Enum CommandPermission 

pub enum CommandPermission {
    Allowed,
    Denied(String),
    RequiresApproval {
        grant_pattern: String,
        description: String,
    },
}

Result of a command permission check (trait-level type).

This is a simplified, runtime-independent version suitable for trait boundaries. Runtime implementations that need HIL integration use CommandCheckResult (in orcs-runtime) which includes ApprovalRequest.

Variants

• Allowed: Command can execute immediately
• Denied: Command is permanently blocked (e.g., denylist)
• RequiresApproval: Command needs user approval before execution

Example

use orcs_auth::CommandPermission;

let perm = CommandPermission::Allowed;
assert!(perm.is_allowed());

let perm = CommandPermission::Denied("blocked pattern".to_string());
assert!(perm.is_denied());
assert_eq!(perm.status_str(), "denied");

let perm = CommandPermission::RequiresApproval {
    grant_pattern: "rm -rf".to_string(),
    description: "destructive operation".to_string(),
};
assert!(perm.requires_approval());

Variants

Allowed

Command is allowed to execute.

Denied(String)

Command is denied with a reason.

RequiresApproval

Command requires user approval via HIL.

Fields

grant_pattern: String

The pattern to grant if approved.

description: String

Human-readable description of why approval is needed.

Implementations

impl CommandPermission

pub fn is_allowed(&self) -> bool

Returns true if the command is allowed.

pub fn is_denied(&self) -> bool

Returns true if the command is denied.

pub fn requires_approval(&self) -> bool

Returns true if the command requires approval.

pub fn status_str(&self) -> &'static str

Returns the status as a string (“allowed”, “denied”, “requires_approval”).

Trait Implementations

impl Clone for CommandPermission

fn clone(&self) -> CommandPermission

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for CommandPermission

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl PartialEq for CommandPermission

fn eq(&self, other: &CommandPermission) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Eq for CommandPermission

impl StructuralPartialEq for CommandPermission