Enum CaveatPredicate 

pub enum CaveatPredicate {
    TimeBefore(u64),
    TimeAfter(u64),
    RegionScope(u64),
    TaskScope(u64),
    MaxUses(u32),
    ResourceScope(String),
    RateLimit {
        max_count: u32,
        window_secs: u32,
    },
    Custom(String, String),
}

A predicate that restricts when/where a capability token is valid.

Caveats form a conjunction: all must be satisfied for the token to be valid. New caveats can only narrow (never widen) access.

Variants

TimeBefore(u64)

Token is valid only before this virtual timestamp (milliseconds).

TimeAfter(u64)

Token is valid only after this virtual timestamp (milliseconds).

RegionScope(u64)

Token is scoped to a specific region ID.

TaskScope(u64)

Token is scoped to a specific task ID.

MaxUses(u32)

Maximum number of times the token may be checked.

ResourceScope(String)

Token is scoped to resources matching a glob pattern.

The pattern uses simple glob syntax: * matches any segment, ** matches any number of segments, exact segments match literally.

RateLimit

Windowed rate limit: at most max_count uses per window_secs seconds.

Checked against VerificationContext::window_use_count. The caller is responsible for tracking the sliding window externally.

Fields

max_count: u32

Maximum invocations allowed in the window.

window_secs: u32

Window duration in seconds (encoded for the caveat chain, checked externally).

Custom(String, String)

Custom key-value predicate for extensibility.

Implementations

impl CaveatPredicate

pub fn to_bytes(&self) -> Vec<u8>

Encode the predicate to bytes for HMAC chaining.

pub fn from_bytes(data: &[u8]) -> Option<(Self, usize)>

Decode a predicate from bytes. Returns the predicate and bytes consumed.

Errors

Returns None if the bytes are malformed.

pub fn display_string(&self) -> String

Human-readable summary of this predicate.

Trait Implementations

impl Clone for CaveatPredicate

fn clone(&self) -> CaveatPredicate

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for CaveatPredicate

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Display for CaveatPredicate

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl PartialEq for CaveatPredicate

fn eq(&self, other: &CaveatPredicate) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Eq for CaveatPredicate

impl StructuralPartialEq for CaveatPredicate