Struct CapToken 

pub struct CapToken {
    pub agent_id: String,
    pub role: Role,
    pub scopes: Vec<String>,
    pub issued_at: u64,
    pub expire_at: u64,
    pub max_uses: Option<u32>,
    pub nonce: String,
    pub sig_hex: String,
}

Capability token. max_uses picks between OneTime / Session / Limited.

The uses_left counter is server-side, on EngineState: the token stays immutable, and the record holds the counter.

Fields

agent_id: String

Identifier of the agent this token was minted for.

role: Role

The Role the bearer is authorized to act as.

scopes: Vec<String>

Free-form scope strings (interpretation is caller-defined; "*" conventionally means unrestricted).

issued_at: u64

Unix timestamp (seconds) when the token was minted.

expire_at: u64

Unix timestamp (seconds) after which the token is expired.

max_uses: Option<u32>

Remaining-use budget: None = unlimited (session token), Some(n) = at most n uses (one-time when n == 1).

nonce: String

Random per-mint value; also serves as the token’s server-side lookup key (see CapToken::id).

sig_hex: String

Hex-encoded HMAC-SHA256 signature over CapToken::signing_input.

Implementations

impl CapToken

pub fn id(&self) -> &str

Use the nonce as the token identifier — the server-side record key.

pub fn signing_input(&self) -> Vec<u8>

Input for the HMAC signature — the concatenation of every field except sig itself.

pub fn is_expired(&self, now_unix: u64) -> bool

Whether now_unix is at or past CapToken::expire_at.

pub fn encode(&self) -> String

Transport-safe string encoding — URL-safe base64 of the serde_json representation. Used when SubAgents put the token on the HTTP path via Authorization: Bearer <encode()>. The HMAC signature covers every field, so the server verifies with verify_sig after decoding.

pub fn decode(s: &str) -> Result<Self, CapTokenDecodeError>

The inverse of encode(): base64 decode followed by JSON parse. Either failure returns CapTokenDecodeError — this is the input-validation step when the server receives a Bearer token.

Trait Implementations

impl Clone for CapToken

fn clone(&self) -> CapToken

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for CapToken

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for CapToken

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Eq for CapToken

impl PartialEq for CapToken

fn eq(&self, other: &CapToken) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for CapToken

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for CapToken