PermissionHandler

Struct PermissionHandler 

Source
pub struct PermissionHandler { /* private fields */ }
Expand description

Permission handler for tool execution

Combines mode-based checking with settings rules.

The permission checker is shared with the pre_tool_use_hook to ensure that runtime rule changes (e.g., “Always Allow”) are reflected in both places.

Implementations§

Source§

impl PermissionHandler

Source

pub fn new() -> Self

Create a new permission handler

Source

pub fn with_mode(mode: PermissionMode) -> Self

Create with a specific mode

Source

pub fn with_checker(checker: Arc<RwLock<PermissionChecker>>) -> Self

Create with settings-based checker

Source

pub fn with_checker_owned(checker: PermissionChecker) -> Self

Create with settings-based checker (non-async, for convenience)

Source

pub fn mode(&self) -> PermissionMode

Get current permission mode

Source

pub fn set_mode(&mut self, mode: PermissionMode)

Set permission mode

Source

pub fn set_checker(&mut self, checker: Arc<RwLock<PermissionChecker>>)

Set the permission checker

Source

pub async fn checker_mut( &mut self, ) -> Option<RwLockWriteGuard<'_, PermissionChecker>>

Get mutable reference to checker (for adding runtime rules)

Source

pub fn should_auto_approve(&self, tool_name: &str, _input: &Value) -> bool

Check if a tool operation should be auto-approved

Returns true if the operation should proceed without user prompt.

Source

pub fn is_tool_blocked(&self, tool_name: &str) -> bool

Check if a tool is blocked in current mode

Source

pub async fn check_permission( &self, tool_name: &str, tool_input: &Value, ) -> ToolPermissionResult

Check permission for a tool with full context

Combines mode-based checking with settings rules. Returns the permission result.

Source

pub async fn add_allow_rule(&self, tool_name: &str)

Add a runtime allow rule (e.g., from user’s “Always Allow” choice)

Trait Implementations§

Source§

impl Debug for PermissionHandler

Source§

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter. Read more
Source§

impl Default for PermissionHandler

Source§

fn default() -> Self

Returns the “default value” for a type. Read more

Auto Trait Implementations§

Blanket Implementations§

Source§

impl<T> Any for T
where T: 'static + ?Sized,

Source§

fn type_id(&self) -> TypeId

Gets the TypeId of self. Read more
Source§

impl<T> Borrow<T> for T
where T: ?Sized,

Source§

fn borrow(&self) -> &T

Immutably borrows from an owned value. Read more
Source§

impl<T> BorrowMut<T> for T
where T: ?Sized,

Source§

fn borrow_mut(&mut self) -> &mut T

Mutably borrows from an owned value. Read more
Source§

impl<T> From<T> for T

Source§

fn from(t: T) -> T

Returns the argument unchanged.

Source§

impl<T> FutureExt for T

Source§

fn with_context(self, otel_cx: Context) -> WithContext<Self>

Attaches the provided Context to this type, returning a WithContext wrapper. Read more
Source§

fn with_current_context(self) -> WithContext<Self>

Attaches the current Context to this type, returning a WithContext wrapper. Read more
Source§

impl<T> Instrument for T

Source§

fn instrument(self, span: Span) -> Instrumented<Self>

Instruments this type with the provided Span, returning an Instrumented wrapper. Read more
Source§

fn in_current_span(self) -> Instrumented<Self>

Instruments this type with the current Span, returning an Instrumented wrapper. Read more
Source§

impl<T, U> Into<U> for T
where U: From<T>,

Source§

fn into(self) -> U

Calls U::from(self).

That is, this conversion is whatever the implementation of From<T> for U chooses to do.

Source§

impl<T> IntoMaybeUndefined<T> for T

Source§

impl<T> IntoOption<T> for T

Source§

impl<T> IntoRequest<T> for T

Source§

fn into_request(self) -> Request<T>

Wrap the input message T in a tonic::Request
Source§

impl<L> LayerExt<L> for L

Source§

fn named_layer<S>(&self, service: S) -> Layered<<L as Layer<S>>::Service, S>
where L: Layer<S>,

Applies the layer to a service and wraps it in Layered.
Source§

impl<T> PolicyExt for T
where T: ?Sized,

Source§

fn and<P, B, E>(self, other: P) -> And<T, P>
where T: Policy<B, E>, P: Policy<B, E>,

Create a new Policy that returns Action::Follow only if self and other return Action::Follow. Read more
Source§

fn or<P, B, E>(self, other: P) -> Or<T, P>
where T: Policy<B, E>, P: Policy<B, E>,

Create a new Policy that returns Action::Follow if either self or other returns Action::Follow. Read more
Source§

impl<T, U> TryFrom<U> for T
where U: Into<T>,

Source§

type Error = Infallible

The type returned in the event of a conversion error.
Source§

fn try_from(value: U) -> Result<T, <T as TryFrom<U>>::Error>

Performs the conversion.
Source§

impl<T, U> TryInto<U> for T
where U: TryFrom<T>,

Source§

type Error = <U as TryFrom<T>>::Error

The type returned in the event of a conversion error.
Source§

fn try_into(self) -> Result<U, <U as TryFrom<T>>::Error>

Performs the conversion.
Source§

impl<V, T> VZip<V> for T
where V: MultiLane<T>,

Source§

fn vzip(self) -> V

Source§

impl<T> WithSubscriber for T

Source§

fn with_subscriber<S>(self, subscriber: S) -> WithDispatch<Self>
where S: Into<Dispatch>,

Attaches the provided Subscriber to this type, returning a WithDispatch wrapper. Read more
Source§

fn with_current_subscriber(self) -> WithDispatch<Self>

Attaches the current default Subscriber to this type, returning a WithDispatch wrapper. Read more