Struct Capabilities 

pub struct Capabilities {
    pub net: bool,
    pub write_paths: Vec<String>,
    pub read_paths: Vec<String>,
    pub env: EnvPolicy,
}

Per-node capability declaration. Defaults match the most permissive “trust + log” baseline (network on, write to cwd, env scrubbed) so a node without an explicit capabilities field still works the same as a manual shell invocation.

Fields

net: bool

write_paths: Vec<String>

Paths the command may write to. The literal token "cwd" is substituted with the actual cwd at wrap time.

read_paths: Vec<String>

Paths the command may read from. Empty means read-anywhere (the command inherits the OS’s default read access). Same "cwd" token substitution as write_paths.

env: EnvPolicy

Environment forwarding policy.

Trait Implementations

impl Clone for Capabilities

fn clone(&self) -> Capabilities

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for Capabilities

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for Capabilities

fn default() -> Self

Permissive default: no OS sandbox layer engaged. The lightweight rails (cwd pin, env scrub, output cap, timeout) still apply. Nodes that want stricter enforcement declare their own capabilities in node.data and the OS layer kicks in.

impl<'de> Deserialize<'de> for Capabilities

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for Capabilities

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.