Struct GuardSection 

pub struct GuardSection {
    pub hooks_file: String,
    pub matcher: String,
    pub command_template: String,
    pub hook_entry: String,
    pub verdict_template: String,
    pub armed_message: String,
}

The write-guard data block: everything the generic guard engine ([super::guard]) needs to arm a hook and render a deny verdict. Embedded built-in descriptors only — the guard fails open, so layers::check_user_layer_restrictions bars user layers from declaring it.

Fields

hooks_file: String

Hook-config file the entry is merged into, /-separated relative to the staged env root (e.g. .claude/settings.local.json).

matcher: String

Tool-name matcher the hook registers for; also the source of the matcher⊆vocabulary invariant.

command_template: String

Shell command the hook runs, with {exe} and {marker} placeholders.

hook_entry: String

JSON template of the hook entry appended to the hook config’s hooks.PreToolUse array, with {matcher} and {command} placeholders in its string values. Authored key order is serialized verbatim.

verdict_template: String

JSON template of the deny verdict printed on stdout, with a {reason} placeholder. Authored key order is the harness’s on-disk contract.

armed_message: String

Banner printed after --guard arms the hook.

Trait Implementations

impl Clone for GuardSection

fn clone(&self) -> GuardSection

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for GuardSection

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for GuardSection

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for GuardSection

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.