Struct AgentTreeView 

pub struct AgentTreeView {
    pub agent_id: String,
    pub pid: Pid,
    pub scope: TreeScope,
}

A filtered view of the resource tree scoped to an agent’s capabilities.

All path operations pass through the view’s authorization filter. Unauthorized access returns KernelError::CapabilityDenied.

Fields

agent_id: String

Agent identifier.

pid: Pid

Agent’s PID.

scope: TreeScope

Tree scope defining allowed paths.

Implementations

impl AgentTreeView

pub fn new(agent_id: String, pid: Pid, scope: TreeScope) -> Self

Create a new tree view for an agent.

pub fn full_access(agent_id: String, pid: Pid) -> Self

Create a full-access tree view.

pub fn restricted(agent_id: String, pid: Pid) -> Self

Create a restricted tree view for an agent.

pub fn namespace_scoped( agent_id: String, pid: Pid, namespaces: Vec<String>, ) -> Self

Create a namespace-scoped tree view.

pub fn can_read(&self, path: &str) -> bool

Check whether a path is authorized for reading.

pub fn can_write(&self, path: &str) -> bool

Check whether a path is authorized for writing.

pub fn assert_read(&self, path: &str) -> Result<(), KernelError>

Assert read access or return a permission error.

pub fn assert_write(&self, path: &str) -> Result<(), KernelError>

Assert write access or return a permission error.