Struct ShellCommandGuard 

pub struct ShellCommandGuard { /* private fields */ }

Guard that blocks dangerous shell commands before execution.

Implementations

impl ShellCommandGuard

pub fn new() -> Self

pub fn with_patterns( patterns: Vec<String>, enforce_forbidden_paths: bool, ) -> Self

Build a guard from operator-supplied regex patterns.

Invalid regex configuration creates a deny-all guard so direct callers cannot accidentally widen access by dropping a malformed pattern.

pub fn try_with_patterns( patterns: Vec<String>, enforce_forbidden_paths: bool, ) -> Result<Self, ShellCommandConfigError>

Build a guard from operator-supplied regex patterns, rejecting invalid configuration before it reaches the runtime guard pipeline.

pub fn is_forbidden(&self, commandline: &str) -> bool

Trait Implementations

impl Default for ShellCommandGuard

fn default() -> Self

Returns the “default value” for a type.

impl Guard for ShellCommandGuard

fn name(&self) -> &str

Human-readable guard name (e.g., “forbidden-path”).

fn evaluate(&self, ctx: &GuardContext<'_>) -> Result<GuardDecision, KernelError>

Evaluate the guard against a tool call request.