AgentSessionManager.Policy.Policy (AgentSessionManager v0.8.0)

Declarative policy definition for runtime enforcement.

Supports on_violation actions: :cancel, :request_approval, and :warn.

Summary

Types

limit()

on_violation()

t()

tool_rule()

Functions

merge(base, overrides)

new(attrs \\ [])

stack_merge(list)

Merges a stack of policies into a single effective policy.

Types

limit()

@type limit() ::
  {:max_total_tokens, non_neg_integer()}
  | {:max_duration_ms, non_neg_integer()}
  | {:max_tool_calls, non_neg_integer()}
  | {:max_cost_usd, float()}

on_violation()

@type on_violation() :: :cancel | :request_approval | :warn

t()

@type t() :: %AgentSessionManager.Policy.Policy{
  limits: [limit()],
  metadata: map(),
  name: String.t(),
  on_violation: on_violation(),
  tool_rules: [tool_rule()]
}

tool_rule()

@type tool_rule() :: {:allow, [String.t()]} | {:deny, [String.t()]}

Functions

merge(base, overrides)

@spec merge(t(), keyword() | map()) :: t()

new(attrs \\ [])

@spec new(keyword() | map()) ::
  {:ok, t()} | {:error, AgentSessionManager.Core.Error.t()}

stack_merge(list)

@spec stack_merge([t()]) :: t()

Merges a stack of policies into a single effective policy.

Policies are merged left-to-right (first policy is the base, subsequent policies override). Deterministic merge semantics:

name: joined with " + " separator
limits: later policies override limit types that appear in both; limits unique to either side are preserved
tool_rules: concatenated (all rules apply)
on_violation: the strictest action wins (:cancel > :request_approval > :warn)
metadata: deep-merged (later keys override)

Returns a single %Policy{}.

Examples

{:ok, org} = Policy.new(name: "org", limits: [{:max_total_tokens, 100_000}])
{:ok, team} = Policy.new(name: "team", tool_rules: [{:deny, ["bash"]}])
{:ok, user} = Policy.new(name: "user", on_violation: :warn)

effective = Policy.stack_merge([org, team, user])
# effective has org token limit, team deny rule, org cancel action
# (cancel is stricter than warn)