Module roles 

Role-based access control for agent governance.

Roles define what tools an agent can use, shell policy, and resource limits. Resolution order: Env (LEAN_CTX_ROLE) -> Project .lean-ctx/roles/ -> Global ~/.lean-ctx/roles/ -> Built-in.

Structs

IoPolicy

Role

RoleInfo

RoleLimits

RoleMeta

ToolPolicy

Enums

RoleSource

Functions

active_role

active_role_name

is_privileged_role

Returns true if the named role has elevated privileges that require explicit configuration (env/config) rather than runtime activation. Case-insensitive comparison to prevent “Admin” bypass.

list_roles

load_role

set_active_role

set_active_role_with_source

Set active role. from_config = true allows privileged roles (env/config startup).