Enum Scope 

#[non_exhaustive]
pub enum Scope {
    ArchRead,
    ArchWrite,
    BoardRead,
    BoardWrite,
    CampRead,
    CampAdmin,
    CloudRead,
    CloudDeploy,
    CloudDestroy,
    CloudAdmin,
    PartyRead,
    PartyWrite,
    SubagentSpawn,
    SubagentControl,
    OwnershipWrite,
    AuditRead,
    AuditWrite,
}

The closed set of MCP scopes — verbatim with W159 §Scope vocabulary.

Each variant maps to one literal wire string via Scope::as_wire. <category>:admin is distinct from <category>:read/<category>:write: granting camp:admin does NOT imply camp:read (composition rule (3)).

Variants (Non-exhaustive)

Non-exhaustive enums could have additional variants added in future. Therefore, when matching against variants of non-exhaustive enums, an extra wildcard arm must be added to account for any future variants.

ArchRead

ArchWrite

BoardRead

BoardWrite

CampRead

CampAdmin

CloudRead

CloudDeploy

CloudDestroy

CloudAdmin

Fleet-operator admin — sees every machine/workload in the cloud snapshot (the yah-cloud-admin dashboard’s gate; R568-F5). Distinct from CloudRead (which is the tenant-facing read scope, filtered by principal ownership).

PartyRead

PartyWrite

SubagentSpawn

SubagentControl

OwnershipWrite

Service-principals only — see validate_grant.

AuditRead

AuditWrite

Service-principals only — see validate_grant.

Implementations

impl Scope

pub const ALL: &'static [Scope]

Every variant in the closed scope vocabulary.

cheers-axum’s OIDC discovery endpoint reads scopes_supported straight from this constant so the discovery doc cannot drift from what the mint path accepts. The companion scope_all_is_exhaustive test below uses an exhaustive intra-crate match against Scope (which is #[non_exhaustive] for external users but fully matchable here) — adding a variant without listing it in ALL either fails to compile (missing match arm) or fails the per-arm assertion.

pub const fn as_wire(self) -> &'static str

The literal wire string (e.g. "cloud:deploy").

pub const fn is_service_only(self) -> bool

true iff this scope is grantable only to a PrincipalKind::Service principal — composition rule (4).

Trait Implementations

impl Clone for Scope

fn clone(&self) -> Scope

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Copy for Scope

impl Debug for Scope

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for Scope

fn deserialize<D: Deserializer<'de>>(de: D) -> Result<Self, D::Error>

Deserialize this value from the given Serde deserializer.

impl Display for Scope

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Eq for Scope

impl FromStr for Scope

type Err = ScopeParseError

The associated error which can be returned from parsing.

fn from_str(s: &str) -> Result<Self, Self::Err>

Parses a string s to return a value of this type.

impl Hash for Scope

fn hash<__H: Hasher>(&self, state: &mut __H)

Feeds this value into the given Hasher.

fn hash_slice<H>(data: &[Self], state: &mut H)

where H: Hasher, Self: Sized,

Feeds a slice of this type into the given Hasher.

impl PartialEq for Scope

fn eq(&self, other: &Scope) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl Serialize for Scope

fn serialize<S: Serializer>(&self, ser: S) -> Result<S::Ok, S::Error>

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for Scope