systemprompt-extension 0.63.0

Compile-time extension framework for systemprompt.io AI governance infrastructure. Built on the inventory crate — registers schemas, API routes, jobs, and providers in the MCP governance pipeline.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33

//! Per-route framing policy override for extension routers.
//!
//! The host's global security-headers middleware sets `X-Frame-Options`
//! sitewide. An extension that must allow its pages to be framed (embed
//! widgets, chrome-free tool pages) declares a [`FrameOptions`] on its
//! router; [`stamp_frame_options`] records the choice as a
//! [`FrameOptionsOverride`] response extension, which the host middleware
//! honours instead of the profile default. Setting the raw header without
//! the marker has no effect — the global middleware overwrites it.
//!
//! Copyright (c) systemprompt.io — Business Source License 1.1.
//! See <https://systemprompt.io> for licensing details.

use axum::extract::Request;
use axum::middleware::Next;
use axum::response::Response;
use systemprompt_provider_contracts::FrameOptions;

/// Response-extension marker read by the host's security-headers middleware.
#[derive(Debug, Clone, Copy)]
pub struct FrameOptionsOverride(pub FrameOptions);

pub async fn stamp_frame_options(
    frame_options: FrameOptions,
    request: Request,
    next: Next,
) -> Response {
    let mut response = next.run(request).await;
    response
        .extensions_mut()
        .insert(FrameOptionsOverride(frame_options));
    response
}