Struct ShellCapability 

pub struct ShellCapability {
    pub args: Vec<String>,
    pub require_approval: ShellApproval,
    pub class_key: Option<String>,
}

One entry in [shell.capabilities] — a command and its argument names.

A capability may carry its own act-gate (M11, REQ-CONSENT-3): the same require_approval enum the spawn gate uses, riding the individual op so the dangerous act is gated, not just the spawn. An optional class_key scopes the written grant finer than the op id — granted per (owner × class × node) (the usbip attach’s device class), so a remembered HID-class grant never authorizes a storage-class act. Spawn gates govern existence; capability gates govern acts (CONTEXT §“per-capability approval gates”).

Fields

args: Vec<String>

require_approval: ShellApproval

Per-act approval gate (floor; a node/endpoint setting may tighten). Absent ⇒ none (ungated).

class_key: Option<String>

Optional grant-qualifier class so a grant scopes finer than the op id ((owner × class × node)). Only meaningful with a gated require_approval.

Trait Implementations

impl Clone for ShellCapability

fn clone(&self) -> ShellCapability

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for ShellCapability

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for ShellCapability

fn default() -> ShellCapability

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for ShellCapability

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl JsonSchema for ShellCapability

fn schema_name() -> Cow<'static, str>

The name of the generated JSON Schema.

fn schema_id() -> Cow<'static, str>

Returns a string that uniquely identifies the schema produced by this type.

fn json_schema(generator: &mut SchemaGenerator) -> Schema

Generates a JSON Schema for this type.

fn inline_schema() -> bool

Whether JSON Schemas generated for this type should be included directly in parent schemas, rather than being re-used where possible using the $ref keyword.

impl PartialEq for ShellCapability

fn eq(&self, other: &ShellCapability) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for ShellCapability

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for ShellCapability