Struct PathProtectionRule 

pub struct PathProtectionRule {
    pub protected: Vec<String>,
    pub workspace_only: bool,
    pub tool_allowed_paths: Vec<PathBuf>,
}

Priority 4: blocks access to protected path patterns and enforces workspace-only confinement for agent file tools.

Fields

protected: Vec<String>

Path patterns that are not allowed in tool arguments.

workspace_only: bool

When true, absolute paths outside /tmp and tool_allowed_paths are denied (workspace-only mode).

tool_allowed_paths: Vec<PathBuf>

Absolute paths that tools may access even in workspace_only mode. Auto-populated from feature configs (e.g. obsidian.vault_path).

Implementations

impl PathProtectionRule

pub fn new(protected: Vec<String>) -> Self

pub fn from_config(fs_cfg: &FilesystemSecurityConfig) -> Self

Build from the [security.filesystem] config section. Merges protected_paths + extra_protected_paths, reads workspace_only flag, and imports tool_allowed_paths so that configured external directories (e.g. Obsidian vault) are reachable even in workspace-only mode.

Trait Implementations

impl Default for PathProtectionRule

fn default() -> Self

Returns the “default value” for a type.

impl PolicyRule for PathProtectionRule

fn name(&self) -> &str

fn priority(&self) -> u32

fn evaluate( &self, call: &ToolCallRequest, _ctx: &PolicyContext, ) -> PolicyDecision