Struct AddonsConfig 

pub struct AddonsConfig {
    pub policy: String,
    pub allowlist: Vec<String>,
    pub require_signature: bool,
    pub sandbox: String,
    pub block_risky: bool,
    pub enforce_capabilities: bool,
    pub metering: bool,
    pub allow_bootstrap: bool,
    pub grammar_auto_fetch: bool,
}

[addons] configuration. Global-only; default is fully permissive so the out-of-the-box experience is unchanged.

Fields

policy: String

Install policy: open | verified_only | allowlist | locked.

allowlist: Vec<String>

Slugs permitted when policy = allowlist.

require_signature: bool

Honour a user-override registry (<data_dir>/addon_registry.json) only when it carries a valid signature by a trusted org key.

sandbox: String

Sandbox spawned stdio servers without a declared [capabilities] block: off | auto | strict (the legacy global mode).

block_risky: bool

Refuse to install an addon that has a high-risk (Danger) capability.

enforce_capabilities: bool

Fail closed when an addon declares restricted [capabilities] but no OS sandbox launcher (sandbox-exec / bwrap) is available to enforce them. Off by default → best-effort (warn + run) so a missing launcher never blocks a spawn; orgs that require real enforcement set this to true.

metering: bool

Record per-addon / per-tool gateway usage counters to <data_dir>/addons/usage.json (local-only; basis for analytics + billing, P5). On by default; set false to disable all usage accounting.

allow_bootstrap: bool

Allow addon add to provision an addon’s upstream package via a pinned package manager (uv/pip/cargo/npm/brew/dotnet) — the [install] block (#1105). On by default: add is the user’s explicit, consented action, and the bootstrap is fully disclosed + pinned + audited before it runs. An org that forbids local package-manager execution sets this to false.

grammar_auto_fetch: bool

Zero-config grammar-addon fetch (#690): transparently download a SHA-256-pinned grammar dylib on first use of a registry-covered file extension. On by default (a grammar addon is a parsing fallback, not a spawned server). Orgs with a strict egress/DLP posture set this to false — reads then degrade to the regex-signature fallback, exactly like offline. policy = locked implies the same.

Implementations

impl AddonsConfig

pub fn policy(&self) -> AddonPolicy

The parsed install policy.

pub fn sandbox_mode(&self) -> SandboxMode

The parsed sandbox mode.

Trait Implementations

impl Clone for AddonsConfig

fn clone(&self) -> AddonsConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for AddonsConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for AddonsConfig

fn default() -> Self

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for AddonsConfig

where AddonsConfig: Default,

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Eq for AddonsConfig

impl PartialEq for AddonsConfig

fn eq(&self, other: &AddonsConfig) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl Serialize for AddonsConfig

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for AddonsConfig