Struct PathAllowlistGuard 

pub struct PathAllowlistGuard { /* private fields */ }

Guard that restricts filesystem access to explicitly allowed paths.

When enabled, any file access, write, or patch to a path not matching the corresponding allowlist is denied. When disabled, the guard returns Allow for all requests.

Implementations

impl PathAllowlistGuard

pub fn new() -> Self

pub fn with_config(config: PathAllowlistConfig) -> Self

pub fn is_file_access_allowed(&self, path: &str) -> bool

pub fn is_file_write_allowed(&self, path: &str) -> bool

pub fn is_patch_allowed(&self, path: &str) -> bool

Trait Implementations

impl Default for PathAllowlistGuard

fn default() -> Self

Returns the “default value” for a type.

impl Guard for PathAllowlistGuard

fn name(&self) -> &str

Human-readable guard name (e.g., “forbidden-path”).

fn evaluate(&self, ctx: &GuardContext<'_>) -> Result<Verdict, KernelError>

Evaluate the guard against a tool call request.