systemprompt-models 0.55.1

//! Governance configuration for the gateway + MCP authorization hook.
//!
//! Authz is **fail-closed** with an explicit-opt-in surface. Four modes:
//!
//! - `webhook` — production. Core POSTs every request to the configured URL;
//!   any transport error, non-2xx, or decode failure denies the request.
//! - `extension` — production. The hook is supplied at bootstrap by the binary
//!   via `AppContextBuilder::with_authz_hook(...)`. Bootstrap errors if no hook
//!   is supplied. See `internal/guides/authz.md`.
//! - `disabled` — denies every request via `DenyAllHook`. Use when authz is
//!   intentionally inactive but you want the surface installed.
//! - `unrestricted` — TEST/DEV ONLY. Allows every request via `AllowAllHook`.
//!   Requires `acknowledgement` to equal the literal sentence `"I understand
//!   this disables all authorization"`. Bootstrap errors otherwise.
//!
//! Absent `governance` block, absent `authz`, or any unparseable config →
//! bootstrap installs `DenyAllHook` (everything denied) so misconfiguration
//! never silently grants access.
//!
//! `audit` bounds what the gateway retains per request. A body at or under
//! `payload_cap_bytes` is stored whole in `ai_request_payloads`; over it, only
//! the SHA-256 digest and a head+tail excerpt survive. The digest always covers
//! the full bytes, so a capped capture still proves which body was sent.
//!
//! Example:
//!
//! ```yaml
//! governance:
//!   authz:
//!     hook:
//!       mode: webhook
//!       url: http://localhost:8080/api/public/govern/authz
//!       timeout_ms: 500
//!   audit:
//!     payload_cap_bytes: 4194304
//! ```
//!
//! Copyright (c) systemprompt.io — Business Source License 1.1.
//! See <https://systemprompt.io> for licensing details.

use serde::{Deserialize, Serialize};

pub const UNRESTRICTED_ACKNOWLEDGEMENT: &str = "I understand this disables all authorization";

#[derive(Debug, Clone, Default, Serialize, Deserialize, schemars::JsonSchema)]
#[serde(deny_unknown_fields)]
pub struct GovernanceConfig {
    #[serde(default)]
    pub authz: Option<AuthzConfig>,
    #[serde(default)]
    pub audit: AuditConfig,
}

/// Retention bounds for the gateway audit trail.
#[derive(Debug, Clone, Copy, PartialEq, Eq, Serialize, Deserialize, schemars::JsonSchema)]
#[serde(deny_unknown_fields)]
pub struct AuditConfig {
    #[serde(default = "default_payload_cap_bytes")]
    pub payload_cap_bytes: usize,
}

impl AuditConfig {
    pub const DEFAULT_PAYLOAD_CAP_BYTES: usize = 1024 * 1024;
    pub const MIN_PAYLOAD_CAP_BYTES: usize = 64 * 1024;
}

impl Default for AuditConfig {
    fn default() -> Self {
        Self {
            payload_cap_bytes: Self::DEFAULT_PAYLOAD_CAP_BYTES,
        }
    }
}

const fn default_payload_cap_bytes() -> usize {
    AuditConfig::DEFAULT_PAYLOAD_CAP_BYTES
}

#[derive(Debug, Clone, Serialize, Deserialize, schemars::JsonSchema)]
#[serde(deny_unknown_fields)]
pub struct AuthzConfig {
    pub hook: AuthzHookConfig,
}

#[derive(Debug, Clone, Copy, PartialEq, Eq, Serialize, Deserialize, schemars::JsonSchema)]
#[serde(rename_all = "lowercase")]
pub enum AuthzMode {
    Webhook,
    Extension,
    Disabled,
    Unrestricted,
}

#[derive(Debug, Clone, Serialize, Deserialize, schemars::JsonSchema)]
#[serde(deny_unknown_fields)]
pub struct AuthzHookConfig {
    pub mode: AuthzMode,
    #[serde(default)]
    pub url: Option<String>,
    #[serde(default = "default_timeout_ms")]
    pub timeout_ms: u64,
    #[serde(default)]
    pub acknowledgement: Option<String>,
}

const fn default_timeout_ms() -> u64 {
    500
}