Module authz 

Authorization pipeline for tool execution.

Provides a structured pre-execution decision path with typed decisions. Each stage can Allow, Deny, or AskUser, and the pipeline short-circuits on the first Deny.

Structs

AllowAllPermissions

Default permission handler that allows everything.

AuthzPipeline

The authorization pipeline.

AuthzResult

A complete authorization result from the pipeline.

Restriction

A permanent restriction that can never be bypassed.

StageResult

Result from a single authorization stage.

Enums

AuthzDecision

The authorization decision.

AuthzStage

The stage that produced an authorization decision.

Traits

PermissionHandler

Callback for permission mode decisions (allow/ask/deny). Products implement this to integrate their approval UX.