pod-upstream-event実装

crates/manifest/Cargo.toml

@@ -5,6 +5,7 @@ edition.workspace = true
 license.workspace = true
 
 [dependencies]
+protocol = { version = "0.1.0", path = "../protocol" }
 serde = { version = "1.0.228", features = ["derive"] }
 serde_ignored = "0.1.14"
 thiserror = "2.0.18"

crates/manifest/src/lib.rs

@@ -6,6 +6,7 @@ pub use config::{
     CompactionConfigPartial, PodManifestConfig, PodMetaConfig, ProviderConfigPartial, ResolveError,
     ToolOutputLimitsPartial, WorkerManifestConfig,
 };
+pub use protocol::{Permission, ScopeRule};
 pub use scope::{Scope, ScopeError};
 
 use std::collections::HashMap;
@@ -159,39 +160,6 @@ pub struct ScopeConfig {
     pub deny: Vec<ScopeRule>,
 }
 
-/// A single allow or deny rule inside [`ScopeConfig`].
-#[derive(Debug, Clone, Serialize, Deserialize)]
-pub struct ScopeRule {
-    /// Target path. Must be absolute by the time [`Scope::from_config`]
-    /// runs — relative paths are resolved per-layer against the manifest
-    /// file's directory (cwd for overlay layers) before cascade merge.
-    pub target: PathBuf,
-    /// Permission level this rule grants (allow) or caps strictly below
-    /// (deny).
-    pub permission: Permission,
-    /// When `false`, the rule only matches the target itself and its
-    /// direct children. Defaults to `true`.
-    #[serde(default = "default_recursive")]
-    pub recursive: bool,
-}
-
-fn default_recursive() -> bool {
-    true
-}
-
-/// Permission lattice used by [`ScopeRule`].
-///
-/// The derived `Ord` instance follows declaration order, so
-/// `Read < Write`. Allow rules grant the stated level (and by extension
-/// everything below); deny rules cap the effective level **strictly
-/// below** the stated level.
-#[derive(Debug, Clone, Copy, PartialEq, Eq, PartialOrd, Ord, Serialize, Deserialize)]
-#[serde(rename_all = "lowercase")]
-pub enum Permission {
-    Read,
-    Write,
-}
-
 /// Context compaction configuration.
 ///
 /// Controls Prune (content removal from old tool results) and Compact