Struct AccessControlManager 

pub struct AccessControlManager { /* private fields */ }

Unified access control manager

Implementations

impl AccessControlManager

pub fn new(project_root: PathBuf) -> Self

Create a new access control manager

pub fn with_managers( file_locks: Arc<FileLockManager>, resource_locks: Arc<ResourceLockManager>, project_root: PathBuf, ) -> Self

Create with custom managers (for testing or sharing)

pub fn with_strategy(self, strategy: ContentionStrategy) -> Self

Set the contention strategy

pub fn with_lock_persistence(self, lock_store: Arc<dyn LockPersistence>) -> Self

Enable inter-process locking with a persistent lock store

pub fn lock_store(&self) -> Option<&Arc<dyn LockPersistence>>

Get the lock store (if configured)

pub fn file_locks(&self) -> &Arc<FileLockManager>

Get a reference to the file lock manager

pub fn resource_locks(&self) -> &Arc<ResourceLockManager>

Get a reference to the resource lock manager

pub async fn track_file_read(&self, agent_id: &str, path: &Path)

Track that an agent has read a file

pub async fn has_read_file(&self, agent_id: &str, path: &Path) -> bool

Check if an agent has read a file

pub async fn validate_write(&self, agent_id: &str, path: &Path) -> Result<()>

Validate that a write operation is allowed (file must have been read first)

pub async fn clear_tracking_for_agent(&self, agent_id: &str)

Clear read tracking for an agent (call on agent shutdown)

pub fn get_file_lock_requirement( tool_name: &str, input: &Value, ) -> Option<(PathBuf, LockType)>

Get the lock requirement for a file operation

pub fn detect_build_command(command: &str) -> bool

Detect if a bash command is a build command

pub fn detect_test_command(command: &str) -> bool

Detect if a bash command is a test command

pub fn get_resource_requirement( &self, command: &str, ) -> Option<(ResourceType, ResourceScope)>

Get resource lock requirement for a bash command

pub async fn acquire_for_tool( self: &Arc<Self>, agent_id: &str, tool_name: &str, input: &Value, ) -> Result<LockBundle>

Acquire all necessary locks for a tool operation

pub async fn cleanup_agent(&self, agent_id: &str) -> (usize, usize, usize)

Release all locks and tracking for an agent (call on agent shutdown)

pub async fn cleanup_stale_locks(&self) -> Result<usize>

Cleanup stale persistent locks (call on startup)