Module approval 

Tool approval mode system (RFC-035).

Re-exports

pub use blacklist::ArgMatcher;

pub use blacklist::BlacklistRule;

pub use blacklist::SecurityBlacklist;

pub use blacklist::default_blacklist_rules;

pub use gate::ApprovalDecision;

pub use gate::ApprovalGate;

pub use gate::ToolCall;

pub use gate::default_tool_policy_map;

pub use policy::ApprovalConfig;

pub use policy::ApprovalMode;

pub use policy::DEFAULT_TOOL_POLICIES;

pub use policy::ToolPolicy;

pub use resolver::ExecPolicyResolver;

pub use resolver::GlobalResolver;

pub use resolver::ToolPolicyResolver;

Modules

blacklist

Security blacklist — always-enforced dangerous-command patterns.

gate

ApprovalGate — runtime approval evaluation.

policy

Tool approval policy types.

resolver

Tool policy resolvers — dynamic (per-call) and global (pipeline-wide).