Struct GuardedToolCall 

pub struct GuardedToolCall {
    pub request: ToolCallRequest,
    pub action: Option<String>,
    pub resource: Option<String>,
    pub verdict: ToolCallVerdict,
}

A tool call together with its resolved binding and verdict.

Fields

request: ToolCallRequest

The normalized call that was checked.

action: Option<String>

The Typesec action the call was checked as (absent for unbound tools).

resource: Option<String>

The resolved resource id (absent for unbound tools or failed resource-argument resolution).

verdict: ToolCallVerdict

The verdict.

Implementations

impl GuardedToolCall

pub fn denial_message(&self) -> Option<String>

Human-readable denial text for feeding back to the model, or None when the call is allowed.

impl GuardedToolCall

pub fn protect_output<L: PrivacyLevel, T>( &self, output: T, ) -> Result<SecureValue<L, T, GenericResource>, TaintError>

Label the output of an allowed call as protected data tied to the call’s resolved resource.

The label L is chosen by the caller (e.g. Sensitive); revealing the value downstream requires a Capability<CanReadSensitive, GenericResource> minted for the same resource id this call was checked against.

Trait Implementations

impl Clone for GuardedToolCall

fn clone(&self) -> GuardedToolCall

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for GuardedToolCall

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Eq for GuardedToolCall

impl PartialEq for GuardedToolCall

fn eq(&self, other: &GuardedToolCall) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for GuardedToolCall