Crate treetop_bundle 

Compile, validate, sign, and load deterministic Treetop policy bundles.

Structs

ArchiveLimits

Default and configured archive limits.

BundleArchive

An in-memory gzip-compressed Treetop bundle archive.

BundleBuilder

Compiler entry point for an organization bundle manifest.

BundleManifest

A validated organization-level source manifest.

BundleSignature

Detached signature metadata stored in signature.json.

Diagnostic

A stable, serializable compiler diagnostic.

LabelPattern

A validated regular-expression label mapping.

LabelRule

A validated label rule.

LabelSet

A validated set of label rules.

ModuleManifest

A validated project-level source manifest.

ModuleSelection

A module selected by a bundle manifest.

PolicyCheck

Result of checking a standalone Cedar policy document.

SigningKey

An Ed25519 private signing key loaded from PKCS#8 PEM.

TrustStore

Trusted public keys indexed by their content-derived key IDs.

TrustedKey

A trusted Ed25519 public key loaded from SPKI PEM.

ValidatedBundle

A decoded bundle whose signatures, hashes, Cedar, schema, and labels are valid.

VerifiedSignature

Signature verification details for a validated bundle.

Enums

BundleError

Errors produced while compiling or decoding a bundle.

DiagnosticSeverity

Severity of a bundle diagnostic.

ModuleRole

Module policy scope selected by the organization bundle manifest.

PreparedEngine

A prepared engine retaining the bundle’s schema validation capability.

PreparedEvaluationSession

One frozen authorization generation, retaining its schema mode.

SignaturePolicy

Signature requirements applied while opening an archive.

Constants

CEDAR_VERSION

The exact Cedar version used to compile bundles.

FORMAT_VERSION

The archive format emitted and accepted by this crate.

TREETOP_CORE_VERSION

The exact Treetop core version used to prepare policy engines.

Functions

check_module

Check one module in isolation. Declared imports are accepted but need not be present.

check_policy

Check policy syntax and optionally validate it against a complete schema and labels.

Type Aliases

Result