Struct ScopeGuard 

pub struct ScopeGuard { /* private fields */ }

Checks tool scope requirements against an agent’s ScopePolicy.

Integrate with the executor by calling ScopeGuard::check before executing a tool. If the check fails and an ApprovalHandler is provided, the guard escalates to the handler so a human operator can override.

Implementations

impl ScopeGuard

pub fn new(policy: ScopePolicy) -> Self

pub fn check(&self, tool_schema: &ToolSchema) -> ScopeCheckResult

Check whether tool_schema may be executed under the current policy.

• If the schema has no required_scopes, the result is always Allowed (unless default_deny is set — that case is handled separately).
• If all required scopes are granted, Allowed is returned.
• Otherwise, Denied is returned with the list of missing scopes.

pub async fn check_with_escalation<H: ApprovalHandler>( &self, tool_schema: &ToolSchema, tool_call: &ToolCall, handler: &H, ) -> Result<bool, ApprovalError>

Check scope and, on denial, escalate to the provided ApprovalHandler.

Returns Ok(true) if execution should proceed (allowed or overridden by the approval handler), Ok(false) if denied, or an error if the handler itself failed.

Trait Implementations

impl Clone for ScopeGuard

fn clone(&self) -> ScopeGuard

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for ScopeGuard

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.