Struct AgentSessionScope 

pub struct AgentSessionScope {
    pub namespace_id: String,
    pub owner_id: Option<String>,
    pub source_product: String,
    pub source_session_id: Option<SessionId>,
    pub source_run_id: Option<RunId>,
    pub operations: BTreeSet<AgentSessionOperation>,
    pub allowed_session_ids: BTreeSet<SessionId>,
    pub allow_self_query: bool,
    pub allow_self_control: bool,
    pub policy_fingerprint: String,
    pub deadline: Option<DateTime<Utc>>,
    pub max_page_size: u32,
}

Host-derived authority supplied separately from model arguments.

Fields

namespace_id: String

Authorized namespace.

owner_id: Option<String>

Principal/owner represented by this capability.

source_product: String

Product that constructed the scope.

source_session_id: Option<SessionId>

Controlling session, used for self-target denial.

source_run_id: Option<RunId>

Controlling run, used for self-target denial.

operations: BTreeSet<AgentSessionOperation>

Effective operation intersection. Model input cannot alter this set.

allowed_session_ids: BTreeSet<SessionId>

Optional allowlist; empty means the host’s namespace/owner policy decides.

allow_self_query: bool

Whether the current session may be queried.

allow_self_control: bool

Whether the current run/session may be controlled. Hosts should normally leave false.

policy_fingerprint: String

Stable fingerprint of the intersected server/profile/caller/grant policy.

deadline: Option<DateTime<Utc>>

Absolute deadline for commands made through this capability.

max_page_size: u32

Maximum page size after host policy intersection.

Implementations

impl AgentSessionScope

pub fn allows(&self, operation: AgentSessionOperation) -> bool

Return whether an operation is in the effective grant.

pub fn allows_session(&self, session_id: &SessionId) -> bool

Return whether a session id is inside the host allowlist.

pub fn is_self_run(&self, target: &ManagedRunTarget) -> bool

Return whether a run target is the controlling run.

pub fn is_self_session(&self, target: &ManagedSessionTarget) -> bool

Return whether a session target is the controlling session.

Trait Implementations

impl Clone for AgentSessionScope

fn clone(&self) -> AgentSessionScope

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for AgentSessionScope

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for AgentSessionScope

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Eq for AgentSessionScope

impl PartialEq for AgentSessionScope

fn eq(&self, other: &AgentSessionScope) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl Serialize for AgentSessionScope

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for AgentSessionScope