Struct CapabilityScopesConfig 

pub struct CapabilityScopesConfig {
    pub default_scope: String,
    pub strict: bool,
    pub pattern_strictness: PatternStrictness,
    pub scopes: HashMap<String, ScopeConfig>,
}

Top-level capability scopes configuration, nested under [security.capability_scopes].

Example (TOML)

[security.capability_scopes]
default_scope = "general"
strict = true

[security.capability_scopes.general]
patterns = ["*"]

[security.capability_scopes.research]
patterns = ["builtin:fetch", "builtin:web_scrape", "builtin:search_*", "builtin:read"]

[security.capability_scopes.code_edit]
patterns = ["builtin:read", "builtin:edit", "builtin:write", "builtin:shell", "builtin:glob"]

Fields

default_scope: String

Name of the scope used when no task type is specified. Default: "general".

When default_scope = "general" and a [security.capability_scopes.general] section with patterns = ["*"] exists, scoping is a no-op identity (full tool set surfaced).

strict: bool

When true, an unrecognised task_type is a fatal startup error. When false, falls back to default_scope. Default: false.

pattern_strictness: PatternStrictness

Per-namespace strictness for zero-match glob patterns.

scopes: HashMap<String, ScopeConfig>

Named scopes. Keys are task-type names; values are their scope configurations.

Trait Implementations

impl Clone for CapabilityScopesConfig

fn clone(&self) -> CapabilityScopesConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for CapabilityScopesConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for CapabilityScopesConfig

fn default() -> CapabilityScopesConfig

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for CapabilityScopesConfig

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for CapabilityScopesConfig

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.