Struct DenyDetails 

pub struct DenyDetails {
    pub tool_name: Option<String>,
    pub tool_server: Option<String>,
    pub requested_action: Option<String>,
    pub required_scope: Option<String>,
    pub granted_scope: Option<String>,
    pub reason_code: Option<String>,
    pub receipt_id: Option<String>,
    pub hint: Option<String>,
    pub docs_url: Option<String>,
}

Structured deny context attached to Verdict::Deny.

Every field is optional. Callers that only know a reason and a guard can continue to use Verdict::deny; callers with richer context should prefer Verdict::deny_detailed or build a DenyDetails directly and pass it to the struct variant.

Fields

tool_name: Option<String>

Tool name that was denied, e.g. "write_file".

tool_server: Option<String>

Tool server that hosts the denied tool, e.g. "filesystem".

requested_action: Option<String>

Short human-readable summary of the attempted action, suitable for inclusion in an error line. Example: write_file(path=".env").

required_scope: Option<String>

Scope the kernel says is required to perform the action, rendered as the SDK’s canonical ToolGrant(...) string.

granted_scope: Option<String>

Scope the presented capability actually had, same rendering as required_scope. None when no capability was presented.

reason_code: Option<String>

Stable machine-readable code for this denial, e.g. "scope.missing", "guard.prompt_injection", "tenant.mismatch".

receipt_id: Option<String>

Receipt id that captures this denial, for audit correlation.

hint: Option<String>

Next-steps sentence shown to the developer. Example: "Request scope filesystem::write_file from the capability authority.".

docs_url: Option<String>

Link to the docs page that explains this deny code.

Implementations

impl DenyDetails

pub fn is_empty(&self) -> bool

True when every field is None. Used to keep the default-path serialized form identical to the pre-0.5 wire shape.

Trait Implementations

impl Clone for DenyDetails

fn clone(&self) -> DenyDetails

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for DenyDetails

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for DenyDetails

fn default() -> DenyDetails

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for DenyDetails

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl PartialEq for DenyDetails

fn eq(&self, other: &DenyDetails) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for DenyDetails

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl Eq for DenyDetails

impl StructuralPartialEq for DenyDetails