Enum GrantTarget 

pub enum GrantTarget {
    Path {
        path: PathBuf,
        recursive: bool,
    },
    Domain {
        pattern: String,
    },
    Command {
        pattern: String,
    },
}

The target of a permission grant.

Each target type has its own matching semantics:

• Path: Matches file system paths with optional recursion
• Domain: Matches network domains with wildcard support
• Command: Matches shell commands with glob patterns

Variants

Path

File or directory path target.

Fields

path: PathBuf

The directory or file path this grant applies to.

recursive: bool

Whether the grant applies to subdirectories recursively.

Domain

Network domain target for HTTP requests.

Fields

pattern: String

Domain pattern (e.g., “api.github.com”, “.anthropic.com”, “”).

Command

Shell command pattern target.

Fields

pattern: String

Command pattern (e.g., “git ”, “cargo build”, “”).

Implementations

impl GrantTarget

pub fn path(path: impl Into<PathBuf>, recursive: bool) -> GrantTarget

Creates a new path target.

Arguments

• path - The directory or file path
• recursive - Whether to apply to subdirectories

pub fn domain(pattern: impl Into<String>) -> GrantTarget

Creates a new domain target.

Arguments

• pattern - Domain pattern (e.g., “api.github.com”, “*.example.com”)

pub fn command(pattern: impl Into<String>) -> GrantTarget

Creates a new command target.

Arguments

• pattern - Command pattern (e.g., “git *”, “npm install”)

pub fn covers(&self, request: &GrantTarget) -> bool

Checks if this grant target covers a request target.

Coverage rules:

• Path: Grant path must be ancestor of request path (if recursive) or parent/equal (if not)
• Domain: Grant pattern must match request domain (wildcards supported)
• Command: Grant pattern must match request command (glob matching)

Arguments

• request - The target being requested

Returns

true if this grant target covers the request target

pub fn description(&self) -> String

Returns a display-friendly description of this target.

pub fn target_type(&self) -> &'static str

Returns the target type as a string for display purposes.

Trait Implementations

impl Clone for GrantTarget

fn clone(&self) -> GrantTarget

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for GrantTarget

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for GrantTarget

fn deserialize<__D>( __deserializer: __D, ) -> Result<GrantTarget, <__D as Deserializer<'de>>::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Display for GrantTarget

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl Hash for GrantTarget

fn hash<__H>(&self, state: &mut __H)

where __H: Hasher,

Feeds this value into the given Hasher.

fn hash_slice<H>(data: &[Self], state: &mut H)

where H: Hasher, Self: Sized,

Feeds a slice of this type into the given Hasher.

impl PartialEq for GrantTarget

fn eq(&self, other: &GrantTarget) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for GrantTarget

fn serialize<__S>( &self, __serializer: __S, ) -> Result<<__S as Serializer>::Ok, <__S as Serializer>::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl Eq for GrantTarget

impl StructuralPartialEq for GrantTarget