Enum ToolGrantCheck 

pub enum ToolGrantCheck {
    NoGrant,
    Active,
    Expired,
}

Result of checking whether a GrantKind::Tool grant permits a tool dispatch.

Returned by PermissionGrants::check_tool_grant. See that method’s doc for the full default-permit / time-box-only semantics (confirmed, issue #6567) — in short: this is a narrowing restriction on top of an already-permitted tool, never an allow-list, and NoGrant always means “unrestricted by this mechanism,” not “denied.”

Examples

use std::time::Duration;
use zeph_subagent::grants::{GrantKind, PermissionGrants, ToolGrantCheck};

let mut grants = PermissionGrants::default();
grants.add(GrantKind::Tool("web".to_owned()), Duration::from_mins(5));
assert_eq!(grants.check_tool_grant("web"), ToolGrantCheck::Active);
assert_eq!(grants.check_tool_grant("shell"), ToolGrantCheck::NoGrant);

Variants

NoGrant

No GrantKind::Tool grant record exists for this tool name — dispatch is unrestricted by this mechanism (today’s universal production state, since no caller creates GrantKind::Tool grants yet).

Active

A GrantKind::Tool grant exists for this tool name and has not expired.

Expired

A GrantKind::Tool grant existed for this tool name but its TTL has elapsed; the stale entry is evicted as a side effect of this check.

Trait Implementations

impl Clone for ToolGrantCheck

fn clone(&self) -> ToolGrantCheck

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Copy for ToolGrantCheck

impl Debug for ToolGrantCheck

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Eq for ToolGrantCheck

impl PartialEq for ToolGrantCheck

fn eq(&self, other: &ToolGrantCheck) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for ToolGrantCheck