permissions

type Classification struct {
	// Allowed is true if the classifier predicts the action is safe.
	Allowed bool `json:"allowed"`

	// Confidence is 0-1.
	Confidence float64 `json:"confidence"`

	// Reason explains the classification.
	Reason string `json:"reason,omitempty"`
}

type Classifier interface {
	// Classify predicts if a tool use should be allowed.
	Classify(ctx context.Context, toolName string, input map[string]any) (Classification, error)
}

type Engine struct {

	// FailClosed controls classifier unavailability behavior.
	// When true (default), classifier errors result in deny (fail-closed).
	// When false, classifier errors fall back to ask (fail-open).
	FailClosed bool
	// contains filtered or unexported fields
}

type Hook struct {
	// Stage is when this hook is called.
	Stage types.HookStage `json:"stage"`

	// Handler is the hook function.
	Handler HookHandler `json:"-"`

	// Priority determines order (higher = earlier).
	Priority int `json:"priority"`

	// ID uniquely identifies this hook.
	ID string `json:"id"`
}

type HookAdapter struct {
	// contains filtered or unexported fields
}

type HookHandler func(ctx context.Context, pctx *PermissionContext) (types.PermissionResult, error)

type Integrator struct {
	// contains filtered or unexported fields
}

type PermissionContext struct {
	// Mode is the current permission mode.
	Mode types.PermissionMode `json:"mode"`

	// ExecutionMode is the current execution mode.
	ExecutionMode string `json:"execution_mode,omitempty"`

	// ToolName is the tool being called.
	ToolName string `json:"tool_name"`

	// ToolInput is the input to the tool.
	ToolInput map[string]any `json:"tool_input"`

	// SessionID identifies the session.
	SessionID types.SessionID `json:"session_id"`

	// TurnID identifies the turn.
	TurnID types.TurnID `json:"turn_id"`

	// ToolUseID identifies the specific tool use when available.
	ToolUseID string `json:"tool_use_id,omitempty"`

	// Stage identifies which permission stage is being resolved.
	Stage types.ToolPermissionStage `json:"stage,omitempty"`

	// Intent identifies the decision kind requested for this stage.
	Intent types.ToolPermissionIntent `json:"intent,omitempty"`

	// IsConcurrent indicates if this tool will run concurrently.
	IsConcurrent bool `json:"is_concurrent"`

	// ToolDefinition is the tool's definition (if available).
	ToolDefinition *tool.Definition `json:"tool_definition,omitempty"`

	// Tool provides access to optional content-specific permission matching.
	Tool tool.Tool `json:"-"`

	// ShouldAvoidPermissionPrompts is true for headless/background agents
	// that cannot display UI prompts. When true, ask decisions are
	// automatically denied with an asyncAgent decision reason.
	ShouldAvoidPermissionPrompts bool `json:"should_avoid_permission_prompts,omitempty"`

	// IsBypassPermissionsModeAvailable indicates whether bypass mode was
	// available at the start of the session. Used by plan mode to determine
	// whether it should behave like bypass mode or ask for permissions.
	IsBypassPermissionsModeAvailable bool `json:"is_bypass_permissions_mode_available,omitempty"`

	// IsToolRunningInSandbox indicates whether the tool will run inside a sandbox.
	// This is used by canSandboxAutoAllow to determine if a command can be auto-approved.
	IsToolRunningInSandbox bool `json:"is_tool_running_in_sandbox,omitempty"`

	// Additional context.
	Additional map[string]any `json:"additional,omitempty"`
}

type PermissionDeniedError struct {
	ToolName string
	Reason   string
}

type PermissionRule struct {
	// Value is the structured rule target.
	Value PermissionRuleValue `json:"value"`

	// Pattern is the legacy serialized form, kept for compatibility.
	Pattern string `json:"pattern,omitempty"`

	// Behavior is the allow/deny/ask decision.
	Behavior types.PermissionBehavior `json:"behavior"`

	// Priority determines rule precedence (higher = more important).
	Priority int `json:"priority"`

	// Reason explains why this rule exists.
	Reason string `json:"reason,omitempty"`

	// Source indicates where this rule came from.
	Source types.PermissionRuleSource `json:"source"`
}

type PermissionRuleValue struct {
	// ToolName identifies the tool this rule targets.
	ToolName string `json:"tool_name"`

	// RuleContent carries optional content-specific matching handled by the tool.
	RuleContent string `json:"rule_content,omitempty"`
}

type SettingsJSON struct {
	PermissionRules                 []StoredPermissionRule `json:"permission_rules,omitempty"`
	AllowManagedPermissionRulesOnly bool                   `json:"allow_managed_permission_rules_only,omitempty"`
}

type SettingsSource string

type StoredPermissionRule struct {
	ToolName    string `json:"tool_name"`
	RuleContent string `json:"rule_content,omitempty"`
	Behavior    string `json:"behavior"`
	Pattern     string `json:"pattern"`
}