lean-ctx-engine 3.12.1

LeanCTX | OSS library: the open-source runtime for the Context Gateway for AI agents behind the lean-ctx CLI, MCP server and proxy integrations.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80

//! Shell allowlist with AST-based command parsing.
//!
//! Security model (Information Bottleneck principle):
//! - When allowlist is set: ALL segments of a compound command must be allowed (deny-by-default)
//! - When empty: all commands pass (backwards-compatible blocklist-only mode)
//! - Dangerous patterns (subshells, eval, backticks) are blocked in restricted mode

mod approval;
mod case_construct;
mod compound;
mod config;
mod enforcement;
mod heredoc;
mod lexer;
mod mode;
mod partial;
mod powershell;
mod ps_statements;
mod self_config;
mod side_doors;
mod substitution;
mod tokenizer;

use crate::core::error::ShellError;

use case_construct::find_shell_word;
use compound::expand_to_leaf_segments;
use config::{allowlist_block_message, effective_allowlist};
#[cfg(test)]
use enforcement::{
    check_all_segments, check_pipe_to_bare_interpreter, check_unconditional_blocked_only,
    enforce_shell_allowlist, is_bare_interpreter_stdin, is_project_root_binary,
    normalize_line_continuations,
};
use tokenizer::{
    extract_all_commands, extract_base_from_segment, quote_aware_token_end, skip_env_assignments,
    split_on_operators,
};

pub use approval::{
    ApprovalMiss, ApprovalRequest, approval_request, check_shell_allowlist_granted,
};
pub use approval::{allow_execute_languages, allow_programs};
pub(crate) use case_construct::{contains_double_semicolon, rewrite_case_constructs};
pub use config::*;
pub use enforcement::*;
pub use heredoc::heredoc_delims;
pub use heredoc::read_heredoc_delim;
pub use heredoc::strip_all_heredoc_bodies;
#[cfg(test)]
pub(crate) use heredoc::{strip_comments, strip_quoted_heredoc_bodies};
pub use mode::ShellSecurity;
pub use partial::{PartialRun, partial_run};
pub use self_config::with_run_cwd;
pub use side_doors::LEAN_CTX_RUN_CONTROL_ENV;
pub(crate) use substitution::check_substitution_in_args;
#[cfg(test)]
pub(crate) use substitution::has_expanding_substitution_in_args;
#[cfg(test)]
pub(crate) use tests::allow;
pub use tokenizer::*;

#[cfg(test)]
mod tests;
#[cfg(test)]
mod tests_conditionals;
#[cfg(test)]
mod tests_heredoc_quotes;
#[cfg(test)]
mod tests_multiword;
#[cfg(test)]
mod tests_pipe_target;
#[cfg(test)]
mod tests_ps1930;
#[cfg(test)]
mod tests_redaction_marker;
#[cfg(test)]
mod tests_tokenizer;
#[cfg(test)]
mod tests_warn_only;