Struct Policy 

pub struct Policy { /* private fields */ }

The classifier for one project.

Implementations

impl Policy

pub fn new(checks: &[Vec<String>], extra: &[Vec<String>]) -> Self

A policy allowing the command prefixes of checks (program and subcommands, up to the first option) and the extra prefixes.

pub fn with_hidden(self, hidden: impl IntoIterator<Item = String>) -> Self

Paths git ignored when an in-place run started: the file tools refuse them, except the protected files (the intent stays readable).

pub fn in_place(self) -> Self

An in-place attempt (run --in-place): the checkout is the person’s, so git commands that move it are denied.

pub fn authoring(self) -> Self

The planning profile: the format’s artifacts and scripts are the work; its machinery, verification inputs and secrets stay denied; anything else — source code included — needs approval.

pub fn rules(self, rules: &'static Rules) -> Self

The project’s format’s rules (intent, planning artifacts); the reference format’s by default.

pub fn with_network(self, allow: Vec<Vec<String>>) -> Self

[sandbox] network_allow: prefixes that get the network.

pub fn network_allowed(&self, argv: &[String]) -> bool

Whether argv gets the network without asking.

pub fn with_mcp(self, tools: impl IntoIterator<Item = (String, String)>) -> Self

The project’s MCP tools and their configured decisions.

pub fn with_decisions( self, approved: Vec<Grant>, rejected: Vec<Rejection>, ) -> Self

A person’s decisions for this task: an approval turns a call that needs approval into an allowed one (never a denied one); a rejection turns it into a denial with the person’s reason.

pub fn with_frozen(self, frozen: impl IntoIterator<Item = String>) -> Self

Freezes these test files: writing them needs approval.

pub fn protected(&self) -> &Protected

The protected set this policy uses.

pub fn write_protected(&self, rel: &str) -> Option<Class>

Whether this (resolved, workspace-relative) path is protected for writing under this policy: the authoring profile writes the format’s artifacts, nothing else of the protected set.

pub fn classify(&self, tool: &str, args: &Value) -> Decision

Classifies tool called with args.

pub fn rule(&self, tool: &str, args: &Value) -> String

The rule that decides tool with args when no person does: what a call’s record names, so a rule’s decision is never read as a person’s.

Trait Implementations

impl Clone for Policy

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for Policy

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for Policy

fn default() -> Self

Returns the “default value” for a type.