Enum DenialCode 

#[non_exhaustive]
pub enum DenialCode {
    ParseError,
    PassthroughRefused,
    SchemaViolation,
    SchemaMissing,
    PolicyDenied,
    BudgetExceeded,
    BudgetError,
    UnmappedTool,
    MissionExpired,
    MissionDenied,
    ScopeInsufficient,
    TokenRevoked,
    NoBackend,
    IntentTokenError,
    PayoutInvalid,
    PdpDenied,
}

Machine-readable denial code attached to every ToolVerdict::Blocked.

Variants (Non-exhaustive)

Non-exhaustive enums could have additional variants added in future. Therefore, when matching against variants of non-exhaustive enums, an extra wildcard arm must be added to account for any future variants.

ParseError

JSON-RPC envelope did not parse (malformed JSON, wrong version, etc.).

PassthroughRefused

Method is not tools/call — the call was passed through or refused at the protocol level.

SchemaViolation

Tool arguments failed JSON Schema validation.

SchemaMissing

No argument schema configured for this tool and require_schema is on.

PolicyDenied

A named policy engine denied the call.

BudgetExceeded

Session or principal action budget exhausted.

BudgetError

Budget subsystem failed and the sandbox failed closed.

UnmappedTool

Tool has no configured intent mapping (pillar 2: AuthZEN).

MissionExpired

The active mission has expired.

MissionDenied

The active mission does not authorize this intent.

ScopeInsufficient

The caller’s identity scopes do not cover the required tool scope.

TokenRevoked

Identity token was revoked (JTI revocation list).

NoBackend

No backend is configured for this tool.

IntentTokenError

The intent token could not be issued (signing failure, clock skew, etc.).

PayoutInvalid

Payout amount field could not be parsed or is negative.

PdpDenied

The external AuthZEN policy decision point denied the call.

Implementations

impl DenialCode

pub fn as_str(self) -> &'static str

Stable wire string (matches the serde rename).

Trait Implementations

impl Clone for DenialCode

fn clone(&self) -> DenialCode

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for DenialCode

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for DenialCode

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Display for DenialCode

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Hash for DenialCode

fn hash<__H: Hasher>(&self, state: &mut __H)

Feeds this value into the given Hasher.

fn hash_slice<H>(data: &[Self], state: &mut H)

where H: Hasher, Self: Sized,

Feeds a slice of this type into the given Hasher.

impl PartialEq for DenialCode

fn eq(&self, other: &DenialCode) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for DenialCode

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl Copy for DenialCode

impl Eq for DenialCode

impl StructuralPartialEq for DenialCode