Struct CapabilitySet 

pub struct CapabilitySet { /* private fields */ }

Set of capabilities currently granted to a connection. Deterministically ordered (BTreeSet) so granted() returns a stable sequence — important for wire-level reproducibility and test assertions.

SP-observability-completeness-v1 Axis C: carries optional per-capability provenance alongside the granted set. The granted set is the result; provenance records the source of each grant (operator allow-list vs a UCAN chain link). Provenance is best-effort metadata for the audit sink — it never affects gating (which reads contains / granted only).

Implementations

impl CapabilitySet

pub fn empty() -> Self

pub fn with_provenance<I>(granted: I, provenance: Vec<CapProvenance>) -> Self

where I: IntoIterator<Item = String>,

Construct a set from a granted iterable plus its provenance records. Used at Hello time so the audit sink can attribute each capability.

pub fn contains(&self, cap: &str) -> bool

pub fn granted(&self) -> Vec<String>

Sorted, deterministic view of the granted set.

pub fn provenance(&self) -> &[CapProvenance]

Per-capability source attribution (SP-observability-completeness-v1 Axis C). Empty when provenance wasn’t recorded. A capability granted by both the string allow-list and a UCAN chain appears twice (once per source) — that’s the honest record.

pub fn intersect(&self, requested: &[String]) -> (Vec<String>, Vec<String>)

Intersect requested with the server’s allow-list. Returns (granted_subset, denied_subset), each deterministically ordered. Used during the Hello handshake to decide what to echo back.

pub fn union(&self, other: &Self) -> Self

Union two capability sets. Used by SP-capability-v2 dispatch to combine SP-12 string-allow-list results with UCAN-derived caps (spec §4.2: granted = granted_strings ∪ granted_ucan). Returns a new set; neither input is mutated.

Trait Implementations

impl Clone for CapabilitySet

fn clone(&self) -> CapabilitySet

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for CapabilitySet

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for CapabilitySet

fn default() -> CapabilitySet

Returns the “default value” for a type.

impl FromIterator<String> for CapabilitySet

fn from_iter<I: IntoIterator<Item = String>>(iter: I) -> Self

Creates a value from an iterator.