Enum AtomicAction 

#[non_exhaustive]
pub enum AtomicAction {
    Shell {
        argv: Vec<String>,
    },
    Pipeline {
        argv: Vec<String>,
    },
    FsRead {
        path: String,
    },
    FsWrite {
        path: String,
    },
    Net {
        host: String,
    },
    Fetch {
        host: String,
    },
    NetWord {
        host: String,
    },
    WebSearch {
        query: String,
    },
    UnknownTool {
        host: String,
        tool: String,
    },
    EnvRead {
        name: String,
    },
    EnvSet {
        name: String,
    },
    McpTool {
        name: String,
    },
}

The primitive operations an Action decomposes into.

One shell command typically yields several: the command itself, every path it touches, every host it may contact, every env var it reads or sets.

Variants (Non-exhaustive)

Non-exhaustive enums could have additional variants added in future. Therefore, when matching against variants of non-exhaustive enums, an extra wildcard arm must be added to account for any future variants.

Shell

Normalised argv of one (sub-)command.

Fields

argv: Vec<String>

Program and arguments after quote removal.

Pipeline

A whole pipeline / list (a | b && c) with separators kept as tokens, so rules such as curl * | sh can match across sub-commands. Never carries a default verdict (see engine.rs).

Fields

argv: Vec<String>

Words and separator tokens of the whole pipeline or list.

FsRead

Absolute path in slash-separated canonical form (~, ${project} and cwd already applied).

Fields

path: String

Absolute path in canonical form.

FsWrite

A file write, create, delete or move.

Fields

path: String

Absolute path in canonical form.

Net

Host name only (no scheme, no port).

Fields

host: String

Lowercase host name.

Fetch

The host of a URL a fetch tool reads; matched by fetch and net rules.

Fields

host: String

Lowercase host name.

NetWord

A shell word with no scheme that looks like a host, outside the arguments of a program that names hosts (ADR-025): it may be a JSON path or a method call (check_runs.0.id, app.run). Matched by net rules; when none matches, the policy’s catch-all decides it, not defaults.net.

Fields

host: String

Lowercase host name.

WebSearch

A web search query; no rule list names it, so defaults decide it.

Fields

query: String

The query as the tool gave it.

UnknownTool

A host tool the adapter cannot classify; only defaults decide it.

Fields

host: String

The host’s id.

tool: String

The tool name as the host sent it.

EnvRead

An environment variable read ($NAME, printenv NAME).

Fields

name: String

Variable name.

EnvSet

An environment variable set (NAME=value, export NAME=…).

Fields

name: String

Variable name.

McpTool

An MCP tool invocation.

Fields

name: String

mcp__<server>__<tool>.

Implementations

impl AtomicAction

pub fn kind(&self) -> Kind

The rule kind this atom is matched against.

pub fn describe(&self) -> String

Short human description used in reasons and audit lines.

Trait Implementations

impl Clone for AtomicAction

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for AtomicAction

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for AtomicAction

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Eq for AtomicAction

impl PartialEq for AtomicAction

fn eq(&self, other: &Self) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl Serialize for AtomicAction

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for AtomicAction