Struct AgentCapabilities 

pub struct AgentCapabilities {
    pub can_spawn: bool,
    pub can_ipc: bool,
    pub can_exec_tools: bool,
    pub can_network: bool,
    pub ipc_scope: IpcScope,
    pub resource_limits: ResourceLimits,
}

Capabilities assigned to an agent process.

Governs what the agent is allowed to do within the kernel.

Fields

can_spawn: bool

Whether the agent can spawn child processes.

can_ipc: bool

Whether the agent can send/receive IPC messages.

can_exec_tools: bool

Whether the agent can execute tools.

can_network: bool

Whether the agent can make network requests.

ipc_scope: IpcScope

IPC scope restriction.

resource_limits: ResourceLimits

Resource limits for this agent.

Implementations

impl AgentCapabilities

pub fn root() -> Self

Root capabilities: everything allowed.

impl AgentCapabilities

pub fn browser_default() -> Self

Create capabilities for a browser-platform agent.

Browser agents default to restricted IPC scope (empty allow-list), no spawning, no network access, and no shell — maximising the sandbox surface for untrusted in-browser code.

pub fn can_message(&self, target_pid: u64) -> bool

Check whether the agent is allowed to send a message to the given PID.

pub fn can_topic(&self, topic: &str) -> bool

Check whether the agent is allowed to publish/subscribe to a topic.

pub fn within_limits( &self, memory: u64, cpu: u64, tools: u64, msgs: u64, ) -> bool

Check whether the resource usage is within limits.

impl AgentCapabilities

pub fn request_elevation( current: &AgentCapabilities, requested: &AgentCapabilities, platform: &str, ) -> CapabilityElevationRequest

Build an elevation request from current to requested capabilities. The pid field is set to 0 and must be filled by the caller.

pub fn needs_elevation(platform: &str, requested: &AgentCapabilities) -> bool

Check if elevation is needed (browser agents start restricted).

Returns true if the platform is "browser" and the requested capabilities exceed the browser sandbox defaults (spawn, network, or non-restricted IPC scope).

Trait Implementations

impl Clone for AgentCapabilities

fn clone(&self) -> AgentCapabilities

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for AgentCapabilities

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for AgentCapabilities

fn default() -> Self

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for AgentCapabilities

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl PartialEq for AgentCapabilities

fn eq(&self, other: &AgentCapabilities) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for AgentCapabilities

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl Eq for AgentCapabilities

impl StructuralPartialEq for AgentCapabilities