Struct Policy 

pub struct Policy { /* private fields */ }

The classifier for one project.

Implementations

impl Policy

pub fn new(checks: &[Vec<String>], exact: &[Vec<String>]) -> Self

A policy allowing the command prefixes of checks (program and subcommands, up to the first option) and exactly the argvs of exact ([commands] allow).

pub fn with_prefixes(self, prefixes: Vec<Vec<String>>) -> Self

[commands] allow_prefix: prefixes of two elements or more (a shorter one is dropped; the configuration refuses it).

pub fn check_prefixes(&self) -> &[Vec<String>]

The check-derived prefixes, for a coverage view.

pub fn with_hidden(self, hidden: impl IntoIterator<Item = String>) -> Self

Paths git ignored when an in-place run started: the file tools refuse them, except the protected files (the intent stays readable).

pub fn in_place(self) -> Self

An in-place attempt (run --in-place): the checkout is the person’s, so git commands that move it are denied.

pub const fn autopilot(self) -> Self

An autopilot run: nothing asks (Policy::settle).

pub const fn is_autopilot(&self) -> bool

Whether it is an autopilot run’s.

pub fn settle(&self, decision: Decision) -> Decision

What a decision comes to once every grant had its say: on autopilot a call that would still ask a person is refused for the run (AUTOPILOT_DENIED); every other decision stands — a denial, a rejection or a protected path is never lifted.

pub fn authoring(self) -> Self

The planning profile: the format’s artifacts and scripts are the work; its machinery, verification inputs and secrets stay denied; anything else — source code included — needs approval.

pub fn planning(self, dir: &str) -> Self

A planning task’s profile: writes inside the unit’s directory dir (worktree-relative) are its work, except the format’s judged files (crate::format::Rules::judged), a credential and the person’s review; everything else is as the policy says.

pub fn is_planning_write(&self, rel: &str) -> bool

Whether rel (resolved, worktree-relative) is a planning task’s to write: a design document inside its unit’s directory (Protected::is_design_doc), not judged by the format.

pub fn rules(self, rules: &'static Rules) -> Self

The project’s format’s rules (intent, planning artifacts); the reference format’s by default.

pub fn with_network(self, exact: Vec<Vec<String>>) -> Self

[sandbox] network_allow: exact argvs that get the network.

pub fn with_network_prefixes(self, prefixes: Vec<Vec<String>>) -> Self

[sandbox] network_allow_prefix: prefixes (two elements or more) that get the network.

pub fn network_allowed(&self, argv: &[String]) -> bool

Whether argv gets the network without asking: an exact entry, or a prefix entry it extends.

pub fn with_mcp(self, tools: impl IntoIterator<Item = (String, String)>) -> Self

The project’s MCP tools and their configured decisions.

pub fn with_decisions( self, approved: Vec<Object>, rejected: Vec<Rejection>, ) -> Self

A person’s decisions for this task: an approval turns a call that needs approval into an allowed one (never a denied one); a rejection turns it into a denial with the person’s reason.

pub fn with_frozen(self, frozen: impl IntoIterator<Item = String>) -> Self

Freezes these test files: writing them needs approval.

pub fn protected(&self) -> &Protected

The protected set this policy uses.

pub fn write_protected(&self, rel: &str) -> Option<Class>

Whether this (resolved, workspace-relative) path is protected for writing under this policy: the authoring profile writes the format’s artifacts, nothing else of the protected set.

pub fn classify( &self, tool: &str, args: &Value, object: Option<&Object>, ) -> Decision

Classifies tool called with args. A person’s decision applies only to the call’s resolved object (none: the request alone was seen, and nobody’s decision covers it): a rejection of that very object denies it, an approval of it allows it, never a denial.

pub fn rejection(&self, object: &Object) -> Option<&Rejection>

A person’s rejection of exactly object, if one holds.

pub fn approved(&self) -> &[Object]

The person’s rejections and approvals, for the changed-object line.

pub fn rule(&self, tool: &str, args: &Value, object: Option<&Object>) -> String

The rule that decides tool with args when no person does: what a call’s record names, so a rule’s decision is never read as a person’s.

pub fn base(&self, tool: &str, args: &Value) -> Decision

The decision by rule alone, before any person’s: what decides whether a call’s object is resolved and a person asked.

Trait Implementations

impl Clone for Policy

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for Policy

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for Policy

fn default() -> Self

Returns the “default value” for a type.