Struct AddonCapabilities 

pub struct AddonCapabilities {
    pub network: NetworkAccess,
    pub filesystem: FilesystemAccess,
    pub env: Vec<String>,
    pub exec: ExecAccess,
}

[capabilities] — what an addon is permitted to do. A present-but-empty block resolves to the strictest profile (see module docs). Secure-by-default.

Fields

network: NetworkAccess

Outbound network access.

filesystem: FilesystemAccess

Filesystem access.

env: Vec<String>

Host environment variable names the addon may receive, in addition to BASE_ENV_ALLOWLIST. Anything not listed is scrubbed before spawn, so ambient secrets never reach the child process.

exec: ExecAccess

Subprocess-execution permission. Defaults to ExecMode::None inside a declared block (secure-by-default): an addon that spawns child processes (e.g. shells out, or calls back into lean-ctx call) must declare it.

Implementations

impl AddonCapabilities

pub fn is_minimal(&self) -> bool

True when the addon declares no elevated capability — the strictest, default profile and the safest to run.

pub fn exec_allowed(&self) -> bool

Whether the addon may execute child processes at all.

pub fn exec_restricted(&self) -> bool

Whether the addon declares a restricted exec profile (none or an allowlist, vs. blanket full). Used by the audit + consent surface; exec is not OS-enforced (see super::sandbox).

pub fn exec_is_blanket(&self) -> bool

Whether exec is a blanket full grant (vs. an allowlist or none). Used by the audit to nudge blanket grants toward least privilege.

pub fn network_allowed(&self) -> bool

Whether the OS sandbox should permit outbound network for this addon.

pub fn filesystem_writable(&self) -> bool

Whether the OS sandbox should permit filesystem writes for this addon.

pub fn validate(&self) -> Result<(), String>

Validate the declaration (fail-closed: a malformed declaration is a manifest error, not a silent grant). Env names must be plausible [A-Za-z0-9_] identifiers.

pub fn summary(&self) -> Vec<String>

Human-readable lines for the install-consent preview. Always returns the three dimensions so the user sees exactly what they are granting.

Trait Implementations

impl Clone for AddonCapabilities

fn clone(&self) -> AddonCapabilities

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for AddonCapabilities

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for AddonCapabilities

fn default() -> AddonCapabilities

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for AddonCapabilities

where AddonCapabilities: Default,

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Eq for AddonCapabilities

impl PartialEq for AddonCapabilities

fn eq(&self, other: &AddonCapabilities) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl Serialize for AddonCapabilities

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for AddonCapabilities