appplayer_secure_core library
Pure-Dart security primitives.
Seven modules — SIGN · STORE · CRYPTO · TRUST · AUDIT · MAUTH · BIO — plus shared types and errors. Domain-neutral: no domain enums, no business event types, and no Flutter dependency, so a server, CLI or test harness can use it directly.
The Flutter side (OS keychain storage, biometric prompt, asset-loaded Root
CAs, and the AppPlayerSecure facade that assembles them) lives in
appplayer_secure, which depends on this package and re-exports it.
MAUTH is the one module that is port-only here. Admitting a security
device is part of the MCP security scheme and is public; the session
handshake layered on top of it is not, so its implementation ships
separately in appplayer_secure_mauth and is not published. Hosts that do
not depend on that package get UnavailableMutualAuth, which throws rather
than pretending a session was established.
Classes
- AppConsentPrompt
- AppContractCreated
- AppCustomCapability
- AppLicenseIssued
- AppLicenseRevoked
- AppMemberDeletionRequested
- AppOperatorAction
- AppPlayerEventPIIGuard
- AppSignatureFailed
- AppTicketCreated
- AppTierChanged
- AppTierDenied
- AtRestSealer
- AuditEntry
- AuditEvent
- AuditLogger
- AuthResult
- BiometricAdapter
- BiometricCapability
- Certificate
- X.509 certificate wrapper (library-internal representation).
- ChainVerification
- CRL
- CRLEntry
- CryptoProvider
- DefaultAuditLogger
- DefaultCryptoProvider
- DefaultSignatureVerifier
- InMemoryLocalSink
- In-memory LocalSink — for testing / initial implementation.
- InMemorySecureStorage
- InMemoryTrustChainValidator
- KeyMaterial
- Public/private key material.
- LocalIdentity
- LocalIdentityStore
- LocalSink
- MAuthPeer
- Peer abstraction — USB device, network endpoint, etc.
- MAuthResult
- MutualAuth
- PassphraseSealer
- PIIGuard
- PII blocking — the caller can register additional keys.
- RemoteSink
- SecureStorage
- SecureStorageBackend
- Marker for a platform-specific backend. The caller (or facade) detects the platform and selects accordingly.
- SignatureEntry
- SignatureVerifier
- SignedManifest
- A signed manifest — the caller provides canonical serialization and exposes the signerCert.
- TrustChainValidator