Enum RepairSafety 

pub enum RepairSafety {
    FormatOnly,
    BehaviorPreserving,
    ScopeLocal,
    SurfaceChanging,
    CapabilityChanging,
    NeedsHuman,
}

Autonomy ceiling of a proposed repair.

Agents and IDEs dispatch on this class to decide whether to auto-apply a fix, propose it as a suggestion, or escalate to a human. Variants are ordered from least to most disruptive — call sites can compare with <= to enforce a configured ceiling like "apply anything up to behavior-preserving".

The wire-format strings (format-only, behavior-preserving, …) are the contract surface; renaming a variant string is a breaking change.

Variants

FormatOnly

Whitespace, trivia, or canonical layout only. No code structure changes; safe to auto-apply.

BehaviorPreserving

Intended not to change observable runtime behavior (e.g. delete an unreachable branch, drop a redundant cast).

ScopeLocal

Confined to the current local scope or file. Runtime behavior may change, but the blast radius does not cross a declaration boundary or a public surface.

SurfaceChanging

Touches a signature, export, or call-site surface that other files or external consumers can observe.

CapabilityChanging

Required capabilities or sandbox profile may change as a result of applying the repair (e.g. swapping provider: "openai" for a capability flag widens the routing surface).

NeedsHuman

Planning hint only — agents should propose, never auto-apply. Aligned with the AutonomyTier::Suggest/ActWithApproval rungs in trust_graph.rs.

Implementations

impl RepairSafety

pub const ALL: &'static [RepairSafety]

pub const fn as_str(self) -> &'static str

Stable wire-format string. The contract surface — do not rename without coordinating with harn fix --safety <…> callers and downstream LSP/IDE clients.

pub const fn is_at_most(self, ceiling: RepairSafety) -> bool

True when self sits at or below ceiling. Used by harn fix --apply --safety <ceiling> and IDE auto-apply policies to decide whether a repair clears the configured autonomy bar.

Trait Implementations

impl Clone for RepairSafety

fn clone(&self) -> RepairSafety

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for RepairSafety

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Display for RepairSafety

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl FromStr for RepairSafety

type Err = ParseRepairSafetyError

The associated error which can be returned from parsing.

fn from_str(value: &str) -> Result<Self, Self::Err>

Parses a string s to return a value of this type.

impl Hash for RepairSafety

fn hash<__H: Hasher>(&self, state: &mut __H)

Feeds this value into the given Hasher.

fn hash_slice<H>(data: &[Self], state: &mut H)

where H: Hasher, Self: Sized,

Feeds a slice of this type into the given Hasher.

impl Ord for RepairSafety

fn cmp(&self, other: &RepairSafety) -> Ordering

This method returns an Ordering between self and other.

fn max(self, other: Self) -> Self

where Self: Sized,

Compares and returns the maximum of two values.

fn min(self, other: Self) -> Self

where Self: Sized,

Compares and returns the minimum of two values.

fn clamp(self, min: Self, max: Self) -> Self

where Self: Sized,

Restrict a value to a certain interval.

impl PartialEq for RepairSafety

fn eq(&self, other: &RepairSafety) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl PartialOrd for RepairSafety

fn partial_cmp(&self, other: &RepairSafety) -> Option<Ordering>

This method returns an ordering between self and other values if one exists.

fn lt(&self, other: &Rhs) -> bool

Tests less than (for self and other) and is used by the < operator.

fn le(&self, other: &Rhs) -> bool

Tests less than or equal to (for self and other) and is used by the <= operator.

fn gt(&self, other: &Rhs) -> bool

Tests greater than (for self and other) and is used by the > operator.

fn ge(&self, other: &Rhs) -> bool

Tests greater than or equal to (for self and other) and is used by the >= operator.

impl Copy for RepairSafety

impl Eq for RepairSafety

impl StructuralPartialEq for RepairSafety