Enum AuthzContext 

pub enum AuthzContext {
    GatewayInvocation {
        model: ModelId,
    },
    McpToolCall {
        tool: McpToolName,
    },
    None,
}

Typed per-request context forwarded to the authz hook. The variant is the type of enforcement site that fired; downstream policy handlers pattern-match instead of poking at serde_json::Value.

Variants

GatewayInvocation

Gateway /v1/messages invocation — carries the model literal the client requested (the route in entity already encodes routing policy, but the literal is needed for audit and downstream rules).

Fields

model: ModelId

McpToolCall

MCP tool call about to be dispatched.

Fields

tool: McpToolName

None

No context (RBAC server-attach checks, etc).

Trait Implementations

impl Clone for AuthzContext

fn clone(&self) -> AuthzContext

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for AuthzContext

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for AuthzContext

fn default() -> AuthzContext

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for AuthzContext

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl PartialEq for AuthzContext

fn eq(&self, other: &AuthzContext) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for AuthzContext

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl Eq for AuthzContext

impl StructuralPartialEq for AuthzContext