Struct ToolAllowlist 

pub struct ToolAllowlist {
    pub allowed_tools: Vec<String>,
    pub approval_required: Vec<String>,
    pub denied_tools: Vec<String>,
}

A tool allowlist rule

Fields

allowed_tools: Vec<String>

Allowed tool names (exact match)

approval_required: Vec<String>

Tools that require approval before execution

denied_tools: Vec<String>

Tools that are explicitly denied

Implementations

impl ToolAllowlist

pub fn check(&self, tool_name: &str) -> ToolAllowlistResult

Legacy short-circuit check kept for back-compat with existing callers and tests. Newer code should consult Self::matches + crate::precedence::resolve_conflicts instead so it picks up the explanation trace.

pub fn matches(&self, tool_name: &str) -> Vec<PolicyVerdict>

Return every matching verdict for tool_name, instead of short- circuiting on the first hit. Order: denied → approval → allowed. Empty result means the allowlist saw nothing — the caller is responsible for the deny-by-default fallback.

Trait Implementations

impl Clone for ToolAllowlist

fn clone(&self) -> ToolAllowlist

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for ToolAllowlist

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for ToolAllowlist

fn default() -> ToolAllowlist

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for ToolAllowlist

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for ToolAllowlist

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.