ion-skill::tool_permission

ToolRequest

A tool request parsed from a <request-tool> element in a skill body.

A request may optionally include a <scope> to narrow the permission. For example:

<request-tool>
  <tool>Bash</tool>
  <scope>cargo tree:*</scope>
</request-tool>

Name	Type	Description
`tool`	`String`	The tool name, e.g. `"Bash"`.
`scope`	`Option<String>`	An optional scope pattern that narrows the request, e.g. `"cargo tree:*"`.

pub fn new(tool: impl Into<String>) -> Self

Create a new unscoped tool request.

pub fn scoped(tool: impl Into<String>, scope: impl Into<String>) -> Self

Create a new scoped tool request.

pub fn approval_label(&self) -> String

The label shown in the approval prompt.

Scoped requests display as Tool(scope) (e.g. Bash(cargo tree:*)); unscoped requests display the bare tool name (e.g. Bash).

pub fn grant(&self) -> ToolPermission

Produce the [ToolPermission] that should be recorded in the session when the user approves this request.

A permission granted to a session for a specific tool.

Allow(String) — Unrestricted access to the named tool.
AllowScoped { tool: String, scope: String } — Access to the named tool, restricted to commands matching the scope pattern.

pub fn parse_tool_requests(body: &str) -> Vec<ToolRequest>

Parse all <request-tool> elements from a skill body.

Each element must contain a <tool> child; an optional <scope> child narrows the request. Returns an empty vec when no elements are found.