pub fn resolve_tool_policy_opt(
rules: &[ToolRule],
tool_name: &str,
) -> Option<ToolPolicy>Expand description
Like resolve_tool_policy but distinguishes “no rule matched” (None)
from an explicit rule — for tools whose registration is already gated
elsewhere (e.g. fleet_run’s config allowlist) and that therefore want a
different default than Ask while still honoring explicit rules.