Struct ShellPolicyHandle 

pub struct ShellPolicyHandle { /* private fields */ }

Clonable handle for live policy rebuilds on hot-reload.

Obtained from ShellExecutor::policy_handle at construction time and stored on the agent. Call ShellPolicyHandle::rebuild to atomically replace the effective blocked_commands list without recreating the executor. Reads on the dispatch path are lock-free via ArcSwap::load_full.

Implementations

impl ShellPolicyHandle

pub fn rebuild(&self, config: &ShellConfig)

Atomically install a new effective blocklist derived from config.

Rebuild contract

config must be the already-overlay-merged ShellConfig (i.e. the value produced by load_config_with_overlay). Plugin contributions are already present in config.blocked_commands at this point; this method does NOT re-apply overlays.

pub fn snapshot_blocked(&self) -> Vec<String>

Snapshot of the current effective blocklist.

pub fn new_shared(config: &ShellConfig) -> Self

Build a handle from scratch, without an accompanying ShellExecutor (#6588).

Entry points that construct a fresh ShellExecutor per session (ACP, serve — so each session gets its own RiskChainAccumulator instead of sharing one across concurrent sessions) need ONE handle shared across every session’s executor, so a hot-reload (rebuild) reaches all of them. Build this once per connection/server and pass it to ShellExecutor::with_shared_policy for each session’s executor.

Trait Implementations

impl Clone for ShellPolicyHandle

fn clone(&self) -> ShellPolicyHandle

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for ShellPolicyHandle

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.