Add destructive confirmation and import guidance

crates/crank-core/src/lib.rs

@@ -56,9 +56,10 @@ pub use observability::{
     InvocationLevel, InvocationLog, InvocationSource, InvocationStatus, UsagePeriod, UsageRollup,
 };
 pub use operation::{
-    ConfigExport, ExecutionConfig, GeneratedDraft, GeneratedDraftStatus, IdempotencyMode,
-    IdempotencyPolicy, Operation, OperationStatus, ResponseCachePolicy, RestTarget, RetryPolicy,
-    Samples, Target, ToolDescription, ToolExample, WizardState,
+    ConfigExport, ConfirmationPolicy, ExecutionConfig, GeneratedDraft, GeneratedDraftStatus,
+    IdempotencyMode, IdempotencyPolicy, Operation, OperationSafetyClass, OperationSafetyPolicy,
+    OperationStatus, ResponseCachePolicy, RestTarget, RetryPolicy, Samples, Target,
+    ToolDescription, ToolExample, WizardState,
 };
 pub use protocol::{AuthKind, ExportMode, HttpMethod, Protocol};
 pub use secret::{Secret, SecretKind, SecretStatus, SecretVersion};

crates/crank-core/src/operation.rs

@@ -70,6 +70,38 @@ pub struct IdempotencyPolicy {
     pub header_name: Option<String>,
 }
 
+#[derive(Clone, Copy, Debug, Default, PartialEq, Eq, Serialize, Deserialize)]
+#[serde(rename_all = "snake_case")]
+pub enum OperationSafetyClass {
+    #[default]
+    Read,
+    Write,
+    Destructive,
+    ExternalMessage,
+    FinancialOrIrreversible,
+}
+
+impl OperationSafetyClass {
+    pub fn requires_confirmation(self) -> bool {
+        matches!(
+            self,
+            Self::Destructive | Self::ExternalMessage | Self::FinancialOrIrreversible
+        )
+    }
+}
+
+#[derive(Clone, Debug, PartialEq, Eq, Serialize, Deserialize)]
+pub struct ConfirmationPolicy {
+    pub ttl_ms: u64,
+}
+
+#[derive(Clone, Debug, PartialEq, Eq, Serialize, Deserialize)]
+pub struct OperationSafetyPolicy {
+    pub class: OperationSafetyClass,
+    #[serde(skip_serializing_if = "Option::is_none")]
+    pub confirmation: Option<ConfirmationPolicy>,
+}
+
 #[derive(Clone, Debug, Default, PartialEq, Serialize, Deserialize)]
 pub struct ExecutionConfig {
     pub timeout_ms: u64,
@@ -80,6 +112,8 @@ pub struct ExecutionConfig {
     #[serde(skip_serializing_if = "Option::is_none")]
     pub idempotency: Option<IdempotencyPolicy>,
     #[serde(skip_serializing_if = "Option::is_none")]
+    pub safety: Option<OperationSafetyPolicy>,
+    #[serde(skip_serializing_if = "Option::is_none")]
     pub auth_profile_ref: Option<AuthProfileId>,
     #[serde(default, skip_serializing_if = "BTreeMap::is_empty")]
     pub headers: BTreeMap<String, String>,
@@ -373,6 +407,7 @@ updated_at: 2026-03-25T08:10:00Z
                 retry_policy: None,
                 response_cache: None,
                 idempotency: None,
+                safety: None,
                 auth_profile_ref: Some(AuthProfileId::new("auth_01")),
                 headers: BTreeMap::new(),
             },