Tyler King
b1865a0627
Bascule shell runtime workspace — governed shell access layer for Substrate/Guildhouse FFC deployments. Crates: - bascule-agent: node agent with SSH server + command filtering - bascule-core: audit, grant engine, ceremony types, session - bascule-filter-core: log line filtering (stdio protocol) - bascule-gateway: OIDC auth, session management, SAT validation - bascule-node-agent: k8s DaemonSet agent (pod watcher, BPF manager) - bascule-proto: protobuf definitions - bascule-shell: governed SSH shell (commands, elevation, REPL) - bascule-tail: chronicle log tail + fanout - ceremony-engine: ceremony lifecycle (6 types + request/resolution) 172 tests passing. Implements SBS-SPEC-0001 shell model. Reference impl for SPEC-SHELLOPS-0001 Layer 1 (root shell).
54 lines
1.2 KiB
TOML
54 lines
1.2 KiB
TOML
[package]
|
|
name = "bascule-agent"
|
|
version = "0.1.0"
|
|
edition = "2021"
|
|
|
|
[[bin]]
|
|
name = "bascule-agent"
|
|
path = "src/main.rs"
|
|
|
|
[[bin]]
|
|
name = "sb"
|
|
path = "src/bin/sb.rs"
|
|
|
|
[dependencies]
|
|
bascule-core = { workspace = true }
|
|
|
|
tokio = { workspace = true }
|
|
serde = { workspace = true }
|
|
serde_json = { workspace = true }
|
|
anyhow = { workspace = true }
|
|
tracing = { workspace = true }
|
|
tracing-subscriber = { workspace = true }
|
|
uuid = { workspace = true }
|
|
chrono = { workspace = true }
|
|
sha2 = { workspace = true }
|
|
jsonwebtoken = { workspace = true }
|
|
reqwest = { workspace = true }
|
|
dashmap = { workspace = true }
|
|
async-trait = { workspace = true }
|
|
|
|
# Cross-workspace path deps — substrate crates
|
|
substrate-rt = { path = "../../substrate/crates/substrate-rt" }
|
|
hfl-types = { path = "../../substrate/crates/hfl-types", features = ["serde", "agent-extensions"] }
|
|
|
|
# Msgpack — retained for convenience constructors and legacy decode paths
|
|
rmp-serde = "1"
|
|
rmpv = { version = "1", features = ["with-serde"] }
|
|
|
|
# Config file parsing
|
|
toml = "0.8"
|
|
|
|
# CLI
|
|
clap = { workspace = true }
|
|
|
|
hex = { workspace = true }
|
|
|
|
# SSH server
|
|
russh = { workspace = true }
|
|
russh-keys = { workspace = true }
|
|
ssh-key = { workspace = true }
|
|
rand = { workspace = true }
|
|
|
|
[dev-dependencies]
|
|
tempfile = { workspace = true }
|