Enum CapabilityScope 

pub enum CapabilityScope {
    Http {
        allowed_hosts: Vec<String>,
        identity: EgressIdentity,
    },
    Grpc {
        allowed_methods: Vec<String>,
        identity: EgressIdentity,
    },
    Complete {
        allowed_models: Vec<String>,
    },
    Mcp {
        allowed_tools: Vec<String>,
    },
    Database {
        allowed_queries: Vec<String>,
    },
    Secrets {
        allowed_secrets: Vec<String>,
    },
}

Per-capability-kind scope, carried on a crate::CapabilityGrant.

Each variant’s allowlist is the deny-by-default boundary a real ComponentValidator implementor enforces (ADR-001): a capability call naming a target outside its own allowlist is rejected, checked again on every call, not just once at grant-registration time.

["*"] is a real, explicit opt-in to “unrestricted” for Http/Grpc/ Complete/Mcp only. Database/Secrets never accept a wildcard, under any circumstance — every entry in allowed_queries/ allowed_secrets must individually name one specific, deployer- pre-registered query or secret. This is a permanent security boundary of the design (no raw-SQL capability is ever offered to a guest, and no blanket secret-store access), not a v1 limitation a future grant format might relax.

Variants

Http

Scopes http-egress: the hostnames this grant may reach, and which identity mechanism to present.

Fields

allowed_hosts: Vec<String>

Hostnames this grant may reach. ["*"] opts into unrestricted.

identity: EgressIdentity

Which identity mechanism the call presents to allowed_hosts.

Grpc

Scopes grpc-egress: the fully-qualified "pkg.Service/Method" names this grant may invoke, and which identity mechanism to present.

Fields

allowed_methods: Vec<String>

Methods this grant may invoke. ["*"] opts into unrestricted.

identity: EgressIdentity

Which identity mechanism the call presents to the bound target.

Complete

Scopes llm-complete: the model ids this grant may call.

Fields

allowed_models: Vec<String>

Model ids this grant may call. ["*"] opts into unrestricted.

Mcp

Scopes mcp-egress: the remote tool names this grant may call.

Fields

allowed_tools: Vec<String>

Tool names this grant may call. ["*"] opts into unrestricted.

Database

Scopes database: the deployer-pre-registered, parameterized query names this grant may invoke. Never accepts a wildcard — see this type’s own doc comment.

Fields

allowed_queries: Vec<String>

Named queries this grant may invoke. No wildcard, ever.

Secrets

Scopes secrets: the individually-named secrets this grant may read. Never accepts a wildcard — see this type’s own doc comment.

Fields

allowed_secrets: Vec<String>

Secret names this grant may read. No wildcard, ever.

Trait Implementations

impl Clone for CapabilityScope

fn clone(&self) -> CapabilityScope

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for CapabilityScope

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for CapabilityScope

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Eq for CapabilityScope

impl PartialEq for CapabilityScope

fn eq(&self, other: &CapabilityScope) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl Serialize for CapabilityScope

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for CapabilityScope