revault_vault_api 0.0.1

reVault API for creating and managing vaults
Documentation

Native vault and open-cache support for reVault.

This crate includes the Lockbox Session Agent, a local open-cache service that reduces password prompts by keeping lockbox content keys in a short-lived, in-memory process cache.

The Lockbox Session Agent is started as a platform-specific local service (Unix socket on Unix, named pipe on Windows), and is used automatically by lockbox operations when a secret-dependent command needs a cached key. Its cache uses secure frames for key-bearing traffic, supports TTL-based expiry, supports explicit session management commands, and automatically clears cache entries during suspend events.

Key public entry points:

  • serve_agent starts the session agent in-process.
  • get, put, forget, forget_all, list, and stop operate the session cache.
  • begin_secret_activity and SecretActivityGuard support suspend-protection and optional process termination behavior.
  • local_vault manages the on-disk vault and metadata outside the agent cache.

For the runtime behavior, command integration, and security settings, see the project documentation in docs/lockbox_session_agent.md.