Enum Capability 

pub enum Capability {
    ReadSubject,
    ReadRoles,
    ReadTeams,
    ReadClaims,
    ReadPermissions,
    ReadClient,
    ReadWorkload,
    ReadAgent,
    ReadHeaders,
    WriteHeaders,
    ReadLabels,
    AppendLabels,
    ReadDelegation,
    AppendDelegation,
    ReadInboundCredentials,
    ReadDelegatedTokens,
}

Declared permission that controls extension access.

Why no Write* for identity slots

The IdentityResolve and TokenDelegate hook families return result payloads that the framework consumes to mutate Extensions. Plugins never write to security.subject / security.client / security.*_workload / raw_credentials.* directly — those slots are owned by the framework on behalf of return-based handlers. The matching write capabilities are therefore absent from this enum until a use case appears for plugin-driven mutation of these slots outside the resolve/delegate hooks.

Variants

ReadSubject

Read the authenticated subject identity (security.subject). Unlocks the slot but not its sub-fields — roles / teams / claims / permissions each have their own cap below.

ReadRoles

Read subject roles (security.subject.roles).

ReadTeams

Read subject team memberships (security.subject.teams).

ReadClaims

Read subject claims (security.subject.claims).

ReadPermissions

Read subject permissions (security.subject.permissions).

ReadClient

Read the OAuth client / gateway-access identity (security.client). Distinct from the user identity (subject) — a single user can connect through different clients (first-party browser, third-party agent) and policies sometimes want to gate on the client.

ReadWorkload

Read either workload-identity slot — both security.caller_workload (the inbound attested peer) and security.this_workload (our own outbound identity). One capability covers both: a plugin either has access to attested-workload identity or it doesn’t. Distinct from read_agent which governs session / conversation context, NOT identity.

ReadAgent

Read the agent execution context (AgentExtension). NOT a credential — this carries session / conversation / lineage state, not identity. Identity reads use read_subject / read_client / read_workload.

ReadHeaders

Read HTTP headers.

WriteHeaders

Write (modify) HTTP headers.

ReadLabels

Read security labels.

AppendLabels

Append security labels (monotonic add-only).

ReadDelegation

Read the delegation chain.

AppendDelegation

Append to the delegation chain (monotonic).

ReadInboundCredentials

Read raw inbound tokens (raw_credentials.inbound_tokens) — the bearer-token strings captured at the wire layer before validation. Narrowly scoped: only IdentityResolve handlers, forwarding plugins, and a small set of audit plugins should declare it. Out-of-process plugins can’t see these tokens regardless of capability — token fields are #[serde(skip)].

ReadDelegatedTokens

Read minted outbound delegated tokens (raw_credentials.delegated_tokens) — the credentials a TokenDelegate handler produced for an upstream call. Held by forwarding / proxy plugins that re-attach them on the outbound request. Same out-of-process caveat as read_inbound_credentials.

Trait Implementations

impl Clone for Capability

fn clone(&self) -> Capability

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Copy for Capability

impl Debug for Capability

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for Capability

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Eq for Capability

impl Hash for Capability

fn hash<__H: Hasher>(&self, state: &mut __H)

Feeds this value into the given Hasher.

fn hash_slice<H>(data: &[Self], state: &mut H)

where H: Hasher, Self: Sized,

Feeds a slice of this type into the given Hasher.

impl PartialEq for Capability

fn eq(&self, other: &Capability) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl Serialize for Capability

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for Capability