Expand description
Permission extension for the awaken agent framework.
Provides declarative permission rules with glob/regex pattern matching on tool names and arguments. Rules are evaluated with firewall-like priority: Deny > Allow > Ask.
Re-exports§
pub use config::PermissionConfigError;pub use config::PermissionConfigKey;pub use config::PermissionRuleEntry;pub use config::PermissionRulesConfig;pub use plugin::PermissionPlugin;pub use rules::PermissionEvaluation;pub use rules::PermissionRule;pub use rules::PermissionRuleScope;pub use rules::PermissionRuleSource;pub use rules::PermissionRuleset;pub use rules::PermissionSubject;pub use rules::ToolPermissionBehavior;pub use rules::evaluate_tool_permission;pub use state::PermissionAction;pub use state::PermissionOverrides;pub use state::PermissionOverridesKey;pub use state::PermissionPolicy;pub use state::PermissionPolicyKey;pub use state::permission_rules_from_state;
Modules§
- actions
- Convenience action constructors for permission state mutations.
- config
- YAML/JSON configuration loader for permission rules.
- matcher
- Deprecated re-export shim for
awaken_tool_pattern. - plugin
- Permission plugin: registers state keys and a tool permission checker.
- rules
- Permission rules: patterns, matchers, subjects, and rulesets.
- state
- State keys and reducers for permission policy.
Structs§
- Field
Condition - A single field-level predicate:
path op "value". - Pattern
Parse Error - Error returned when a pattern string cannot be parsed.
- Tool
Call Pattern - A complete pattern matching tool calls by name and optionally by arguments.
Enums§
- ArgMatcher
- How to match the arguments portion of a tool call.
- MatchOp
- Comparison operator for field conditions.
- Path
Segment - A single segment in a dotted field path.
- Tool
Matcher - How to match the tool name portion of a call.
Functions§
- parse_
pattern - Parse a pattern string into a
ToolCallPattern.