Crate gate4agent_node 

Native Gate4Agent node server and runtime.

Re-exports

pub use gate4agent_node_protocol as protocol;

Structs

BundleCatalog

Bounded immutable lookup table for bundles installed before node startup.

ManagedWorktreeProfile

NativeHistoryConfig

NativeHistoryRoot

NetworkAllowlistCatalog

Empty-default station network allowlist catalog.

NetworkAllowlistEntry

One node-local catalog entry. Wire / inventory still use SpawnNetworkAllowlistId.

NetworkPermitSketch

dig2browser-spirit peer+protocol permit (node-local; non-secret).

NodeBundle

Immutable host-local bundle bytes and their public content receipt.

NodeBundleFile

One immutable, normalized file captured from a validated bundle root.

NodeEnvironmentProfile

Immutable host-local binding from one public profile revision to native child-environment resolvers. Resolver values remain inside the native profiles and are never serialized or formatted for diagnostics.

NodeSecretReference

NodeServer

NodeServerConfig

NodeSessionMaterializationProfile

NodeSessionPathBinding

NodeShutdownHandle

ProviderNativeNetworkSketch

Honest, partial provider-native network mapping (node-local).

SpawnProfileRegistry

WorkspaceConfig

Enums

BundleCatalogError

HistorySourceLayout

NetworkAllowlistCatalogError

NetworkPermitProtocol

Allowed permit protocols (string form in JSON: tcp / udp).

NodeBundleError

NodeEnvironmentProfileError

NodeSecretResolveError

NodeSecretValue

NodeSecretValueError

NodeServerError

NodeSessionEnvironmentMutation

NodeSessionFile

NodeSessionMaterializationProfileError

NodeSessionPathClass

SpawnProfileRegistryError

WorktreeServiceMode

Constants

CLAUDE_STATION_NETWORK_SETTINGS_FILE

Sidecar settings filename under ProviderHome (CLAUDE_CONFIG_DIR home/).

DEFAULT_SPAWN_PROFILE_ID

MAX_BUNDLE_CATALOG_ENTRIES

MAX_BUNDLE_FILES

MAX_BUNDLE_FILE_BYTES

MAX_BUNDLE_PATH_BYTES

MAX_BUNDLE_TOTAL_BYTES

MAX_NETWORK_ALLOWLIST_CATALOG_ENTRIES

Soft bound on station network allowlist catalog membership (ids only). Soft bound on station network allowlist catalog ids exposed on launch inventory.

MAX_NETWORK_PERMITS_PER_ENTRY

Soft bound on permit rows per catalog entry (dig2 MAX_NETWORK_PERMITS spirit).

MAX_NODE_ENVIRONMENT_PROFILES

MAX_NODE_SECRET_REFERENCE_BYTES

MAX_NODE_SECRET_VALUE_BYTES

MAX_SESSION_ENVIRONMENT_ENTRIES

MAX_SESSION_MATERIALIZATION_FILES

MAX_SESSION_MATERIALIZATION_FILE_BYTES

MAX_SESSION_MATERIALIZATION_RELATIVE_PATH_BYTES

MAX_SPAWN_PROFILES

NETWORK_ALLOWLIST_CATALOG_ENV

Env path to an optional allowlist catalog file (absolute regular file). Unset → empty catalog (deny unknown at resolve). Never a secret store.

NETWORK_ALLOWLIST_CATALOG_SCHEMA_VERSION

Structured catalog schema version (JSON v2).

Traits

NodeSecretResolver

Functions

claude_allowed_domains_from_permits

Deduplicated Claude allowedDomains from catalog permits (stable order).

claude_bash_sandbox_network_os_supported

Vendor Bash sandbox network overlay is macOS / Linux / WSL2 only. Native Windows (and WSL1 host without Linux node) has no vendor sandbox — refuse rather than silent no-op or invented argv.

claude_settings_network_overlay_args

Documented Claude CLI argv: --settings <absolute-path>.

claude_station_network_settings_json

Settings JSON fragment for Claude Bash sandbox network (vendor documented sandbox.enabled + sandbox.network.allowedDomains).

codex_network_access_config_overlay

Codex -c overlay for legacy sandbox_workspace_write.network_access.

default_node_endpoint

default_state_path

load_network_allowlist_catalog_file

Load catalog from path (absolute regular file). Dual format.

orca_home_roots

Pinned Orca-compatible roots beneath an explicitly supplied native home.

parse_network_allowlist_catalog_text

Parse catalog text: JSON v2 when first non-comment content is {, else v1 id-list (one id per line).

permit_peer_to_allowed_domain

Map catalog permit peer → Claude sandbox.network.allowedDomains host.

provider_native_mapping_supported

Whether provider_native on a catalog entry can be honored for provider at the resolved ApprovalLevel.

resolve_network_allowlist_catalog

Resolve optional catalog from an explicit path, else from NETWORK_ALLOWLIST_CATALOG_ENV, else empty.

resolve_provider_native_launch_overlay

Resolve provider-native launch overlay argv for a catalog entry, or refuse.