Enum SideEffectLevel 

pub enum SideEffectLevel {
    None,
    ReadOnly,
    WorkspaceWrite,
    ProcessExec,
    Network,
    DesktopControl,
}

Rough side-effect taxonomy for the capability-ceiling check.

Variants

None

No side effect declared (conservative default; permission logic treats this as “unknown → deny unless explicitly allowed”).

ReadOnly

Pure reads only.

WorkspaceWrite

Writes to workspace files.

ProcessExec

Runs subprocesses.

Network

Reaches external services over the network.

DesktopControl

Drives the physical desktop — synthetic mouse/keyboard input and screen capture. The most invasive local class: it can operate ANY application (not just a sandboxed subprocess or a single network sink), inject keystrokes that paste secrets or dismiss dialogs, and every screenshot exfiltrates whatever is on screen to the model. It therefore sits at the top of the ceiling ladder — a policy must opt into it explicitly, above even network access.

Implementations

impl SideEffectLevel

pub const ALL: [Self; 6]

pub const MAX: Self = Self::DesktopControl

The most-permissive side-effect level — the TOP of the ladder. This is the single source of truth for “the outermost / most-autonomous ceiling”: the runtime’s builtin ceiling and the top autonomy tier both reference it, so adding a new most-invasive level (as desktop_control was added above network) automatically raises every permissive bound instead of leaving hardcoded "network" strings that silently cap the new level out. NEVER hardcode a specific top level as “the max”; call this.

pub fn rank(&self) -> usize

Numeric rank used by the policy intersector and side-effect ceiling check. Higher rank ⇒ more invasive.

pub fn as_str(&self) -> &'static str

Short string used in policy documents, bridge payloads, and error messages. Stable wire identifier.

pub fn rank_str(level: &str) -> usize

Rank a level given as a string, through the canonical ladder — the single source of truth for every ceiling/effect comparison that works with the wire strings instead of the typed enum. An unrecognized value ranks as None (0): tool levels always come from Self::as_str so they are never unknown, and for a ceiling a typo then grants nothing above none rather than silently widening the ceiling.

pub fn parse(value: &str) -> Self

Parse from the stable string used in policy documents. Unknown values deserialize to None (the conservative default).

Trait Implementations

impl Clone for SideEffectLevel

fn clone(&self) -> SideEffectLevel

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Copy for SideEffectLevel

impl Debug for SideEffectLevel

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for SideEffectLevel

fn default() -> SideEffectLevel

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for SideEffectLevel

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Eq for SideEffectLevel

impl Hash for SideEffectLevel

fn hash<__H: Hasher>(&self, state: &mut __H)

Feeds this value into the given Hasher.

fn hash_slice<H>(data: &[Self], state: &mut H)

where H: Hasher, Self: Sized,

Feeds a slice of this type into the given Hasher.

impl PartialEq for SideEffectLevel

fn eq(&self, other: &SideEffectLevel) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for SideEffectLevel

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for SideEffectLevel