capsule_runtime/
lib.rs

1// `security::harden_process_dumpable` needs one `unsafe { libc::prctl(...) }` call on Linux;
2// `#[allow(unsafe_code)]` on that item overrides this crate-level default of `deny` rather
3// than `forbid`, since `forbid` cannot be overridden by a narrower `allow` anywhere in the crate.
4#![deny(unsafe_code)]
5
6pub(crate) mod a2a;
7pub(crate) mod agent;
8pub mod artifact;
9pub mod bindings;
10pub(crate) mod checkpoint_sign;
11pub mod errors;
12pub(crate) mod hooks;
13pub(crate) mod identity;
14pub mod limits;
15pub(crate) mod murmur_md;
16pub(crate) mod network_policy;
17pub(crate) mod otel;
18pub(crate) mod outgoing;
19pub mod plan;
20pub mod runtime;
21pub(crate) mod sandbox;
22pub mod security;
23pub(crate) mod shell;
24pub(crate) mod streaming;
25pub(crate) mod trace;
26pub mod types;
27
28pub use errors::RuntimeError;
29pub use limits::ExecutionLimits;
30pub use murmur_artifact::{AfterTask, LifecycleConfig, LifecycleOverride, TaskAcceptance};
31pub use runtime::{launch_session, stage_session};
32pub use types::{
33    capability_policy_from_runtime_manifest, ArtifactRequest, CapabilityPolicy,
34    InstalledArtifactSummary, LaunchResult, LockExpectation, ResolvedLockArtifact, StageRequest,
35    StagedSession,
36};
capsule_runtime/lib.rs

capsule_runtime/
lib.rs
