Struct PermissionRuleSet 

pub struct PermissionRuleSet { /* private fields */ }

An ordered collection of permission rules evaluated highest-priority-first.

Implementations

impl PermissionRuleSet

pub fn new() -> Self

Create an empty rule set.

pub fn with_defaults() -> Self

Create a rule set with built-in security defaults.

Includes auto-deny for reading/writing .env files and other credential files, while allowing .env.example.

pub fn add_rule(&mut self, rule: PermissionRule)

Add a rule to the set.

pub fn remove_rules<F: Fn(&PermissionRule) -> bool>(&mut self, predicate: F)

Remove all rules matching a predicate.

pub fn rules(&self) -> &[PermissionRule]

Read-only access to the rules.

pub fn evaluate( &self, tool_name: &str, args: &str, working_dir: Option<&Path>, ) -> Option<PermissionAction>

Evaluate a tool invocation against the rule set.

tool_name is the tool being invoked (e.g. "bash", "edit"). args is the argument string (e.g. the command or file path). working_dir is the optional directory context for directory-scoped rules.

Returns the action from the highest-priority matching rule, or None if no rule matches.

pub fn evaluate_simple( &self, tool_name: &str, args: &str, ) -> Option<PermissionAction>

Convenience wrapper without directory context.

Trait Implementations

impl Clone for PermissionRuleSet

fn clone(&self) -> PermissionRuleSet

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for PermissionRuleSet

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for PermissionRuleSet

fn default() -> PermissionRuleSet

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for PermissionRuleSet

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for PermissionRuleSet

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.