pub struct FleetEffectivePermissions {
pub write: bool,
pub network: bool,
pub shell: String,
pub tool_scope: String,
pub tools: Vec<String>,
pub background: bool,
pub max_spawn_depth: u32,
pub profile_id: Option<String>,
pub profile_origin: Option<String>,
pub source: String,
}Expand description
Effective worker authority persisted on a FleetReceipt (#3211).
This is a non-secret snapshot of the already-computed runtime profile. It records what the worker was allowed to do; it does not grant permissions and does not carry credentials, sandbox paths, or provider endpoints.
Fields§
§write: boolWhether the worker profile may modify workspace files.
network: boolWhether the worker profile may use network-capable tools.
shell: StringShell posture (none, read_only, or full).
tool_scope: StringTool-surface posture (inherit or explicit).
tools: Vec<String>Explicit tool names when tool_scope is explicit.
background: boolWhether the worker is intended to run detached/background.
max_spawn_depth: u32Remaining nested-delegation budget after parent intersection/hardening.
profile_id: Option<String>Roster profile id that contributed to this worker, when any.
profile_origin: Option<String>Roster layer for profile_id (built_in, config, or workspace).
source: StringHow this snapshot was produced (e.g. "worker_runtime_profile").
Trait Implementations§
Source§impl Clone for FleetEffectivePermissions
impl Clone for FleetEffectivePermissions
Source§fn clone(&self) -> FleetEffectivePermissions
fn clone(&self) -> FleetEffectivePermissions
1.0.0 (const: unstable) · Source§fn clone_from(&mut self, source: &Self)
fn clone_from(&mut self, source: &Self)
source. Read more