Expand description
Agent runtime and IPC.
Re-exports§
pub use client::AgentStatus;pub use client::add_identity;pub use client::agent_sign;pub use client::check_agent_status;pub use client::list_identities;pub use client::remove_all_identities;
Modules§
- client
- SSH agent client for communicating with a running agent.
Structs§
- Agent
Core - An in-memory registry of SSH keys used by the local agent. Stores seeds securely using SecureSeed (zeroize-on-drop) with curve tags. Note: Clone is intentionally NOT derived to prevent accidental copying of key material.
- Agent
Handle - A handle to an agent instance that manages its lifecycle.
- Agent
Session - Wraps an
AgentHandleto implement thessh_agent_lib::agent::Sessiontrait. - Allow
AllSigning - The permissive authorizer: every signature is allowed. Used for in-process/default sessions and for explicitly non-interactive (headless/automation) contexts.
- Peer
Identity - The identity of a process connected to the agent socket, read from the peer credentials of the connection.
- PerCaller
Authorizer - Per-caller signing approval — the policy for #354. The first time a given peer
process asks to sign, the injected
approvefunction is consulted (e.g. a biometric / user prompt). Approved peers are pinned for the life of this authorizer (the unlock window), so the legitimate caller is not re-prompted on every signature, while a different process triggers a fresh approval.
Constants§
- DEFAULT_
IDLE_ TIMEOUT - Default idle timeout (30 minutes)
Traits§
- Sign
Authorizer - Decides whether a connected peer may make the agent sign right now.