systemprompt-config 0.67.0

Profile-based configuration for systemprompt.io AI governance infrastructure. Bootstraps profiles, secrets, and credentials with zero environment-variable fallback.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73

//! Registry of extension-supplied secrets sources.
//!
//! A profile with `secrets.source: external` names a `kind`; the provider for
//! that kind is contributed at compile time with
//! [`register_secrets_source!`](crate::register_secrets_source) and collected
//! through `inventory`, the same way authorization subject providers are.
//! Core ships no external kind of its own.
//!
//! Copyright (c) systemprompt.io — Business Source License 1.1.
//! See <https://systemprompt.io> for licensing details.

use systemprompt_manifest::profile::ExternalSecretsConfig;

use super::SecretsBootstrapError;
use super::provider::DynSecretsProvider;

pub type EnvLookup = Box<dyn Fn(&str) -> Option<String> + Send + Sync>;

pub type SharedSecretsProvider = Box<dyn DynSecretsProvider>;

pub type SecretsSourceFactory =
    fn(&ExternalSecretsConfig, EnvLookup) -> Result<SharedSecretsProvider, SecretsBootstrapError>;

#[derive(Debug, Clone, Copy)]
pub struct SecretsSourceRegistration {
    pub kind: &'static str,
    pub factory: SecretsSourceFactory,
}

inventory::collect!(SecretsSourceRegistration);

#[must_use]
pub fn process_env_lookup() -> EnvLookup {
    Box::new(systemprompt_manifest::read_env_optional)
}

pub fn build_external_provider(
    cfg: &ExternalSecretsConfig,
    env: EnvLookup,
) -> Result<SharedSecretsProvider, SecretsBootstrapError> {
    let registration = inventory::iter::<SecretsSourceRegistration>()
        .find(|registration| registration.kind == cfg.kind)
        .ok_or_else(|| SecretsBootstrapError::UnknownExternalKind {
            kind: cfg.kind.clone(),
            known: registered_external_kinds()
                .into_iter()
                .map(str::to_owned)
                .collect(),
        })?;
    (registration.factory)(cfg, env)
}

#[must_use]
pub fn registered_external_kinds() -> Vec<&'static str> {
    let mut kinds: Vec<&'static str> = inventory::iter::<SecretsSourceRegistration>()
        .map(|registration| registration.kind)
        .collect();
    kinds.sort_unstable();
    kinds.dedup();
    kinds
}

#[macro_export]
macro_rules! register_secrets_source {
    ($kind:expr, $factory:expr $(,)?) => {
        $crate::__inventory::submit! {
            $crate::SecretsSourceRegistration {
                kind: $kind,
                factory: $factory,
            }
        }
    };
}