Struct GlovesConfig 

pub struct GlovesConfig {
    pub source_path: PathBuf,
    pub root: PathBuf,
    pub private_paths: BTreeMap<String, PathBuf>,
    pub daemon: DaemonBootstrapConfig,
    pub vault: VaultBootstrapConfig,
    pub defaults: DefaultBootstrapConfig,
    pub agents: BTreeMap<String, AgentAccessPolicy>,
    pub secret_access: BTreeMap<String, SecretAccessPolicy>,
    pub agent_vault_access: BTreeMap<String, AgentVaultAccessPolicy>,
    pub integrations: BTreeMap<String, IntegrationConfig>,
    pub secret_pipe_commands: BTreeMap<String, SecretPipeCommandPolicy>,
}

Effective and validated .gloves.toml configuration.

Fields

source_path: PathBuf

Absolute config file path.

root: PathBuf

Effective runtime root.

private_paths: BTreeMap<String, PathBuf>

Private path aliases resolved to absolute paths.

daemon: DaemonBootstrapConfig

Effective daemon defaults.

vault: VaultBootstrapConfig

Effective vault mode.

defaults: DefaultBootstrapConfig

Effective global defaults.

agents: BTreeMap<String, AgentAccessPolicy>

Agent access policies.

secret_access: BTreeMap<String, SecretAccessPolicy>

Agent secret ACL policies.

agent_vault_access: BTreeMap<String, AgentVaultAccessPolicy>

Agent vault access policies.

integrations: BTreeMap<String, IntegrationConfig>

Configured integrations.

secret_pipe_commands: BTreeMap<String, SecretPipeCommandPolicy>

Per-command secret pipe policies.

Implementations

impl GlovesConfig

pub fn load_from_path( path: impl AsRef<Path>, ) -> Result<GlovesConfig, GlovesError>

Loads and validates a config file from disk.

pub fn parse_from_str( raw: &str, source_path: impl AsRef<Path>, ) -> Result<GlovesConfig, GlovesError>

Parses and validates config from TOML text.

pub fn agent_paths( &self, agent: &AgentId, ) -> Result<Vec<ResolvedAgentPathAccess>, GlovesError>

Returns resolved private-path visibility for one agent.

pub fn has_secret_acl(&self) -> bool

Returns true when the config enables per-agent secret ACLs.

pub fn secret_access_policy( &self, agent: &AgentId, ) -> Option<&SecretAccessPolicy>

Returns secret ACL policy for one agent.

pub fn agent_vault_access_policy( &self, agent: &AgentId, ) -> Option<&AgentVaultAccessPolicy>

Returns vault access policy for one agent.

pub fn vault_mount_path(&self, mount_name: &str) -> Option<&PathBuf>

Returns one configured vault mount path.

pub fn integration(&self, name: &str) -> Option<&IntegrationConfig>

Returns one configured integration.

pub fn inferred_integration_refs( &self, name: &str, ) -> Result<Vec<String>, GlovesError>

Returns inferred secret refs for one configured integration.

pub fn secret_pipe_command_policy( &self, command: &str, ) -> Option<&SecretPipeCommandPolicy>

Returns secret pipe policy for one executable command.

Trait Implementations

impl Clone for GlovesConfig

fn clone(&self) -> GlovesConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for GlovesConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for GlovesConfig

fn deserialize<__D>( __deserializer: __D, ) -> Result<GlovesConfig, <__D as Deserializer<'de>>::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl PartialEq for GlovesConfig

fn eq(&self, other: &GlovesConfig) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for GlovesConfig

fn serialize<__S>( &self, __serializer: __S, ) -> Result<<__S as Serializer>::Ok, <__S as Serializer>::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl Eq for GlovesConfig

impl StructuralPartialEq for GlovesConfig