Struct CapabilitySet 

pub struct CapabilitySet(/* private fields */);

A set of Capabilitys. Small, Copy, and closed under the usual set algebra — the decision engine works only through these operations.

Implementations

impl CapabilitySet

pub const EMPTY: Self

The empty set.

pub const fn all() -> Self

The full privileged set — every member of the taxonomy. This is the fail-closed requirement for an unclassifiable tool.

pub const fn of(capability: Capability) -> Self

The set containing exactly capability.

pub const fn with(self, capability: Capability) -> Self

This set plus capability.

pub const fn contains(self, capability: Capability) -> bool

Whether capability is in this set.

pub const fn is_empty(self) -> bool

Whether this set has no members.

pub const fn is_subset_of(self, other: Self) -> bool

Whether every member of this set is also in other.

pub const fn union(self, other: Self) -> Self

Set union.

pub const fn intersection(self, other: Self) -> Self

Set intersection.

pub const fn difference(self, other: Self) -> Self

Set difference: the members of this set that are not in other.

pub fn iter(self) -> impl Iterator<Item = Capability>

The members of this set, in Capability::ALL order.

pub fn from_names<'a, I: IntoIterator<Item = &'a str>>( names: I, ) -> (Self, Vec<String>)

Build a set from stable kebab-case names (e.g. an Agent custom resource’s taint-resilient list or the harness wire). Unrecognized names are NOT granted — they are returned separately so the caller can log them — which is the fail-closed direction: a typo in operator config grants nothing rather than something unintended.

pub fn names(self) -> Vec<&'static str>

The stable kebab-case names of this set’s members, in Capability::ALL order — the inverse of Self::from_names.

Trait Implementations

impl Clone for CapabilitySet

fn clone(&self) -> CapabilitySet

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Copy for CapabilitySet

impl Debug for CapabilitySet

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for CapabilitySet

fn default() -> CapabilitySet

Returns the “default value” for a type.

impl Eq for CapabilitySet

impl FromIterator<Capability> for CapabilitySet

fn from_iter<I: IntoIterator<Item = Capability>>(iter: I) -> Self

Creates a value from an iterator.

impl Hash for CapabilitySet

fn hash<__H: Hasher>(&self, state: &mut __H)

Feeds this value into the given Hasher.

fn hash_slice<H>(data: &[Self], state: &mut H)

where H: Hasher, Self: Sized,

Feeds a slice of this type into the given Hasher.

impl PartialEq for CapabilitySet

fn eq(&self, other: &CapabilitySet) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl StructuralPartialEq for CapabilitySet