Bascule shell runtime workspace — governed shell access layer for Substrate/Guildhouse FFC deployments. Crates: - bascule-agent: node agent with SSH server + command filtering - bascule-core: audit, grant engine, ceremony types, session - bascule-filter-core: log line filtering (stdio protocol) - bascule-gateway: OIDC auth, session management, SAT validation - bascule-node-agent: k8s DaemonSet agent (pod watcher, BPF manager) - bascule-proto: protobuf definitions - bascule-shell: governed SSH shell (commands, elevation, REPL) - bascule-tail: chronicle log tail + fanout - ceremony-engine: ceremony lifecycle (6 types + request/resolution) 172 tests passing. Implements SBS-SPEC-0001 shell model. Reference impl for SPEC-SHELLOPS-0001 Layer 1 (root shell).
23 lines
798 B
TOML
23 lines
798 B
TOML
[package]
|
|
name = "ceremony-engine"
|
|
version = "0.1.0"
|
|
edition = "2021"
|
|
description = "Governed state machine for multi-party approval workflows"
|
|
|
|
[dependencies]
|
|
# Cross-workspace path dep — CeremonyType and CeremonyReqs
|
|
# are accord schema primitives defined in guildhouse.
|
|
# When ceremony-engine is published to crates.io,
|
|
# this becomes a version dependency.
|
|
accord-core = { path = "../../guildhouse/services/accord-core" }
|
|
registry-protocol = { path = "../../guildhouse/services/registry-protocol" }
|
|
|
|
serde = { workspace = true }
|
|
serde_json = { workspace = true }
|
|
serde_json_canonicalizer = { workspace = true }
|
|
chrono = { workspace = true }
|
|
sha2 = { workspace = true }
|
|
hex = { workspace = true }
|
|
thiserror = { workspace = true }
|
|
async-trait = { workspace = true }
|
|
tokio = { workspace = true }
|