Skip to the content.

Roo Code + fak Integration Guide

This guide shows how to put fak in front of Roo Code, the VS Code AI coding agent. Every tool call Roo Code proposes is adjudicated by the kernel before it runs: denied by structure, repaired, or quarantined.

How it fits

Roo Code (VS Code)  ──▶  fak serve (gateway)  ──▶  your model (cloud or local)
        ▲                  adjudicates every            │
        └────── results ───  tool call ◀────────────────┘

Prerequisites

git clone https://github.com/anthony-chaudhary/fak && cd fak
go build -o fak ./cmd/fak
./fak version
./fak serve \
  --addr 127.0.0.1:8080 \
  --provider openai \
  --base-url http://localhost:11434/v1 \
  --model qwen2.5-coder:7b \
  --policy examples/customer-support-readonly-policy.json

In Roo Code’s provider settings, choose OpenAI Compatible, set the base URL to http://127.0.0.1:8080/v1, and any non-empty API key (e.g. fak-local). Verify the gateway:

curl http://127.0.0.1:8080/healthz

MCP server

Roo Code can also launch fak as an MCP server (.roo/mcp.json):

{
  "mcpServers": {
    "fak": {
      "command": "./fak",
      "args": ["serve", "--stdio", "--policy", "examples/customer-support-readonly-policy.json"]
    }
  }
}

Reproduce a denial offline

./fak preflight \
  --tool run_command \
  --args '{"command":"sudo rm -rf /"}' \
  --policy examples/customer-support-readonly-policy.json
# verdict=DENY reason=POLICY_BLOCK

Cross-references

License

Apache-2.0