Function deny_proto_to_def

crates/openshell-policy/src/lib.rs:622–655

(
    protocol: &str,
    deny: &L7DenyRule,
    mcp_allow_all_known_mcp_methods: bool,
)

}

fn deny_proto_to_def(
    protocol: &str,
    deny: &L7DenyRule,
    mcp_allow_all_known_mcp_methods: bool,
) -> L7DenyRuleDef {
    let params: BTreeMap<String, QueryMatcherDef> = deny
        .params
        .iter()
        .map(|(key, matcher)| (key.clone(), matcher_proto_to_def(matcher.clone())))
        .collect();
    let (tool, params) = split_tool_param(protocol, params);
    let params = flat_params_to_def(protocol, params);
    let method = yaml_mcp_method(
        protocol,
        &deny.method,
        tool.is_some(),
        mcp_allow_all_known_mcp_methods,
    );
    L7DenyRuleDef {
        method,
        path: deny.path.clone(),
        command: deny.command.clone(),
        query: deny
            .query
            .iter()
            .map(|(key, matcher)| (key.clone(), matcher_proto_to_def(matcher.clone())))
            .collect(),
        operation_type: deny.operation_type.clone(),
        operation_name: deny.operation_name.clone(),
        fields: deny.fields.clone(),
        tool,
        params,
    }
}

fn yaml_mcp_method(
    protocol: &str,