(host: Host, call: &Call, verdict: Verdict) -> Answer {
    host.seen(call, verdict)
}

/// Read the hook's reply the way `host` does. A hook that timed out or could
/// not start is a failure on every host.
pub fn classify(host: Host, call: &Call, reply: &Reply) -> Answer {
    let Reply::Exited {
        code,
        stdout,
        stderr,
    } = reply
    else {
        return Answer::Error;
    };
    host.read_reply(
        call,
        &Exit {
            code: *code,
            stdout,
            stderr,
        },
    )
}

/// What `host` does when its hook is missing, crashes or times out.
pub fn failure(host: Host) -> &'static str {
    host.spec().on_hook_failure
}

/// The hook payload for `call`, or `None` when this host has no tool for it.
pub fn payload(host: Host, call: &Call, at: &Place<'_>) -> Option<String> {
    host.bench_payload(call, at)
}