Struct RoleConfig 

#[non_exhaustive]
pub struct RoleConfig {
    pub name: String,
    pub description: Option<String>,
    pub allow: Vec<String>,
    pub deny: Vec<String>,
    pub hosts: Vec<String>,
    pub argument_allowlists: Vec<ArgumentAllowlist>,
}

A single role definition.

Fields (Non-exhaustive)

Non-exhaustive structs could have additional fields added in future. Therefore, non-exhaustive structs cannot be constructed in external crates using the traditional Struct { .. } syntax; cannot be matched against without a wildcard ..; and struct update syntax will not work.

name: String

Role identifier referenced from identities (API keys, mTLS, JWT claims).

description: Option<String>

Human-readable description, surfaced in diagnostics only.

allow: Vec<String>

Allowed operations. ["*"] means all operations.

deny: Vec<String>

Explicitly denied operations (overrides allow).

hosts: Vec<String>

Host name glob patterns this role can access. ["*"] means all hosts.

argument_allowlists: Vec<ArgumentAllowlist>

Per-tool argument constraints. When a tool call matches, the specified argument’s first whitespace-delimited token (or its /-basename) must appear in the allowlist.

Implementations

impl RoleConfig

pub fn new( name: impl Into<String>, allow: Vec<String>, hosts: Vec<String>, ) -> Self

Create a role with the given name, allowed operations, and host patterns.

pub fn with_argument_allowlists( self, allowlists: Vec<ArgumentAllowlist>, ) -> Self

Attach argument allowlists to this role.

Trait Implementations

impl Clone for RoleConfig

fn clone(&self) -> RoleConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for RoleConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for RoleConfig

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.