Struct AllowListPolicy 

pub struct AllowListPolicy {
    pub allowed_tools: HashSet<String>,
    pub allowed_providers: HashSet<String>,
}

Policy that allows only actions whose tool/provider is in the given sets. Empty set = no tools or providers allowed for that category. Sleep and WaitSignal are always allowed. To allow all tools/providers use AllowAllPolicy, or populate the sets explicitly.

Fields

allowed_tools: HashSet<String>

allowed_providers: HashSet<String>

Implementations

impl AllowListPolicy

pub fn new( allowed_tools: HashSet<String>, allowed_providers: HashSet<String>, ) -> Self

pub fn tools_only(tools: impl IntoIterator<Item = String>) -> Self

pub fn providers_only(providers: impl IntoIterator<Item = String>) -> Self

Trait Implementations

impl Policy for AllowListPolicy

fn authorize( &self, _run_id: &RunId, action: &Action, _ctx: &PolicyCtx, ) -> Result<(), KernelError>

Whether the action is allowed for this run and context.

fn retry_strategy(&self, err: &dyn Display, _action: &Action) -> RetryDecision

Whether to retry after an error (and optionally after a delay).

fn retry_strategy_attempt( &self, err: &ActionError, action: &Action, attempt: u32, ) -> RetryDecision

Retry strategy with attempt count and structured error. Default uses kind: Permanent => Fail, others may be retried by implementations. Applies only to executor Err; ActionResult::Failure is not retried.

fn budget(&self) -> BudgetRules

Optional budget; default is no limits.