Versions in this module Expand all Collapse all v0 v0.16.0 Nov 1, 2026 v0.15.1 Nov 1, 2026 v0.15.0 Oct 31, 2026 v0.14.0 Oct 31, 2026 v0.13.0 Oct 31, 2026 v0.12.0 Oct 31, 2026 v0.11.1 Oct 31, 2026 v0.11.0 Oct 31, 2026 v0.10.3 Oct 30, 2026 v0.10.2 Oct 30, 2026 v0.10.1 Oct 30, 2026 v0.10.0 Oct 30, 2026 v0.9.0 Oct 30, 2026 Changes in this version + const ChannelCommand + const ChannelMCP + const ChannelWebFetch + const CommandEnvironmentContainer + const CommandNetworkDenied + const CommandNetworkDirect + const CommandNetworkProxy + const CommandsRefused + const CommandsSandboxed + const Notice + const SourceACPClientMCP + const SourceMCP + const SourceResume + const SourceReview + const SourceUntrustedTask + const SourceWebFetch + var ConfigurableSources = []string + func ParseSources(list []string) (map[string]bool, error) + func RefusalMessage(tool, channel string, first Source, host string) string + func URLHostPort(raw string) (host string, port int, ok bool) + type Denial struct + Channel string + Host string + Step int + Tool string + ToolCallID string + func (d Denial) Fields() map[string]any + type MCPServerPolicy struct + Alias string + LockdownAllowed bool + Trusted bool + type Source struct + Host string + Resumed bool + Source string + Step int + Tool string + ToolCallID string + func (s Source) Fields() map[string]any + type State struct + func New(webFetchAllowed []string) (*State, error) + func (s *State) ACPClientMCPAliases() []string + func (s *State) CommandDomains() []string + func (s *State) CommandsConfined() bool + func (s *State) CommandsInfo() map[string]any + func (s *State) ConfineCommands(proxied bool, narrow func([]string)) + func (s *State) ContainerProxy() bool + func (s *State) Denials() []Denial + func (s *State) Deny(d Denial) + func (s *State) Describe() string + func (s *State) EnabledSources() []string + func (s *State) First() (src Source, ok bool) + func (s *State) Info() map[string]any + func (s *State) MCPAliases() []string + func (s *State) MCPCallAllowed(aliases []string) bool + func (s *State) MCPCallTaints(aliases []string) bool + func (s *State) MCPTaintSource(aliases []string) (string, bool) + func (s *State) RefuseCommands() + func (s *State) Restore(sources []Source, denials []Denial) + func (s *State) SetACPClientMCPServers(aliases []string) + func (s *State) SetCommandAllowedDomains(domains []string) error + func (s *State) SetCommandsDirectUntilTaint() + func (s *State) SetCommandsInContainer(removedAtTaint bool) + func (s *State) SetContainerProxy(on bool) + func (s *State) SetMCPServers(servers []MCPServerPolicy) + func (s *State) SetSources(list []string) error + func (s *State) Sources() []Source + func (s *State) StopsProcessesAtTaint() bool + func (s *State) Taint(src Source) (added, first bool) + func (s *State) Tainted() bool + func (s *State) TaintsFrom(source string) bool + func (s *State) WebFetchAllowed(host string, port int) bool + func (s *State) WebFetchDomains() []string + func (s *State) WebFetchGate(host string, port int) error