Function params_with_tool

crates/openshell-policy/src/lib.rs:487–497

MCP `tool` is a policy convenience for the standard `tools/call` params.name field. When the endpoint method profile is enabled, authored tool selectors can omit method and are normalized to tools/call internally. Tool arguments intentionally have no policy matcher yet, so every allowed tool call permits all argument payloads by default.

(
    mut params: BTreeMap<String, ParamMatcherDef>,
    tool: Option<QueryMatcherDef>,
)

// intentionally have no policy matcher yet, so every allowed tool call permits
// all argument payloads by default.
fn params_with_tool(
    mut params: BTreeMap<String, ParamMatcherDef>,
    tool: Option<QueryMatcherDef>,
) -> BTreeMap<String, ParamMatcherDef> {
    if let Some(tool) = tool {
        params
            .entry("name".to_string())
            .or_insert_with(|| ParamMatcherDef::Matcher(tool));
    }
    params
}

fn allow_def_to_proto(_protocol: &str, allow: L7AllowDef) -> L7Allow {
    let params = flatten_param_matchers(params_with_tool(allow.params, allow.tool));