Struct PermissionHandler 

pub struct PermissionHandler { /* private fields */ }

Permission handler for tool execution

Combines mode-based checking with settings rules.

The permission checker is shared with the pre_tool_use_hook to ensure that runtime rule changes (e.g., “Always Allow”) are reflected in both places.

Implementations

impl PermissionHandler

pub fn new() -> Self

Create a new permission handler

Uses Default mode (standard behavior with permission prompts).

pub fn with_mode(mode: PermissionMode) -> Self

Create with a specific mode

pub fn with_checker(checker: Arc<RwLock<PermissionChecker>>) -> Self

Create with settings-based checker

Uses Default mode (standard behavior with permission prompts).

pub fn with_checker_owned(checker: PermissionChecker) -> Self

Create with settings-based checker (non-async, for convenience)

Uses Default mode (standard behavior with permission prompts).

pub fn mode(&self) -> PermissionMode

Get current permission mode

pub fn set_mode(&mut self, mode: PermissionMode)

Set permission mode

pub fn set_checker(&mut self, checker: Arc<RwLock<PermissionChecker>>)

Set the permission checker

pub async fn checker_mut( &mut self, ) -> Option<RwLockWriteGuard<'_, PermissionChecker>>

Get mutable reference to checker (for adding runtime rules)

pub fn should_auto_approve(&self, tool_name: &str, _input: &Value) -> bool

Check if a tool operation should be auto-approved

Returns true if the operation should proceed without user prompt.

Note: AcceptEdits mode auto-approves ALL tools (same as BypassPermissions) to maintain compatibility with root user environments while providing full automation capabilities.

pub fn is_tool_blocked(&self, tool_name: &str) -> bool

Check if a tool is blocked in current mode

pub async fn check_permission( &self, tool_name: &str, tool_input: &Value, ) -> ToolPermissionResult

Check permission for a tool with full context

Combines mode-based checking with settings rules. Returns the permission result.

Note: Both BypassPermissions and AcceptEdits modes bypass all permission checks (BypassPermissions for compatibility with non-root environments, AcceptEdits for root user compatibility).

pub async fn add_allow_rule(&self, tool_name: &str)

Add a runtime allow rule (e.g., from user’s “Always Allow” choice)

pub fn add_allow_rule_for_tool_call(&self, tool_name: &str, tool_input: &Value)

Add a fine-grained allow rule based on tool call details This is used for “Always Allow” with specific parameters

Trait Implementations

impl Debug for PermissionHandler

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for PermissionHandler

fn default() -> Self

Returns the “default value” for a type.