Function ensure_deny_rule

atomic-agent/src/hooks/claude_code/settings.rs:203–227

(raw: &mut serde_json::Map<String, serde_json::Value>)

}

pub(crate) fn ensure_deny_rule(raw: &mut serde_json::Map<String, serde_json::Value>) -> bool {
    let permissions = raw
        .entry("permissions".to_string())
        .or_insert_with(|| serde_json::json!({}));

    let Some(permissions_obj) = permissions.as_object_mut() else {
        return false;
    };

    let deny = permissions_obj
        .entry("deny".to_string())
        .or_insert_with(|| serde_json::json!([]));

    let Some(deny_arr) = deny.as_array_mut() else {
        return false;
    };

    let rule_value = serde_json::Value::String(METADATA_DENY_RULE.to_string());
    if deny_arr.contains(&rule_value) {
        return false;
    }

    deny_arr.push(rule_value);
    true
}

pub(crate) fn remove_deny_rule(raw: &mut serde_json::Map<String, serde_json::Value>) {
    let Some(permissions) = raw.get_mut("permissions") else {