Struct CapabilitySet 

pub struct CapabilitySet { /* private fields */ }

A set of capabilities — declared by manifest, granted by loader.

The effective capability set is the intersection of declared and granted. Registrations attempted without the corresponding capability in the effective set fail with crate::PluginError::CapabilityRequired.

Implementations

impl CapabilitySet

pub fn new() -> Self

Construct an empty capability set.

pub fn from_iter_of(caps: impl IntoIterator<Item = Capability>) -> Self

Construct a capability set from an iterable.

pub fn from_manifest(caps: impl IntoIterator<Item = ManifestCapability>) -> Self

Construct a capability set from guest-manifest declarations, each of which may be a bare name or a structured ManifestCapability.

pub fn insert(&mut self, cap: Capability) -> bool

Insert a capability; returns true if the capability was not already present.

pub fn contains(&self, cap: &Capability) -> bool

Check whether the set contains the given capability (exact equality).

pub fn contains_variant(&self, target: &Capability) -> bool

Check whether the set contains a registration-gating capability.

Match is on the variant — contains_variant(Capability::ScalarFn) returns true regardless of any associated data on other variants. Useful for registrar gates like “any BackgroundJob { max_concurrent } is sufficient regardless of the cap.”

pub fn intersect(&self, other: &Self) -> Self

Intersect this set with another, returning a new set.

The intersection is the effective capability set when manifest declarations are intersected with host grants. Caps that match by variant but differ in attenuation (e.g., two different Network { allow } patterns) are both retained — the runtime check enforces each individually.

pub fn iter(&self) -> impl Iterator<Item = &Capability>

Returns an iterator over the contained capabilities.

pub fn len(&self) -> usize

Returns the number of distinct capabilities in the set.

pub fn is_empty(&self) -> bool

Returns true if the set is empty.

Trait Implementations

impl Clone for CapabilitySet

fn clone(&self) -> CapabilitySet

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for CapabilitySet

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for CapabilitySet

fn default() -> CapabilitySet

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for CapabilitySet

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Eq for CapabilitySet

impl PartialEq for CapabilitySet

fn eq(&self, other: &CapabilitySet) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for CapabilitySet

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for CapabilitySet