mirror of
https://github.com/hanzoai/dev.git
synced 2026-10-25 03:32:32 +00:00
zeekay
25f1f1da4f
codex-rs/ is a read-only mirror of openai/codex that just-every refreshes and we never edit. It sat at the repo root next to code-rs/, the product, and the only thing separating them was that everyone knew. Nothing checked it. That knowing is what makes branding endless. There are ~400 upstream-brand literals in code-rs today and ~224 of ours, hand-placed on the same lines the sync delta lands on, so every sync re-fights the same 17 files. You cannot fix that while the line between "theirs" and "ours" is a convention. vendor/codex/ makes it a boundary. Everything under vendor/ is upstream: never branded, never edited, replaced wholesale on sync. Everything outside it is ours and must carry our name — which is now a question a test can ask. code-rs coupled to the mirror through exactly one line, an include_str! of models.json, and it still does. The other 17 files are path strings. Syncing changes by one sed: just-every's delta names codex-rs/, so rewrite the patch paths to vendor/codex/ before applying it.
79 lines
1.3 KiB
Plaintext
79 lines
1.3 KiB
Plaintext
|
|
# Example policy to illustrate syntax; not comprehensive and not recommended for actual use.
|
|
|
|
prefix_rule(
|
|
pattern = ["git", "reset", "--hard"],
|
|
decision = "forbidden",
|
|
justification = "destructive operation",
|
|
match = [
|
|
["git", "reset", "--hard"],
|
|
],
|
|
not_match = [
|
|
["git", "reset", "--keep"],
|
|
"git reset --merge",
|
|
],
|
|
)
|
|
|
|
prefix_rule(
|
|
pattern = ["ls"],
|
|
match = [
|
|
["ls"],
|
|
["ls", "-l"],
|
|
["ls", "-a", "."],
|
|
],
|
|
)
|
|
|
|
prefix_rule(
|
|
pattern = ["cat"],
|
|
match = [
|
|
["cat", "file.txt"],
|
|
["cat", "-n", "README.md"],
|
|
],
|
|
)
|
|
|
|
prefix_rule(
|
|
pattern = ["cp"],
|
|
decision = "prompt",
|
|
match = [
|
|
["cp", "foo", "bar"],
|
|
"cp -r src dest",
|
|
],
|
|
)
|
|
|
|
prefix_rule(
|
|
pattern = ["head"],
|
|
match = [
|
|
["head", "README.md"],
|
|
["head", "-n", "5", "CHANGELOG.md"],
|
|
],
|
|
not_match = [
|
|
["hea", "-n", "1,5p", "CHANGELOG.md"],
|
|
],
|
|
)
|
|
|
|
prefix_rule(
|
|
pattern = ["printenv"],
|
|
match = [
|
|
["printenv"],
|
|
["printenv", "PATH"],
|
|
],
|
|
not_match = [
|
|
["print", "-0"],
|
|
],
|
|
)
|
|
|
|
prefix_rule(
|
|
pattern = ["pwd"],
|
|
match = [
|
|
["pwd"],
|
|
],
|
|
)
|
|
|
|
prefix_rule(
|
|
pattern = ["which"],
|
|
match = [
|
|
["which", "python3"],
|
|
["which", "-a", "python3"],
|
|
],
|
|
)
|