Struct ToolPolicy 

pub struct ToolPolicy { /* private fields */ }

Tool permission policy: permission tiering + sandbox gate.

When no policy is configured the executor does not enforce anything; once configured, every tool execution is checked via ToolPolicy::check before it runs.

Example

use lc_agents::{AgentExecutor, ToolPolicy, ToolRisk};

let policy = ToolPolicy::new()
    .risk("code_interpreter", ToolRisk::Dangerous)
    .sandboxed("code_interpreter"); // wrapped in a restricted env, allowed to run
let executor = AgentExecutor::new(agent, tools).with_tool_policy(policy);

Implementations

impl ToolPolicy

pub fn new() -> Self

Empty policy: every tool defaults to ToolRisk::Safe, the permitted tier is the highest, and there is no sandbox allowlist.

pub fn risk(self, name: impl Into<String>, risk: ToolRisk) -> Self

Declare a tool’s risk level.

pub fn sandboxed(self, name: impl Into<String>) -> Self

Declare that a tool is wrapped in a restricted environment (sandbox-gate allowlist).

pub fn with_default_risk(self, risk: ToolRisk) -> Self

Set the default risk level for tools not explicitly declared.

pub fn with_max_permitted(self, risk: ToolRisk) -> Self

Set the highest risk tier the executor permits (permission tiering).

pub fn allow_unrestricted_dangerous(self, allow: bool) -> Self

Explicitly allow unsandboxed dangerous tools (an escape hatch for tools that are dangerous but must run bare; off by default).

pub fn risk_of(&self, name: &str) -> ToolRisk

Resolve a tool’s risk level.

pub fn check(&self, name: &str) -> Result<(), AgentError>

Pre-execution gate: returns AgentError when the tool does not meet the policy, Ok(()) when it passes.

Trait Implementations

impl Clone for ToolPolicy

fn clone(&self) -> ToolPolicy

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for ToolPolicy

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for ToolPolicy

fn default() -> Self

Returns the “default value” for a type.