Expand description
Runtime singleton and cross-cutting behavior shells.
Re-exports§
pub use permission::Action;pub use permission::Permission;pub use permission::PermissionSet;pub use permission::Resource;pub use permission::UnrepresentableIntersection;pub use permission_check::PermissionCheck;pub use permission_check::PermissionDenyReason;pub use permission_check::PermissionVerdict;pub use permission_check::RbacCheck;pub use principal::AuthContext;pub use principal::CardAttribution;pub use principal::InvalidRoleName;pub use principal::PlatformPrincipal;pub use principal::Principal;pub use principal::PrincipalKind;pub use principal::PrincipalRef;pub use principal::RoleRef;pub use request_context::AcceptedAuthority;pub use request_context::DelegationStep;pub use request_context::RequestContext;pub use request_context::TraceParent;pub use request_context::audit_delegation_chain;pub use request_context::delegated_attribution;pub use request_context::needs_root_resolution;pub use request_context::owning_root;
Modules§
- audit
- Audit envelope construction shell and the audit staging seam.
- builtin_
roles - Builtin RBAC roles shared across Wyrd server surfaces.
- otel
- OpenTelemetry wiring shell.
- outbox
- Generic non-blocking, per-tenant batched outbox.
- permission
- Runtime RBAC permission model.
- permission_
check - Runtime permission check contract.
- principal
- Runtime principal identity model.
- redaction
- Redaction sink shell.
- request_
context - Request-scoped runtime context.
- request_
id - Request ID middleware shell.
Structs§
- Bifrost
Schema Scope - One canonical Bifrost catalog and schema pair.
- Bifrost
Table Scope - One exact registered Bifrost table.
- Card
RefScope - A principal’s card authorization set.
- Principal
Id - Stable principal id on auth wire contracts.
Enums§
- Bifrost
Permission Scope - The Bifrost objects one grant reaches.
- Permission
Scope - Objects one permission grant reaches.
- Permission
Scope Error - Why one permission scope is not a valid object identity.
Functions§
- runtime
- Borrow the process-wide Tokio runtime singleton.