Struct FleetCapabilityGrant 

pub struct FleetCapabilityGrant {
    pub capability: String,
    pub scope: Option<String>,
    pub reason: Option<String>,
}

A capability grant that explicitly authorizes a worker to perform a specific class of action.

By default, new workers get no grants (least privilege). Grants are additive: a worker’s effective capabilities are the union of its trust-level defaults plus any explicit grants.

Fields

capability: String

The capability being granted (e.g. "network", "git-push", "provider-secrets", "release").

scope: Option<String>

Optional scope limiting the grant (e.g. "github.com" for network, "crates/tui/**" for file writes).

reason: Option<String>

Optional justification for the grant (audit trail).

Trait Implementations

impl Clone for FleetCapabilityGrant

fn clone(&self) -> FleetCapabilityGrant

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for FleetCapabilityGrant

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for FleetCapabilityGrant

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Eq for FleetCapabilityGrant

impl PartialEq for FleetCapabilityGrant

fn eq(&self, other: &FleetCapabilityGrant) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for FleetCapabilityGrant

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for FleetCapabilityGrant