Function codex_plugin_hook_trust_state

src/agents/codex.rs:681–710

(config: &toml::Value)

}

fn codex_plugin_hook_trust_state(config: &toml::Value) -> CodexHookTrustState {
    // A missing [hooks.state] table is just "nothing trusted yet" — treat it
    // as empty so one pipeline produces the missing list either way.
    let empty = toml::value::Table::new();
    let state = config
        .get("hooks")
        .and_then(|hooks| hooks.get("state"))
        .and_then(|state| state.as_table())
        .unwrap_or(&empty);

    let missing: Vec<String> = CODEX_MANAGED_HOOKS
        .iter()
        .map(codex_hook_state_event_key)
        .filter(|event_key| {
            let trust_key = format!("{CODEX_PERSONAL_PLUGIN_HOOK_TRUST_PREFIX}{event_key}:0:0");
            !state.get(&trust_key).is_some_and(|entry| {
                entry
                    .get("trusted_hash")
                    .and_then(|hash| hash.as_str())
                    .is_some_and(|hash| hash.starts_with("sha256:"))
            })
        })
        .collect();

    if missing.is_empty() {
        CodexHookTrustState::Trusted
    } else {
        CodexHookTrustState::Missing(missing)
    }
}

fn codex_plugin_hooks(raw: &str, tracedecay_bin: &str) -> Result<String> {
    let mut hooks: serde_json::Value = serde_json::from_str(raw)?;