Struct ToolPolicyManager 

pub struct ToolPolicyManager { /* private fields */ }

Tool policy manager

Implementations

impl ToolPolicyManager

pub async fn new() -> Result<Self>

Create a new tool policy manager

pub async fn new_with_workspace(workspace_root: &Path) -> Result<Self>

Create a new tool policy manager with workspace-specific config

pub async fn new_with_config_path<P: Into<PathBuf>>( config_path: P, ) -> Result<Self>

Create a new tool policy manager backed by a custom configuration path.

This helper allows downstream consumers to store policy data alongside their own configuration hierarchy instead of writing to the default .vtcode directory.

pub fn set_permission_handler( &mut self, handler: Box<dyn PermissionPromptHandler>, )

Set the permission handler for this manager

pub async fn apply_tools_config( &mut self, tools_config: &ToolsConfig, ) -> Result<()>

Apply policies defined in vtcode.toml to the runtime policy manager

pub async fn update_available_tools(&mut self, tools: Vec<String>) -> Result<()>

Update the tool list and save configuration

pub async fn update_mcp_tools( &mut self, provider_tools: &HashMap<String, Vec<String>>, ) -> Result<()>

Synchronize MCP provider tool lists with persisted policies

pub fn get_mcp_tool_policy(&self, provider: &str, tool: &str) -> ToolPolicy

Retrieve policy for a specific MCP tool

pub async fn set_mcp_tool_policy( &mut self, provider: &str, tool: &str, policy: ToolPolicy, ) -> Result<()>

Update policy for a specific MCP tool

pub fn mcp_allowlist(&self) -> &McpAllowListConfig

Access the persisted MCP allow list configuration

pub async fn set_mcp_allowlist( &mut self, allowlist: McpAllowListConfig, ) -> Result<()>

Replace the persisted MCP allow list configuration

pub fn get_policy(&self, tool_name: &str) -> ToolPolicy

Get policy for a specific tool

pub fn get_constraints(&self, tool_name: &str) -> Option<&ToolConstraints>

Get optional constraints for a specific tool

pub async fn should_execute_tool( &mut self, tool_name: &str, ) -> Result<ToolExecutionDecision>

Check if tool should be executed based on policy

pub fn is_auto_allow_tool(tool_name: &str) -> bool

pub fn prompt_user_for_tool( &mut self, tool_name: &str, ) -> Result<ToolExecutionDecision>

Prompt user for tool execution permission using the configured handler.

This function delegates to the PermissionPromptHandler if one is configured. In TUI mode, the handler should be set to use TUI-based prompts via the permission handler mechanism.

pub async fn set_policy( &mut self, tool_name: &str, policy: ToolPolicy, ) -> Result<()>

Set policy for a specific tool

pub async fn reset_all_to_prompt(&mut self) -> Result<()>

Reset all tools to prompt

pub async fn allow_all_tools(&mut self) -> Result<()>

Allow all tools

pub async fn deny_all_tools(&mut self) -> Result<()>

Deny all tools

pub fn get_policy_summary(&self) -> IndexMap<String, ToolPolicy>

Get summary of current policies

pub fn has_approval_cache_key(&self, approval_key: &str) -> bool

Check whether an explicit approval key is remembered for this workspace.

Performs three levels of matching:

1. Exact match against persisted allowed keys
2. Word-prefix match: checks if the approval key starts with any persisted prefix
3. Regex match against persisted regex patterns

pub fn find_matching_cache_prefix(&self, approval_key: &str) -> Option<String>

Find the best matching cache key for a given approval key using fuzzy prefix matching. Returns the longest matching prefix key if one exists.

pub async fn add_approval_cache_key( &mut self, approval_key: impl Into<String>, ) -> Result<()>

Persist an explicit approval key for future prompts in this workspace.

pub async fn add_approval_cache_key_with_segments( &mut self, approval_key: impl Into<String>, ) -> Result<()>

Persist an approval key and automatically derive shorter segment-prefix keys so that future similar commands also match without re-prompting.

For example, approving “cargo check –target x86_64” also caches “cargo check” as a segment prefix, so “cargo check –release” also matches.

pub async fn add_approval_cache_prefix( &mut self, prefix_entry: impl Into<String>, ) -> Result<()>

Persist a shell prefix approval entry for future prompts in this workspace.

pub fn matching_shell_approval_prefix( &self, command_words: &[String], scope_signature: &str, ) -> Option<String>

Check whether a persisted shell prefix approval matches the command words and scope.

pub async fn clear_approval_cache(&mut self) -> Result<()>

Remove all persisted approval cache entries.

pub fn print_status(&self)

Print current policy status

pub fn config_path(&self) -> &Path

Expose path of the underlying policy configuration file

Trait Implementations

impl Clone for ToolPolicyManager

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.