Struct ApprovalGate 

pub struct ApprovalGate {
    pub enabled: bool,
    pub methods: HashSet<String>,
    pub timeout: Duration,
}

Builder for constructing a ServerState with embedder-supplied dependencies. Embedders (e.g. tokhn-daemon) use this to inject their own memgine handle and other shared infrastructure; the Approval-gate policy for high-risk WS methods.

Every method in methods must be acknowledged via host.resolve_approval before the dispatcher will route the request to its handler. The dispatcher waits up to timeout for a resolution; on timeout (or any non-approve resolution) the request fails with JSON-RPC error -32003.

Default: gate enabled, the macOS-automation surface (automation.run_applescript, automation.shortcuts.run, messages.send, mail.send, vision.ocr), 60-second timeout. car-server --no-approvals (or embedders calling ServerStateConfig::with_approval_gate with enabled=false) turns it off — only appropriate when no untrusted caller can reach the WS port.

Fields

enabled: bool

Master switch. When false, every method dispatches without raising an approval — the pre-2026-05 behaviour.

methods: HashSet<String>

Methods that require approval. Match is by exact method-name string against the JSON-RPC method field.

timeout: Duration

How long to wait for the user to resolve the approval before timing out and surfacing an error to the caller.

Implementations

impl ApprovalGate

pub fn disabled() -> Self

Disable the gate entirely. Equivalent to passing car-server --no-approvals. Only appropriate when no untrusted caller can reach the WS port.

pub fn requires_approval(&self, method: &str) -> bool

true if this method must be acknowledged before dispatch.

Trait Implementations

impl Clone for ApprovalGate

fn clone(&self) -> ApprovalGate

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for ApprovalGate

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for ApprovalGate

fn default() -> Self

Returns the “default value” for a type.