gatekeeper-core

module

v0.1.0 Latest Latest Go to latest Published: Jul 10, 2026 License: MIT

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/jim80net/gatekeeper-core

Links

Open Source Insights

README ¶

gatekeeper-core

Shared permission-gate engine for coding agents: load gatekeeper.toml, PCRE2 rule evaluation, deny-wins, harness-neutral tool taxonomy.

Memex-core analog for constraints. Adapters (gatekeeper-claude, gatekeeper-grok, gatekeeper-codex) wrap this substrate; they only change hook wire format, not the rule language.

Module

github.com/jim80net/gatekeeper-core
  /canonical   Decision, ToolCall, Verdict, tool names
  /config      TOML load, layering, on_error
  /engine      PCRE2 Evaluate, GATEKEEPER_INPUT preconditions

go get github.com/jim80net/gatekeeper-core@latest

Policy

One gatekeeper.toml across harnesses. Deny always wins.

Status

Phase 1a extract from the historical monorepo (gatekeeper-claude / internal/{canonical,config,engine}). Binary install path remains claude-gatekeeper in the Claude adapter repo until a later rename.

Namespace

Repos under jim80net only (operator standing rule).

Tests

go test -race -count=1 ./...

Directories ¶

Path	Synopsis
canonical Package canonical defines the harness-agnostic core types shared by the rule engine and every per-harness adapter.	Package canonical defines the harness-agnostic core types shared by the rule engine and every per-harness adapter.
config Package config loads and layers gatekeeper TOML configuration.	Package config loads and layers gatekeeper TOML configuration.
engine Package engine evaluates gatekeeper rules against canonical tool calls.	Package engine evaluates gatekeeper rules against canonical tool calls.

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL