agent_mesh_protocol/
lib.rs

1//! Cryptographic primitives for the agent-mesh.
2//!
3//! This crate provides the identity layer the rest of the workspace
4//! builds on:
5//!
6//! * [`UserKey`] — root of trust, one ed25519 keypair per user.
7//! * [`AgentKey`] — short-lived per-process sub-key, certified by a
8//!   `UserKey` via a [`CertChain`].
9//! * [`GitHubBinding`] — cross-signature linking a `UserKey` to the
10//!   ed25519 SSH key GitHub already knows about.
11//! * [`SignedEnvelope`] — the wire format every mesh message is
12//!   wrapped in.
13//! * [`Fingerprint`] — short BLAKE3 identifier for keys and content.
14//!
15//! All wall-clock time in this crate is treated as a *claim* (e.g.
16//! `AgentMetadata::issued_at`), never as a coordination primitive.
17//! See the project `CLAUDE.md` for the rationale.
18
19#![doc(html_root_url = "https://docs.rs/agent-mesh-protocol")]
20
21pub mod agent_key;
22pub mod assertion;
23pub mod authority;
24pub mod caveats;
25pub mod envelope;
26pub mod error;
27pub mod fingerprint;
28pub mod github_binding;
29pub mod revocation;
30pub mod signer;
31pub mod user_key;
32
33#[cfg(feature = "pyo3")]
34pub mod pyo3_module;
35
36pub use agent_key::{AgentKey, AgentMetadata, CertChain, Issuer, SerdeSig};
37pub use assertion::Assertion;
38pub use authority::{
39    admit, check_derivation, empty_closure, relate, verify_chain, AdmissionDecision,
40    AdmissionReject, AttestationId, AttestationVerifier, Authority, AuthorityId, AuthorityMismatch,
41    BindError, ChainDecision, ChainReject, ConfinedAxis, DenyAllElevations, Derivation,
42    DerivationDecision, DerivationReject, Grant, GrantId, ResolvedAuthority, ResolvedGrant,
43    ResolvedScope, ScopeRelation,
44};
45pub use caveats::{Caveats, CountBound, Scope};
46pub use envelope::{Recipient, SignedEnvelope};
47pub use error::{MeshError, Result};
48pub use fingerprint::Fingerprint;
49pub use github_binding::{ssh_pubkey_ed25519_bytes, GitHubBinding};
50pub use revocation::{RevocationEntry, RevocationLog, RevocationState, Seen, SignedEntry};
51pub use signer::MeshSigner;
52pub use user_key::{UserKey, UserPublic};
agent_mesh_protocol/lib.rs

agent_mesh_protocol/
lib.rs
