Struct ProtectedTool 

pub struct ProtectedTool<T: Tool> { /* private fields */ }

A tool wrapper that enforces access control and optionally logs audit events.

Wraps any tool and checks permissions before execution.

Example

use adk_auth::{AccessControl, ProtectedTool, Permission, Role};
use std::sync::Arc;

let ac = AccessControl::builder()
    .role(Role::new("user").allow(Permission::Tool("search".into())))
    .build()?;

let protected_search = ProtectedTool::new(search_tool, Arc::new(ac));

Implementations

impl<T: Tool> ProtectedTool<T>

pub fn new(tool: T, access_control: Arc<AccessControl>) -> Self

Create a new protected tool.

pub fn with_audit( tool: T, access_control: Arc<AccessControl>, audit_sink: Arc<dyn AuditSink>, ) -> Self

Create a new protected tool with audit logging.

Trait Implementations

impl<T: Tool + Send + Sync> Tool for ProtectedTool<T>

fn name(&self) -> &str

fn description(&self) -> &str

fn enhanced_description(&self) -> String

Returns an enhanced description that may include additional notes. For long-running tools, this includes a warning not to call the tool again if it has already returned a pending status. Default implementation returns the base description.

fn is_long_running(&self) -> bool

Indicates whether the tool is a long-running operation. Long-running tools typically return a task ID immediately and complete the operation asynchronously.

fn parameters_schema(&self) -> Option<Value>

fn response_schema(&self) -> Option<Value>

fn execute<'life0, 'async_trait>( &'life0 self, ctx: Arc<dyn ToolContext>, args: Value, ) -> Pin<Box<dyn Future<Output = Result<Value>> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait,