Struct ToolExecutionAuthorization 

pub struct ToolExecutionAuthorization { /* private fields */ }

A concrete, path-bound authorization for one tool operation.

Permission-aware composition roots create this value only after resolving Allow/Ask/Deny. File tools compare the normalized path and operation before allowing an invocation to leave the workspace boundary. Calling a file tool through [AgentTool::execute] does not provide this capability.

Implementations

impl ToolExecutionAuthorization

pub fn for_path( tool_name: impl Into<String>, nature: ToolNature, workspace_root: &Path, resource: &str, scope: ToolAuthorizationScope, ) -> Result<Self>

Creates a path-bound authorization using the workspace as the base for relative resources.

Existing paths and their nearest existing ancestor are canonicalized, so a later symlink change cannot silently reuse an authorization for a different target.

pub fn authorizes_path( &self, tool_name: &str, nature: ToolNature, workspace_root: &Path, resource: &str, ) -> bool

Returns whether this authorization exactly covers a requested path and operation.

pub fn normalized_path(&self) -> &Path

Returns the normalized path carried by this authorization.

pub fn scope(&self) -> ToolAuthorizationScope

Returns the approval scope that produced this authorization.

Trait Implementations

impl Clone for ToolExecutionAuthorization

fn clone(&self) -> ToolExecutionAuthorization

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for ToolExecutionAuthorization

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Eq for ToolExecutionAuthorization

impl PartialEq for ToolExecutionAuthorization

fn eq(&self, other: &ToolExecutionAuthorization) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for ToolExecutionAuthorization