agent_control_specification_core 0.3.1-beta.0

Stateless Rust core for Agent Control Specification
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62

pub(crate) mod annotation {
    pub(crate) const FROM: &str = "from";
    pub(crate) const INPUT_FROM: &str = "input_from";
    pub(crate) const TYPE: &str = "type";
}

/// SHA-256 digest sizes shared by the `extends` integrity validators so the
/// raw-byte and hex-encoded length checks stay in lockstep with their error
/// messages.
pub(crate) mod sha256 {
    pub(crate) const DIGEST_BYTES: usize = 32;
    pub(crate) const HEX_LEN: usize = 64;
}

/// Reserved deny reasons that cross the dispatcher boundary, where a host
/// supplied annotator dispatcher signals the outcome back to the runtime. These
/// are the single source of truth for the sentinel strings, so the FFI boundary
/// and the language bridges compare and emit the same values without duplicating
/// string literals that could drift apart.
pub mod reserved_reason {
    pub const ANNOTATION_TIMEOUT: &str = "runtime_error:annotation_timeout";
    pub const ANNOTATION_FAILED: &str = "runtime_error:annotation_failed";
}

pub(crate) mod manifest_version {
    pub(crate) const SUPPORTED: [&str; 4] = [
        "0.3.1-beta",
        "0.3.1-beta-agt",
        "0.3.0-alpha",
        "0.3.0-alpha-agt",
    ];
}

pub(crate) mod engine {
    pub(crate) const CEDAR: &str = "cedar";
    pub(crate) const CUSTOM: &str = "custom";
    pub(crate) const REGO: &str = "rego";
    pub(crate) const TEST: &str = "test";
}

/// Field names reserved for the `cedar` policy type, per AGT delta D3.1.
/// These are rejected when they appear on a `rego` policy's flattened
/// `adapter_config` so that mixed-language manifests are caught early.
pub(crate) mod cedar_field {
    pub(crate) const POLICY_SET: &str = "policy_set";
    pub(crate) const POLICY_PATH: &str = "policy_path";
    pub(crate) const ENTITIES_PATH: &str = "entities_path";
    pub(crate) const SCHEMA_PATH: &str = "schema_path";

    pub(crate) const ALL: [&str; 4] = [POLICY_SET, POLICY_PATH, ENTITIES_PATH, SCHEMA_PATH];
}

pub(crate) mod policy_input {
    pub(crate) const ANNOTATIONS: &str = "annotations";
    pub(crate) const INTERVENTION_POINT: &str = "intervention_point";
    pub(crate) const KIND: &str = "kind";
    pub(crate) const PATH: &str = "path";
    pub(crate) const SNAPSHOT: &str = "snapshot";
    pub(crate) const POLICY_TARGET: &str = "policy_target";
    pub(crate) const TOOL: &str = "tool";
    pub(crate) const VALUE: &str = "value";
}