Crate agentguard_core

agentguard-core: Cedar-powered authorization primitives for AI agents.

Re-exports

pub use action::AgentAction;

pub use auth_keys::parse_alg;

pub use auth_keys::Algorithm;

pub use auth_keys::KeyMaterial;

pub use auth_keys::KeyRegistry;

pub use authorize::Authorizer;

pub use authorize::Decision;

pub use authorize::Effect;

pub use chain_secret::decode as decode_chain_secret;

pub use context::AgentContext;

pub use decision::AuthenticatedActor;

pub use decision::DecisionCache;

pub use decision::DecisionLog;

pub use decision::DecisionRecord;

pub use delegation::DelegationClaims;

pub use delegation::DelegationConfig;

pub use delegation::DelegationRevocationStore;

pub use delegation::DelegationSigner;

pub use delegation::DelegationSpec;

pub use delegation::DelegationToken;

pub use delegation::DelegationVerifier;

pub use delegation::VerifiedDelegation;

pub use delegation::MAX_DELEGATION_TOKEN_BYTES;

pub use error::Error;

pub use error::Result;

pub use ids::ActionId;

pub use ids::PrincipalId;

pub use ids::ResourceId;

pub use observability::SpanId;

pub use observability::TraceContext;

pub use observability::TraceId;

pub use policy::init_store;

pub use policy::PolicySource;

pub use policy::PolicyStore;

pub use policy::Severity;

pub use policy::ValidationIssue;

pub use policy::ValidationReport;

pub use principal::Principal;

pub use request::AgentRequest;

pub use request::AgentRequestBuilder;

pub use resource::Resource;

pub use schema::describe;

pub use schema::SchemaSummary;

pub use ttl::Clock;

pub use ttl::MockClock;

pub use ttl::SystemClock;

pub use ttl::Timestamp;

Modules

action

Agent actions: tool calls, optionally with an operation.

auth_keys

Key registry for JWS (JWT/DPoP/delegation) signature verification.

authorize

Authorization engine: evaluates a request against the policy store.

chain_secret

Chain secret decoding helpers shared across the CLI and any embedder that consumes the AGENTGUARD_CHAIN_SECRET file.

context

Request context: tool arguments plus session metadata.

decision

Append-only structured decision log.

delegation

Scoped delegation tokens for sub-agents.

error

Error types for agentguard-core.

ids

Typed wrappers for Cedar entity identifiers.

jwk

JWK (JSON Web Key) primitives shared by the JWT and DPoP verifiers.

observability

Observability support: trace context propagation + (future) metrics.

policy

Policy store: loads/saves/validates Cedar policies and schemas.

principal

Principals in agentguard: human Users and AI Agents.

request

Agent authorization requests and a builder.

resource

Resources acted on: any Cedar entity (Mailbox, Repository, Document, …).

schema

Schema utilities: parse + introspection using cedar-policy’s structured accessors.

ttl

Time-related primitives: Clock trait, Timestamp type, and Duration parsing.