Struct ExecPolicyEngine 

pub struct ExecPolicyEngine { /* private fields */ }

Implementations

impl ExecPolicyEngine

pub fn new(trusted_prefixes: Vec<String>, denied_prefixes: Vec<String>) -> Self

Legacy constructor: wraps the two vecs into a User-layer ruleset.

pub fn with_rulesets(rulesets: Vec<Ruleset>) -> Self

Build an engine from explicit layered rulesets. Rulesets are sorted by layer priority on construction.

pub fn add_ruleset(&mut self, ruleset: Ruleset)

Add a ruleset layer (re-sorts internally).

pub fn remember_session_approval(&mut self, approval_key: String)

Records an approval key for the current session so subsequent checks skip approval.

pub fn is_session_approved(&self, approval_key: &str) -> bool

Returns whether the given approval key has been recorded for this session.

pub fn check(&self, ctx: ExecPolicyContext<'_>) -> Result<ExecPolicyDecision>

Evaluates a command against the policy and returns a decision.

The evaluation order is: deny rules first (always win), then trusted prefix matching (arity-aware), then typed ask rules, and finally the approval mode.

Trait Implementations

impl Clone for ExecPolicyEngine

fn clone(&self) -> ExecPolicyEngine

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for ExecPolicyEngine

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for ExecPolicyEngine

fn default() -> ExecPolicyEngine

Returns the “default value” for a type.