Enum ApprovalPolicy 

pub enum ApprovalPolicy {
    Never,
    OnRequest,
    Untrusted,
    ModelRequested,
}

When the agent must seek approval before running a tool — the analog of Codex’s -a untrusted|on-request|never and Claude’s permission modes.

Variants

Never

Never ask — every tool call runs automatically (default).

OnRequest

Ask for tools not on the auto-approve allowlist.

Untrusted

Ask for every tool call.

ModelRequested

P5-1 (COMPOSABLE-HARNESS-DESIGN.md §3.2 S8, §4.3 cx-parity): Codex’s -a on-request default — escalation is INITIATED BY THE MODEL, not decided by a client-side allowlist check the way Self::OnRequest is (Config::needs_approval’s OnRequest arm consults Config::auto_approved_tools/tool_allow_patterns; Codex’s on-request instead runs sandboxed writes/reads silently and only asks when the MODEL itself requests to leave the sandbox — protocol.rs:921-924). Using Self::OnRequest for cx-parity would prompt on every non-allowlisted call, where stock Codex prompts almost never — a materially different (over-prompting, but not unsafe) posture, which is why configfile::parse_approval_str previously fell back to Self::Untrusted rather than silently picking the wrong existing variant (S8’s original fail-safe). This variant now exists so cx-parity resolves to its INTENDED posture instead of that fail-safe. Config::needs_approval (the coarse, tool-name-only legacy gate — no model-escalation signal reaches it) treats this conservatively, the same as Self::OnRequest; the P5-1 permissions engine (crate::permissions, the richer canonicalized- command-aware gate crate::agent::Agent consults when Config::permissions_enabled is on) treats it per Codex’s real posture — see that gate’s doc comment.

Trait Implementations

impl Clone for ApprovalPolicy

fn clone(&self) -> ApprovalPolicy

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Copy for ApprovalPolicy

impl Debug for ApprovalPolicy

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl Default for ApprovalPolicy

fn default() -> ApprovalPolicy

Returns the “default value” for a type.

impl Eq for ApprovalPolicy

impl PartialEq for ApprovalPolicy

fn eq(&self, other: &ApprovalPolicy) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for ApprovalPolicy