Enum SafetyClass 

pub enum SafetyClass {
    InProcessTrusted,
    SandboxedExecution,
    LocalRuntimeExecution,
    NetworkEgress,
}

What a dynamic provider’s handler is capable of doing when invoked, classified from the provider manifest kind.

Variants

InProcessTrusted

Trusted Rust compiled into this binary (static-rust).

SandboxedExecution

Guest code executed inside a sandboxed runtime (wasm).

LocalRuntimeExecution

Handlers executed by a local script runtime with host access (ai-sdk TypeScript, python, langchain, llamaindex).

NetworkEgress

Handlers whose execution is a network call to an upstream service (mcp, openapi).

Implementations

impl SafetyClass

pub fn classify_provider_kind(kind: &str) -> Option<Self>

Classifies a provider manifest kind string. Unknown kinds return None, which authorize denies with reasons::DENIED_UNCLASSIFIED_TARGET.

pub fn as_str(self) -> &'static str

Stable kebab-case identifier for this class, for logging and warnings.

pub fn requires_local_trust_when_inline(self) -> bool

Whether inline execution of this class additionally requires a trusted-local caller even when the affinity scope is held.

Trait Implementations

impl Clone for SafetyClass

fn clone(&self) -> SafetyClass

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for SafetyClass

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl PartialEq for SafetyClass

fn eq(&self, other: &SafetyClass) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Copy for SafetyClass

impl Eq for SafetyClass

impl StructuralPartialEq for SafetyClass