Module composition

Structs§

CompositionInput: Input to the composition engine: a source with its resolved profile layers and policy.
CompositionResult: Result of composition: merged profile + conflict report.
ConflictResolution: Resolution record for conflict reporting.
PermissionChange: Describes a permission-expanding change detected between old and new composition results.
SubscriptionConfig: Subscription config extracted from the user’s cfgd.yaml for this source.

check_locked_violations: Check if a subscriber is trying to override a locked resource.
compose: Compose multiple source configs with a local resolved profile. Local config is always priority 1000. Sources are merged according to policy tiers.
detect_permission_changes: Compare old vs new composition results to detect permission-expanding changes. Returns a list of changes that require explicit user consent.
merge_packages: Merge packages from source into target, unioning lists and applying later-wins for scalar fields (file paths, remotes, custom manager commands).
validate_constraints: Validate security constraints for a source’s contribution to the composed profile.