@wlfi-agent/cli 1.4.12 → 1.4.14

package/crates/vault-domain/src/session.rs

@@ -0,0 +1,50 @@
+use std::fmt;
+
+use serde::{Deserialize, Serialize};
+use time::OffsetDateTime;
+use uuid::Uuid;
+use zeroize::Zeroize;
+
+/// Admin lease issued by the daemon.
+#[derive(Debug, Clone, PartialEq, Eq, Serialize, Deserialize)]
+pub struct Lease {
+    /// Lease identifier.
+    pub lease_id: Uuid,
+    /// Issuance timestamp.
+    pub issued_at: OffsetDateTime,
+    /// Expiration timestamp.
+    pub expires_at: OffsetDateTime,
+}
+
+impl Lease {
+    /// Returns whether lease is valid at `now`.
+    #[must_use]
+    pub fn is_valid_at(&self, now: OffsetDateTime) -> bool {
+        now >= self.issued_at && now <= self.expires_at
+    }
+}
+
+/// Admin authentication material supplied to privileged APIs.
+#[derive(Clone, PartialEq, Eq, Serialize, Deserialize)]
+pub struct AdminSession {
+    /// Vault password.
+    pub vault_password: String,
+    /// Active lease.
+    pub lease: Lease,
+}
+
+impl fmt::Debug for AdminSession {
+    fn fmt(&self, formatter: &mut fmt::Formatter<'_>) -> fmt::Result {
+        formatter
+            .debug_struct("AdminSession")
+            .field("vault_password", &"<redacted>")
+            .field("lease", &self.lease)
+            .finish()
+    }
+}
+
+impl AdminSession {
+    pub fn zeroize_secrets(&mut self) {
+        self.vault_password.zeroize();
+    }
+}

package/crates/vault-domain/src/signature.rs

@@ -0,0 +1,34 @@
+use serde::{Deserialize, Serialize};
+
+/// Signature result returned by backend signer / daemon.
+#[derive(Debug, Clone, PartialEq, Eq, Serialize, Deserialize, Default)]
+pub struct Signature {
+    /// Signature bytes in ECDSA ASN.1 DER (`X9.62`) encoding.
+    pub bytes: Vec<u8>,
+    /// Optional 32-byte `r` scalar as `0x`-prefixed hex.
+    #[serde(skip_serializing_if = "Option::is_none")]
+    pub r_hex: Option<String>,
+    /// Optional 32-byte `s` scalar as `0x`-prefixed hex.
+    #[serde(skip_serializing_if = "Option::is_none")]
+    pub s_hex: Option<String>,
+    /// Optional ECDSA `v` value (`0`/`1` for typed txs).
+    #[serde(skip_serializing_if = "Option::is_none")]
+    pub v: Option<u64>,
+    /// Optional signed raw transaction bytes as `0x`-prefixed hex.
+    #[serde(skip_serializing_if = "Option::is_none")]
+    pub raw_tx_hex: Option<String>,
+    /// Optional transaction hash as `0x`-prefixed hex.
+    #[serde(skip_serializing_if = "Option::is_none")]
+    pub tx_hash_hex: Option<String>,
+}
+
+impl Signature {
+    /// Constructs a signature response from DER bytes.
+    #[must_use]
+    pub fn from_der(bytes: Vec<u8>) -> Self {
+        Self {
+            bytes,
+            ..Self::default()
+        }
+    }
+}