Enum CommandCheckResult 

pub enum CommandCheckResult {
    Allowed,
    Denied(String),
    RequiresApproval {
        request: ApprovalRequest,
        grant_pattern: String,
    },
}

Result of a command permission check.

Unlike can_execute_command which returns a simple bool, this enum provides more granular control:

• Allowed: Command can execute immediately
• Denied: Command is permanently blocked
• RequiresApproval: Command needs HIL approval before execution

HIL Integration

When RequiresApproval is returned, the caller should:

1. Submit the ApprovalRequest to HilComponent
2. Wait for user approval/rejection
3. If approved, call grants.grant(CommandGrant::persistent(grant_pattern))
4. Retry the command (which will now return Allowed)

Example

match checker.check_command(&session, "rm -rf ./temp") {
    CommandCheckResult::Allowed => execute(cmd),
    CommandCheckResult::Denied(reason) => error!("{}", reason),
    CommandCheckResult::RequiresApproval { request, grant_pattern } => {
        let id = hil.submit(request);
        if await_approval(id) {
            session.grant_command(&grant_pattern);
            execute(cmd);
        }
    }
}

Variants

Allowed

Command is allowed to execute.

Denied(String)

Command is denied with a reason.

RequiresApproval

Command requires user approval via HIL.

Fields

request: ApprovalRequest

The approval request to submit to HilComponent.

grant_pattern: String

The pattern to grant if approved (for future commands).

Implementations

impl CommandCheckResult

pub fn is_allowed(&self) -> bool

Returns true if the command is allowed.

pub fn is_denied(&self) -> bool

Returns true if the command is denied.

pub fn requires_approval(&self) -> bool

Returns true if the command requires approval.

pub fn denial_reason(&self) -> Option<&str>

Returns the denial reason if denied.

pub fn approval_request(&self) -> Option<&ApprovalRequest>

Returns the approval request if requires approval.

pub fn grant_pattern(&self) -> Option<&str>

Returns the grant pattern if requires approval.

Trait Implementations

impl Clone for CommandCheckResult

fn clone(&self) -> CommandCheckResult

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for CommandCheckResult

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.