murmur-artifact 0.2.0

The shared artifact model for Murmur capsules: manifest schema, .mur.zip packing and unpacking, the registry trait, refs, lockfile, and inference config.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67

#![forbid(unsafe_code)]

pub mod artifact;
pub mod artifact_ref;
pub mod build;
pub mod build_lints;
pub mod dotenv;
pub mod lockfile;
pub mod manifest;
pub mod manifest_path;
pub mod payload_shape;
pub mod platform;
pub mod registry;
pub mod runtime_manifest;
pub mod secrets;
pub mod security_warnings;
pub mod zip_guard;

pub use artifact::{
    load_manifest_from_artifact, load_manifest_from_artifact_bytes,
    load_manifest_yaml_from_artifact, load_manifest_yaml_from_artifact_bytes, ArtifactError,
};
pub use artifact_ref::{ArtifactRef, ArtifactRefError};
pub use build::{build_artifact, BuildError, MAX_ARTIFACT_NAME_LEN, PACKED_MANIFEST_ENTRY};
pub use build_lints::{
    build_warning_link, lint_build_warnings, BuildWarning, RESERVED_ROOT_ENTRIES, W_BLD_001,
    W_BLD_002, W_BLD_003,
};
pub use dotenv::{load_dotenv_non_override, DotenvError};
pub use lockfile::{
    read_lockfile, write_lockfile_atomic, LockedArtifact, LockedSha256, LockfileError, MurmurLock,
    LOCK_VERSION,
};
pub use manifest::{load_manifest, Manifest, ManifestError};
pub use manifest_path::{resolve_manifest_path, MANIFEST_FILENAME};
pub use payload_shape::{
    is_root_wasm_candidate, native_binary_entry, root_wasm_candidates, select_root_wasm,
    select_root_wasm_from_entries, select_root_wasm_in_archive, PayloadShapeError,
    CAPSULE_WASM_ENTRY, NATIVE_BIN_DIR, SKILL_MD_ENTRY, WASM_EXTENSION,
};
pub use platform::current_platform;
pub use registry::{
    is_reserved_version, sha256_hex, verify_sha256, ArtifactMeta, LocalRegistry, Platform,
    PublishResult, Registry, RegistryError, ResolvedArtifact, RuntimeType, RESERVED_VERSIONS,
};
pub use runtime_manifest::{
    commit_policy_for_binding, effective_containment_floor, load_runtime_manifest,
    parse_hook_config_from_yaml, parse_tool_implementation_from_yaml, read_hook_config,
    read_tool_implementation, AfterTask, ArtifactImplementation, ArtifactRuntime, Capabilities,
    CompactionConfig, ContainmentClass, ContextConfig, ConversationMode, EnvCapabilities,
    EvalConfig, FilesystemCapabilities, HookBinding, HookCommitPolicy, HookConfig,
    HookExecutionMode, HookOverflowPolicy, InferenceConfig, InferenceDriver, InterpreterRuntimeDir,
    InterpreterRuntimeGrant, LifecycleConfig, LifecycleOverride, NetworkCapabilities,
    NetworkConfig, ObservabilityConfig, ParseContainmentClassError, ResourceCapabilities,
    ResourceLimits, RuntimeArtifact, RuntimeManifest, RuntimeManifestError, ScorerConfig,
    ShellCapabilities, StagedRuntimeGrant, TaskAcceptance, TraceConfig,
};
pub use secrets::{scan_yaml_secrets, SecretWarning};
pub use security_warnings::{
    security_warning_link, W_SEC_001, W_SEC_002, W_SEC_003, W_SEC_004, W_SEC_005, W_SEC_006,
    W_SEC_007, W_SEC_008, W_SEC_009, W_SEC_010, W_SEC_011, W_SEC_012,
};
pub use zip_guard::{
    max_artifact_decompressed_bytes, read_zip_entry_capped, read_zip_entry_to_string_capped,
    resolve_within, sanitize_entry_path, ZipGuardError, DEFAULT_MAX_ARTIFACT_DECOMPRESSED_BYTES,
    MAX_ARTIFACT_DECOMPRESSED_BYTES_ENV,
};