Struct Capability 

pub struct Capability {

    pub capability_id: String,
    pub holder: ActorId,
    pub effects: Vec<EffectKind>,
    pub path_scope: Vec<PathPattern>,
    pub write_scope: Vec<PathPattern>,
    pub command_scope: Vec<CommandPattern>,
    pub network_scope: Vec<NetworkPattern>,
    pub max_calls: Option<u32>,
    pub expires_at: Option<i64>,
    pub may_delegate: bool,
    pub risk_budget: Option<RiskBudget>,
    pub approval_policy: ApprovalPolicy,
    pub session_id: String,
    pub authority_epoch: u64,
    pub graph_revision: String,
    pub node_generation: u32,
    pub role: CapabilityRole,
    pub parent_capability_id: Option<String>,
}

A capability: an explicit, attenuable grant of authority (PSP-8 System 7).

Fields

capability_id: String

holder: ActorId

effects: Vec<EffectKind>

path_scope: Vec<PathPattern>

write_scope: Vec<PathPattern>

Mutation-only path ceiling (PSP-10 system 22): the node’s declared output_targets. Reads stay governed by path_scope alone; empty means unrestricted (undeclared targets).

command_scope: Vec<CommandPattern>

network_scope: Vec<NetworkPattern>

max_calls: Option<u32>

Remaining call budget q_c. None means unbounded.

expires_at: Option<i64>

Expiry τ_c as a unix timestamp. None means no expiry.

may_delegate: bool

Delegability d_c.

risk_budget: Option<RiskBudget>

approval_policy: ApprovalPolicy

session_id: String

authority_epoch: u64

graph_revision: String

node_generation: u32

role: CapabilityRole

parent_capability_id: Option<String>

Implementations

impl Capability

pub fn new(holder: ActorId, effects: Vec<EffectKind>) -> Self

pub fn with_paths(self, patterns: Vec<&str>) -> Self

pub fn delegable(self) -> Self

pub fn grants(&self, effect: EffectKind) -> bool

pub fn attenuates(&self, source: &Capability) -> bool

The attenuation preorder c' ⪯ c: a delegated capability may only shrink effect scope, call budget, expiry, and delegability (PSP-8 System 7).

pub fn delegate(&self, child: Capability) -> Option<Capability>

Attempt to delegate an attenuated child capability. Returns None if the source is not delegable or the child does not satisfy the preorder.

Trait Implementations

impl Clone for Capability

fn clone(&self) -> Capability

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for Capability

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl PartialEq for Capability

fn eq(&self, other: &Capability) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl StructuralPartialEq for Capability