Module acl 

Functions

allowed_keys_from_flags

Resolve the two mutually-exclusive allowed-keys flags into the wire value.

approve_scope_from_flags

Resolve the three mutually-exclusive approve flags into the wire value.

cmd_acl_change_role

pnm acl change-role — transition a subject’s role with a compare-and-swap on the role they currently hold.

cmd_acl_create

cmd_acl_delete

cmd_acl_get

cmd_acl_list

cmd_acl_update

describe_filter

The question a --context + --direction pair actually asked, in words.

format_allowed_keys

Human-readable signing-key filter (#818). None (no filter) omits the line entirely; the empty filter is the state that must never be misrendered — “no keys” and “no filter” are opposite grants, so the empty set is spelled out rather than shown as a blank list.

format_approve_scope

Human-readable approve-authority — what this entry may confer via an approval (task-consent delegation / step-up ratification) while acting nowhere. None when it confers nothing, so callers omit the line entirely.

format_contexts

Human-readable context list — role-aware, because an empty allowed_contexts means opposite things depending on the role.

format_role

parse_direction

Parse the operator’s --direction value, defaulting to the historical “who may act in this context” reading and refusing anything else with the valid set — the same table the wire uses, so flag and payload cannot drift.

validate_role