Crate codewhale_execpolicy

Re-exports§

approval_mode: The user-facing approval posture (Ask / Auto-Review / Full Access / Never). Lives beside AskForApproval so policy code and the TUI share one definition; the TUI adds only presentation on top.
bash_arity: Bash arity dictionary for command-prefix allow rule matching.
shell_expand: Expand a shell command line into the set of commands a shell would run.

ExecPolicyAmendment: A proposed amendment to the execution policy, suggesting new trusted prefixes.
ExecPolicyContext: Input context provided to the execution policy engine for a single check.
ExecPolicyDecision: The result of evaluating a command against the execution policy.
ExecPolicyEngine
Ruleset: A named set of allow/deny prefix rules at a given priority layer.
ToolAskRule: Typed rule that controls whether a tool invocation is denied, allowed, or requires approval.

AskForApproval: Policy mode controlling when tool invocations require human approval.
ExecApprovalRequirement: The approval requirement determined by the execution policy engine.
PermissionAction: Permission action for a tool invocation rule.
RulesetLayer: Priority layer for typed permission-rule selection. Higher ordinal = higher priority. Matching typed rules compare layer before action and specificity. Hard denied prefixes are merged across layers and checked first.

normalize_workspace_relative_path: Returns a slash-separated path relative to workspace_root when value is a safe path within that workspace.
normalize_workspace_scope: Return a stable absolute workspace scope suitable for a persisted rule.