1. 1//! vak-permission: rule-based permission decisions, decoupled from
2. 2//! enforcement. Evaluate(tool, args, mode) -> Decision; the agent loop and
3. 3//! UI approvers decide what Ask becomes.
4. 4
5. 5pub mod engine;
6. 6pub mod rules;
7. 7
8. 8pub use engine::{AskSource, Decision, PermissionEngine, path_in_workspace};
9. 9pub use rules::{Rule, RuleDecision, RuleError};
10. 10
11. 11#[derive(Debug, Clone, Copy, PartialEq, Eq, Default)]
12. 12pub enum Mode {
13. 13 ReadOnly,
14. 14 #[default]
15. 15 WorkspaceWrite,
16. 16 FullAccess,
17. 17}
18. 18
19. 19impl Mode {
20. 20 pub fn parse(s: &str) -> Option<Mode> {
21. 21 match s {
22. 22 "read-only" | "readonly" => Some(Mode::ReadOnly),
23. 23 "workspace-write" => Some(Mode::WorkspaceWrite),
24. 24 "full-access" | "fullaccess" => Some(Mode::FullAccess),
25. 25 _ => None,
26. 26 }
27. 27 }
28. 28
29. 29 pub fn as_str(&self) -> &'static str {
30. 30 match self {
31. 31 Mode::ReadOnly => "read-only",
32. 32 Mode::WorkspaceWrite => "workspace-write",
33. 33 Mode::FullAccess => "full-access",
34. 34 }
35. 35 }
36. 36}
37. 37