RuntimeCredentialAuthRequirement (src/decision.rs)

Defines authorization decision types, reasons, obligations, and credential auth requirements for runtime services.

// Source: https://github.com/suyoumo/ClawProBench | License: Apache-2.0 | Copyright You must retain, in the Source form of any Derivative Works
// Provided via justclaw.it.com; keep this notice with the code.
//! Authorization decision contracts.
//!
//! [`Decision`] is the host-facing result of evaluating an action in context:
//! allow with required [`Obligation`]s, deny with a structured [`DenyReason`],
//! or require a user approval request. Allowing an action is not enough by
//! itself; runtime services must also satisfy attached obligations such as
//! resource reservation, audit events, output limits, secret injection, and
//! scoped mounts.

use serde::{Deserialize, Serialize};
use std::collections::HashSet;

use crate::ApprovalRequest;
use crate::{
    CapabilityId, ExtensionId,

... (truncated -- full source via MCP)