Enum Permission 

pub enum Permission {
    ToolsIntercept,
    ToolsTransformOutput,
    ToolsOverride,
    LlmContent,
    SessionLifecycle,
    SessionDrive,
    ToolsRegister,
    ProvidersRegister,
    ContextProvidersRegister,
    MemoryRead,
    MemoryWrite,
    ConfigWrite,
    ConfigSubscribe,
    AudioInput,
    AudioOutput,
}

Permission flags an extension can request.

Variants

ToolsIntercept

Can subscribe to before_tool_call / after_tool_call hooks.

ToolsTransformOutput

Can rewrite tool OUTPUT via after_tool_call → HookResult::Replace. Distinct from (and additional to) tools.intercept: observing a tool’s output is a weaker capability than silently rewriting what the model believes the tool returned, so it requires explicit, separate consent.

ToolsOverride

Can override built-in tools.

LlmContent

Can read LLM input/output (before_message hook).

SessionLifecycle

Can subscribe to session lifecycle hooks.

SessionDrive

May propose foreground turns after explicit local user authorization. Declaration alone never arms a session driver or grants a hook.

ToolsRegister

Can register new tools.

ProvidersRegister

Can register new providers.

ContextProvidersRegister

Can declare dormant memory/context contribution providers (continuous-memory spec §7.1). Distinct from ProvidersRegister (model/LLM providers): this gates only passive context-provider capability metadata; activation additionally requires an exact memory-context lease (task A6).

MemoryRead

Can read from the local memory store via memory.query.

MemoryWrite

Can append to the local memory store via memory.append.

ConfigWrite

Can read/write its own plugin-namespaced config via config.get/config.set.

ConfigSubscribe

Can subscribe to hot-reload notifications for its own plugin config.

AudioInput

Can capture audio from input devices.

AudioOutput

Can produce audio through output devices.

Implementations

impl Permission

pub const ALL: &'static [Permission]

Every permission variant, in declaration order.

Exhaustiveness is enforced by all_covers_every_variant below, which pattern-matches every variant explicitly: adding one to the enum breaks that test’s match at compile time, and its length assertion then forces this list to be updated too.

This list is what docs/extensions/contract.json is drift-checked against (see crates/agent-tui/tests/extensions_contract.rs). Before that check existed the contract had fallen eight permissions behind the engine while STABILITY.md advertised it as CI-verified.

pub fn as_str(&self) -> &'static str

Wire-format string for this permission.

pub fn parse(s: &str) -> Option<Permission>

Parse from wire-format string.

pub fn is_reserved(&self) -> bool

Whether this permission is reserved for a future implementation.

Trait Implementations

impl Clone for Permission

fn clone(&self) -> Permission

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Copy for Permission

impl Debug for Permission

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for Permission

fn deserialize<__D>( __deserializer: __D, ) -> Result<Permission, <__D as Deserializer<'de>>::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Eq for Permission

impl Hash for Permission

fn hash<__H>(&self, state: &mut __H)

where __H: Hasher,

Feeds this value into the given Hasher.

fn hash_slice<H>(data: &[Self], state: &mut H)

where H: Hasher, Self: Sized,

Feeds a slice of this type into the given Hasher.

impl PartialEq for Permission

fn eq(&self, other: &Permission) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl Serialize for Permission

fn serialize<__S>( &self, __serializer: __S, ) -> Result<<__S as Serializer>::Ok, <__S as Serializer>::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for Permission