coder

Documentation

Index

• func GetSuggestedPattern(toolName, args string) string
• func NormalizeCoderArgs(args string) (subcommand string, normalized string)
• type Action
• type PolicyManager
  • func NewPolicyManager(logger *zap.Logger) (*PolicyManager, error)
  • func (pm *PolicyManager) ActivePolicyPath() string
  • func (pm *PolicyManager) AddRule(pattern string, action Action) error
  • func (pm *PolicyManager) Check(toolName, args string) Action
  • func (pm *PolicyManager) LastMatchedRule() (Rule, bool)
  • func (pm *PolicyManager) LocalMergeEnabled() bool
  • func (pm *PolicyManager) LocalPolicyPath() string
  • func (pm *PolicyManager) RulesCount() int
• type Rule
• type SecurityDecision
  • func PromptSecurityCheck(ctx context.Context, toolName, args string) SecurityDecision

Functions

func GetSuggestedPattern

func GetSuggestedPattern(toolName, args string) string

GetSuggestedPattern returns a suggested policy pattern for the given tool invocation. For exec commands, it returns empty string to prevent "Allow Always" from being offered -- exec should always require per-command approval since any shell command could be destructive.

func NormalizeCoderArgs

func NormalizeCoderArgs(args string) (subcommand string, normalized string)

NormalizeCoderArgs parses raw tool call args (JSON or CLI format) and returns:

• subcommand: the extracted subcommand name (e.g., "read", "exec")
• normalized: the full normalized CLI-style string with sorted flags (e.g., "read --file main.go") suitable for deterministic prefix matching.

When the subcommand cannot be determined, both return values are empty. This is a safe default because Check() will fall through to ActionAsk.

Types

type Action

type Action string

const (
	ActionAllow Action = "allow"
	ActionDeny  Action = "deny"
	ActionAsk   Action = "ask"
)

type PolicyManager

type PolicyManager struct {
	Rules []Rule `json:"rules"`
	// contains filtered or unexported fields
}

func NewPolicyManager

func NewPolicyManager(logger *zap.Logger) (*PolicyManager, error)

func (*PolicyManager) ActivePolicyPath

func (pm *PolicyManager) ActivePolicyPath() string

func (*PolicyManager) AddRule

func (pm *PolicyManager) AddRule(pattern string, action Action) error

func (*PolicyManager) Check

func (pm *PolicyManager) Check(toolName, args string) Action

func (*PolicyManager) LastMatchedRule

func (pm *PolicyManager) LastMatchedRule() (Rule, bool)

func (*PolicyManager) LocalMergeEnabled

func (pm *PolicyManager) LocalMergeEnabled() bool

func (*PolicyManager) LocalPolicyPath

func (pm *PolicyManager) LocalPolicyPath() string

func (*PolicyManager) RulesCount

func (pm *PolicyManager) RulesCount() int

type Rule

type Rule struct {
	Pattern string `json:"pattern"`
	Action  Action `json:"action"`
}

type SecurityDecision

type SecurityDecision int

const (
	DecisionRunOnce SecurityDecision = iota
	DecisionAllowAlways
	DecisionDenyOnce
	DecisionDenyForever
)

func PromptSecurityCheck

func PromptSecurityCheck(ctx context.Context, toolName, args string) SecurityDecision