Module: Rubino::Attachments::Policy

Defined in:
lib/rubino/attachments/policy.rb

Overview

Reads the secure-by-default knobs from config (attachments.policy). One auditable surface; defaults live in Config::Defaults on the secure branch, explicit user config always wins (Configuration merges over defaults). No state of its own – just a typed view over the config hash.

Class Method Summary collapse

Class Method Details

.allow_kind?(kind) ⇒ Boolean

Returns:

  • (Boolean) 


31
32
33
 
# File 'lib/rubino/attachments/policy.rb', line 31

def allow_kind?(kind)
  allow_kinds.include?(kind.to_sym)
end

.allow_kinds ⇒ Object

Kinds the handler is allowed to process. Anything outside the list is skipped (fail-closed). Symbols for easy comparison with classify.



26
27
28
29
 
# File 'lib/rubino/attachments/policy.rb', line 26

def allow_kinds
  Array(config["allow_kinds"] || %w[image text document archive binary])
    .map { |k| k.to_s.to_sym }
end

.aux_vision_egress? ⇒ Boolean

Egress kill-switch for routing an image to an EXTERNAL auxiliary vision model (the ‘vision` tool). On by default to preserve aux-vision behaviour; an operator sets it false to forbid shipping image bytes off-host. Only an explicit `false` disables egress (opt-out model).

Returns:

  • (Boolean) 


39
40
41
 
# File 'lib/rubino/attachments/policy.rb', line 39

def aux_vision_egress?
  config["aux_vision_egress"] != false
end

.config ⇒ Object 



12
13
14
 
# File 'lib/rubino/attachments/policy.rb', line 12

def config
  Rubino.configuration.dig("attachments", "policy") || {}
end

.inline_text_budget_bytes ⇒ Object 



20
21
22
 
# File 'lib/rubino/attachments/policy.rb', line 20

def inline_text_budget_bytes
  Integer(config["inline_text_budget_bytes"] || 100_000)
end

.max_file_bytes ⇒ Object 



16
17
18
 
# File 'lib/rubino/attachments/policy.rb', line 16

def max_file_bytes
  Integer(config["max_file_bytes"] || 26_214_400)
end