Enum TrustMode 

#[repr(u8)]
pub enum TrustMode {
    Plan = 0,
    Safe = 1,
    Auto = 2,
}

The unified trust mode: Plan (read-only), Safe (confirm), Auto (autonomous).

Derives Ord so that std::cmp::min(parent, child) implements clamping: a child agent can never exceed its parent’s trust level.

Examples

use koda_core::trust::TrustMode;

let mode = TrustMode::Safe;
assert_eq!(mode.as_str(), "safe");
assert_eq!(mode.next(), TrustMode::Auto);

// Clamping: child can't exceed parent
assert_eq!(TrustMode::clamp(TrustMode::Plan, TrustMode::Auto), TrustMode::Plan);

Variants

Plan = 0

Read-only: deny all non-read tool calls. For investigation agents.

Safe = 1

Supervised: project-sandboxed writes, confirm all side effects. User default.

Auto = 2

Autonomous: project-sandboxed writes, auto-approve all including destructive.

Implementations

impl TrustMode

pub fn next(self) -> Self

Cycle between user-facing modes: Safe ↔ Auto.

Plan is agent-only and never toggled by the user.

pub fn as_str(self) -> &'static str

Stable string representation for persistence and wire protocol.

pub fn label(self) -> &'static str

Short label for display (same as as_str for now).

pub fn description(self) -> &'static str

Human-readable description of this mode.

pub fn parse(s: &str) -> Option<Self>

Parse a trust mode from a user-provided or config string.

pub fn clamp(parent: TrustMode, child: TrustMode) -> TrustMode

Clamp a child’s trust mode to never exceed the parent’s.

Since TrustMode derives Ord with Plan < Safe < Auto, this is simply std::cmp::min(parent, child).

Trait Implementations

impl Clone for TrustMode

fn clone(&self) -> TrustMode

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for TrustMode

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for TrustMode

fn default() -> TrustMode

Returns the “default value” for a type.

impl Display for TrustMode

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl From<u8> for TrustMode

fn from(v: u8) -> Self

Converts to this type from the input type.

impl Hash for TrustMode

fn hash<__H: Hasher>(&self, state: &mut __H)

Feeds this value into the given Hasher.

fn hash_slice<H>(data: &[Self], state: &mut H)

where H: Hasher, Self: Sized,

Feeds a slice of this type into the given Hasher.

impl Ord for TrustMode

fn cmp(&self, other: &TrustMode) -> Ordering

This method returns an Ordering between self and other.

fn max(self, other: Self) -> Self

where Self: Sized,

Compares and returns the maximum of two values.

fn min(self, other: Self) -> Self

where Self: Sized,

Compares and returns the minimum of two values.

fn clamp(self, min: Self, max: Self) -> Self

where Self: Sized,

Restrict a value to a certain interval.

impl PartialEq for TrustMode

fn eq(&self, other: &TrustMode) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl PartialOrd for TrustMode

fn partial_cmp(&self, other: &TrustMode) -> Option<Ordering>

This method returns an ordering between self and other values if one exists.

fn lt(&self, other: &Rhs) -> bool

Tests less than (for self and other) and is used by the < operator.

fn le(&self, other: &Rhs) -> bool

Tests less than or equal to (for self and other) and is used by the <= operator.

fn gt(&self, other: &Rhs) -> bool

Tests greater than (for self and other) and is used by the > operator.

fn ge(&self, other: &Rhs) -> bool

Tests greater than or equal to (for self and other) and is used by the >= operator.

impl Copy for TrustMode

impl Eq for TrustMode

impl StructuralPartialEq for TrustMode