acp-cli 0.3.0

Headless CLI client for the Agent Client Protocol (ACP)
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53

use serde::{Deserialize, Serialize};

use crate::bridge::{PermissionKind, PermissionOption, PermissionOutcome, ToolCallInfo};

#[derive(Debug, Clone, Default, Deserialize, Serialize)]
#[serde(rename_all = "snake_case")]
pub enum PermissionMode {
    ApproveAll,
    #[default]
    ApproveReads,
    DenyAll,
}

/// Resolve a permission request based on the current permission mode.
///
/// For `ApproveAll`, automatically selects the first allow option.
/// For `ApproveReads`, only auto-approves read-only tools; write tools are cancelled.
/// For `DenyAll`, always cancels.
pub fn resolve_permission(
    tool: &ToolCallInfo,
    options: &[PermissionOption],
    mode: &PermissionMode,
) -> PermissionOutcome {
    match mode {
        PermissionMode::ApproveAll => select_first_allow(options),
        PermissionMode::ApproveReads => {
            if is_read_only_tool(&tool.name) {
                select_first_allow(options)
            } else {
                PermissionOutcome::Cancelled
            }
        }
        PermissionMode::DenyAll => PermissionOutcome::Cancelled,
    }
}

/// Returns true if the tool name corresponds to a read-only operation.
pub fn is_read_only_tool(name: &str) -> bool {
    matches!(
        name,
        "Read" | "Glob" | "Grep" | "WebSearch" | "WebFetch" | "LSP"
    )
}

fn select_first_allow(options: &[PermissionOption]) -> PermissionOutcome {
    options
        .iter()
        .find(|o| o.kind == PermissionKind::Allow)
        .map(|o| PermissionOutcome::Selected {
            option_id: o.option_id.clone(),
        })
        .unwrap_or(PermissionOutcome::Cancelled)
}