Struct EgressPolicy 

pub struct EgressPolicy {
    pub schema_version: u32,
    pub domains: DomainPolicy,
    pub networks: NetworkPolicy,
    pub rate_limits: RateLimitPolicy,
    pub audit: AuditPolicy,
}

Top-level egress policy loaded from agentshield.egress.toml.

Fields

schema_version: u32

Schema version for forward compatibility checks.

domains: DomainPolicy

Domain allow/deny rules.

networks: NetworkPolicy

Network-level IP blocking rules.

rate_limits: RateLimitPolicy

Rate limiting configuration.

audit: AuditPolicy

Audit logging configuration.

Implementations

impl EgressPolicy

pub fn load(path: &Path) -> Result<Self, ShieldError>

Load an egress policy from a TOML file.

pub fn save(&self, path: &Path) -> Result<(), ShieldError>

Save an egress policy to a TOML file.

pub fn is_domain_allowed(&self, domain: &str) -> bool

Check if a domain is allowed by this policy.

Deny rules take precedence over allow rules. If the allow list is empty, all domains not explicitly denied are allowed.

pub fn is_ip_blocked(&self, ip: &str) -> bool

Check if an IP address is blocked by network policy.

pub fn rate_limit_for(&self, domain: &str) -> u32

Get rate limit for a domain (requests per minute).

Returns the per-domain override if one exists, otherwise the global default.

pub fn from_scan_targets(targets: &[ScanTarget]) -> Self

Build a starter egress policy by analyzing all ScanTargets.

Extracts domains from:

• Literal URL arguments in NetworkOperation entries
• NetworkAccess declared permissions with a scope/target URL or domain

The resulting policy allows all discovered domains and uses safe defaults for network-level blocking and rate limiting.

pub fn merge_override(&self, operator: &EgressPolicy) -> EgressPolicy

Merge with an operator override policy. The override can only restrict, never expand.

Merge rules:

• domains.allow = intersection(self.allow, override.allow) If override.allow is empty, self.allow is kept (empty means “no restriction”). If self.allow is empty (allow all), operator’s allow list becomes the effective list.
• domains.deny = union(self.deny, override.deny)
• networks: if either policy blocks a range, it is blocked in the result
• rate_limits.max_requests_per_minute = min(self, override)
• rate_limits.per_domain: min rate per domain; missing entries inherit the global min
• audit: operator override wins (operator controls where logs go)

pub fn starter_toml() -> &'static str

Generate a starter policy TOML string for agentshield init --egress.

Trait Implementations

impl Clone for EgressPolicy

fn clone(&self) -> EgressPolicy

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for EgressPolicy

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for EgressPolicy

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for EgressPolicy

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.