Struct SafetyGateway 

pub struct SafetyGateway { /* private fields */ }

Unified Safety Gateway

Consolidates rate limiting, destructive tool detection, command policy enforcement, plan mode restrictions, and dotfile protection into a single safety decision point.

Implementations

impl SafetyGateway

pub fn new() -> Self

Create a new safety gateway with default configuration

pub fn with_config(config: SafetyGatewayConfig) -> Self

Create a new safety gateway with custom configuration

pub fn with_dotfile_guardian(self, guardian: Arc<DotfileGuardian>) -> Self

Set the dotfile guardian for protected file access

pub async fn with_dotfile_protection( self, config: DotfileProtectionConfig, ) -> Result<Self>

Create and set a dotfile guardian from configuration

pub fn with_command_policy(self, policy: CommandPolicyEvaluator) -> Self

Set the command policy evaluator for shell command checks

pub fn with_commands_config(self, config: &CommandsConfig) -> Self

Create from commands config

pub fn set_plan_mode(&self, active: bool)

Enable or disable plan mode

pub fn set_workspace_trust(&self, trust: WorkspaceTrust)

Set workspace trust level

pub fn set_limits(&self, max_per_turn: usize, max_per_session: usize)

Update rate limits

pub fn set_rate_limits( &self, rate_limit_per_second: usize, rate_limit_per_minute: Option<usize>, )

Update rate-limiter thresholds.

pub fn set_rate_limit_enforcement(&self, enabled: bool)

Enable or disable rate-limit enforcement while preserving counters.

pub fn increase_session_limit(&self, increment: usize)

Increase session limit dynamically

pub fn max_per_session(&self) -> usize

pub fn start_turn(&self)

Reset turn counters (call at start of new turn)

pub fn preapprove(&self, tool_name: &str)

Preapprove a tool for this session

pub fn is_preapproved(&self, tool_name: &str) -> bool

Check if a tool is preapproved

pub fn is_destructive(&self, tool_name: &str) -> bool

Check if a tool is destructive

pub fn is_mutating(&self, tool_name: &str) -> bool

Check if a tool is mutating

pub fn check_safety<'a>( &'a self, ctx: &'a SafetyContext, tool_name: &'a str, args: &'a Value, ) -> impl Future<Output = SafetyDecision> + 'a

Main entry point: check safety for a tool invocation.

Returns a SafetyDecision indicating whether execution can proceed. Inline-delegating wrapper that returns the inner future directly to avoid an extra coroutine state machine (audit section 16).

pub async fn check_safety_with_id( &self, ctx: &SafetyContext, tool_name: &str, args: &Value, invocation_id: Option<ToolInvocationId>, ) -> SafetyDecision

Check safety with explicit invocation ID for correlation

pub async fn check_and_record( &self, ctx: &SafetyContext, tool_name: &str, args: &Value, ) -> SafetyCheckResult

Check safety and atomically reserve a rate-limit slot on success.

This avoids split check/record races by validating rate limits and recording execution under a single lock acquisition.

pub async fn check_and_record_with_id( &self, ctx: &SafetyContext, tool_name: &str, args: &Value, invocation_id: Option<ToolInvocationId>, ) -> SafetyCheckResult

Check safety with correlation ID and atomically reserve a rate-limit slot.

pub fn record_execution(&self)

Record that a tool call was executed (for rate limiting)

pub fn dotfile_guardian(&self) -> Option<&Arc<DotfileGuardian>>

Get the dotfile guardian (if configured)

pub fn get_stats(&self) -> SafetyStats

Get current session statistics

Trait Implementations

impl Default for SafetyGateway

fn default() -> Self

Returns the “default value” for a type.