Method decide

core/src/safety_gate.rs:75–102

(&self, input: ToolGateInput<'_>)

    }

    pub(crate) async fn decide(&self, input: ToolGateInput<'_>) -> ToolGateDecision {
        if let Some(decision) = self.check_skill_restrictions(input.tool_name) {
            return decision;
        }

        if let Some(reason) = input.pre_tool_block {
            return ToolGateDecision::Deny {
                output: format!("Tool '{}' blocked by hook: {}", input.tool_name, reason),
                event_reason: reason,
                reason: ToolGateDenial::HookBlock,
            };
        }

        match self.permission_decision(input.tool_name, input.args) {
            PermissionDecision::Deny => ToolGateDecision::Deny {
                output: format!(
                    "Permission denied: Tool '{}' is blocked by permission policy.",
                    input.tool_name
                ),
                event_reason: "Blocked by deny rule in permission policy".to_string(),
                reason: ToolGateDenial::PermissionDeny,
            },
            PermissionDecision::Allow => ToolGateDecision::Execute {
                reason: ToolGateApproval::PermissionAllow,
            },
            PermissionDecision::Ask => self.confirmation_decision(input.tool_name).await,
        }
    }

    pub(crate) fn check_skill_restrictions(&self, tool_name: &str) -> Option<ToolGateDecision> {
        if !self.config.enforce_active_skill_tool_restrictions {