Enum HookDecision 

pub enum HookDecision {
    Pass,
    Allow,
    Ask,
    Deny,
}

BP-10 (catalog row “Hook/plugin permission veto”, semantics “Programmatic allow/deny/rewrite before the user sees it”): what a pre-tool hook decided about one call.

The three non-Pass values are TIERS OF THE ONE PERMISSIONS ENGINE, not a second gate beside it — crate::agent::Agent’s permissions_gate_denial_impl folds this in and the engine’s own deny→ask→allow priority decides. In particular Self::Allow answers an Ask on the user’s behalf (CC’s PermissionRequest-class reply) but can never override a deny rule: a hard floor stays a hard floor.

Variants

Pass

The hook expressed no opinion — the engine decides alone. The default, and what a silent (exit-0, no output) hook means.

Allow

Answer an Ask on the user’s behalf: the call proceeds WITHOUT a prompt, unless a deny rule (or a protected path) already refused it, in which case the refusal stands.

Ask

Force the call to the Ask tier even if the rules would have allowed it — “let the user see this one”.

Deny

Refuse the call outright.

Trait Implementations

impl Clone for HookDecision

fn clone(&self) -> HookDecision

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Copy for HookDecision

impl Debug for HookDecision

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for HookDecision

fn default() -> HookDecision

Returns the “default value” for a type.

impl Eq for HookDecision

impl PartialEq for HookDecision

fn eq(&self, other: &HookDecision) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for HookDecision