enforce

package

v0.4.5 Latest Latest Go to latest Published: Oct 16, 2026 License: MIT Imports: 27 Imported by: 0

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/commonforge-dev/codemeld

Links

Open Source Insights

Documentation ¶

Rendered for

Overview ¶

Package enforce reports the session-level execution capability.

Index ¶

Constants
func RunHelper(args []string) int
func WritePolicyFrame(w io.Writer, p Policy) error
type Capability
type Leg
type Policy
- func ReadPolicyFrame(r io.Reader) (Policy, error)
type Resolution
- func Resolve(in ResolveInput) Resolution
- func (r Resolution) SandboxLabel(modeKey string) string
- func (r Resolution) SandboxState(modeKey string) string
type ResolveInput

Constants ¶

View Source

const (
	HelperCommand          = "__codemeld_confine"
	ProbeArg               = "--probe"
	ControlArg             = "--control"
	SetupFailureExitCode   = 125
	ModePlan               = "plan"
	ModeAutoEdits          = "auto_edits"
	NetworkAccessAuthority = "network access"
	MaxPolicyFrameBytes    = 64 * 1024
)

Variables ¶

This section is empty.

Functions ¶

func RunHelper ¶

func RunHelper(args []string) int

func WritePolicyFrame ¶

func WritePolicyFrame(w io.Writer, p Policy) error

Types ¶

type Capability ¶

type Capability string

const (
	Constrained Capability = "constrained"
	Refused     Capability = "refused"
)

type Leg ¶

type Leg struct {
	Name       string
	Observed   string
	Diagnostic string
}

type Policy ¶

type Policy struct {
	Mode                 string   `json:"mode"`
	ExceptionalAuthority string   `json:"exceptional_authority"`
	BlockedPaths         []string `json:"blocked_paths"`
	WriteRoots           []string `json:"write_roots"`
	NoWritePaths         []string `json:"no_write_paths"`
	TmpDir               string   `json:"tmp_dir"`
}

func ReadPolicyFrame ¶

func ReadPolicyFrame(r io.Reader) (Policy, error)

type Resolution ¶

type Resolution struct {
	Capability     Capability
	Reason         string
	Legs           []Leg
	SelfTestPassed bool
}

func Resolve ¶

func Resolve(in ResolveInput) Resolution

func (Resolution) SandboxLabel ¶

func (r Resolution) SandboxLabel(modeKey string) string

func (Resolution) SandboxState ¶

func (r Resolution) SandboxState(modeKey string) string

type ResolveInput ¶

type ResolveInput struct {
	Home             string
	HelperExecutable string
}

Source Files ¶

View all Source files

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL