Struct ScopePolicy 

pub struct ScopePolicy {
    pub default_deny: bool,
    /* private fields */
}

Per-agent scope policy: the set of scopes that an agent has been granted.

An empty granted set combined with default_deny = true means the agent cannot execute any tool that requires a scope. With default_deny = false (the default) all tools are allowed unless they declare required scopes.

Fields

default_deny: bool

When true, a tool with no required scopes is still blocked unless the policy explicitly grants a wildcard "*". Defaults to false (no restriction on scope-free tools).

Implementations

impl ScopePolicy

pub fn new() -> Self

Create a policy with an empty granted set and default_deny = false.

pub fn grant(self, scope: impl Into<Scope>) -> Self

Add a granted scope.

pub fn with_scopes( self, scopes: impl IntoIterator<Item = impl Into<Scope>>, ) -> Self

Replace the granted set.

pub fn with_default_deny(self, value: bool) -> Self

Set default_deny.

pub fn is_scope_granted(&self, required: &str) -> bool

Check whether a single required scope is satisfied by this policy.

Matching rules (first match wins):

1. Exact match: "fs:read" satisfies "fs:read".
2. Namespace wildcard: "fs:*" satisfies "fs:read", "fs:write", etc.
3. Global wildcard: "*" satisfies any scope.

pub fn missing_scopes<'a>(&self, required: &'a [String]) -> Vec<&'a str>

Return the list of required scopes that are NOT granted.

Trait Implementations

impl Clone for ScopePolicy

fn clone(&self) -> ScopePolicy

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for ScopePolicy

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for ScopePolicy

fn default() -> Self

Returns the “default value” for a type.