Enum PermissionPolicy 

pub enum PermissionPolicy {
    DenyAll,
    AutoApprove,
}

Policy for handling permission requests from the Copilot runtime.

Controls whether tool-execution permission prompts are auto-approved or denied.

Denies by default. The runtime’s own tools — shell, git, file editing — run as the host’s user, with the runtime’s GitHub credential and the part of the host’s environment runtime_env_keys lets through, in the session working directory (a scratch directory unless the host configures one), so a host that builds its prompt from untrusted input (an end user’s chat text, say) turns an approval into arbitrary execution next to its secrets. That is not a hypothetical: a Dravr coaching turn was observed making five shell/bash/ Grep/Glob calls during a user’s request, because the default approved them.

A host that genuinely wants the runtime to run tools must now say so explicitly with PermissionPolicy::AutoApprove. Every current consumer wants denial, and the safe value should not depend on each one remembering to set an env var.

Variants

DenyAll

Deny all permission requests by cancelling them.

AutoApprove

Automatically approve permission requests by selecting the best allow option.

Only safe when the prompt is fully trusted — never when it is assembled from end-user input.

Implementations

impl PermissionPolicy

pub fn parse(raw: &str) -> Self

Parse the value of a *_PERMISSION_POLICY environment variable.

Approval is opt-in and must be spelled out. An unset — or misspelled — value denies, so a typo degrades to the safe side rather than silently handing the runtime a shell.

Trait Implementations

impl Clone for PermissionPolicy

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Copy for PermissionPolicy

impl Debug for PermissionPolicy

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for PermissionPolicy

fn default() -> Self

Returns the “default value” for a type.

impl Eq for PermissionPolicy

impl PartialEq for PermissionPolicy

fn eq(&self, other: &Self) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for PermissionPolicy