Struct AuthzContext 

pub struct AuthzContext {
    pub kind: Cow<'static, str>,
    pub payload: Value,
}

Open enforcement-site context attached to an AuthzRequest.

Replaces the previous closed enum so tenants can add their own enforcement sites (skill execution, order submission, file egress, …) without a core change.

kind is a dotted-namespaced literal. Core mints three:

• "none" — no context (server-attach RBAC, etc).
• "gateway.invocation" — payload { "model": "..." }.
• "mcp.tool_call" — payload { "tool": "..." }.

Tenants mint their own (e.g. "acme.order_submission") and recognise them in their hook. Core never interprets payload.

Fields

kind: Cow<'static, str>

payload: Value

Implementations

impl AuthzContext

pub const NONE_KIND: &'static str = "none"

pub const GATEWAY_INVOCATION_KIND: &'static str = "gateway.invocation"

pub const MCP_TOOL_CALL_KIND: &'static str = "mcp.tool_call"

pub const MARKETPLACE_FLOOR_KEY: &'static str = "marketplace.attribute_floor"

pub const fn none() -> Self

pub fn gateway_invocation(model: &ModelId) -> Self

pub fn mcp_tool_call(tool: &McpToolName) -> Self

pub fn extension(kind: impl Into<Cow<'static, str>>, payload: Value) -> Self

kind must be dotted-namespaced (e.g. "acme.order_submission") so kinds from independent extensions cannot collide.

pub fn gateway_invocation_model(&self) -> Option<ModelId>

pub fn mcp_tool_call_tool(&self) -> Option<McpToolName>

pub fn is_none(&self) -> bool

pub fn with_marketplace_floor(&self, floor: &BTreeMap<String, Value>) -> Self

The floor is an opaque tenant-namespaced bag the ABAC hook interprets; core copies it verbatim. Keyed under MARKETPLACE_FLOOR_KEY so it never collides with the typed model / tool payload entries, and kind plus any existing payload are preserved.

pub fn marketplace_floor(&self) -> Option<BTreeMap<String, Value>>

Trait Implementations

impl Clone for AuthzContext

fn clone(&self) -> AuthzContext

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for AuthzContext

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for AuthzContext

fn default() -> Self

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for AuthzContext

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl PartialEq for AuthzContext

fn eq(&self, other: &AuthzContext) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for AuthzContext

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl Eq for AuthzContext

impl StructuralPartialEq for AuthzContext