Permissions R6 Class

Controls what an agent is allowed to do. Permissions can be configured with fine-grained controls for different tool types, or with a custom callback for complex logic.

Security Note: Permission fields are immutable after construction. This prevents adversarial code from modifying permissions at runtime. All fields use active bindings that reject modification attempts.

Active bindings

mode

Permission mode (see PermissionMode). Read-only after construction.

file_read

Allow file reading. Read-only after construction.

file_write

Allow file writing. Can be TRUE, FALSE, or a directory path. Read-only after construction.

bash

Allow bash command execution. Read-only after construction.

r_code

Allow R code execution. Read-only after construction.

web

Allow web requests. Read-only after construction.

install_packages

Allow package installation. Read-only after construction.

max_turns

Maximum number of turns before stopping. Read-only after construction.

max_cost_usd

Maximum cost in USD before stopping. Read-only after construction.

can_use_tool

Custom permission callback. Read-only after construction.

Methods

Public methods

• Permissions$new()

• Permissions$check()

• Permissions$print()

• Permissions$clone()

---

Method new()

Create a new Permissions object.

Usage

Permissions$new(
  mode = "default",
  file_read = TRUE,
  file_write = NULL,
  bash = FALSE,
  r_code = TRUE,
  web = FALSE,
  install_packages = FALSE,
  max_turns = 25,
  max_cost_usd = NULL,
  can_use_tool = NULL
)

Arguments

mode

Permission mode

file_read

Allow file reading

file_write

Allow file writing (TRUE, FALSE, or directory path)

bash

Allow bash commands

r_code

Allow R code execution

web

Allow web requests

install_packages

Allow package installation

max_turns

Maximum turns

max_cost_usd

Maximum cost

can_use_tool

Custom callback function

Returns

A new Permissions object

---

Method check()

Check if a tool is allowed to execute.

Usage

Permissions$check(tool_name, tool_input, context = list())

Arguments

tool_name

Name of the tool

tool_input

Arguments passed to the tool

context

Additional context (e.g., working_dir, tool_annotations)

Returns

A PermissionResultAllow or PermissionResultDeny

---

Method print()

Print the permissions configuration.

Usage

Permissions$print()

---

Method clone()

The objects of this class are cloneable with this method.

Usage

Permissions$clone(deep = FALSE)

Arguments

deep

Whether to make a deep clone.