pub struct PermissionRequestRead {
pub intention: String,
pub kind: PermissionRequestReadKind,
pub managed_approval_required: Option<bool>,
pub path: String,
pub request_sandbox_bypass: Option<bool>,
pub request_sandbox_bypass_reason: Option<String>,
pub resolved_path: Option<String>,
pub tool_call_id: Option<String>,
}Expand description
File or directory read permission request
Fields§
§intention: StringHuman-readable description of why the file is being read
kind: PermissionRequestReadKindPermission kind discriminator
managed_approval_required: Option<bool>Whether managed policy requires a human response and forbids host auto-approval
path: StringPath of the file or directory being read
request_sandbox_bypass: Option<bool>True when the tool is asking to re-run this search outside the sandbox, after a sandboxed run looked blocked (host opted in via sandbox.allowBypass). The model cannot ask for this; only the tool raises it. This is a request, not a grant: the search runs unsandboxed only if the user approves this permission request. Hosts should highlight the elevated risk in the approval UI.
request_sandbox_bypass_reason: Option<String>What the tool tells the user about the bypass on offer: which policy rule blocked the call, or why it cannot be sandboxed. Only meaningful when requestSandboxBypass is true.
resolved_path: Option<String>Runtime-resolved canonical path used for authorization identity checks. Internal and experimental; clients should continue to display path.
Experimental. This type is part of an experimental wire-protocol surface and may change or be removed in future SDK or CLI releases.
tool_call_id: Option<String>Tool call ID that triggered this permission request