rsclaw-cap 0.1.0

Cap crate for RsClaw — internal workspace crate, not for direct use
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39

//! Auto-approve handler for cap PermissionRequest events.

use cap_rs::core::{ClientFrame, PermissionDecision, RiskLevel};

/// Always returns AllowOnce. Logs at info! so an operator can audit
/// approvals by tail-grepping the gateway log. P2 (conversation mode)
/// will replace this with a real user-in-the-loop handler.
pub fn auto_approve(req_id: &str, tool: &str, risk: RiskLevel) -> ClientFrame {
    tracing::info!(
        target: "cap.permission",
        req_id,
        tool,
        ?risk,
        "auto-approve"
    );
    ClientFrame::PermissionResponse {
        req_id: req_id.to_owned(),
        decision: PermissionDecision::AllowOnce,
    }
}

#[cfg(test)]
mod tests {
    use super::*;

    #[test]
    fn always_allow_regardless_of_risk() {
        for risk in [RiskLevel::Low, RiskLevel::Medium, RiskLevel::High] {
            let frame = auto_approve("req-1", "shell", risk);
            match frame {
                ClientFrame::PermissionResponse { req_id, decision } => {
                    assert_eq!(req_id, "req-1");
                    assert!(matches!(decision, PermissionDecision::AllowOnce));
                }
                other => panic!("expected PermissionResponse, got {other:?}"),
            }
        }
    }
}