Struct PermissionPolicy 

pub struct PermissionPolicy {
    pub deny: Vec<PermissionRule>,
    pub allow: Vec<PermissionRule>,
    pub ask: Vec<PermissionRule>,
    pub default_decision: PermissionDecision,
    pub enabled: bool,
}

Permission policy configuration

Evaluation order:

1. Deny rules - any match results in denial
2. Allow rules - any match results in auto-approval
3. Ask rules - any match requires user confirmation
4. Default - falls back to default_decision

Fields

deny: Vec<PermissionRule>

Rules that always deny (checked first)

allow: Vec<PermissionRule>

Rules that auto-approve without confirmation

ask: Vec<PermissionRule>

Rules that always require confirmation

default_decision: PermissionDecision

Default decision when no rules match

enabled: bool

Whether the permission system is enabled

Implementations

impl PermissionPolicy

pub fn new() -> Self

Create a new permission policy

pub fn strict() -> Self

Create a strict policy that asks for everything

pub fn deny(self, rule: &str) -> Self

Add a deny rule

pub fn allow(self, rule: &str) -> Self

Add an allow rule

pub fn ask(self, rule: &str) -> Self

Add an ask rule

pub fn deny_all(self, rules: &[&str]) -> Self

Add multiple deny rules

pub fn allow_all(self, rules: &[&str]) -> Self

Add multiple allow rules

pub fn ask_all(self, rules: &[&str]) -> Self

Add multiple ask rules

pub fn check(&self, tool_name: &str, args: &Value) -> PermissionDecision

Check permission for a tool invocation

Returns the permission decision based on rule evaluation order:

1. Deny rules (any match = Deny)
2. Allow rules (any match = Allow)
3. Ask rules (any match = Ask)
4. Default decision

pub fn is_allowed(&self, tool_name: &str, args: &Value) -> bool

Check if a tool invocation is allowed (Allow or not Deny)

pub fn is_denied(&self, tool_name: &str, args: &Value) -> bool

Check if a tool invocation is denied

pub fn requires_confirmation(&self, tool_name: &str, args: &Value) -> bool

Check if a tool invocation requires confirmation

pub fn get_matching_rules(&self, tool_name: &str, args: &Value) -> MatchingRules

Get matching rules for debugging/logging

pub fn declares_tool_access(&self, tool_name: &str) -> bool

Whether this policy explicitly declares that a tool may be considered through an Allow or Ask rule.

This ignores argument patterns and does not authorize execution. It is used when composing parent and delegated-worker visibility: an explicit worker capability can override a parent host’s ordinary model hiding, while execution-time checks from both scopes remain authoritative.

Trait Implementations

impl Clone for PermissionPolicy

fn clone(&self) -> PermissionPolicy

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for PermissionPolicy

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for PermissionPolicy

fn default() -> Self

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for PermissionPolicy

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl PermissionChecker for PermissionPolicy

fn expose_to_model(&self, tool_name: &str) -> bool

Whether a tool definition should be exposed to the model.

fn check(&self, tool_name: &str, args: &Value) -> PermissionDecision

Check whether a tool invocation is allowed, denied, or requires confirmation.

impl Serialize for PermissionPolicy

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.