Struct AgentSpec 

pub struct AgentSpec {
    pub allowed_paths: Vec<String>,
    pub forbidden_paths: Vec<String>,
    pub allowed_tools: Vec<String>,
    pub max_steps: Option<u32>,
    pub budget_cents: Option<u32>,
    pub custom_destructive_patterns: Vec<String>,
    pub forbidden_mcp_servers: Vec<String>,
}

Spec constraining what an agent is allowed to do (Layer 1).

Fields

allowed_paths: Vec<String>

forbidden_paths: Vec<String>

allowed_tools: Vec<String>

max_steps: Option<u32>

budget_cents: Option<u32>

custom_destructive_patterns: Vec<String>

Additional destructive command patterns (case-insensitive substring match). Extends the built-in default set in PrivilegedOperationAuditControl.

forbidden_mcp_servers: Vec<String>

MCP servers whose tool calls are always forbidden (e.g. “database”, “admin”).

Trait Implementations

impl Clone for AgentSpec

fn clone(&self) -> AgentSpec

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for AgentSpec

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for AgentSpec

fn default() -> AgentSpec

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for AgentSpec

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl PartialEq for AgentSpec

fn eq(&self, other: &AgentSpec) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for AgentSpec

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl Eq for AgentSpec

impl StructuralPartialEq for AgentSpec