Struct CommandPolicyConfig 

pub struct CommandPolicyConfig {
    pub mode: String,
    pub allowlist: Vec<String>,
    pub denylist: Vec<String>,
}

Command execution security policy configuration.

Controls which commands the shell and spawn tools are allowed to execute. In allowlist mode (default), only explicitly permitted commands can run. In denylist mode, any command not matching a blocked pattern is allowed.

Fields

mode: String

Policy mode: “allowlist” (default, recommended) or “denylist”.

allowlist: Vec<String>

Permitted command basenames when in allowlist mode. Overrides defaults when non-empty.

denylist: Vec<String>

Blocked command patterns when in denylist mode. Overrides defaults when non-empty.

Trait Implementations

impl Clone for CommandPolicyConfig

fn clone(&self) -> CommandPolicyConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for CommandPolicyConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for CommandPolicyConfig

fn default() -> Self

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for CommandPolicyConfig

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for CommandPolicyConfig

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.