Struct AgentPermissions 

pub struct AgentPermissions {
    pub approval: Option<ApprovalPolicy>,
    pub sandbox: Option<SandboxPolicy>,
    pub auto_approved_tools: Option<Vec<String>>,
    pub deny: Vec<String>,
}

BP-7 (catalog §4a “Named agent definitions as data”: “Agent = prompt+model+tools+permissions in a file/config”): the permission bundle a named definition may carry, the component the shape was missing.

Tightening only, by construction. Every field here can make a child stricter than its parent and nothing here can make one looser: the approval/sandbox values are applied through the same rank comparison configfile::clamp_project_permissions uses for the untrusted project layer (a looser value is ignored, not honored), auto_approved_tools is INTERSECTED with the parent’s, and deny is a union. So an agent definition — which may come from a .claude/agents/*.md file in the repo, i.e. from the same trust tier as a project config — can never be a privilege-escalation door.

Fields

approval: Option<ApprovalPolicy>

Approval policy for the child. Applied only when STRICTER than the parent’s.

sandbox: Option<SandboxPolicy>

Filesystem sandbox tier for the child. Applied only when STRICTER than the parent’s.

auto_approved_tools: Option<Vec<String>>

Tools this agent may run without an approval prompt. Intersected with the parent’s list — never a superset of it.

deny: Vec<String>

Extra deny patterns, unioned onto the parent’s.

Trait Implementations

impl Clone for AgentPermissions

fn clone(&self) -> AgentPermissions

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for AgentPermissions

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl Default for AgentPermissions

fn default() -> AgentPermissions

Returns the “default value” for a type.

impl Eq for AgentPermissions

impl PartialEq for AgentPermissions

fn eq(&self, other: &AgentPermissions) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for AgentPermissions