pub const KNOWN_CAPABILITIES: &[&str];Expand description
Capability strings the router currently maps routes onto.
Vocabulary, not mechanism — additive by design (see the module header).
fs.read and fs.write are deliberately absent from the operator and
read-only presets: adding them there would hand file access to tokens
already issued, which is a privilege change nobody asked for. An existing
operator or read-only token must name them explicitly, e.g.
--capabilities fs.read,fs.write. full-control’s CapabilitySet::wildcard
already covers both, as it does every capability — there is no way to keep
a full-control token from gaining file access once --fs-root is set.