Struct Policy 

pub struct Policy {
    pub mode: PermissionMode,
    pub allowlist: Vec<String>,
    pub denylist: Vec<String>,
    pub enable_os_sandbox: bool,
    pub shell_allow: Vec<String>,
    pub shell_deny: Vec<String>,
    pub enforce_dangerous_shell: bool,
}

Fields

mode: PermissionMode

allowlist: Vec<String>

denylist: Vec<String>

enable_os_sandbox: bool

When true, hosts/Agent should enable OS seatbelt/bwrap for process tools.

shell_allow: Vec<String>

Host-owned shell allow globs for process tools, e.g. git *, cargo test*. When non-empty, every shell segment must match some pattern (after deny/dangerous). Engine only matches; hosts fill the lists.

shell_deny: Vec<String>

Host-owned shell deny globs for process tools (any matching segment → Deny).

enforce_dangerous_shell: bool

When true (default), apply built-in dangerous-shell hard-deny under non-FullAccess. Hosts that fully own shell policy can set false and use hooks/Authorizer instead.

Implementations

impl Policy

pub fn full_access() -> Self

pub fn read_only() -> Self

pub fn workspace_write() -> Self

pub fn deny_all() -> Self

pub fn with_os_sandbox(self, enabled: bool) -> Self

Enable or disable OS sandbox plugin flag (seatbelt/bwrap).

pub fn with_shell_allow( self, patterns: impl IntoIterator<Item = impl Into<String>>, ) -> Self

pub fn with_shell_deny( self, patterns: impl IntoIterator<Item = impl Into<String>>, ) -> Self

pub fn with_enforce_dangerous_shell(self, enabled: bool) -> Self

pub fn apply_scope(&mut self, scope_policy: &Policy)

Apply a scope/profile policy’s mode (+ sandbox flag) without wiping host-owned fields. Preserves: shell_allow, shell_deny, enforce_dangerous_shell, allowlist, denylist.

pub fn with_scope(self, scope_policy: &Policy) -> Self

Builder form of Self::apply_scope.

Trait Implementations

impl Clone for Policy

fn clone(&self) -> Policy

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for Policy

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for Policy

fn default() -> Self

Secure default matches Agent::new — not full access.

impl<'de> Deserialize<'de> for Policy

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for Policy

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.