Struct ToolPolicyConfig 

pub struct ToolPolicyConfig {
    pub mode: ToolPolicyMode,
    pub deny_tools: Vec<String>,
    pub max_risk: Option<ToolRisk>,
    pub allow_tools: Vec<String>,
    pub grants_mode: ToolPolicyMode,
    pub control_chat_bypass: bool,
    pub grants: Vec<ToolGrantRule>,
}

Config-driven pre-tool-call policy (tool_policy in config.yaml).

Complements the warn-only loop guardrails below: where GuardrailController nudges the model out of unproductive loops, this policy is a hard gate the operator sets ahead of time. Default mode is off — existing deployments see no behavior change.

Fields

mode: ToolPolicyMode

deny_tools: Vec<String>

Tool names that are always denied (subject to mode). Supports * and trailing wildcards (mcp_*). Deny always wins over allow_tools.

max_risk: Option<ToolRisk>

Highest permitted risk tier: low | medium | high. Tools whose built-in risk exceeds this are denied, whether or not they are in allow_tools. Unset = all tiers permitted. Typos are rejected at config load (typed enum).

allow_tools: Vec<String>

Allowlist. When non-empty, only the listed tools may run; every other tool is a violation (subject to mode). Supports * and trailing wildcards. Empty = every tool not removed by deny_tools / max_risk. Each rule only ever removes tools: listing a tool here never overrides deny_tools or max_risk.

grants_mode: ToolPolicyMode

Per-chat/per-principal capability enforcement. Separate from the global mode so deployments can introduce grants in warn mode first.

control_chat_bypass: bool

grants: Vec<ToolGrantRule>

Trait Implementations

impl Clone for ToolPolicyConfig

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for ToolPolicyConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for ToolPolicyConfig

fn default() -> Self

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for ToolPolicyConfig

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for ToolPolicyConfig

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.