Initial Commit
This commit is contained in:
@@ -0,0 +1,34 @@
|
||||
# @suaveplan/network-plugin-crypto-messages - Cryptographic integrity for the Suaveplan mesh: Ed25519 message signatures, server-signed session/mesh tokens, peer identity challenge-response, hash-chained signed logs, key rotation, plugin security verifier, tier-specific security policies
|
||||
|
||||
## Summary
|
||||
|
||||
Cryptographic integrity layer for the Suaveplan mesh. Ed25519-backed `MessageSigner` (sign on send, verify against the registry on receive); `SessionTokenAuthority` and `MeshTokenAuthority` validating server-signed tokens with replay + expiry rejection; `PeerIdentityVerifier` running challenge-response handshakes to defeat peer-id spoofing; `LogChainSigner` producing tamper-evident hash-chained signed audit logs; `KeyRotationManager` periodically rotating signing keys with grace period and bus broadcast; `PluginSecurityVerifier` + `PluginCapabilityValidator` + `PluginActivityMonitor` + `SandboxedPluginContext` covering plugin-side integrity and capability containment; `TierSecurityPolicy` + `CredentialDelegation` + `GeoSecurityPolicy` for tier-aware and region-aware policy enforcement. Wrapped in a single `CryptoMessagesPlugin` satisfying the `NetworkPlugin` lifecycle.
|
||||
|
||||
<!-- begin:auto-docs -->
|
||||
## Documentation tree
|
||||
|
||||
- [identity](./src/identity/peer-identity-verifier.md) — <!-- begin:auto-docs --> _(no submodules)_ <!-- end:auto-docs -->
|
||||
- [peer-identity-verifier](./src/identity/peer-identity-verifier.md) — <!-- begin:auto-docs --> _(no submodules)_ <!-- end:auto-docs -->
|
||||
- [key-rotation](./src/key-rotation/key-rotation-manager.md) — <!-- begin:auto-docs --> _(no submodules)_ <!-- end:auto-docs -->
|
||||
- [key-rotation-manager](./src/key-rotation/key-rotation-manager.md) — <!-- begin:auto-docs --> _(no submodules)_ <!-- end:auto-docs -->
|
||||
- [log-chain](./src/log-chain/log-chain-signer.md) — <!-- begin:auto-docs --> _(no submodules)_ <!-- end:auto-docs -->
|
||||
- [log-chain-signer](./src/log-chain/log-chain-signer.md) — <!-- begin:auto-docs --> _(no submodules)_ <!-- end:auto-docs -->
|
||||
- [plugin](./src/plugin/crypto-messages-plugin.md) — <!-- begin:auto-docs --> _(no submodules)_ <!-- end:auto-docs -->
|
||||
- [crypto-messages-plugin](./src/plugin/crypto-messages-plugin.md) — <!-- begin:auto-docs --> _(no submodules)_ <!-- end:auto-docs -->
|
||||
- [signer](./src/signer/message-signer.md) — <!-- begin:auto-docs --> _(no submodules)_ <!-- end:auto-docs -->
|
||||
- [message-signer](./src/signer/message-signer.md) — <!-- begin:auto-docs --> _(no submodules)_ <!-- end:auto-docs -->
|
||||
- [mesh-token-authority](./src/token/mesh-token-authority.md) — Validates server-signed `MeshToken`s. Mirrors `SessionTokenAuthority` for the mesh-creation ceremony — same expiry / fo…
|
||||
- [session-token-authority](./src/token/session-token-authority.md) — Validates server-signed `SessionToken`s. Rejects expired tokens (`expiresAt <= now`), forged tokens (Ed25519 verify fai…
|
||||
- [error-codes](./src/error-codes.md) — Frozen registry of every error code raised by the crypto-messages package. Codes are namespaced under `NET_CRYPTO` and…
|
||||
<!-- end:auto-docs --> - [peer-identity-verifier](./src/identity/peer-identity-verifier.md) — <!-- begin:auto-docs --> _(no submodules)_- [key-rotation](./src/key-rotation/key-rotation-manager.md) — <!-- begin:auto-docs --> _(no submodules)_- [key-rotation-manager](./src/key-rotation/key-rotation-manager.md) — <!-- begin:auto-docs --> _(no submodules)_- [log-chain](./src/log-chain/log-chain-signer.md) — <!-- begin:auto-docs --> _(no submodules)_- [log-chain-signer](./src/log-chain/log-chain-signer.md) — <!-- begin:auto-docs --> _(no submodules)_- [plugin](./src/plugin/crypto-messages-plugin.md) — <!-- begin:auto-docs --> _(no submodules)_- [crypto-messages-plugin](./src/plugin/crypto-messages-plugin.md) — <!-- begin:auto-docs --> _(no submodules)_- [signer](./src/signer/message-signer.md) — <!-- begin:auto-docs --> _(no submodules)_- [message-signer](./src/signer/message-signer.md) — <!-- begin:auto-docs --> _(no submodules)_- [mesh-token-authority](./src/token/mesh-token-authority.md) — Validates server-signed `MeshToken`s. Mirrors `SessionTokenAuthority` for the mesh-creation ceremony — same expiry / fo…
|
||||
- [session-token-authority](./src/token/session-token-authority.md) — Validates server-signed `SessionToken`s. Rejects expired tokens (`expiresAt <= now`), forged tokens (Ed25519 verify fai…
|
||||
- [error-codes](./src/error-codes.md) — Frozen registry of every error code raised by the crypto-messages package. Codes are namespaced under `NET_CRYPTO` and…
|
||||
- [peer-identity-verifier](./src/identity/peer-identity-verifier.md) — <!-- begin:auto-docs --> _(no submodules)_- [key-rotation](./src/key-rotation/key-rotation-manager.md) — <!-- begin:auto-docs --> _(no submodules)_- [key-rotation-manager](./src/key-rotation/key-rotation-manager.md) — <!-- begin:auto-docs --> _(no submodules)_- [log-chain](./src/log-chain/log-chain-signer.md) — <!-- begin:auto-docs --> _(no submodules)_- [log-chain-signer](./src/log-chain/log-chain-signer.md) — <!-- begin:auto-docs --> _(no submodules)_- [plugin](./src/plugin/crypto-messages-plugin.md) — <!-- begin:auto-docs --> _(no submodules)_- [crypto-messages-plugin](./src/plugin/crypto-messages-plugin.md) — <!-- begin:auto-docs --> _(no submodules)_- [signer](./src/signer/message-signer.md) — <!-- begin:auto-docs --> _(no submodules)_- [message-signer](./src/signer/message-signer.md) — <!-- begin:auto-docs --> _(no submodules)_- [mesh-token-authority](./src/token/mesh-token-authority.md) — Validates server-signed `MeshToken`s. Mirrors `SessionTokenAuthority` for the mesh-creation ceremony — same expiry / fo…
|
||||
- [session-token-authority](./src/token/session-token-authority.md) — Validates server-signed `SessionToken`s. Rejects expired tokens (`expiresAt <= now`), forged tokens (Ed25519 verify fai…
|
||||
- [error-codes](./src/error-codes.md) — Frozen registry of every error code raised by the crypto-messages package. Codes are namespaced under `NET_CRYPTO` and…
|
||||
- [peer-identity-verifier](./src/identity/peer-identity-verifier.md) — <!-- begin:auto-docs --> _(no submodules)_- [key-rotation](./src/key-rotation/key-rotation-manager.md) — <!-- begin:auto-docs --> _(no submodules)_- [key-rotation-manager](./src/key-rotation/key-rotation-manager.md) — <!-- begin:auto-docs --> _(no submodules)_- [log-chain](./src/log-chain/log-chain-signer.md) — <!-- begin:auto-docs --> _(no submodules)_- [log-chain-signer](./src/log-chain/log-chain-signer.md) — <!-- begin:auto-docs --> _(no submodules)_- [plugin](./src/plugin/crypto-messages-plugin.md) — <!-- begin:auto-docs --> _(no submodules)_- [crypto-messages-plugin](./src/plugin/crypto-messages-plugin.md) — <!-- begin:auto-docs --> _(no submodules)_- [signer](./src/signer/message-signer.md) — <!-- begin:auto-docs --> _(no submodules)_- [message-signer](./src/signer/message-signer.md) — <!-- begin:auto-docs --> _(no submodules)_- [mesh-token-authority](./src/token/mesh-token-authority.md) — Validates server-signed `MeshToken`s. Mirrors `SessionTokenAuthority` for the mesh-creation ceremony — same expiry / fo…
|
||||
- [session-token-authority](./src/token/session-token-authority.md) — Validates server-signed `SessionToken`s. Rejects expired tokens (`expiresAt <= now`), forged tokens (Ed25519 verify fai…
|
||||
- [error-codes](./src/error-codes.md) — Frozen registry of every error code raised by the crypto-messages package. Codes are namespaced under `NET_CRYPTO` and…
|
||||
- [peer-identity-verifier](./src/identity/peer-identity-verifier.md) — <!-- begin:auto-docs --> _(no submodules)_- [key-rotation](./src/key-rotation/key-rotation-manager.md) — <!-- begin:auto-docs --> _(no submodules)_ - [key-rotation-manager](./src/key-rotation/key-rotation-manager.md) — <!-- begin:auto-docs --> _(no submodules)_- [log-chain](./src/log-chain/log-chain-signer.md) — <!-- begin:auto-docs --> _(no submodules)_ - [log-chain-signer](./src/log-chain/log-chain-signer.md) — <!-- begin:auto-docs --> _(no submodules)_- [plugin](./src/plugin/crypto-messages-plugin.md) — <!-- begin:auto-docs --> _(no submodules)_ - [crypto-messages-plugin](./src/plugin/crypto-messages-plugin.md) — <!-- begin:auto-docs --> _(no submodules)_- [signer](./src/signer/message-signer.md) — <!-- begin:auto-docs --> _(no submodules)_ - [message-signer](./src/signer/message-signer.md) — <!-- begin:auto-docs --> _(no submodules)_- [mesh-token-authority](./src/token/mesh-token-authority.md) — Validates server-signed `MeshToken`s. Mirrors `SessionTokenAuthority` for the mesh-creation ceremony — same expiry / fo…
|
||||
- [session-token-authority](./src/token/session-token-authority.md) — Validates server-signed `SessionToken`s. Rejects expired tokens (`expiresAt <= now`), forged tokens (Ed25519 verify fai…
|
||||
- [error-codes](./src/error-codes.md) — Frozen registry of every error code raised by the crypto-messages package. Codes are namespaced under `NET_CRYPTO` and…
|
||||
Reference in New Issue
Block a user