Struct SecurityPlugin 

pub struct SecurityPlugin { /* private fields */ }

Plugin that enforces tool call policies via a PolicyEngine.

Before every tool call, the security plugin consults the policy engine. If the engine returns Deny, the tool call is blocked. If it returns Confirm, the tool call is blocked with a confirmation message (in a real system, this would prompt the user).

Implementations

impl SecurityPlugin

pub fn new(engine: impl PolicyEngine + 'static) -> Self

Create a new security plugin with the given policy engine.

Trait Implementations

impl Plugin for SecurityPlugin

fn name(&self) -> &str

Plugin name for logging/debugging.

fn before_tool<'life0, 'life1, 'life2, 'async_trait>( &'life0 self, call: &'life1 FunctionCall, _ctx: &'life2 InvocationContext, ) -> Pin<Box<dyn Future<Output = PluginResult> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait, 'life1: 'async_trait, 'life2: 'async_trait,

Called before a tool is executed. Return Deny to prevent execution.

fn before_agent<'life0, 'life1, 'async_trait>( &'life0 self, _ctx: &'life1 InvocationContext, ) -> Pin<Box<dyn Future<Output = PluginResult> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait, 'life1: 'async_trait,

Called before an agent starts execution.

fn after_agent<'life0, 'life1, 'async_trait>( &'life0 self, _ctx: &'life1 InvocationContext, ) -> Pin<Box<dyn Future<Output = PluginResult> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait, 'life1: 'async_trait,

Called after an agent completes execution.

fn after_tool<'life0, 'life1, 'life2, 'life3, 'async_trait>( &'life0 self, _call: &'life1 FunctionCall, _result: &'life2 Value, _ctx: &'life3 InvocationContext, ) -> Pin<Box<dyn Future<Output = PluginResult> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait, 'life1: 'async_trait, 'life2: 'async_trait, 'life3: 'async_trait,

Called after a tool completes. Can transform or deny the result.

fn on_event<'life0, 'life1, 'life2, 'async_trait>( &'life0 self, _event: &'life1 Event, _ctx: &'life2 InvocationContext, ) -> Pin<Box<dyn Future<Output = PluginResult> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait, 'life1: 'async_trait, 'life2: 'async_trait,

Called when an event is emitted.

fn on_user_message<'life0, 'life1, 'life2, 'async_trait>( &'life0 self, _message: &'life1 str, _ctx: &'life2 InvocationContext, ) -> Pin<Box<dyn Future<Output = PluginResult> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait, 'life1: 'async_trait, 'life2: 'async_trait,

Called when a user message is received.

fn before_run<'life0, 'life1, 'async_trait>( &'life0 self, _ctx: &'life1 InvocationContext, ) -> Pin<Box<dyn Future<Output = PluginResult> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait, 'life1: 'async_trait,

Called before a run starts (before the agent loop).

fn after_run<'life0, 'life1, 'async_trait>( &'life0 self, _ctx: &'life1 InvocationContext, ) -> Pin<Box<dyn Future<Output = PluginResult> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait, 'life1: 'async_trait,

Called after a run completes (after the agent loop).

fn before_model<'life0, 'life1, 'life2, 'async_trait>( &'life0 self, _request: &'life1 LlmRequest, _ctx: &'life2 InvocationContext, ) -> Pin<Box<dyn Future<Output = PluginResult> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait, 'life1: 'async_trait, 'life2: 'async_trait,

Called before a model generation request.

fn after_model<'life0, 'life1, 'life2, 'async_trait>( &'life0 self, _response: &'life1 LlmResponse, _ctx: &'life2 InvocationContext, ) -> Pin<Box<dyn Future<Output = PluginResult> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait, 'life1: 'async_trait, 'life2: 'async_trait,

Called after a model generation response.

fn on_model_error<'life0, 'life1, 'life2, 'async_trait>( &'life0 self, _error: &'life1 str, _ctx: &'life2 InvocationContext, ) -> Pin<Box<dyn Future<Output = PluginResult> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait, 'life1: 'async_trait, 'life2: 'async_trait,

Called when a model generation fails.

fn on_tool_error<'life0, 'life1, 'life2, 'life3, 'async_trait>( &'life0 self, _call: &'life1 FunctionCall, _error: &'life2 str, _ctx: &'life3 InvocationContext, ) -> Pin<Box<dyn Future<Output = PluginResult> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait, 'life1: 'async_trait, 'life2: 'async_trait, 'life3: 'async_trait,

Called when a tool execution fails.