List of all items

Structs

• agent::AgentSession
• agent::AgentSessionOutcome
• agent::CellRecord
• audit::AuditCellosContext
• audit::AuditClipboardContext
• audit::AuditContext
• audit::AuditEntry
• audit::AuditEnvMapping
• audit::AuditExecContext
• audit::AuditLog
• audit::AuditRevealContext
• audit_explain::AuditSession
• audit_explain::AuditTimeline
• audit_explain::AuthorityContractDiff
• audit_explain::ExecutionAuthoritySummary
• audit_explain::ExplainedAuditOperation
• baseline_contracts::BaselineContract
• baseline_contracts::SecretConstraints
• compliance_narrative::ComplianceNarrative
• compliance_narrative::DeniedAndStripped
• compliance_narrative::GrantedAuthority
• compliance_narrative::TargetDecisionChain
• contracts::AuthorityContract
• contracts::AuthorityTargetEvaluation
• contracts::CustomAuthorityTrust
• contracts::ResolvedAuthorityPolicy
• crypto::VaultKey
• events::CloudEvent
• health::HealthReport
• health::HealthSignal
• health::VaultHealthMeta
• lifecycle::OperationClassification
• profile::LookalikeMatch
• profile::ProfileBundle
• profile::ProfileMeta
• pullconfig::PullConfig
• pushconfig::PushConfig
• sync::MergeDecision
• sync::MergeResult
• vault::HistoryEntry
• vault::KdfParams
• vault::SecretEntry
• vault::Vault
• vault::VaultChallenge
• vault::VaultFile

Enums

• agent::AgentRequest
• agent::AgentResponse
• agent::AgentSessionState
• agent::CellState
• agent::CellosRequest
• agent::CellosResponse
• audit::AuditStatus
• audit::AuditVerifyError
• audit_explain::ExecutionGap
• audit_explain::ExplainedOperationKind
• audit_explain::SessionBoundary
• baseline_contracts::AccessLevel
• contracts::AuthorityInheritMode
• contracts::AuthorityNetworkPolicy
• contracts::AuthorityTargetDecision
• contracts::AuthorityTrust
• contracts::AuthorityTrustLevel
• crypto::CipherKind
• crypto::KeyPurpose
• crypto::KeySchedule
• deny_reason::DenyReason
• errors::SafeError
• health::OverallHealth
• health::SignalSeverity
• lifecycle::CredentialHelperLifecycleState
• lifecycle::LifecycleState
• lifecycle::OperationKind
• lifecycle::PolicyLifecycleState
• lifecycle::SecretLifecycleState
• lifecycle::SessionLifecycleState
• lifecycle::ShareLifecycleState
• lifecycle::SyncLifecycleState
• lifecycle::TeamLifecycleState
• lifecycle::VaultLifecycleState
• profile::ExecCustomInheritMode
• profile::ExecMode
• pullconfig::PullSource
• pullconfig::VaultAuthConfig
• pushconfig::PushSource
• rbac::RbacCapability
• rbac::RbacProfile
• snapshot::SnapDiffEntry
• sync::MergeState

Functions

• age_crypto::decrypt_with_identities
• age_crypto::encrypt_to_recipients
• age_crypto::generate_identity
• age_crypto::load_identities
• age_crypto::parse_recipient
• age_crypto::parse_recipients
• agent::agent_sock_path
• agent::cellos_socket_path
• agent::clear_agent_sock
• agent::format_agent_sock
• agent::parse_agent_sock
• agent::ping_agent
• agent::pipe_name
• agent::read_agent_sock
• agent::read_agent_sock_env
• agent::request_password_from_agent
• agent::send_lock
• agent::write_agent_sock
• audit::audit_log_size_bytes
• audit::compute_entry_hmac
• audit_explain::explain_entries
• audit_explain::explain_entries_with_gap
• baseline_contracts::baseline_contracts
• baseline_contracts::ci_deploy_contract
• baseline_contracts::ops_emergency_contract
• baseline_contracts::read_only_contract
• contracts::find_contracts_manifest
• contracts::load_contract
• contracts::load_contracts
• crypto::decode_b64
• crypto::decrypt
• crypto::decrypt_for_cipher
• crypto::decrypt_with_key_schedule
• crypto::default_vault_cipher
• crypto::derive_key
• crypto::derive_labeled_subkey
• crypto::derive_subkey
• crypto::detect_key_schedule
• crypto::encode_b64
• crypto::encrypt
• crypto::encrypt_for_cipher
• crypto::encrypt_with_key_schedule
• crypto::parse_cipher_kind
• crypto::random_nonce
• crypto::random_salt
• crypto::snap_decrypt
• crypto::snap_encrypt
• env::clean_env_command
• env::command_with_secrets
• env::command_with_secrets_and_extra_strips
• env::exec_clean_env
• env::exec_with_secrets
• env::format_docker_env
• env::format_dotenv
• env::format_env
• env::format_github_actions
• env::format_json
• env::format_powershell
• env::format_toml
• env::format_yaml
• env::is_dangerous_injected_env_name
• env::parse_dotenv
• env::sensitive_parent_env_vars
• events::audit_op_to_ce_type
• events::emit
• events::emit_event
• events::key_ref
• gen::effective_pool_size
• gen::generate
• gen::generate_unambiguous
• health::collect_health
• keyring_store::has_password
• keyring_store::looks_like_stale_credential
• keyring_store::probe_credential_store
• keyring_store::quick_unlock_storage_note
• keyring_store::remove_password
• keyring_store::retrieve_password
• keyring_store::store_password
• lifecycle::classify_operation
• migrate::run
• namespace_bulk::apply_namespace_copy
• namespace_bulk::apply_namespace_move
• namespace_bulk::dest_key_namespace_reprefix
• namespace_bulk::keys_under_namespace_prefix
• namespace_bulk::plan_namespace_bulk
• namespace_bulk::validate_namespace_segment
• profile::add_exec_extra_sensitive_parent_var
• profile::app_data_dir
• profile::app_state_dir
• profile::audit_dir
• profile::audit_log_path
• profile::browser_hostname_fill_guard
• profile::browser_profiles_path
• profile::config_path
• profile::default_age_identity_path
• profile::ensure_profile_meta
• profile::export_profile
• profile::get_auto_quick_unlock
• profile::get_backup_new_profile_passwords_to
• profile::get_default_profile
• profile::get_exec_auto_redact_output
• profile::get_exec_custom_deny_dangerous_env
• profile::get_exec_custom_inherit_mode
• profile::get_exec_extra_sensitive_parent_vars
• profile::get_exec_mode
• profile::get_quick_unlock_retry_cooldown_secs
• profile::import_profile
• profile::is_profile_protected
• profile::list_profiles
• profile::load_browser_profiles
• profile::lookalike_check
• profile::profile_exists
• profile::profile_meta_path
• profile::read_profile_meta
• profile::remove_exec_extra_sensitive_parent_var
• profile::rename_profile_snapshot_history
• profile::resolve_age_identity_path
• profile::resolve_browser_profile
• profile::set_auto_quick_unlock
• profile::set_backup_new_profile_passwords_to
• profile::set_default_profile
• profile::set_exec_auto_redact_output
• profile::set_exec_custom_deny_dangerous_env
• profile::set_exec_custom_inherit_mode
• profile::set_exec_mode
• profile::set_profile_protected
• profile::set_quick_unlock_retry_cooldown_secs
• profile::validate_env_var_name
• profile::validate_profile_name
• profile::vault_dir
• profile::vault_path
• profile::write_profile_meta
• pullconfig::expand_env_var_str
• pullconfig::find_config
• pullconfig::load
• pushconfig::find_config
• pushconfig::load
• snapshot::diff_at
• snapshot::diff_latest
• snapshot::export
• snapshot::list
• snapshot::restore
• snapshot::restore_latest
• snapshot::snapshot_dir
• snapshot::take
• sync::three_way_merge
• team::add_member
• team::add_member_with_access_profile
• team::create_team_vault
• team::create_team_vault_with_access_profile
• team::is_team_vault
• team::members
• team::remove_member
• team::remove_member_with_access_profile
• team::unwrap_dek
• totp::extract_base32
• totp::generate_code
• totp::seconds_remaining
• update::check_for_update
• update::display_version
• vault::parse_rotation_days
• vault::rotation_due
• vault::validate_secret_key

Type Aliases

• errors::SafeResult

Constants

• agent::ENV_AGENT_SOCK
• agent::ENV_CELLOS_SOCK
• audit_explain::DEFAULT_SESSION_GAP_MINUTES
• crypto::KEY_LEN
• crypto::NONCE_LEN
• crypto::SALT_LEN
• crypto::VAULT_KDF_M_COST
• crypto::VAULT_KDF_P_COST
• crypto::VAULT_KDF_T_COST
• crypto::XCHACHA20POLY1305_NONCE_LEN
• env::MINIMAL_ENV_VARS
• migrate::CURRENT_SCHEMA
• snapshot::DEFAULT_SNAPSHOT_KEEP
• update::PKG_VERSION
• vault::DEFAULT_HISTORY_KEEP