Crate vane_core 

Foundation types, traits, FlowGraph IR, and compilation pipeline for vane.

See spec/crates/core.md, spec/flow-model.md, spec/crates/engine.md.

Re-exports

pub use compile::compile;

pub use config::Env;

pub use config::EnvReader;

pub use config::LoadedConfig;

pub use config::ProcessEnv;

pub use config::load;

pub use config::scan_rules_dir;

pub use preset::PresetInvocation;

pub use preset::RuleEntry;

pub use preset::expand_invocation;

pub use body::*;

pub use conn_context::*;

pub use error::*;

pub use fetch::*;

pub use flow_ctx::*;

pub use flow_log::*;

pub use ir::*;

pub use l4::*;

pub use metadata::*;

pub use middleware::*;

pub use wasm_runtime::*;

pub use predicate::*;

Modules

body

canonical

Single source of truth for canonical JSON serialization.

compile

config

Config loading entry point.

conn_context

error

fetch

flow_ctx

flow_log

ir

l4

meta

metadata

middleware

phase

predicate

preset

Preset expansion: {"preset": ..., ...} → Vec<RawRule>.

rule

version

wasm_runtime

Structs

PeekResult

Outcome of one peek-buffer classification. buffer is the bytes that were classified (kept on the result so consumers can replay them to a downstream decoder via, e.g., peeked-stream). detected is None when at least one detector wants more bytes; the caller should read more and call [classify] again.

TlsClientHello

Enums

DetectedProtocol

Constants

MAX_PEEK_BYTES

Maximum number of bytes a peek prelude should accumulate before declaring the connection’s prefix Unknown. 8 KiB matches what most servers can read in a single non-blocking syscall and covers any realistic TLS ClientHello (with SNI + ALPN + GREASE).