clawdstrike 0.2.5

Security guards and policy engine for AI agent execution
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117

//! Error types for clawdstrike

use serde::{Deserialize, Serialize};
use std::fmt;
use thiserror::Error;

/// A single policy validation error with a stable field path.
#[derive(Clone, Debug, PartialEq, Eq, Serialize, Deserialize)]
pub struct PolicyFieldError {
    pub path: String,
    pub message: String,
}

impl PolicyFieldError {
    pub fn new(path: impl Into<String>, message: impl Into<String>) -> Self {
        Self {
            path: path.into(),
            message: message.into(),
        }
    }
}

/// A collection of validation errors for a single policy.
#[derive(Clone, Debug, PartialEq, Eq, Serialize, Deserialize)]
pub struct PolicyValidationError {
    pub errors: Vec<PolicyFieldError>,
}

impl PolicyValidationError {
    pub fn new(errors: Vec<PolicyFieldError>) -> Self {
        Self { errors }
    }

    pub fn is_empty(&self) -> bool {
        self.errors.is_empty()
    }
}

impl fmt::Display for PolicyValidationError {
    fn fmt(&self, f: &mut fmt::Formatter<'_>) -> fmt::Result {
        if self.errors.is_empty() {
            return write!(f, "Policy validation failed (no details)");
        }

        writeln!(
            f,
            "Policy validation failed with {} error(s):",
            self.errors.len()
        )?;
        for err in &self.errors {
            writeln!(f, "- {}: {}", err.path, err.message)?;
        }
        Ok(())
    }
}

impl std::error::Error for PolicyValidationError {}

/// Errors that can occur during guard operations
#[non_exhaustive]
#[derive(Error, Debug)]
pub enum Error {
    #[error("Guard check failed: {0}")]
    GuardFailed(String),

    #[error("Policy violation: {guard} - {message}")]
    PolicyViolation { guard: String, message: String },

    #[error("Invalid policy version: {version}")]
    InvalidPolicyVersion { version: String },

    #[error("Unsupported policy version: found {found}, supported {supported}")]
    UnsupportedPolicyVersion { found: String, supported: String },

    #[error("Configuration error: {0}")]
    ConfigError(String),

    #[error(transparent)]
    PolicyValidation(#[from] PolicyValidationError),

    #[error("IO error: {0}")]
    IoError(#[from] std::io::Error),

    #[error("JSON error: {0}")]
    JsonError(#[from] serde_json::Error),

    #[error("YAML error: {0}")]
    YamlError(#[from] serde_yaml::Error),

    #[error("Regex error: {0}")]
    RegexError(#[from] regex::Error),

    #[error("Core error: {0}")]
    CoreError(#[from] hush_core::Error),

    #[error("Spine error: {0}")]
    SpineError(String),

    #[error("TOML deserialization error: {0}")]
    TomlDeError(#[from] toml::de::Error),

    #[error("TOML serialization error: {0}")]
    TomlSerError(#[from] toml::ser::Error),

    #[error("Package error: {0}")]
    PkgError(String),
}

#[cfg(feature = "spine")]
impl From<spine::Error> for Error {
    fn from(e: spine::Error) -> Self {
        Error::SpineError(e.to_string())
    }
}

/// Result type for clawdstrike operations
pub type Result<T> = std::result::Result<T, Error>;