wardn 0.4.1

Credential isolation proxy — agents never see real API keys
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52

pub mod config;
pub mod daemon;
pub mod mcp;
pub mod migrate;
pub mod proxy;
pub mod vault;

pub use config::WardenConfig;
pub use vault::placeholder::PlaceholderToken;
pub use vault::Vault;

#[derive(Debug, thiserror::Error)]
pub enum WardenError {
    #[error("vault not found at {path}")]
    VaultNotFound { path: String },

    #[error("wrong passphrase or corrupted vault")]
    DecryptionFailed,

    #[error("credential '{name}' not found")]
    CredentialNotFound { name: String },

    #[error("agent '{agent_id}' not authorized for credential '{credential}'")]
    Unauthorized {
        agent_id: String,
        credential: String,
    },

    #[error("domain '{domain}' not allowed for credential '{credential}'")]
    DomainNotAllowed { domain: String, credential: String },

    #[error("rate limit exceeded for '{credential}' by agent '{agent_id}', retry after {retry_after_seconds}s")]
    RateLimitExceeded {
        credential: String,
        agent_id: String,
        retry_after_seconds: u64,
    },

    #[error("configuration error: {0}")]
    Config(String),

    #[error("io error: {0}")]
    Io(#[from] std::io::Error),

    #[error("encryption error: {0}")]
    Encryption(String),

    #[error("invalid vault format: {0}")]
    InvalidFormat(String),
}

pub type Result<T> = std::result::Result<T, WardenError>;