tiny.acp.PermissionPolicy

1/// A caller that trusts some tools lists them here, so the client grants those requests without2/// asking the observer. The client checks two lists when the observer leaves a request unanswered:3/// tool kinds and tool-title prefixes. A request passes when its tool call's kind equals a listed4/// kind, or its title starts with a listed prefix. For a request that passes, the client picks the5/// first `allow_once` option, else the first `allow_always` option. Otherwise, or when allow6/// options are absent, the client picks the first `reject_once` option, else the last7/// `reject_always` option, else answers `cancelled`. The default lists nothing, so it rejects every8/// request.9pub const PermissionPolicy = struct {10    /// Tool kinds to grant, each compared whole against the tool call's `kind`. The package test11    /// grants `execute`. The field defaults to none.12    allowed_tool_kinds: []const []const u8 = &.{},13    /// Title prefixes to grant, each compared against the start of the tool call's `title`. The14    /// package test grants an MCP tool call titled `mcp__fixture__tool`, which carries no kind,15    /// with the prefix `mcp__fixture__`. The field defaults to none.16    allowed_title_prefixes: []const []const u8 = &.{},1718    fn allows(self: PermissionPolicy, object: std.json.ObjectMap) bool {19        const params = json.objectObject(object, "params") orelse return false;20        const tool_call = json.objectObject(params, "toolCall") orelse return false;21        if (json.objectString(tool_call, "kind")) |kind| {22            for (self.allowed_tool_kinds) |allowed| {23                if (std.mem.eql(u8, allowed, kind)) return true;24            }25        }26        if (json.objectString(tool_call, "title")) |title| {27            for (self.allowed_title_prefixes) |prefix| {28                if (std.mem.startsWith(u8, title, prefix)) return true;29            }30        }31        return false;32    }33};

1pub const PermissionPolicy = client.PermissionPolicy;