openai/codex
1
0
Fork 0
mirror of https://github.com/openai/codex.git synced 2026-09-14 11:57:03 +00:00
Code Issues Packages Projects Releases Wiki Activity

cleanup and prettify

Browse Source
This commit is contained in:
kevin zhao
2025-11-12 14:36:48 -05:00
parent 4d0fffd387
commit b751be9156
4 changed files with 65 additions and 57 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
codex-rs/execpolicy2/README.md
View File

@@ -54,5 +54,5 @@ cargo run -p codex-execpolicy2 -- check git status
cargo run -p codex-execpolicy2 -- --policy path/to/policy.codexpolicy check git status
```
- Example outcomes:
- Match: `{"Match": { ... "decision": "allow" ... }}`
- No match: `"NoMatch"`
- Match: `{"match": { ... "decision": "allow" ... }}`
- No match: `"noMatch"`

6
codex-rs/execpolicy2/src/policy.rs
View File

@@ -59,14 +59,14 @@ impl Policy {
impl std::fmt::Display for Evaluation {
fn fmt(&self, f: &mut std::fmt::Formatter<'_>) -> std::fmt::Result {
match self {
Self::NoMatch => f.write_str("NoMatch"),
Self::NoMatch => f.write_str("noMatch"),
Self::Match {
decision,
matched_rules,
} => {
writeln!(f, "Match {{")?;
writeln!(f, "match {{")?;
writeln!(f, " decision: {decision},")?;
writeln!(f, " matched_rules: [")?;
writeln!(f, " matchedRules: [")?;
for rule in matched_rules {
writeln!(f, " {rule},")?;
}

2
codex-rs/execpolicy2/src/rule.rs
View File

@@ -120,7 +120,7 @@ impl std::fmt::Display for RuleMatch {
decision,
} => write!(
f,
"PrefixRuleMatch {{ matched_prefix: {matched_prefix:?}, decision: {decision} }}"
"prefixRuleMatch {{ matchedPrefix: {matched_prefix:?}, decision: {decision} }}"
),
}
}

110
codex-rs/execpolicy2/tests/basic.rs
View File

@@ -29,12 +29,13 @@ prefix_rule(
.expect("parse policy");
let cmd = tokens(&["git", "status"]);
let evaluation = policy.check(&cmd);
expect![[r#"Match {
decision: allow,
matched_rules: [
PrefixRuleMatch { matched_prefix: ["git", "status"], decision: allow },
]
}"#]]
expect![[r#"
match {
decision: allow,
matchedRules: [
prefixRuleMatch { matchedPrefix: ["git", "status"], decision: allow },
]
}"#]]
.assert_eq(&evaluation.to_string());
}
@@ -56,21 +57,23 @@ prefix_rule(
.assert_eq(&rules_to_string(sh_rules));
let bash_eval = policy.check(&tokens(&["bash", "-c", "echo", "hi"]));
expect![[r#"Match {
decision: allow,
matched_rules: [
PrefixRuleMatch { matched_prefix: ["bash", "-c"], decision: allow },
]
}"#]]
expect![[r#"
match {
decision: allow,
matchedRules: [
prefixRuleMatch { matchedPrefix: ["bash", "-c"], decision: allow },
]
}"#]]
.assert_eq(&bash_eval.to_string());
let sh_eval = policy.check(&tokens(&["sh", "-l", "echo", "hi"]));
expect![[r#"Match {
decision: allow,
matched_rules: [
PrefixRuleMatch { matched_prefix: ["sh", "-l"], decision: allow },
]
}"#]]
expect![[r#"
match {
decision: allow,
matchedRules: [
prefixRuleMatch { matchedPrefix: ["sh", "-l"], decision: allow },
]
}"#]]
.assert_eq(&sh_eval.to_string());
}
@@ -89,21 +92,23 @@ prefix_rule(
.assert_eq(&rules_to_string(rules));
let npm_i = policy.check(&tokens(&["npm", "i", "--legacy-peer-deps"]));
expect![[r#"Match {
decision: allow,
matched_rules: [
PrefixRuleMatch { matched_prefix: ["npm", "i", "--legacy-peer-deps"], decision: allow },
]
}"#]]
expect![[r#"
match {
decision: allow,
matchedRules: [
prefixRuleMatch { matchedPrefix: ["npm", "i", "--legacy-peer-deps"], decision: allow },
]
}"#]]
.assert_eq(&npm_i.to_string());
let npm_install = policy.check(&tokens(&["npm", "install", "--no-save", "leftpad"]));
expect![[r#"Match {
decision: allow,
matched_rules: [
PrefixRuleMatch { matched_prefix: ["npm", "install", "--no-save"], decision: allow },
]
}"#]]
expect![[r#"
match {
decision: allow,
matchedRules: [
prefixRuleMatch { matchedPrefix: ["npm", "install", "--no-save"], decision: allow },
]
}"#]]
.assert_eq(&npm_install.to_string());
}
@@ -122,12 +127,13 @@ prefix_rule(
let parser = PolicyParser::new("test.codexpolicy", policy_src);
let policy = parser.parse().expect("parse policy");
let match_eval = policy.check(&tokens(&["git", "status"]));
expect![[r#"Match {
decision: allow,
matched_rules: [
PrefixRuleMatch { matched_prefix: ["git", "status"], decision: allow },
]
}"#]]
expect![[r#"
match {
decision: allow,
matchedRules: [
prefixRuleMatch { matchedPrefix: ["git", "status"], decision: allow },
]
}"#]]
.assert_eq(&match_eval.to_string());
let no_match_eval = policy.check(&tokens(&[
@@ -136,7 +142,7 @@ prefix_rule(
"color.status=always",
"status",
]));
expect!["NoMatch"].assert_eq(&no_match_eval.to_string());
expect!["noMatch"].assert_eq(&no_match_eval.to_string());
}
#[test]
@@ -159,22 +165,24 @@ prefix_rule(
let policy = parser.parse().expect("parse policy");
let status = policy.check(&tokens(&["git", "status"]));
expect![[r#"Match {
decision: prompt,
matched_rules: [
PrefixRuleMatch { matched_prefix: ["git", "status"], decision: allow },
PrefixRuleMatch { matched_prefix: ["git"], decision: prompt },
]
}"#]]
expect![[r#"
match {
decision: prompt,
matchedRules: [
prefixRuleMatch { matchedPrefix: ["git", "status"], decision: allow },
prefixRuleMatch { matchedPrefix: ["git"], decision: prompt },
]
}"#]]
.assert_eq(&status.to_string());
let commit = policy.check(&tokens(&["git", "commit", "-m", "hi"]));
expect![[r#"Match {
decision: forbidden,
matched_rules: [
PrefixRuleMatch { matched_prefix: ["git"], decision: prompt },
PrefixRuleMatch { matched_prefix: ["git", "commit"], decision: forbidden },
]
}"#]]
expect![[r#"
match {
decision: forbidden,
matchedRules: [
prefixRuleMatch { matchedPrefix: ["git"], decision: prompt },
prefixRuleMatch { matchedPrefix: ["git", "commit"], decision: forbidden },
]
}"#]]
.assert_eq(&commit.to_string());
}