Why Go
- Case Studies
  
  Common problems companies solve with Go
- Use Cases
  
  Stories about how and why companies use Go
- Security
  
  How Go can help keep you secure by default
Learn
Docs
- Effective Go
  
  Tips for writing clear, performant, and idiomatic Go code
- Go User Manual
  
  A complete introduction to building software with Go
- Standard library
  
  Reference documentation for Go's standard library
- Release Notes
  
  Learn what's new in each Go release
- API
  
  Reference documentation for the pkg.go.dev API
Packages
Community
- Recorded Talks
  
  Videos from prior events
- Meetups
  
  Meet other local Go developers
- Conferences
  
  Learn and network with Go developers from around the world
- Go blog
  
  The Go project's official blog.
- Go project
  
  Get help and stay informed from Go
- Get connected

approval

package

Go to main page

Versions in this module

v0

v0.4.0

Aug 17, 2026

Changes in this version

+ const ChangeSetField

+ const ChangeSetStateKeyPrefix

+ const DecisionSchema

+ const DecisionStateKeyPrefix

+ const DefaultGrantTTL

+ const FinishTaskToolName

+ const GrantStateKeyPrefix

+ const MachineApproverPrefix

+ const RedactedApproverPrefix

+ func ChangeSetStateKey(specialist string) string

+ func DecisionStateKey(functionCallID string) string

+ func DescribeChangeSet(changes []ProposedChange) string

+ func EncodeChangeSet(changes []ProposedChange) (string, error)

+ func EncodeDecision(d Decision) (string, error)

+ func EncodeGrant(g Grant) (string, error)

+ func GrantStateKey(signature string) string

+ func InputSchema(t tool.Tool) (*jsonschema.Schema, error)

+ func Legible(changes []ProposedChange) error

+ func NormalizeArgs(toolName string, schema *jsonschema.Schema, args map[string]any) (map[string]any, error)

+ func RedactApprover(approver string) string

+ func Signature(toolName string, args map[string]any) (string, error)

+ type Authority string

+ const AuthorityChangeSetGrant

+ const AuthorityVerdict

+ type ChangeSetChecker struct

+ Declares func(toolName string) bool

+ Schema func(toolName string) (*jsonschema.Schema, error)

+ func (c ChangeSetChecker) Check(changes []ProposedChange) ([]ProposedChange, error)

+ type ChangeSetContext struct

+ Changes []ProposedChange

+ Grantable bool

+ Preconditions map[string]string

+ Specialist string

+ TTLSeconds int

+ Ungrantable string

type Config

+ ChangeSet *ChangeSetChecker

+ Grants *Freshness

+ Workload string

+ type Decision struct

+ Approver string

+ Authority Authority

+ ChangeSet string

+ DecidedAt time.Time

+ Disposition Disposition

+ ExecutedArgs map[string]any

+ ExecutedKey string

+ FunctionCallID string

+ Invocation string

+ Note string

+ Outcome Outcome

+ ProposedArgs map[string]any

+ ProposedKey string

+ Refusal string

+ Scope Scope

+ Session string

+ Specialist string

+ Tool string

+ Workload string

+ func DecodeDecision(v any) (Decision, error)

+ func (d Decision) Edited() bool

+ func (d Decision) Redacted() Decision

+ type Disposition string

+ const DispositionAuthorized

+ const DispositionRefusedByMast

+ const DispositionRefusedByOperator

+ type Freshness struct

+ Now func() time.Time

+ Precondition func(toolName string) (*Precondition, error)

+ Read func(ctx agent.Context, toolName string, args map[string]any) (map[string]any, error)

+ TTL time.Duration

+ type Grant struct

+ Approver string

+ Arguments map[string]any

+ ConsumedBy string

+ ExpiresAt time.Time

+ MintedAt time.Time

+ Note string

+ Origin string

+ Precondition *PreconditionSnapshot

+ Signature string

+ Tool string

+ VoidedBy string

+ func DecodeGrant(v any) (Grant, error)

+ func (g Grant) Spent(functionCallID string) bool

+ type Precondition struct

+ Args map[string]any

+ ArgsFrom map[string]string

+ Fields []string

+ Read string

+ type PreconditionSnapshot struct

+ Args map[string]any

+ Digest string

+ Fields map[string]string

+ Read string

+ type ProposedChange struct

+ Arguments map[string]any

+ Tool string

+ func DecodeChangeSet(v any) ([]ProposedChange, error)

+ func ParseChangeSet(report map[string]any) ([]ProposedChange, error)

+ func (c *ProposedChange) UnmarshalJSON(raw []byte) error

+ func (c ProposedChange) Signature() (string, error)

type Request

+ ChangeSet *ChangeSetContext

+ Stale string

type Scope

+ const ScopeChangeSet

v0.3.0

Aug 14, 2026

Changes in this version

+ const EditStateKeyPrefix

+ const PluginName

+ func CallKey(name string, args map[string]any) string

+ func ConfirmationResponse(v Verdict) map[string]any

+ func EditStateKey(functionCallID string) string

+ func New(cfg Config) (*plugin.Plugin, error)

+ func VerdictSchema() *jsonschema.Schema

+ type AppliedEdit struct

+ Approver string

+ ExecutedArgs map[string]any

+ ExecutedKey string

+ Note string

+ ProposedArgs map[string]any

+ ProposedKey string

+ Tool string

+ func DecodeAppliedEdit(v any) (AppliedEdit, error)

+ func (e AppliedEdit) String() string

+ type Config struct

+ Gate *permissions.Gate

+ Logger *slog.Logger

+ Mutating func(toolName string) bool

+ Policy OnMutation

+ type OnMutation string

+ const OnMutationApply

+ const OnMutationDryRun

+ const OnMutationRequireApproval

+ func (p OnMutation) Valid() bool

+ type Outcome string

+ const OutcomeApprove

+ const OutcomeEdit

+ const OutcomeReject

+ type Parked struct

+ Args map[string]any

+ Hint string

+ Request map[string]any

+ Tool string

+ func DescribeConfirmation(args map[string]any) Parked

+ func (p Parked) Summary() string

+ type Request struct

+ Agent string

+ Args map[string]any

+ Key string

+ Policy string

+ Tool string

+ Verdict map[string]any

+ func DecodeRequest(v any) (Request, error)

+ type Scope string

+ const ScopeAlways

+ const ScopeOnce

+ const ScopeSession

+ const ScopeSessionTool

+ type Verdict struct

+ Approver string

+ Args map[string]any

+ Note string

+ Scope Scope

+ Verdict Outcome

+ func DecodeVerdict(c *toolconfirmation.ToolConfirmation) (Verdict, error)

+ func (v Verdict) Decision() (permissions.Decision, error)