auths-core 0.0.1-rc.9

Core cryptography and keychain integration for Auths
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58

# Duplicated from workspace clippy.toml — keep in sync
# Clippy does NOT merge per-crate configs with workspace config.
# Any changes to the workspace clippy.toml must be replicated here.

allow-unwrap-in-tests = true
allow-expect-in-tests = true

disallowed-methods = [
  # === Workspace rules (duplicated from root clippy.toml) ===
  { path = "chrono::offset::Utc::now", reason = "inject ClockProvider instead of calling Utc::now() directly", allow-invalid = true },
  { path = "std::time::SystemTime::now", reason = "inject ClockProvider instead of calling SystemTime::now() directly", allow-invalid = true },
  { path = "std::env::var", reason = "use EnvironmentConfig abstraction instead of reading env vars directly", allow-invalid = true },
  { path = "uuid::Uuid::new_v4", reason = "Use UuidProvider::new_id() instead. Inject SystemUuidProvider in production and DeterministicUuidProvider in tests." },

  # === DID/newtype construction: prefer parse() for external input ===
  { path = "auths_verifier::types::IdentityDID::new_unchecked", reason = "Use IdentityDID::parse() for external input. Use #[allow(clippy::disallowed_methods)] with INVARIANT comment for proven-safe paths.", allow-invalid = true },
  { path = "auths_verifier::types::DeviceDID::new_unchecked", reason = "Use DeviceDID::parse() for external input. Use #[allow(clippy::disallowed_methods)] with INVARIANT comment for proven-safe paths.", allow-invalid = true },
  { path = "auths_verifier::types::CanonicalDid::new_unchecked", reason = "Use CanonicalDid::parse() for external input. Use #[allow(clippy::disallowed_methods)] with INVARIANT comment for proven-safe paths.", allow-invalid = true },
  { path = "auths_verifier::core::CommitOid::new_unchecked", reason = "Use CommitOid::parse() for external input. Use #[allow(clippy::disallowed_methods)] with INVARIANT comment for proven-safe paths.", allow-invalid = true },
  { path = "auths_verifier::core::PublicKeyHex::new_unchecked", reason = "Use PublicKeyHex::parse() for external input. Use #[allow(clippy::disallowed_methods)] with INVARIANT comment for proven-safe paths.", allow-invalid = true },

  # === Sans-IO: filesystem ===
  { path = "std::fs::read", reason = "sans-IO crate — use a port trait" },
  { path = "std::fs::read_to_string", reason = "sans-IO crate — use a port trait" },
  { path = "std::fs::write", reason = "sans-IO crate — use a port trait" },
  { path = "std::fs::create_dir", reason = "sans-IO crate — use a port trait" },
  { path = "std::fs::create_dir_all", reason = "sans-IO crate — use a port trait" },
  { path = "std::fs::remove_file", reason = "sans-IO crate — use a port trait" },
  { path = "std::fs::remove_dir", reason = "sans-IO crate — use a port trait" },
  { path = "std::fs::remove_dir_all", reason = "sans-IO crate — use a port trait" },
  { path = "std::fs::copy", reason = "sans-IO crate — use a port trait" },
  { path = "std::fs::rename", reason = "sans-IO crate — use a port trait" },
  { path = "std::fs::metadata", reason = "sans-IO crate — use a port trait" },
  { path = "std::fs::read_dir", reason = "sans-IO crate — use a port trait" },
  { path = "std::fs::canonicalize", reason = "sans-IO crate — use a port trait" },

  # === Sans-IO: process ===
  { path = "std::process::Command::new", reason = "sans-IO crate — use a port trait" },
  { path = "std::process::exit", reason = "sans-IO crate — return errors instead" },

  # === Sans-IO: dirs ===
  { path = "dirs::home_dir", reason = "sans-IO crate — inject paths via config", allow-invalid = true },
  { path = "dirs::config_dir", reason = "sans-IO crate — inject paths via config", allow-invalid = true },
  { path = "dirs::data_dir", reason = "sans-IO crate — inject paths via config", allow-invalid = true },
  { path = "dirs::data_local_dir", reason = "sans-IO crate — inject paths via config", allow-invalid = true },

  # === Sans-IO: network ===
  { path = "reqwest::Client::new", reason = "sans-IO crate — use a port trait for HTTP", allow-invalid = true },
  { path = "reqwest::get", reason = "sans-IO crate — use a port trait for HTTP", allow-invalid = true },
]

disallowed-types = [
  { path = "std::fs::File", reason = "sans-IO crate — use a port trait" },
  { path = "std::fs::OpenOptions", reason = "sans-IO crate — use a port trait" },
  { path = "std::process::Command", reason = "sans-IO crate — use a port trait" },
  { path = "std::net::TcpStream", reason = "sans-IO crate — use a port trait" },
  { path = "std::net::TcpListener", reason = "sans-IO crate — use a port trait" },
]