Skip to main content

appcore_security/
lib.rs

1// =============================================================================
2//        #######
3//     ###       ###     F: lib.rs
4//    ##   ## ##   ##    P: AppCore-Runtime
5//         ## ##
6//                       C: 2026/05/29 20:47:35 by dnettoRaw
7//    ##   ## ##   ##    U: 2026/06/04 11:51:26 by dnettoRaw
8//      ###########      S: 0.6.0
9// =============================================================================
10
11//! Security contracts for auth, policy, token trust, and secret boundaries.
12
13#![deny(missing_docs)]
14
15pub mod auth;
16pub mod dnt;
17pub mod hashtoken;
18pub mod policy;
19pub mod redaction;
20pub mod secret;
21mod secret_file;
22mod secret_keyring;
23pub mod token;
24pub mod vault;
25
26pub use auth::{AuthContext, AuthDecision, Authenticator};
27pub use dnt::{DntSecretKeyProvider, DntSecretRefPolicy};
28pub use hashtoken::HashTokenProvider;
29pub use policy::{PolicyCheck, PolicyDecision};
30pub use redaction::redact_text;
31pub use secret::{
32    format_secret_material, new_rotated_secret, parse_secret_material, EnvSecretResolver,
33    PeerCredential, PeerCredentialProvider, SecretBytes, SecretFormatError, SecretResolver,
34    SecretStore, SecuritySecretMaterial, SecuritySecretMetadata, SecuritySecretRef,
35    SecuritySecretStatus, StaticPeerCredentialProvider, StaticSecretResolver,
36};
37pub use secret_file::FileSecretResolver;
38pub use secret_keyring::{
39    FileSecretKeyring, SecretAccessError, SecretAccessResult, FILE_SECRET_KEYRING_FORMAT,
40};
41pub use token::{
42    compute_request_hash, CommandTokenError, CommandTokenFactory, CommandTokenValidator,
43    RequestValidationDetails, RuntimeTokenClaims, SecurityError, SecurityResult, TokenClaims,
44    TokenProvider, DEFAULT_RUNTIME_TOKEN_TTL_MS, LOCAL_ADMIN_SUBJECT,
45};
46pub use vault::{Vault, VaultState};