Struct Policy 

pub struct Policy {
    pub allow_local_gateway: bool,
    pub allow_local_backend: bool,
}

Which URLs may receive credentials.

The default policy only allows the hosted Grok Bot gateway and Cursor backend over https. Every Client call re-checks the gateway URL, and ensure_sandbox checks both the backend URL and the gateway URL it gets back. See the POLICY.md guide.

use grokbot_api::Policy;

let p = Policy::default();
assert_eq!(p.check_gateway("https://box.us1.cursorvm.com/").unwrap(), "https://box.us1.cursorvm.com");
assert!(p.check_gateway("https://example.com").is_err());
assert!(p.check_backend("https://box.us1.cursorvm.com").is_err()); // never send the Cursor token to a box

Fields

allow_local_gateway: bool

Allow localhost / 127.0.0.1 / ::1 gateways over http or https.

allow_local_backend: bool

Allow a loopback EnsureSandBox backend. Never set from the environment; for tests only.

Implementations

impl Policy

pub fn from_env() -> Self

The default policy, plus loopback gateways when ALLOW_LOCAL_ENV is 1/true/yes. The loopback backend is never enabled from the environment.

pub fn local_testing() -> Self

Allow loopback gateway and backend. Intended for tests against a local mock server.

pub fn check_gateway(&self, raw: &str) -> Result<String, String>

Validate a gateway URL; returns it trimmed and without a trailing slash.

Allowed: https on cursor.sh, cursor.com, *.cursor.sh, *.cursor.com, *.cursorvm.com; loopback only with Policy::allow_local_gateway. URLs with userinfo are always rejected. The error is a human-readable reason.

pub fn check_backend(&self, raw: &str) -> Result<String, String>

Validate the EnsureSandBox backend base URL (which receives the Cursor access token).

Allowed: https on cursor.sh, cursor.com, *.cursor.sh, *.cursor.com only (never *.cursorvm.com); loopback only with Policy::allow_local_backend.

Trait Implementations

impl Clone for Policy

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Copy for Policy

impl Debug for Policy

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for Policy

fn default() -> Self

Returns the “default value” for a type.

impl Eq for Policy

impl PartialEq for Policy

fn eq(&self, other: &Self) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for Policy