Enum PolicyDecision 

#[non_exhaustive]
pub enum PolicyDecision {
    Allow {
        reason: Option<String>,
    },
    Deny {
        reason: Option<String>,
    },
    RequiresApproval {
        reason: Option<String>,
    },
    NotApplicable,
}

A normalized policy decision.

Variants (Non-exhaustive)

Non-exhaustive enums could have additional variants added in future. Therefore, when matching against variants of non-exhaustive enums, an extra wildcard arm must be added to account for any future variants.

Allow

The call may proceed without user approval.

Fields

reason: Option<String>

Reason recorded with the decision.

Deny

The call must not execute.

Fields

reason: Option<String>

Reason recorded with the decision.

RequiresApproval

An external approver must decide.

Fields

reason: Option<String>

Reason shown to the approver.

NotApplicable

No approval is required, overriding the tool’s own needs_approval.

Implementations

impl PolicyDecision

pub fn allow() -> Self

Allow without reason.

pub fn deny() -> Self

Deny without reason.

pub fn requires_approval() -> Self

Requires approval without reason.

pub fn with_reason(self, reason: impl Into<String>) -> Self

Attaches a reason (ignored for NotApplicable).

pub fn reason(&self) -> Option<&str>

The reason, if any.

pub fn normalize(raw: &JsonValue) -> Self

Normalizes a raw decision document.

Recognized forms:

• null: not applicable (an undefined rule or a missing result).
• { "decision": "allow" | "deny" | "requires-approval" | "not-applicable", "reason"?: string }.
• { "allow": bool, "reason"?: string } (legacy form).

A missing or unknown decision falls back to a valid legacy allow field. Anything else is a denial with the reason UNRECOGNIZED_DECISION, so that a broken policy fails closed.

pub fn into_approval(self) -> Option<ApprovalStatus>

Converts the decision into an approval status.

NotApplicable is an explicit status and overrides tool-defined approval. Use crate::with_default to gate calls without a policy decision.

Trait Implementations

impl Clone for PolicyDecision

fn clone(&self) -> PolicyDecision

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for PolicyDecision

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for PolicyDecision

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Eq for PolicyDecision

impl PartialEq for PolicyDecision

fn eq(&self, other: &PolicyDecision) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl Serialize for PolicyDecision

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for PolicyDecision