Struct CapabilityGrant 

pub struct CapabilityGrant {
    pub fs: Vec<FsGrant>,
    pub net_http: Vec<String>,
    pub proc_spawn: bool,
    pub state_write: bool,
    pub grammar_chord: bool,
    pub editor: CapabilitySet,
}

The effective capabilities a plugin is granted — the request filtered by its trust tier. This, not the manifest, is what the runtime enforces.

Fields

fs: Vec<FsGrant>

Granted filesystem prefixes (enforced via WASI preopens).

net_http: Vec<String>

Granted outbound-HTTP host allowlist (enforced at the host-services http seam, PH7.3+, not the WASI layer — see the module note).

proc_spawn: bool

Whether the plugin may spawn subprocesses (enforced at the host-services proc seam, PH7.3+).

state_write: bool

OR.1: whether the plugin may persist bytes in its own key/value store (enforced at the host-services store-* seam — the store lives in the plugin’s private data dir, which WASI already mounts, so this gate is host-side like net:http rather than a preopen).

grammar_chord: bool

CM.2: whether the plugin may bind an operator chord into the universal operator-pending grammar. Enforced at the loader’s grammar drain — a declared chord is skipped (and logged) without this, while the operator itself still registers and stays reachable by name.

editor: CapabilitySet

The editor capabilities a plugin-declared mode requires (enforced at mode activation, PH7.11).

Implementations

impl CapabilityGrant

pub fn preopens(&self, data_dir: &Path) -> Vec<PreopenSpec>

The full set of directory preopens for a plugin whose private data dir is data_dir. The data dir is always mounted writable at DATA_DIR_GUEST_MOUNT; each fs grant adds a preopen at a guest path equal to its host path (so the guest opens the same absolute path it was granted). A plugin with no fs grant reaches only its data dir.

The guest-path convention (fs prefix mounted at its own host path) is provisional until fuzzy-finder exercises it (PH7.4, open question in fragment §13).

Trait Implementations

impl Clone for CapabilityGrant

fn clone(&self) -> CapabilityGrant

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for CapabilityGrant

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for CapabilityGrant

fn default() -> CapabilityGrant

Returns the “default value” for a type.

impl Eq for CapabilityGrant

impl PartialEq for CapabilityGrant

fn eq(&self, other: &CapabilityGrant) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for CapabilityGrant