Struct ToolPolicyConfig 

pub struct ToolPolicyConfig {

    pub enabled: bool,
    pub require_confirmation: bool,
    pub allow_without_confirmation: bool,
    pub confirmation_message: Option<String>,
    pub rate_limit: Option<u32>,
    pub timeout_ms: Option<u64>,
    pub allowed_domains: Vec<String>,
    pub blocked_domains: Vec<String>,
    pub allowed_paths: Vec<String>,
    pub read_paths: Vec<String>,
    pub write_paths: Vec<String>,
    pub blocked_paths: Vec<String>,
    pub max_file_size_bytes: Option<u64>,
    pub max_output_chars: Option<usize>,
    pub max_results: Option<usize>,
    pub max_response_bytes: Option<usize>,
    pub blocked_private_networks: bool,
    pub allowed_schemes: Vec<String>,
    pub allowed_ports: Vec<u16>,
    pub max_redirects: Option<usize>,
    pub max_changed_files: Option<usize>,
    pub max_changed_lines: Option<usize>,
    pub max_replacements: Option<usize>,
    pub require_read_before_write: bool,
    pub overwrite_existing: bool,
    pub create_parent_dirs: bool,
    pub no_write_policy: NoWritePolicyBehavior,
    pub allowed_commands: Vec<CommandRuleConfig>,
    pub command_templates: Vec<CommandTemplateConfig>,
    pub working_dirs: Vec<String>,
    pub env_passthrough: Vec<String>,
    pub redact_env: Vec<String>,
    pub deny_shell: bool,
    pub deny_interactive: bool,
    pub allow_command_escalation: bool,
    pub domains: DomainPolicyConfig,
    pub paths: PathPolicyConfig,
    pub commands: CommandPolicyConfig,
    pub operations: OperationPolicyConfig,
    pub config: HashMap<String, Value>,
}

Per-tool policy configuration.

Fields

enabled: bool

Enables this tool policy.

require_confirmation: bool

Requires approval for this tool after hard denials pass.

allow_without_confirmation: bool

Explicitly permits side-effecting calls to skip classification-default approval.

confirmation_message: Option<String>

Message shown when tool-level approval is required.

rate_limit: Option<u32>

Maximum allowed calls per minute.

timeout_ms: Option<u64>

Tool-specific timeout in milliseconds, up to MAX_TOOL_TIMEOUT_MS.

allowed_domains: Vec<String>

Legacy domain allowlist mapped to domain policy.

blocked_domains: Vec<String>

Legacy domain blocklist mapped to domain policy.

allowed_paths: Vec<String>

Legacy path allowlist mapped to path policy.

read_paths: Vec<String>

Explicit read path allowlist for local read-only tools.

write_paths: Vec<String>

Explicit write path allowlist for local mutation tools.

blocked_paths: Vec<String>

Paths that override any allowlist.

max_file_size_bytes: Option<u64>

Maximum file size read or searched by local tools.

max_output_chars: Option<usize>

Maximum model-facing output characters.

max_results: Option<usize>

Maximum rows or entries for list/search tools.

max_response_bytes: Option<usize>

Maximum response bytes for web fetch tools.

blocked_private_networks: bool

Blocks private, localhost, link-local, and metadata network targets.

allowed_schemes: Vec<String>

Allowed URL schemes for network tools.

allowed_ports: Vec<u16>

Allowed URL ports for network tools.

max_redirects: Option<usize>

Maximum redirect count for network tools.

max_changed_files: Option<usize>

Maximum files a mutation tool may change.

max_changed_lines: Option<usize>

Maximum changed lines a mutation tool may produce.

max_replacements: Option<usize>

Maximum exact replacements a mutation tool may perform.

require_read_before_write: bool

Requires a matching file-read version before mutating an existing file.

overwrite_existing: bool

Allows overwriting existing files for mutation tools.

create_parent_dirs: bool

Allows mutation tools to create missing parent directories.

no_write_policy: NoWritePolicyBehavior

Behavior when no write_paths allowlist is configured.

allowed_commands: Vec<CommandRuleConfig>

Exact argv allowlist for the command tool.

command_templates: Vec<CommandTemplateConfig>

Argv templates for the command tool.

working_dirs: Vec<String>

Working directories allowed for command execution.

env_passthrough: Vec<String>

Environment variables that may be passed from tool arguments.

redact_env: Vec<String>

Environment variables redacted from evidence.

deny_shell: bool

Reject shell-like command strings and metacharacters.

deny_interactive: bool

Reject interactive command execution.

allow_command_escalation: bool

Allows approval-based command escalation beyond the allowlist.

domains: DomainPolicyConfig

Parsed domain policy.

paths: PathPolicyConfig

Normalized path policy.

commands: CommandPolicyConfig

Command policy for process-backed tools.

operations: OperationPolicyConfig

Operation policy based on arguments such as operation, function, or method.

config: HashMap<String, Value>

Custom tool settings exposed through ToolExecutionContext.custom_config.

Trait Implementations

impl Clone for ToolPolicyConfig

fn clone(&self) -> ToolPolicyConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for ToolPolicyConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl Default for ToolPolicyConfig

fn default() -> ToolPolicyConfig

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for ToolPolicyConfig

fn deserialize<__D>( __deserializer: __D, ) -> Result<ToolPolicyConfig, <__D as Deserializer<'de>>::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for ToolPolicyConfig

fn serialize<__S>( &self, __serializer: __S, ) -> Result<<__S as Serializer>::Ok, <__S as Serializer>::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.