keel.h

Go to the documentation of this file.

 
#ifndef KEEL_H
#define KEEL_H
 
/* ── W^X / no-runtime-codegen invariant ────────────────────────────────
 *
 * Keel is structurally W^X: it contains no JIT, no `dlopen`, no
 * `mmap PROT_EXEC`, no `memfd_create`, no `MAP_JIT`. The HTTP/2,
 * WebSocket, multipart, and URL parsers all operate on heap + stack
 * memory only; libFuzzer targets in `fuzz/` exercise these paths.
 *
 * Keel does not own a process boundary — W^X enforcement at the
 * kernel-sandbox layer (seccomp / Seatbelt / Hardened Runtime) is the
 * host application's responsibility. See SECURITY.md for the host
 * policy Keel composes under.
 *
 * The macros below are reserved opt-in flags. We do not define them;
 * any future configuration that turns one on must clear this guard
 * and intentionally weaken Keel's posture. The build fails until
 * that happens, so the policy violation cannot land silently. */
#if defined(KEEL_ENABLE_JIT)
#error "Keel's W^X policy forbids runtime JIT (KEEL_ENABLE_JIT)."
#endif
#if defined(KEEL_ENABLE_DYNAMIC_CODE)
#error "Keel's W^X policy forbids runtime dynamic code (KEEL_ENABLE_DYNAMIC_CODE)."
#endif
#if defined(KEEL_ENABLE_DLOPEN)
#error "Keel's W^X policy forbids dlopen (KEEL_ENABLE_DLOPEN)."
#endif
 
#define KL_VERSION_MAJOR  1
#define KL_VERSION_MINOR  2
#define KL_VERSION_PATCH  0
#define KL_VERSION_STRING "1.2.0"
 
#include <keel/error.h>
#include <keel/allocator.h>
#include <keel/event.h>
#include <keel/event_ctx.h>
#include <keel/request.h>
#include <keel/body_reader.h>
#include <keel/body_reader_multipart.h>
#include <keel/chunked.h>
#include <keel/parser.h>
#include <keel/response.h>
#include <keel/router.h>
#include <keel/tls.h>
#include <keel/h2.h>
#include <keel/h2_server.h>
#include <keel/h2_client.h>
#include <keel/file_io.h>
#include <keel/connection.h>
#include <keel/server.h>
#include <keel/cors.h>
#include <keel/websocket.h>
#include <keel/websocket_server.h>
#include <keel/websocket_client.h>
#include <keel/async.h>
#include <keel/thread_pool.h>
#include <keel/url.h>
#include <keel/resolver.h>
#include <keel/resolver_cache.h>
#include <keel/client.h>
#include <keel/client_pool.h>
#include <keel/redirect.h>
#include <keel/compress.h>
#include <keel/decompress.h>
#include <keel/drain.h>
#include <keel/sse.h>
#include <keel/timer.h>
 
#endif