Struct ProtectedTool 

pub struct ProtectedTool<T>
where
    T: Tool,
{ /* private fields */ }

Available on crate feature auth only.

A tool wrapper that enforces access control and optionally logs audit events.

Wraps any tool and checks permissions before execution.

Example

use adk_auth::{AccessControl, ProtectedTool, Permission, Role};
use std::sync::Arc;

let ac = AccessControl::builder()
    .role(Role::new("user").allow(Permission::Tool("search".into())))
    .build()?;

let protected_search = ProtectedTool::new(search_tool, Arc::new(ac));

Implementations

impl<T> ProtectedTool<T>

where T: Tool,

pub fn new(tool: T, access_control: Arc<AccessControl>) -> ProtectedTool<T>

Create a new protected tool.

pub fn with_audit( tool: T, access_control: Arc<AccessControl>, audit_sink: Arc<dyn AuditSink>, ) -> ProtectedTool<T>

Create a new protected tool with audit logging.

Trait Implementations

impl<T> Tool for ProtectedTool<T>

where T: Tool + Send + Sync,

fn name(&self) -> &str

Returns the unique name of this tool.

fn description(&self) -> &str

Returns a human-readable description of what this tool does.

fn enhanced_description(&self) -> String

Returns an enhanced description that may include additional notes. For long-running tools, this includes a warning not to call the tool again if it has already returned a pending status. Default implementation returns the base description.

fn is_long_running(&self) -> bool

Indicates whether the tool is a long-running operation. Long-running tools typically return a task ID immediately and complete the operation asynchronously.

fn parameters_schema(&self) -> Option<Value>

Returns the JSON Schema for this tool’s parameters, if any.

fn response_schema(&self) -> Option<Value>

Returns the JSON Schema for this tool’s response, if any.

fn required_scopes(&self) -> &[&str]

Returns the scopes required to execute this tool.

fn execute<'life0, 'async_trait>( &'life0 self, ctx: Arc<dyn ToolContext>, args: Value, ) -> Pin<Box<dyn Future<Output = Result<Value, AdkError>> + Send + 'async_trait>>

where 'life0: 'async_trait, ProtectedTool<T>: 'async_trait,

Executes the tool with the given context and arguments.

fn declaration(&self) -> Value

Returns the tool declaration that should be exposed to model providers.

fn is_builtin(&self) -> bool

Indicates whether this tool is a built-in server-side tool (e.g., google_search, url_context).

fn is_read_only(&self) -> bool

Indicates whether this tool performs no side effects.

fn is_concurrency_safe(&self) -> bool

Indicates whether this tool is safe for concurrent execution.