Module permissions 

Structs

PermissionRequest

A fully described permission request carrying the tool name, operation kind, and any protected-path metadata needed for prompting.

PermissionRuleMatches

Enums

PermissionRequestKind

Categorizes a permission request by the type of operation being performed.

PermissionRuleDecision

ResolvedPermissionDecision

Functions

build_advertised_permission_requests

Build representative permission requests for advertised tool availability.

build_permission_request

Constructs a PermissionRequest from a normalized tool name and its arguments.

evaluate_agent_permissions

Evaluates a permission request against an agent’s permission configuration, returning the resolved decision using the agent’s default when no rule matches.

evaluate_effective_permissions

Evaluates a permission request by combining global and agent-level rules. Global deny is a hard ceiling; global ask forces a prompt unless the agent denies.

evaluate_permissions

Evaluates a permission request against the global permission configuration and returns which rule tiers matched.