Struct EgressConfig 

pub struct EgressConfig {
    pub max_writes_per_min: Option<u32>,
    /* private fields */
}

Resolved, ready-to-run egress configuration. Forbidden-pattern regexes are compiled once at policy load, off the hot path.

Fields

max_writes_per_min: Option<u32>

Max agent write/action tool calls per 60 s; None = unlimited.

Implementations

impl EgressConfig

pub fn off() -> Self

A no-op config.

pub fn new( forbidden_patterns: &[String], block_secrets: bool, max_writes_per_min: Option<u32>, ) -> Self

Build from resolved policy. Invalid regexes are skipped (validation already rejects them at load — defense in depth).

pub fn is_active(&self) -> bool

True if any egress rule is configured (cheap hot-path gate).

pub fn check_content( &self, content: &str, redaction: &[(String, Regex)], ) -> Option<String>

Inspect outbound content (a write body or a shell command). Returns a privacy-preserving block reason (pattern source / class — never the matched value), or None to allow. redaction are the active pack’s compiled secret patterns, consulted when block_secrets is set.

Trait Implementations

impl Default for EgressConfig

fn default() -> Self

Returns the “default value” for a type.