Enum SafetyMode 

pub enum SafetyMode {
    Plan,
    ReadOnly,
    Ask,
    Auto,
    FullAccess,
}

Variants

Plan

A plan is being drafted: a read-only floor plus the plan-mode carve-outs the policy gate layers on (the plan file is writable, [plan] permissions may re-open memory/builds/web).

Plan is a MODE, not a flag alongside one, and it is a full position in the Shift+Tab cycle — the strictest one. It used to be a separate Session.plan: Option<_> orthogonal to safety_mode, which meant the two could disagree: Shift+Tab while planning set full_access and the harness then told the model “safety mode changed to full_access” while the plan read-only floor was still in force — a contradiction the model resolved by attempting mutations and collecting denials. With one mode value that state is unrepresentable. Session.plan still carries the plan DATA (path, saved overrides), never the fact of being in plan mode, and it never carries a mode to “restore”: leaving plan means picking another mode, like leaving any other.

ReadOnly

Ask

Auto

FullAccess

Implementations

impl SafetyMode

pub fn as_str(self) -> &'static str

Canonical serialized name — matches the serde snake_case rename.

pub fn parse(s: &str) -> Option<SafetyMode>

Parse a canonical mode name. Accepts ONLY the canonical snake_case names — no legacy aliases (the old "auto_review" is gone).

pub fn is_planning(self) -> bool

Is a plan being drafted? The single source of truth — never infer this from Session.plan, which is the plan’s DATA and outlives nothing.

pub fn permissiveness(self) -> u8

Permissiveness rank for combining modes: plan/read_only are strictest, full_access loosest. Plan ranks below read-only because its carve-outs only ever open paths the gate re-checks, and a subagent must never inherit “planning” as a ceiling (children explore, they don’t plan).

pub fn least_permissive(a: SafetyMode, b: SafetyMode) -> SafetyMode

The stricter of two modes. Used to apply an agent type’s safety ceiling to a session’s live mode — a ceiling can only tighten what the parent already allows, never loosen it.

Trait Implementations

impl Clone for SafetyMode

fn clone(&self) -> SafetyMode

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Copy for SafetyMode

impl Debug for SafetyMode

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl Default for SafetyMode

fn default() -> SafetyMode

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for SafetyMode

fn deserialize<__D>( __deserializer: __D, ) -> Result<SafetyMode, <__D as Deserializer<'de>>::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Eq for SafetyMode

impl PartialEq for SafetyMode

fn eq(&self, other: &SafetyMode) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl Serialize for SafetyMode

fn serialize<__S>( &self, __serializer: __S, ) -> Result<<__S as Serializer>::Ok, <__S as Serializer>::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for SafetyMode