Function tool_visible 

pub fn tool_visible(
    rules: &[PermissionRule],
    overlay: Option<&SessionPermissionOverlay>,
    action: PermissionAction,
) -> bool

Visibility is action-level opt-in, not a resource authorization decision.