Struct PermissionPolicy 

pub struct PermissionPolicy { /* private fields */ }

Tool permission policy: maps tool_id → ordered list of rules. First matching rule wins; default is Ask.

Runtime enforcement is currently implemented for bash (ShellExecutor). Other tools rely on prompt filtering via ToolRegistry::format_for_prompt_filtered.

Implementations

impl PermissionPolicy

pub fn new(rules: HashMap<String, Vec<PermissionRule>>) -> Self

pub fn with_autonomy(self, level: AutonomyLevel) -> Self

Set autonomy level (builder pattern).

pub fn check(&self, tool_id: &str, input: &str) -> PermissionAction

Check permission for a tool invocation. First matching glob wins.

pub fn from_legacy(blocked: &[String], confirm: &[String]) -> Self

Build policy from legacy blocked_commands / confirm_patterns for “bash” tool.

pub fn is_fully_denied(&self, tool_id: &str) -> bool

Returns true if all rules for a tool_id are Deny.

pub fn rules(&self) -> &HashMap<String, Vec<PermissionRule>>

Returns a reference to the internal rules map.

Trait Implementations

impl Clone for PermissionPolicy

fn clone(&self) -> PermissionPolicy

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for PermissionPolicy

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for PermissionPolicy

fn default() -> PermissionPolicy

Returns the “default value” for a type.

impl From<PermissionsConfig> for PermissionPolicy

fn from(config: PermissionsConfig) -> Self

Converts to this type from the input type.