appplayer_secure 0.1.0

AppPlayer security library (merged) — domain-neutral primitives (SIGN/STORE/CRYPTO/TRUST/AUDIT/MAUTH/BIO) + AppPlayer domain layer (roles/events/facade).

appplayer_secure

AppPlayer security library — domain-neutral security primitives plus the AppPlayer domain layer, in one Flutter package.

• Primitives (domain-neutral): SIGN · STORE · CRYPTO · TRUST · AUDIT · MAUTH · BIO, plus shared types / error. Callers may use these directly with their own role/event types.
• AppPlayer domain layer: roles (SignerRole / TrustRole enums + MakeMind Root CA registry), events (AppPlayer AuditEvent catalog), and a single AppPlayerSecure facade (seal/open, sign/verify chains, mutual auth).

Production storage is the platform keychain (flutter_secure_storage) and biometric is local_auth; both are injectable seams (override in tests with the in-memory / default adapters).

Quick use

import 'package:appplayer_secure/appplayer_secure.dart';

final secure = AppPlayerSecure.production();
final sealed = await secure.seal('vault', utf8.encode('secret'));
final opened = await secure.open('vault', sealed);

The host typically exposes this as the secure.* capability (see the secure_capability recipe) rather than depending on it directly.

Modules

Area	Responsibility
signature	sign / verify, multi-signer chains
secure_storage	at-rest sealed storage (keychain / in-memory backends)
cryptography	AEAD / hashing / KDF providers
trust_chain	certificate chain + CRL validation
audit	tamper-evident audit log (BLAKE3 hash chain)
mutual_auth	peer mutual authentication
biometric	Face ID / Touch ID / fingerprint / Windows Hello
roles · events · facade	AppPlayer domain layer