Struct CommandPolicy 

pub struct CommandPolicy {
    pub mode: PolicyMode,
    pub allowlist: HashSet<String>,
    pub denylist: Vec<String>,
    pub dangerous_patterns: Vec<String>,
}

Configurable command execution policy (runtime representation).

Validates commands against an allowlist or denylist, and always checks a set of dangerous patterns regardless of mode (defense-in-depth).

Constructed from super::config::CommandPolicyConfig at startup.

Fields

mode: PolicyMode

Operating mode for the policy.

allowlist: HashSet<String>

Set of permitted executable basenames (used in Allowlist mode).

denylist: Vec<String>

Patterns to block (substring match, case-insensitive; used in Denylist mode).

dangerous_patterns: Vec<String>

Patterns that are always checked regardless of mode (defense-in-depth).

Implementations

impl CommandPolicy

pub fn safe_defaults() -> Self

Create a policy with safe defaults.

• Mode: Allowlist
• Allowlist: common read-only / informational commands
• Dangerous patterns: the standard set from DEFAULT_DANGEROUS_PATTERNS
• Denylist: same patterns (used when mode is switched to Denylist)

pub fn new( mode: PolicyMode, allowlist: HashSet<String>, denylist: Vec<String>, ) -> Self

Create a new policy with explicit configuration.

pub fn validate(&self, command: &str) -> Result<(), CommandPolicyError>

Validate a command string against this policy.

1. Always checks dangerous patterns first (defense-in-depth).
2. In Allowlist mode, splits on shell compound operators (&&, ||, ;, |) and validates every sub-command’s basename.
3. In Denylist mode, checks all denylist patterns (case-insensitive substring match).

Trait Implementations

impl Clone for CommandPolicy

fn clone(&self) -> CommandPolicy

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for CommandPolicy

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for CommandPolicy

fn default() -> Self

Returns the “default value” for a type.