Directories
¶
| Path | Synopsis |
|---|---|
|
auth
|
|
|
oidc
Package oidc performs OIDC/OAuth2 authentication and returns an ID token.
|
Package oidc performs OIDC/OAuth2 authentication and returns an ID token. |
|
Package breakerpool provides a generic circuit breaker pool with priority-based failover.
|
Package breakerpool provides a generic circuit breaker pool with priority-based failover. |
|
Package hostpattern implements the hostname-pattern language shared by inventory resolution and Writ host selectors.
|
Package hostpattern implements the hostname-pattern language shared by inventory resolution and Writ host selectors. |
|
Package oidctest provides a minimal in-process OIDC provider for tests.
|
Package oidctest provides a minimal in-process OIDC provider for tests. |
|
inventory
Package inventory resolves the entities a writ policy matches against: users (SCIM-shaped, RFC 7643) and hosts (name + labels + optional account list).
|
Package inventory resolves the entities a writ policy matches against: users (SCIM-shaped, RFC 7643) and hosts (name + labels + optional account list). |
|
writpolicy
Package writpolicy implements the policy server's PolicyEvaluator over a compiled writ policy, an inventory, and registries of requirement handlers, flag sources, and notify targets.
|
Package writpolicy implements the policy server's PolicyEvaluator over a compiled writ policy, an inventory, and registries of requirement handlers, flag sources, and notify targets. |
|
Package principal implements Epithet's deterministic SSH certificate principal schemes.
|
Package principal implements Epithet's deterministic SSH certificate principal schemes. |
|
Package serviceauth mints and verifies short-lived, request-bound JWTs that authenticate CA -> policy-server requests.
|
Package serviceauth mints and verifies short-lived, request-bound JWTs that authenticate CA -> policy-server requests. |
|
Package tlsconfig provides shared TLS configuration for HTTP clients.
|
Package tlsconfig provides shared TLS configuration for HTTP clients. |
|
Package wire holds every type that crosses a process boundary (CA, policy server, CA client).
|
Package wire holds every type that crosses a process boundary (CA, policy server, CA client). |
|
Package writ is the facade over the writ policy language frontend: parse, check, and lower to the IL in one call.
|
Package writ is the facade over the writ policy language frontend: parse, check, and lower to the IL in one call. |
|
ast
Package ast is the parsed form of a writ policy file, a direct port of the retired Rust spike's ast.rs (the porting reference named by SPEC §12.11).
|
Package ast is the parsed form of a writ policy file, a direct port of the retired Rust spike's ast.rs (the porting reference named by SPEC §12.11). |
|
compile
Package compile checks a parsed writ file for well-formedness and lowers it to the IL.
|
Package compile checks a parsed writ file for well-formedness and lowers it to the IL. |
|
diag
Package diag holds source positions and diagnostics for the writ policy language.
|
Package diag holds source positions and diagnostics for the writ policy language. |
|
eval
Package eval is SPEC §8 as a pure function: order-independent evaluation of a compiled policy against one (user, host, account) request.
|
Package eval is SPEC §8 as a pure function: order-independent evaluation of a compiled policy against one (user, host, account) request. |
|
il
Package il is writ's intermediate language: the compiled rule format per SPEC §10–11.
|
Package il is writ's intermediate language: the compiled rule format per SPEC §10–11. |
|
parser
Package parser turns writ policy source into the AST.
|
Package parser turns writ policy source into the AST. |
Click to show internal directories.
Click to hide internal directories.