Struct Capabilities 

pub struct Capabilities {
    pub network: bool,
    pub network_allow: Vec<String>,
    pub storage: bool,
    pub env: bool,
    pub sober: bool,
    pub memory_mb: u32,
    pub max_instructions: u64,
    pub http_timeout_secs: u64,
}

What the plugin is allowed to touch at runtime.

Defaults are permissive on purpose for back-compat. Future major versions will flip this to deny-by-default; the migration path is “add a capabilities block to your manifest”.

Fields

network: bool

May the plugin make outbound HTTP requests via the injected http table?

network_allow: Vec<String>

If set, restricts http to these hosts (suffix match — api.slack.com allows api.slack.com and *.api.slack.com). Empty = any host.

storage: bool

May the plugin read/write its private storage via the storage table?

env: bool

May the plugin read environment variables via os.getenv?

sober: bool

May the plugin call the host-provided Sober governance bridge?

memory_mb: u32

Maximum heap memory the plugin VM can allocate, in megabytes.

max_instructions: u64

Maximum Lua instructions a single hook call may execute.

http_timeout_secs: u64

HTTP request timeout in seconds.

Implementations

impl Capabilities

pub fn legacy_default() -> Self

Permissive defaults for legacy plugins that ship without a capability block. Network is off by default — plugins must opt in to the network surface.

pub fn host_allowed(&self, host: &str) -> bool

Is host allowed by the network_allow list? An empty list means any host. Suffix match: api.slack.com in the list permits api.slack.com and hooks.api.slack.com.

Trait Implementations

impl Clone for Capabilities

fn clone(&self) -> Capabilities

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for Capabilities

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for Capabilities

fn default() -> Capabilities

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for Capabilities

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for Capabilities

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.