mermaid-runtime 0.25.0

Daemon-safe runtime core for Mermaid
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26

//! Safety policy for tool actions: the engine (`engine`), the shell
//! classifier (`shell/`), and the plan-mode carve-outs (`plan_gate`). The
//! VOCABULARY (modes, risk classes, requests, decisions) lives in
//! `mermaid_model::safety` so the pure domain crate can speak it without a
//! dependency on this crate; it is re-exported here because it is this
//! module's API surface -- `PolicyEngine::decide` takes `ActionRequest` and
//! answers `PolicyDecision`.

mod engine;

pub use engine::PolicyEngine;
pub use mermaid_model::safety::{
    ActionRequest, FloorLevel, HostShell, PolicyDecision, PolicyOverride, PolicyOverrideDecision,
    RiskClass, SafetyMode, ToolCategory,
};

pub(crate) mod plan_gate;
pub(crate) mod shell;

// The public half of the split, named explicitly: `lib.rs` re-exports these,
// and a `pub(crate)` glob cannot carry a name across the crate boundary.
pub use plan_gate::{
    PLAN_DENIAL_MARKER, READ_ONLY_DENIAL_MARKER, is_plan_file_only_write, is_plan_file_path,
    is_plan_safe_build_command,
};
pub use shell::destructive::is_destructive_command;