As described in detail in `codex-rs/execpolicy/README.md` introduced in
this PR, `execpolicy` is a tool that lets you define a set of _patterns_
used to match [`execv(3)`](https://linux.die.net/man/3/execv)
invocations. When a pattern is matched, `execpolicy` returns the parsed
version in a structured form that is amenable to static analysis.
The primary use case is to define patterns match commands that should be
auto-approved by a tool such as Codex. This supports a richer pattern
matching mechanism that the sort of prefix-matching we have done to
date, e.g.:
5e40d9d221/codex-cli/src/approvals.ts (L333-L354)
Note we are still playing with the API and the `system_path` option in
particular still needs some work.
29 lines
603 B
TOML
29 lines
603 B
TOML
[package]
|
|
name = "codex-execpolicy"
|
|
version = "0.1.0"
|
|
edition = "2021"
|
|
|
|
[[bin]]
|
|
name = "codex-execpolicy"
|
|
path = "src/main.rs"
|
|
|
|
[lib]
|
|
name = "codex_execpolicy"
|
|
path = "src/lib.rs"
|
|
|
|
[dependencies]
|
|
anyhow = "1"
|
|
starlark = "0.13.0"
|
|
allocative = "0.3.3"
|
|
clap = { version = "4", features = ["derive"] }
|
|
derive_more = { version = "1", features = ["display"] }
|
|
env_logger = "0.11.5"
|
|
log = "0.4"
|
|
multimap = "0.10.0"
|
|
path-absolutize = "3.1.1"
|
|
regex = "1.11.1"
|
|
serde = { version = "1.0.194", features = ["derive"] }
|
|
serde_json = "1.0.110"
|
|
serde_with = { version = "3", features = ["macros"] }
|
|
tempfile = "3.13.0"
|