Struct PermissionChecker 

pub struct PermissionChecker { /* private fields */ }

Permission checker that evaluates tool permissions against settings rules

Implementations

impl PermissionChecker

pub fn new(settings: Settings, cwd: impl AsRef<Path>) -> Self

Create a new permission checker

pub fn check_permission( &self, tool_name: &str, tool_input: &Value, ) -> PermissionCheckResult

Check permission for a tool invocation

Priority: deny > allow > ask

Returns the permission decision and matching rule (if any).

pub fn settings(&self) -> &Settings

Get the settings

pub fn cwd(&self) -> &Path

Get the working directory

pub fn has_rules(&self) -> bool

Check if there are any permission rules configured

pub fn add_allow_rule(&mut self, rule: &str)

Add a runtime allow rule (e.g., from user’s “Always Allow” choice)

pub fn add_allow_rule_for_tool_call( &mut self, tool_name: &str, tool_input: &Value, )

Add a runtime allow rule for “Always Allow” permission decision

For Bash tool: extracts the command name (first word) and generates a rule like Bash(find:*) that allows all invocations of that command regardless of arguments or paths.

For file operations (Read/Edit/Write): generates a directory-based rule that allows operations in the same directory tree.

This provides reasonable granularity:

• find /path1 → rule Bash(find:*) → allows all find commands
• ls /path → not matched → needs separate permission

pub fn add_deny_rule(&mut self, rule: &str)

Add a runtime deny rule

pub fn default_mode(&self) -> Option<&str>

Get the default permission mode from settings

pub fn additional_directories(&self) -> Option<&Vec<String>>

Get additional directories from settings

Trait Implementations

impl Debug for PermissionChecker

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for PermissionChecker

fn default() -> Self

Returns the “default value” for a type.