Struct AuthzPipeline 

pub struct AuthzPipeline { /* private fields */ }

The authorization pipeline.

Implementations

impl AuthzPipeline

pub fn new() -> Self

pub fn add_restriction(&mut self, restriction: Restriction)

Add a permanent restriction.

pub fn set_permission_handler(&mut self, handler: Box<dyn PermissionHandler>)

Set the permission handler.

pub async fn authorize( &self, action: &Action, tools: &HashMap<String, ToolSchema>, capabilities: Option<&CapabilitySet>, policies: &PolicyEngine, state: &StateStore, ) -> AuthzResult

Run the full authorization pipeline for an action.

Stages (in order):

1. Tool exists
2. Capability allows it
3. Permission mode / approval
4. Permanent restrictions
5. Policy engine
6. Executor-level validation

Trait Implementations

impl Default for AuthzPipeline

fn default() -> Self

Returns the “default value” for a type.