Enum Capability 

pub enum Capability {
    FileRead(String),
    FileWrite(String),
    ShellExec(String),
    Network(String),
    Memory,
    KnowledgeGraph,
    BrowserControl,
    AgentSpawn,
    AgentMessage,
    Schedule,
    EventPublish,
    SourceControl,
    Container,
    DataManipulation,
    CodeAnalysis,
    Archive,
    Template,
    Crypto,
    PluginInvoke,
    A2ADelegate,
    McpAccess(String),
    ChannelNotify,
    SelfConfig,
    SystemAutomation,
    UiAutomation(String),
    AppIntegration(String),
}

A capability that can be granted to a Fighter or Gorilla.

Capabilities follow a least-privilege model: agents only receive the permissions they need, scoped to specific patterns where applicable.

Variants

FileRead(String)

Read files matching the given glob pattern.

FileWrite(String)

Write files matching the given glob pattern.

ShellExec(String)

Run shell commands matching the given pattern.

Network(String)

Make network requests to the given host/pattern.

Memory

Access the memory subsystem.

KnowledgeGraph

Access the knowledge graph.

BrowserControl

Control a browser instance.

AgentSpawn

Spawn new agents.

AgentMessage

Send messages to other agents.

Schedule

Create and manage scheduled tasks.

EventPublish

Publish events to the event bus.

SourceControl

Source control operations (git).

Container

Container operations (docker).

DataManipulation

Data manipulation (JSON, YAML, regex).

CodeAnalysis

Code analysis (search, symbols).

Archive

Archive operations (create, extract, list tar.gz).

Template

Template rendering operations.

Crypto

Cryptographic hash operations.

PluginInvoke

Invoke loaded WASM plugins (imported techniques).

A2ADelegate

Delegate tasks to remote A2A agents.

McpAccess(String)

Access MCP servers matching the given name pattern (e.g., “*” for all, “github” for specific).

ChannelNotify

Send proactive notifications to connected channels (Telegram, Slack, Discord, etc.).

SelfConfig

Self-configuration: modify own creed, heartbeats, and install skill packs.

SystemAutomation

System-level automation: screenshots, screen recording permission required.

UiAutomation(String)

UI automation scoped to a specific app (accessibility tree interaction). Use “*” to grant access to all apps.

AppIntegration(String)

Deep app integration scoped to a specific app (OCR, app-specific APIs). Use “*” to grant access to all apps.

Implementations

impl Capability

pub fn full_access() -> Vec<Capability>

Returns a full-access capability set with wildcard scopes.

This is the default for user-facing fighters — they should be able to use any tool the LLM decides is appropriate. Restrict capabilities only when deploying sandboxed or multi-tenant agents.

Trait Implementations

impl Clone for Capability

fn clone(&self) -> Capability

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for Capability

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for Capability

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Display for Capability

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Hash for Capability

fn hash<__H: Hasher>(&self, state: &mut __H)

Feeds this value into the given Hasher.

fn hash_slice<H>(data: &[Self], state: &mut H)

where H: Hasher, Self: Sized,

Feeds a slice of this type into the given Hasher.

impl PartialEq for Capability

fn eq(&self, other: &Capability) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for Capability

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl Eq for Capability

impl StructuralPartialEq for Capability