pub struct PolicySet {
pub policies: Vec<ContextPolicy>,
}Expand description
A set of loaded policies.
Fields§
§policies: Vec<ContextPolicy>Implementations§
Source§impl PolicySet
impl PolicySet
pub fn new() -> Self
Sourcepub fn security_defaults() -> Self
pub fn security_defaults() -> Self
Open Engine safety defaults. These remain mechanism-level security policy.
Sourcepub fn attach_compat_defaults() -> Self
pub fn attach_compat_defaults() -> Self
Frozen OSS Attach compatibility heuristics.
These preserve the supported Coding-Agent experience but are not the canonical Product policy surface and must not gain new lifecycle rules.
Sourcepub fn evaluate(
&self,
path: &str,
seen_before: bool,
token_count: usize,
) -> Vec<PolicyEvalResult>
pub fn evaluate( &self, path: &str, seen_before: bool, token_count: usize, ) -> Vec<PolicyEvalResult>
Evaluate all policies against a path, returning applicable actions.
Sourcepub fn evaluate_full(
&self,
path: &str,
seen_before: bool,
token_count: usize,
agent_id: Option<&str>,
role: Option<&str>,
content: Option<&str>,
) -> Vec<PolicyEvalResult>
pub fn evaluate_full( &self, path: &str, seen_before: bool, token_count: usize, agent_id: Option<&str>, role: Option<&str>, content: Option<&str>, ) -> Vec<PolicyEvalResult>
Evaluate with full context including agent/role/content dimensions.
Sourcepub fn effective_state(
&self,
path: &str,
current: ContextState,
seen_before: bool,
token_count: usize,
) -> ContextState
pub fn effective_state( &self, path: &str, current: ContextState, seen_before: bool, token_count: usize, ) -> ContextState
Determine the effective state for an item after policy evaluation.
Actions fold in order (the last match wins), except that a matching
security-default Exclude always wins: no later Pin, Include or
MarkOutdated re-admits a secret, key or credential file.
Sourcepub fn recommended_view(
&self,
path: &str,
seen_before: bool,
token_count: usize,
) -> Option<ViewKind>
pub fn recommended_view( &self, path: &str, seen_before: bool, token_count: usize, ) -> Option<ViewKind>
Determine the recommended view for an item after policy evaluation.
Sourcepub fn load_project(project_root: &Path) -> Self
pub fn load_project(project_root: &Path) -> Self
Load policies from a project’s .lean-ctx/policies.json file.
The security defaults always come first and cannot be removed or redefined by the project file: a project policy reusing one of their names is dropped.
Sourcepub fn load_project_sourced(
project_root: &Path,
) -> Vec<(ContextPolicy, PolicySource)>
pub fn load_project_sourced( project_root: &Path, ) -> Vec<(ContextPolicy, PolicySource)>
Self::load_project with where each policy comes from, in effect
order: the security defaults, then the project file’s policies (or,
without a readable project file, the built-in defaults).
Trait Implementations§
Source§impl<'de> Deserialize<'de> for PolicySet
impl<'de> Deserialize<'de> for PolicySet
Source§fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>where
__D: Deserializer<'de>,
fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>where
__D: Deserializer<'de>,
Auto Trait Implementations§
impl Forget for PolicySet
impl Freeze for PolicySet
impl Move for PolicySet
impl RefUnwindSafe for PolicySet
impl Send for PolicySet
impl Sync for PolicySet
impl Unpin for PolicySet
impl UnsafeUnpin for PolicySet
impl UnwindSafe for PolicySet
Blanket Implementations§
Source§impl<T> BorrowMut<T> for Twhere
T: ?Sized,
impl<T> BorrowMut<T> for Twhere
T: ?Sized,
Source§fn borrow_mut(&mut self) -> &mut T
fn borrow_mut(&mut self) -> &mut T
impl<ST, DT> CastableFrom<ST, Initialized, Initialized> for DT
impl<ST, DT> CastableFrom<ST, Uninit, Uninit> for DT
Source§impl<T> CloneToUninit for Twhere
T: Clone,
impl<T> CloneToUninit for Twhere
T: Clone,
impl<T> DeserializeOwned for Twhere
T: for<'de> Deserialize<'de>,
impl<A, B, T> HttpServerConnExec<A, B> for Twhere
B: Body,
Source§impl<T> Instrument for T
impl<T> Instrument for T
Source§fn instrument(self, span: Span) -> Instrumented<Self> ⓘ
fn instrument(self, span: Span) -> Instrumented<Self> ⓘ
Source§fn in_current_span(self) -> Instrumented<Self> ⓘ
fn in_current_span(self) -> Instrumented<Self> ⓘ
Source§impl<T> IntoEither for T
impl<T> IntoEither for T
Source§fn into_either(self, into_left: bool) -> Either<Self, Self> ⓘ
fn into_either(self, into_left: bool) -> Either<Self, Self> ⓘ
self into a Left variant of Either<Self, Self>
if into_left is true.
Converts self into a Right variant of Either<Self, Self>
otherwise. Read moreSource§fn into_either_with<F>(self, into_left: F) -> Either<Self, Self> ⓘ
fn into_either_with<F>(self, into_left: F) -> Either<Self, Self> ⓘ
self into a Left variant of Either<Self, Self>
if into_left(&self) returns true.
Converts self into a Right variant of Either<Self, Self>
otherwise. Read more