deepstrike-core 0.2.71

Cross-language agent runtime kernel — pure computation, zero I/O
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98

//! Canonical Kernel ABI — the single wire contract.
//!
//! One envelope, five input classes, one root entry, strict tagged unions and cross-language
//! scalar rules. This is the only host/kernel input contract; no compatibility adapter or
//! inferred revision exists.
//!
//! Layout:
//!
//! | module | contract |
//! | --- | --- |
//! | [`scalar`] | §7.1.1 cross-language scalar and projection rules |
//! | [`envelope`] | §7.1 envelope, §7.2 five-class taxonomy, decode boundary |
//! | [`config`] | §7.3 configuration's position in the taxonomy (fields: Task 5) |
//! | [`root`] | §7.4 root entry, execution focus, logical start payloads |
//! | [`command`] | §7.5 host control plane |
//! | [`syscall`] | §7.6 P1 syscall requests and derived causation |
//! | [`event`] | §7.7 external events |
//! | [`effect`] | §7.9 effect outcome's position in the taxonomy (fields: Task 4) |
//! | [`checkpoint`] | §12.1 logical checkpoint + bounded tail |
//! | [`restore`] | §12.2 bounded-tail restore |

use serde::{Deserialize, Serialize};

pub mod binding;
pub mod checkpoint;
pub mod command;
pub mod config;
pub mod driver;
pub mod effect;
pub mod envelope;
pub mod event;
pub mod fault;
pub mod projection;
pub mod record;
pub mod restore;
pub mod root;
pub mod scalar;
pub mod syscall;
pub mod terminal;
pub mod transaction;

#[cfg(test)]
mod crash_point;

#[cfg(test)]
mod tests;

pub use binding::CanonicalKernel;
pub use checkpoint::*;
pub use command::*;
pub use config::*;
pub use driver::{CanonicalOperationDriver, PlannedStep};
pub use effect::*;
pub use envelope::*;
pub use event::*;
pub use fault::*;
pub use projection::*;
pub use record::*;
pub use restore::*;
pub use root::*;
pub use scalar::*;
pub use syscall::*;
pub use terminal::*;
pub use transaction::*;

/// The single supported ABI identity. Bindings export this core-owned value so host SDKs do not
/// maintain independent ABI constants or parallel contract names.
pub const ABI: u32 = 4;

/// Absolute structural boundary applied **before** any JSON is parsed (§7.3).
///
/// These are build/construction-time safety limits, not operation configuration:
/// `OperationConfig.kernel_limits` may only tighten them, never widen them. Enforcing them
/// pre-parse is the point — a bound checked after `serde_json` has already materialised the
/// document is a bound the attacker already spent.
#[derive(Debug, Clone, Copy, PartialEq, Eq, Serialize, Deserialize)]
#[serde(deny_unknown_fields)]
pub struct KernelBootstrapLimits {
    pub absolute_max_input_bytes: u32,
    pub absolute_max_json_depth: u16,
    pub absolute_max_collection_entries: u32,
}

impl KernelBootstrapLimits {
    /// 16 MiB matches the historical kernel input ceiling; depth and per-container entry bounds
    /// are explicit and required by the canonical decode path.
    pub const DEFAULT: Self = Self {
        absolute_max_input_bytes: 16 * 1024 * 1024,
        absolute_max_json_depth: 64,
        absolute_max_collection_entries: 65_536,
    };
}

impl Default for KernelBootstrapLimits {
    fn default() -> Self {
        Self::DEFAULT
    }
}