claudy 0.8.0

Modern multi-provider launcher for Claude CLI
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50

//! Guard (DLP) boundary contract. The MVP implementation lives in
//! `crate::guard` (regex scan + image strip); llm-kernel's safety engine
//! will replace it behind these same traits without touching the proxy.
//!
//! Sync traits, matching the launch/config port conventions — scanning is
//! pure CPU work with no I/O.

/// Decision applied to a finding before the request egresses.
#[derive(Debug, Clone, Copy, PartialEq, Eq)]
pub enum GuardAction {
    /// Forward untouched.
    Allow,
    /// Rewrite the offending span/block, then forward.
    Redact,
    /// Forward untouched, record in the ledger.
    Warn,
    /// Advisory only: suggests switching to a trusted provider. Never
    /// returned by the MVP engine (mid-session provider swap is
    /// impossible); exists for the phase-2 contract.
    ReRoute,
    /// Refuse the request (HTTP 400), never contact upstream.
    Block,
}

#[derive(Debug, Clone, PartialEq)]
pub struct Finding {
    /// Machine-readable category, e.g. "image", "api_key", "non_json".
    pub kind: String,
    pub action: GuardAction,
    /// Redacted preview of the match — never contains raw secret material.
    pub preview: String,
}

#[derive(Debug, Clone, Default)]
pub struct ScanReport {
    pub findings: Vec<Finding>,
    /// `Some` when the body was rewritten (forward these bytes);
    /// `None` when the original bytes must be forwarded byte-identical.
    pub redacted_body: Option<Vec<u8>>,
    pub images_stripped: usize,
}

pub trait ContentScanner {
    fn scan(&self, body: &[u8], content_type: &str) -> ScanReport;
}

pub trait GuardPolicy {
    fn action_for(&self, provider_id: &str, finding_kind: &str) -> GuardAction;
    fn is_trusted(&self, provider_id: &str) -> bool;
}