Module host_managed 

Closed classification of host-managed capability nodes and the shared redaction helpers that observability surfaces consult.

Capability values such as SchemaValue::Secret and SchemaValue::QuotaToken carry material owned by the host authority, not the guest. Every human-facing surface (CLI display, agent-id rendering, error rendering, tracing) must redact them, and the placement rules must police where they may appear. Rather than each of those consumers re-matching the capability cases, they classify a node through HostManagedKind and obtain a stable kind name / redacted placeholder from one place. Adding a future capability case means adding one variant here; the consumers pick it up automatically.

Structs

HostManagedOccurrence

The first host-managed capability reached while traversing a schema type or value tree.

RedactedSchemaValue

Wraps a SchemaValue so its Debug output redacts every host-managed capability node (see HostManagedKind).

Enums

HostManagedKind

A closed set of “host-managed” capability kinds.

HostManagedTraversalError

Functions

find_host_managed_type

Finds the first host-managed capability type reachable from ty through graph. Only definitions reachable from ty are considered. Recursive references are followed once per active path, so recursive schemas terminate without suppressing occurrences reached through sibling paths.

find_host_managed_value

Finds the first host-managed capability in value, including nested occurrences in every structural container.

redact_host_managed_type

Replace every host-managed capability type (see HostManagedKind) with a plain string type, recursing through every container and named definition.

redact_host_managed_typed_value

Produce a redacted copy of a [TypedSchemaValue] in which every host-managed capability node — in both the schema graph and the value tree — becomes a plain string. See redact_host_managed_value / redact_host_managed_type.

redact_host_managed_value

Replace every host-managed capability value (see HostManagedKind) with a plain string placeholder, recursing through every container.

redacted_schema_value_debug

Wraps value for redacted Debug rendering. See RedactedSchemaValue.