Add operation approval policy editor

crates/crank-community-mcp/tests/unit/manifest.rs

@@ -106,6 +106,7 @@ fn operation() -> RegistryOperation {
             response_cache: None,
             idempotency: None,
             safety: None,
+            approval_policy: None,
             auth_profile_ref: None,
             headers: BTreeMap::new(),
         },

crates/crank-core/src/lib.rs

@@ -41,9 +41,10 @@ pub mod domain {
     };
     pub use crate::operation::{
         ConfigExport, ConfirmationPolicy, ExecutionConfig, GeneratedDraft, GeneratedDraftStatus,
-        IdempotencyMode, IdempotencyPolicy, Operation, OperationSafetyClass, OperationSafetyPolicy,
-        OperationStatus, ResponseCachePolicy, RestTarget, RetryPolicy, Samples, Target,
-        ToolDescription, ToolExample, WizardState,
+        IdempotencyMode, IdempotencyPolicy, Operation, OperationApprovalPayloadPreviewMode,
+        OperationApprovalPolicy, OperationApprovalRiskLevel, OperationSafetyClass,
+        OperationSafetyPolicy, OperationStatus, ResponseCachePolicy, RestTarget, RetryPolicy,
+        Samples, Target, ToolDescription, ToolExample, WizardState,
     };
     pub use crate::protocol::{AuthKind, ExportMode, HttpMethod, Protocol};
     pub use crate::secret::{Secret, SecretKind, SecretStatus, SecretVersion};
@@ -128,9 +129,10 @@ pub use observability::{
 };
 pub use operation::{
     ConfigExport, ConfirmationPolicy, ExecutionConfig, GeneratedDraft, GeneratedDraftStatus,
-    IdempotencyMode, IdempotencyPolicy, Operation, OperationSafetyClass, OperationSafetyPolicy,
-    OperationStatus, ResponseCachePolicy, RestTarget, RetryPolicy, Samples, Target,
-    ToolDescription, ToolExample, WizardState,
+    IdempotencyMode, IdempotencyPolicy, Operation, OperationApprovalPayloadPreviewMode,
+    OperationApprovalPolicy, OperationApprovalRiskLevel, OperationSafetyClass,
+    OperationSafetyPolicy, OperationStatus, ResponseCachePolicy, RestTarget, RetryPolicy, Samples,
+    Target, ToolDescription, ToolExample, WizardState,
 };
 pub use protocol::{AuthKind, ExportMode, HttpMethod, Protocol};
 pub use secret::{Secret, SecretKind, SecretStatus, SecretVersion};

crates/crank-core/src/operation.rs

@@ -103,6 +103,35 @@ pub struct OperationSafetyPolicy {
     pub confirmation: Option<ConfirmationPolicy>,
 }
 
+#[derive(Clone, Copy, Debug, Default, PartialEq, Eq, Serialize, Deserialize)]
+#[serde(rename_all = "snake_case")]
+pub enum OperationApprovalRiskLevel {
+    #[default]
+    Normal,
+    Dangerous,
+    Financial,
+    Irreversible,
+}
+
+#[derive(Clone, Copy, Debug, Default, PartialEq, Eq, Serialize, Deserialize)]
+#[serde(rename_all = "snake_case")]
+pub enum OperationApprovalPayloadPreviewMode {
+    #[default]
+    Summary,
+    MaskedJson,
+}
+
+#[derive(Clone, Debug, PartialEq, Eq, Serialize, Deserialize)]
+pub struct OperationApprovalPolicy {
+    pub required: bool,
+    pub risk_level: OperationApprovalRiskLevel,
+    pub confirmation_title: String,
+    pub confirmation_body_template: String,
+    pub ttl_seconds: u32,
+    pub show_payload_preview: bool,
+    pub payload_preview_mode: OperationApprovalPayloadPreviewMode,
+}
+
 #[derive(Clone, Debug, Default, PartialEq, Serialize, Deserialize)]
 pub struct ExecutionConfig {
     pub timeout_ms: u64,
@@ -115,6 +144,8 @@ pub struct ExecutionConfig {
     #[serde(skip_serializing_if = "Option::is_none")]
     pub safety: Option<OperationSafetyPolicy>,
     #[serde(skip_serializing_if = "Option::is_none")]
+    pub approval_policy: Option<OperationApprovalPolicy>,
+    #[serde(skip_serializing_if = "Option::is_none")]
     pub auth_profile_ref: Option<AuthProfileId>,
     #[serde(default, skip_serializing_if = "BTreeMap::is_empty")]
     pub headers: BTreeMap<String, String>,
@@ -411,6 +442,7 @@ updated_at: 2026-03-25T08:10:00Z
                 response_cache: None,
                 idempotency: None,
                 safety: None,
+                approval_policy: None,
                 auth_profile_ref: Some(AuthProfileId::new("auth_01")),
                 headers: BTreeMap::new(),
             },

crates/crank-import/src/rest/payload.rs

@@ -231,6 +231,7 @@ fn default_execution_config() -> ExecutionConfig {
         response_cache: None,
         idempotency: None,
         safety: None,
+        approval_policy: None,
         auth_profile_ref: None,
         headers: BTreeMap::new(),
     }

crates/crank-runtime/tests/integration/confirmation.rs

@@ -160,6 +160,7 @@ fn destructive_delete_operation() -> Operation<Schema, MappingSet> {
                 class: OperationSafetyClass::Destructive,
                 confirmation: Some(ConfirmationPolicy { ttl_ms: 60_000 }),
             }),
+            approval_policy: None,
             auth_profile_ref: None,
             headers: BTreeMap::new(),
         },

crates/crank-runtime/tests/integration/idempotency.rs

@@ -146,6 +146,7 @@ fn idempotent_post_operation() -> Operation<Schema, MappingSet> {
                 header_name: Some("Idempotency-Key".to_owned()),
             }),
             safety: None,
+            approval_policy: None,
             auth_profile_ref: None,
             headers: BTreeMap::new(),
         },

crates/crank-runtime/tests/integration/no_input_get.rs

@@ -71,6 +71,7 @@ fn no_input_get_operation() -> Operation<Schema, MappingSet> {
             response_cache: None,
             idempotency: None,
             safety: None,
+            approval_policy: None,
             auth_profile_ref: None,
             headers: BTreeMap::new(),
         },