Struct NetworkPolicyDecider 

pub struct NetworkPolicyDecider { /* private fields */ }

Glue type that bundles a NetworkPolicy with a session cache and an auditor. Tools call NetworkPolicyDecider::evaluate before any HTTP transport is constructed; the result decides whether to proceed, deny, or prompt the user.

Implementations

impl NetworkPolicyDecider

pub fn new( policy: NetworkPolicy, auditor: Option<NetworkAuditor>, ) -> NetworkPolicyDecider

Build a decider from a policy. The session cache starts empty.

pub fn with_default_audit(policy: NetworkPolicy) -> NetworkPolicyDecider

Convenience: build a decider with default audit logging at ~/.deepseek/audit.log, if policy.audit is true.

pub fn policy(&self) -> &NetworkPolicy

Inspect the policy.

pub fn cache(&self) -> &NetworkSessionCache

Inspect the session cache.

pub fn evaluate(&self, host: &str, tool: &str) -> Decision

Decide for host, consulting the session cache first.

Audit logging happens only for terminal decisions (Allow / Deny). Prompt is intentionally not logged here — the caller is responsible for recording the user’s eventual answer with record_prompt_outcome.

pub fn approve_session(&self, host: &str, tool: &str)

Approve host for the rest of the session (one-shot). Audit log gets Prompt-Approved.

pub fn deny_session(&self, host: &str, tool: &str)

Deny host for the rest of the session. Audit log gets Prompt-Denied.

pub fn approve_persistent(&mut self, host: &str, tool: &str) -> &NetworkPolicy

Persist host into the policy’s allow list (so it survives the session) and approve it in-session. Returns the updated policy so callers can write it back to disk.

Trait Implementations

impl Clone for NetworkPolicyDecider

fn clone(&self) -> NetworkPolicyDecider

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for NetworkPolicyDecider

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.