Module vault 

Structs

AccessSlotLabel

Local-only label for one access slot in a remembered lockbox.

AgentClient

Content-key store backed by the platform session agent.

AgentSleepSupport

Platform sleep/suspend capabilities used by the lockbox session agent.

CachedLockbox

KnownLockbox

Lockbox path remembered by the local vault for diagnostics and bulk access refresh operations.

NoopStore

Content-key store that never retains keys.

PlatformSecretStoreStatus

Current platform secret-store state for the default local vault.

ProfileGeneration

One generation of a vault profile.

ProfileHistory

Versioned profile history for one vault profile.

ReadOnlyVaultDirectory

Read-only view of encrypted vault metadata.

SecretActivityGuard

Registration guard for a command that may hold decrypted secrets in memory.

SecretString

SecretVec

StoredContact

Contact entry stored in a VaultDirectory.

Vault

High-level lockbox helper that integrates open operations with a key cache.

VaultBackupManifest

Metadata stored in an encrypted vault backup archive.

VaultDirectory

Password-protected local vault file for native reVault metadata.

Enums

AutoOpenScope

Scope controlled by the session auto-open setting.

KeyFormat

Supported contact key serialization formats.

ProfileGenerationStatus

SecretActivityKind

Constants

CURRENT_VAULT_STRUCTURE_VERSION

Current on-disk structure version for records stored inside the local vault.

FINGERPRINT_CODE_96_LEN

PUBLIC_KEY_FINGERPRINT_LEN

Traits

ContentKeyStore

Storage backend for opened Lockbox content keys.

Functions

agent_log_destination

agent_log_path

agent_sleep_support

Returns sleep/suspend capabilities compiled for the current platform.

auto_open_scope

backup_default_vault

Writes a consistent encrypted backup archive for the default local vault.

begin_secret_activity

Registers the current process as running a high-level secret activity.

decode_fingerprint_crockford_96

Decodes a 96-bit lower/upper-case Crockford fingerprint code.

decode_fingerprint_hex

Decodes a public-key fingerprint written as hex, with optional separators.

decode_hex

Decodes hexadecimal text into bytes.

default_vault_dir

Returns the default directory for the local vault.

default_vault_path

Returns the default path to the local vault file.

disable_platform_secret_store

Disables platform secret-store lookup for the default local vault.

enable_platform_secret_store

Enables platform secret-store lookup for the default local vault.

encode_hex

Encodes bytes as lowercase hexadecimal text.

export_private_key

Exports a contact private key in the requested format.

export_public_key

Exports a contact public key in the requested format.

forget

Removes one content key from the platform agent.

forget_all

Removes all content keys from the platform agent.

forget_owner_signing_key

Removes one cached owner-signing key.

forget_platform_vault_password

Removes the default local vault password from the platform secret store.

forget_vault_unlock_key

Removes the cached vault unlock secret for one vault.

format_fingerprint_crockford_96

Formats the first 96 bits of a fingerprint as lower-case Crockford Base32.

format_fingerprint_crockford_96_reading

Returns a lower-case word reading for a Crockford fingerprint code.

format_fingerprint_hex_pairs

Formats fingerprint bytes as lowercase space-separated hexadecimal pairs.

get

Reads a cached content key from the platform agent.

get_owner_signing_key

Reads one cached owner-signing key for a specific vault profile.

get_platform_vault_password

Loads the default local vault password from the platform secret store.

get_vault_unlock_key

Reads the cached vault unlock secret for a specific vault profile.

import_private_key

Imports a contact private key from PEM, JWK, JWKS-compatible JWK, or hex.

import_private_key_file

Reads and imports a contact private key from a file.

import_public_key

Imports a contact public key from Lockbox PEM, JWK, JWKS, or raw hex.

is_running

Returns true when the platform agent transport is currently reachable.

list

Lists cached lockboxes known to the platform agent.

local_vault

Creates a Vault backed by the default platform agent.

platform_secret_store_disabled

Returns true when platform secret-store lookup should not be attempted.

platform_secret_store_status

Returns the platform secret-store status for the default local vault.

public_key_fingerprint

Returns the stable fingerprint for a contact public key.

put

Stores a content key in the platform agent.

put_owner_signing_key

Caches an owner-signing key that was already loaded by the normal vault flow. The key remains in secure memory while it crosses the local IPC boundary and inside the agent cache.

put_platform_vault_password

Stores the default local vault password in the platform secret store.

put_vault_unlock_key

Caches a vault unlock secret obtained through the normal vault flow.

restore_default_vault

Restores the default local vault from an encrypted backup archive.

serve_agent

Runs the platform content-key agent in the current process.

set_auto_open_scope

start

Starts the session agent if it is not already running.

stop

Stops the platform agent after clearing all cached content keys.

verify_agent_transport_security

Verifies that the current platform agent transport is configured securely.

Type Aliases

LocalVault

Vault using the default platform agent as its content-key store.