chore: seed sgclaw rust baseline

src/security/mod.rs

@@ -0,0 +1,27 @@
+mod hmac;
+mod mac_policy;
+
+pub use hmac::{derive_session_key, sign_command};
+pub use mac_policy::MacPolicy;
+
+use thiserror::Error;
+
+#[derive(Debug, Error)]
+pub enum SecurityError {
+    #[error("invalid hmac seed: {0}")]
+    InvalidSeed(String),
+    #[error("action is not allowed: {0}")]
+    ActionNotAllowed(String),
+    #[error("domain is not allowed: {0}")]
+    DomainNotAllowed(String),
+    #[error("invalid rules: {0}")]
+    InvalidRules(String),
+    #[error("hmac error: {0}")]
+    Hmac(String),
+    #[error(transparent)]
+    Io(#[from] std::io::Error),
+    #[error(transparent)]
+    Json(#[from] serde_json::Error),
+    #[error(transparent)]
+    Hex(#[from] hex::FromHexError),
+}