Struct PolicyEngine 

pub struct PolicyEngine { /* private fields */ }

Resolves declarative policy into an effective policy and enforces approvals.

Implementations

impl PolicyEngine

pub fn new(repository: PolicyRepository) -> Self

Creates a policy engine from the loaded repository data.

pub fn repository(&self) -> &PolicyRepository

Returns the loaded repository data.

pub fn resolve( &self, mode_slug: &str, approval_profile_slug: &ApprovalProfileSlug, ) -> Result<ResolvedMode, PolicyError>

Resolves the effective policy for a mode and approval profile.

The result is the policy Ferrify actually executes with after mode defaults and approval-profile overrides have been merged.

Errors

Returns PolicyError when either the mode or approval profile is missing from the loaded repository data.

pub fn authorize( &self, policy: &EffectivePolicy, capability: &Capability, approvals: &BTreeSet<Capability>, ) -> Result<(), PolicyError>

Checks whether a capability can be used with the provided approvals.

Errors

Returns PolicyError when the capability is not allowed by the active mode, when the capability is denied outright, or when the capability requires approval and the caller did not supply it.

pub fn authorize_transition( &self, from: &EffectivePolicy, to: &EffectivePolicy, approvals: &BTreeSet<Capability>, ) -> Result<(), PolicyError>

Enforces the rule that widening a mode’s authority requires approval.

Errors

Returns PolicyError when the target mode introduces a capability that is either disallowed or not explicitly approved for the transition.

Trait Implementations

impl Clone for PolicyEngine

fn clone(&self) -> PolicyEngine

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for PolicyEngine

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.