Enum Kind 

#[non_exhaustive]
pub enum Kind {
    Shell,
    FsRead,
    FsWrite,
    Net,
    Fetch,
    EnvRead,
    EnvSet,
    Mcp,
}

One kind of atomic action. Ordered as policy files list them.

Variants (Non-exhaustive)

Non-exhaustive enums could have additional variants added in future. Therefore, when matching against variants of non-exhaustive enums, an extra wildcard arm must be added to account for any future variants.

Shell

A command or a whole pipeline.

FsRead

A file read.

FsWrite

A file write, create, delete or move.

Net

A network host.

Fetch

A host a read-only fetch tool (WebFetch) requests a URL from: a narrower kind of net, so net rules apply to it as well (ADR-017).

EnvRead

An environment variable read.

EnvSet

An environment variable set.

Mcp

An MCP tool name.

Implementations

impl Kind

pub const ALL: [Self; 8]

Every kind, in policy-file order.

pub fn as_str(self) -> &'static str

The name used in policy files and rule ids (fs.read).

pub fn rule_kinds(self) -> &'static [Self]

The rule-list and defaults keys that apply to an atom of this kind, most specific first: a fetch is also network access, so net lists match it and defaults.net is its fallback when defaults.fetch is unset.

Trait Implementations

impl Clone for Kind

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Copy for Kind

impl Debug for Kind

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Display for Kind

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Eq for Kind

impl FromStr for Kind

type Err = UnknownKind

The associated error which can be returned from parsing.

fn from_str(s: &str) -> Result<Self, Self::Err>

Parses a string s to return a value of this type.

impl Hash for Kind

fn hash<__H: Hasher>(&self, state: &mut __H)

Feeds this value into the given Hasher.

fn hash_slice<H>(data: &[Self], state: &mut H)

where H: Hasher, Self: Sized,

Feeds a slice of this type into the given Hasher.

impl Ord for Kind

fn cmp(&self, other: &Self) -> Ordering

This method returns an Ordering between self and other.

fn max(self, other: Self) -> Self

where Self: Sized,

Compares and returns the maximum of two values.

fn min(self, other: Self) -> Self

where Self: Sized,

Compares and returns the minimum of two values.

fn clamp(self, min: Self, max: Self) -> Self

where Self: Sized,

Restrict a value to a certain interval.

fn clamp_to<R>(self, range: R) -> Self

where Self: Sized, R: ClampBounds<Self>,

🔬This is a nightly-only experimental API. (clamp_to)

Restrict a value to a certain range.

impl PartialEq for Kind

fn eq(&self, other: &Self) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl PartialOrd for Kind

fn partial_cmp(&self, other: &Self) -> Option<Ordering>

This method returns an ordering between self and other values if one exists.

fn lt(&self, other: &Rhs) -> bool

Tests less than (for self and other) and is used by the < operator.

fn le(&self, other: &Rhs) -> bool

Tests less than or equal to (for self and other) and is used by the <= operator.

fn gt(&self, other: &Rhs) -> bool

Tests greater than (for self and other) and is used by the > operator.

fn ge(&self, other: &Rhs) -> bool

Tests greater than or equal to (for self and other) and is used by the >= operator.

impl Serialize for Kind

Serialised as its policy-file name (fs.read), as in the compiled IR.

fn serialize<S: Serializer>(&self, serializer: S) -> Result<S::Ok, S::Error>

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for Kind