Skip to main contentCrate codewhale_execpolicy
Source - bash_arity
- Bash arity dictionary for command-prefix allow rule matching.
- ExecPolicyAmendment
- A proposed amendment to the execution policy, suggesting new trusted prefixes.
- ExecPolicyContext
- Input context provided to the execution policy engine for a single check.
- ExecPolicyDecision
- The result of evaluating a command against the execution policy.
- ExecPolicyEngine
- Ruleset
- A named set of allow/deny prefix rules at a given priority layer.
- ToolAskRule
- Typed rule that controls whether a tool invocation is denied, allowed, or requires approval.
- AskForApproval
- Policy mode controlling when tool invocations require human approval.
- ExecApprovalRequirement
- The approval requirement determined by the execution policy engine.
- PermissionAction
- Permission action for a tool invocation rule.
- RulesetLayer
- Priority layer for a permission ruleset. Higher ordinal = higher priority.
On conflict, the highest-priority layer’s longest matching prefix wins.
- normalize_workspace_relative_path
- Returns a slash-separated path relative to
workspace_root when value is
a safe path within that workspace. - normalize_workspace_scope
- Return a stable absolute workspace scope suitable for a persisted rule.