1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
"""Consent, pins, and the native capability gateway.
Re-exports the canonical implementation from the maturin-built ``net`` wheel so
``net_sdk`` users reach the bridge's demand surface in one import — the same
shape a Hermes plugin depends on — without reaching into the raw ``net``
package:
from net_sdk.consent import CapabilityGateway, PinStore, default_pin_store_path
The store, the lock protocol, the consent decision, and the ``search /
describe / invoke`` consent gate all live once in the Rust core (bridge-SDK
doctrine #1: no logic in bindings); this module only re-exports them.
- :class:`ConsentPolicy` / :class:`PinStore` / :class:`AsyncPinStore` /
:class:`CapabilityId` — the consent gate + the machine-shared pin store.
- ``credential_requires_consent`` — the wire-credential trust boundary.
- ``default_pin_store_path`` — the per-user store path every consumer shares.
- ``CapabilityGateway`` — the native, consent-gated ``search`` / ``describe`` /
``invoke`` surface over an embedded ``NetMesh`` node (present iff the wheel
was built with the ``net`` + ``mcp`` features — the default one is).
"""
=
# The native capability gateway (sync + awaitable duals) needs both the `net`
# and `mcp` features. The shipped wheel has both; guard the import so a minimal
# build still exposes the consent/pins surface.
# pragma: no cover - minimal build
pass