Struct ExtensionPolicy 

pub struct ExtensionPolicy {
    pub mode: ExtensionPolicyMode,
    pub max_memory_mb: u32,
    pub default_caps: Vec<String>,
    pub deny_caps: Vec<String>,
    pub per_extension: HashMap<String, ExtensionOverride>,
    pub exec_mediation: ExecMediationPolicy,
    pub secret_broker: SecretBrokerPolicy,
}

Fields

mode: ExtensionPolicyMode

max_memory_mb: u32

default_caps: Vec<String>

deny_caps: Vec<String>

per_extension: HashMap<String, ExtensionOverride>

Per-extension overrides keyed by extension ID.

exec_mediation: ExecMediationPolicy

Exec mediation policy (SEC-4.3). Controls command-level allow/deny after capability-level exec is granted.

secret_broker: SecretBrokerPolicy

Secret broker policy (SEC-4.3). Controls redaction of secret env vars and prevents raw disclosure when policy forbids it.

Implementations

impl ExtensionPolicy

pub fn evaluate(&self, capability: &str) -> PolicyCheck

Evaluate policy for a capability without extension context.

Equivalent to evaluate_for(capability, None).

pub fn evaluate_for( &self, capability: &str, extension_id: Option<&str>, ) -> PolicyCheck

Evaluate policy for a capability with optional extension context.

Applies the full precedence chain documented above.

pub fn has_override(&self, extension_id: &str) -> bool

Check whether a specific extension has any overrides configured.

pub fn from_profile(profile: PolicyProfile) -> Self

Create a policy from a named profile.

pub fn explain_effective_policy( &self, extension_id: Option<&str>, ) -> PolicyExplanation

Produce a structured explanation of the effective policy for all known capabilities. This is the runtime-callable counterpart to the CLI --explain-extension-policy flag — it can be invoked at any point during execution to inspect the live policy state.

pub fn is_valid_downgrade(from: &Self, to: &Self) -> ProfileTransitionCheck

Verify that a profile transition from from to to produces a strictly tighter policy for dangerous capabilities. Returns true if the downgrade is valid (all dangerous caps that were denied in from are still denied in to, AND to denies at least as many).

Trait Implementations

impl Clone for ExtensionPolicy

fn clone(&self) -> ExtensionPolicy

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for ExtensionPolicy

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for ExtensionPolicy

fn default() -> Self

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for ExtensionPolicy

where ExtensionPolicy: Default,

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for ExtensionPolicy

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.