Core packages: crypto (Argon2id/AES-256-GCM), config (TOML/viper), db (SQLite/migrations), barrier (encrypted storage), seal (state machine with rate-limited unseal), auth (MCIAS integration with token cache), policy (priority-based ACL engine), engine (interface + registry). Server: HTTPS with TLS 1.2+, REST API, auth/admin middleware, htmx web UI (init, unseal, login, dashboard pages). CLI: cobra/viper subcommands (server, init, status, snapshot) with env var override support (METACRYPT_ prefix). Operational tooling: Dockerfile (multi-stage, non-root), docker-compose, hardened systemd units (service + daily backup timer), install script, backup script with retention pruning, production config examples. Runbook covering installation, configuration, daily operations, backup/restore, monitoring, troubleshooting, and security procedures. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
48 lines
954 B
Protocol Buffer
48 lines
954 B
Protocol Buffer
syntax = "proto3";
|
|
|
|
package metacrypt.v1;
|
|
|
|
import "google/protobuf/struct.proto";
|
|
|
|
option go_package = "git.wntrmute.dev/kyle/metacrypt/gen/metacrypt/v1;metacryptv1";
|
|
|
|
service EngineService {
|
|
rpc Mount(MountRequest) returns (MountResponse);
|
|
rpc Unmount(UnmountRequest) returns (UnmountResponse);
|
|
rpc ListMounts(ListMountsRequest) returns (ListMountsResponse);
|
|
rpc Request(EngineRequest) returns (EngineResponse);
|
|
}
|
|
|
|
message MountRequest {
|
|
string name = 1;
|
|
string type = 2;
|
|
}
|
|
message MountResponse {}
|
|
|
|
message UnmountRequest {
|
|
string name = 1;
|
|
}
|
|
message UnmountResponse {}
|
|
|
|
message ListMountsRequest {}
|
|
message ListMountsResponse {
|
|
repeated MountInfo mounts = 1;
|
|
}
|
|
|
|
message MountInfo {
|
|
string name = 1;
|
|
string type = 2;
|
|
string mount_path = 3;
|
|
}
|
|
|
|
message EngineRequest {
|
|
string mount = 1;
|
|
string operation = 2;
|
|
string path = 3;
|
|
google.protobuf.Struct data = 4;
|
|
}
|
|
|
|
message EngineResponse {
|
|
google.protobuf.Struct data = 1;
|
|
}
|