Function parse_binary_capability

crates/openshell-prover/src/registry.rs:196–233

(contents: &str, source: &str)

// ---------------------------------------------------------------------------

fn parse_binary_capability(contents: &str, source: &str) -> Result<BinaryCapability> {
    let raw: BinaryCapabilityDef = serde_yml::from_str(contents)
        .into_diagnostic()
        .wrap_err_with(|| format!("parsing binary descriptor {source}"))?;

    let protocols = raw
        .protocols
        .into_iter()
        .map(|p| {
            let actions = p
                .actions
                .into_iter()
                .map(|a| BinaryAction {
                    name: a.name,
                    action_type: ActionType::from_str(&a.action_type),
                    description: a.description,
                })
                .collect();
            BinaryProtocol {
                name: p.name,
                transport: p.transport,
                description: p.description,
                bypasses_l7: p.bypasses_l7,
                actions,
            }
        })
        .collect();

    Ok(BinaryCapability {
        path: raw.binary,
        description: raw.description,
        protocols,
        spawns: raw.spawns,
        can_exfiltrate: raw.can_exfiltrate,
        exfil_mechanism: raw.exfil_mechanism,
        can_construct_http: raw.can_construct_http,
    })
}

/// Load binary registry from the compile-time embedded registry data.
pub fn load_embedded_binary_registry() -> Result<BinaryRegistry> {