PermissionHandler

Struct PermissionHandler 

Source
pub struct PermissionHandler { /* private fields */ }
Expand description

Permission handler for tool execution

Uses a strategy pattern where each permission mode has its own strategy.

Implementations§

Source§

impl PermissionHandler

Source

pub fn new() -> Self

Create a new permission handler

Uses Default mode (standard behavior with permission prompts).

Source

pub fn with_mode(mode: PermissionMode) -> Self

Create with a specific mode

Source

pub fn with_checker(checker: Arc<RwLock<PermissionChecker>>) -> Self

Create with settings-based checker

Uses Default mode (standard behavior with permission prompts).

Source

pub fn with_checker_owned(checker: PermissionChecker) -> Self

Create with settings-based checker (non-async, for convenience)

Uses Default mode (standard behavior with permission prompts).

Source

pub fn mode(&self) -> PermissionMode

Get current permission mode

Source

pub fn set_mode(&mut self, mode: PermissionMode)

Set permission mode

Source

pub fn set_checker(&mut self, checker: Arc<RwLock<PermissionChecker>>)

Set the permission checker

Source

pub async fn checker_mut( &mut self, ) -> Option<RwLockWriteGuard<'_, PermissionChecker>>

Get mutable reference to checker (for adding runtime rules)

Source

pub fn should_auto_approve(&self, tool_name: &str, input: &Value) -> bool

Check if a tool operation should be auto-approved

Returns true if the operation should proceed without user prompt.

Delegates to the current strategy.

Source

pub fn is_tool_blocked(&self, tool_name: &str) -> bool

Check if a tool is blocked in current mode

Returns true if the tool is blocked.

Note: This method doesn’t take tool_input, so it’s less precise than the strategy method. For plan mode, it conservatively blocks all writes since it can’t check if the file is in the plans directory.

Source

pub async fn check_permission( &self, tool_name: &str, tool_input: &Value, ) -> ToolPermissionResult

Check permission for a tool with full context

Combines strategy-based checking with settings rules. Returns the permission result.

Source

pub async fn add_allow_rule(&self, tool_name: &str)

Add a runtime allow rule (e.g., from user’s “Always Allow” choice)

Source

pub fn add_allow_rule_for_tool_call(&self, tool_name: &str, tool_input: &Value)

Add a fine-grained allow rule based on tool call details This is used for “Always Allow” with specific parameters

Trait Implementations§

Source§

impl Debug for PermissionHandler

Source§

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter. Read more
Source§

impl Default for PermissionHandler

Source§

fn default() -> Self

Returns the “default value” for a type. Read more

Auto Trait Implementations§

Blanket Implementations§

Source§

impl<T> Any for T
where T: 'static + ?Sized,

Source§

fn type_id(&self) -> TypeId

Gets the TypeId of self. Read more
Source§

impl<T> Borrow<T> for T
where T: ?Sized,

Source§

fn borrow(&self) -> &T

Immutably borrows from an owned value. Read more
Source§

impl<T> BorrowMut<T> for T
where T: ?Sized,

Source§

fn borrow_mut(&mut self) -> &mut T

Mutably borrows from an owned value. Read more
Source§

impl<T> From<T> for T

Source§

fn from(t: T) -> T

Returns the argument unchanged.

Source§

impl<T> FutureExt for T

Source§

fn with_context(self, otel_cx: Context) -> WithContext<Self>

Attaches the provided Context to this type, returning a WithContext wrapper. Read more
Source§

fn with_current_context(self) -> WithContext<Self>

Attaches the current Context to this type, returning a WithContext wrapper. Read more
Source§

impl<T> Instrument for T

Source§

fn instrument(self, span: Span) -> Instrumented<Self>

Instruments this type with the provided Span, returning an Instrumented wrapper. Read more
Source§

fn in_current_span(self) -> Instrumented<Self>

Instruments this type with the current Span, returning an Instrumented wrapper. Read more
Source§

impl<T, U> Into<U> for T
where U: From<T>,

Source§

fn into(self) -> U

Calls U::from(self).

That is, this conversion is whatever the implementation of From<T> for U chooses to do.

Source§

impl<T> IntoMaybeUndefined<T> for T

Source§

impl<T> IntoOption<T> for T

Source§

impl<T> IntoRequest<T> for T

Source§

fn into_request(self) -> Request<T>

Wrap the input message T in a tonic::Request
Source§

impl<L> LayerExt<L> for L

Source§

fn named_layer<S>(&self, service: S) -> Layered<<L as Layer<S>>::Service, S>
where L: Layer<S>,

Applies the layer to a service and wraps it in Layered.
Source§

impl<T> PolicyExt for T
where T: ?Sized,

Source§

fn and<P, B, E>(self, other: P) -> And<T, P>
where T: Policy<B, E>, P: Policy<B, E>,

Create a new Policy that returns Action::Follow only if self and other return Action::Follow. Read more
Source§

fn or<P, B, E>(self, other: P) -> Or<T, P>
where T: Policy<B, E>, P: Policy<B, E>,

Create a new Policy that returns Action::Follow if either self or other returns Action::Follow. Read more
Source§

impl<T, U> TryFrom<U> for T
where U: Into<T>,

Source§

type Error = Infallible

The type returned in the event of a conversion error.
Source§

fn try_from(value: U) -> Result<T, <T as TryFrom<U>>::Error>

Performs the conversion.
Source§

impl<T, U> TryInto<U> for T
where U: TryFrom<T>,

Source§

type Error = <U as TryFrom<T>>::Error

The type returned in the event of a conversion error.
Source§

fn try_into(self) -> Result<U, <U as TryFrom<T>>::Error>

Performs the conversion.
Source§

impl<V, T> VZip<V> for T
where V: MultiLane<T>,

Source§

fn vzip(self) -> V

Source§

impl<T> WithSubscriber for T

Source§

fn with_subscriber<S>(self, subscriber: S) -> WithDispatch<Self>
where S: Into<Dispatch>,

Attaches the provided Subscriber to this type, returning a WithDispatch wrapper. Read more
Source§

fn with_current_subscriber(self) -> WithDispatch<Self>

Attaches the current default Subscriber to this type, returning a WithDispatch wrapper. Read more