Enum Permission 

pub enum Permission {
    DatabaseReadAll,
    DatabaseRead(String),
    DatabaseWrite(String),
    DatabaseCreateTables,
    FilesystemRead,
    FilesystemReadAppData,
    FilesystemWrite,
    FilesystemWriteAppData,
    NetworkHttp,
    NetworkHttpDomain(String),
    IpcRegister,
    EventsEmit,
    EventsListen,
    UiInject,
    ProcessSpawn,
    ProcessSpawnWhitelist(Vec<String>),
    Notifications,
    ClipboardRead,
    ClipboardWrite,
    HostNavigation,
    HostAppStateRead,
    HostFileIntents,
    HostFileDialogs,
    HostAIChatAccess,
    HostEnterpriseGatewayAccess,
    HostDeepLinks,
    HostThemeRead,
    HostEventSubscribe,
    AppConfigRead,
}

Fine-grained permissions a plugin must declare in its manifest. The host checks these at install time (user approval) and at runtime (sandbox enforcement).

Variants

DatabaseReadAll

Read any host table.

DatabaseRead(String)

Read a specific host table (e.g. “launch_profiles”).

DatabaseWrite(String)

Write to a specific host table. Restricted tier.

DatabaseCreateTables

Create tables in the plugin’s own namespace.

FilesystemRead

Read any filesystem path (prompts user on first use).

FilesystemReadAppData

Read within the HaloForge app-data directory only.

FilesystemWrite

Write any filesystem path (prompts user on first use).

FilesystemWriteAppData

Write within the HaloForge app-data directory only.

NetworkHttp

Make outbound HTTP requests to any URL.

NetworkHttpDomain(String)

Make outbound HTTP requests to a specific domain only.

IpcRegister

Register new Tauri IPC commands.

EventsEmit

Emit events on the app event bus.

EventsListen

Listen to app lifecycle events.

UiInject

Inject into UI slots (implied by capability_levels 1/2).

ProcessSpawn

Spawn any child process (high risk — Restricted tier).

ProcessSpawnWhitelist(Vec<String>)

Spawn only executables from a declared whitelist.

Notifications

Show desktop toast notifications.

ClipboardRead

Read the clipboard.

ClipboardWrite

Write to the clipboard.

HostNavigation

Navigate within the host UI (module switches, opening settings tabs).

HostAppStateRead

Read stable host UI state such as the active module or settings tab.

HostFileIntents

Consume file-open intents routed by the host shell.

HostFileDialogs

Open stable host file and directory picker dialogs.

HostAIChatAccess

Reuse the host AIChat transport and model selection.

HostEnterpriseGatewayAccess

Call managed image gateway endpoints through the host session.

HostDeepLinks

Receive plugin-scoped haloforge:// deep links routed by the host.

HostThemeRead

Read the active host theme and design tokens.

HostEventSubscribe

Subscribe to stable host events exposed to plugins.

AppConfigRead

Read app config (theme, language).

Implementations

impl Permission

pub fn tier(&self) -> PermissionTier

Approval tier for this permission.

pub fn description(&self) -> String

Human-readable description shown in the permission prompt.

Trait Implementations

impl Clone for Permission

fn clone(&self) -> Permission

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for Permission

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for Permission

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Eq for Permission

impl Hash for Permission

fn hash<__H: Hasher>(&self, state: &mut __H)

Feeds this value into the given Hasher.

fn hash_slice<H>(data: &[Self], state: &mut H)

where H: Hasher, Self: Sized,

Feeds a slice of this type into the given Hasher.

impl PartialEq for Permission

fn eq(&self, other: &Permission) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for Permission

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for Permission