Struct HooksSubscriptionConfig 

pub struct HooksSubscriptionConfig {
    pub hmac_secret: Option<String>,
}

[hooks.subscription] sub-block. K7 ships one knob today (hmac_secret); future K-track work may add per-event opt-out filters or alternate signing algorithms.

#1262 — Debug is implemented manually to redact hmac_secret so accidental {:?} prints never leak the signing key. #1258 — the manual Drop impl zeroizes the secret on scope exit.

Fields

hmac_secret: Option<String>

Server-wide HMAC secret. Plaintext on disk — operators are expected to chmod 600 the config file (same posture as the existing api_key field).

#1262 — skip_serializing blocks the secret from being echoed through any serde_json::to_string(&HooksSubscriptionConfig) path.

Implementations

impl HooksSubscriptionConfig

pub fn zeroize_secrets(&mut self)

#1258 — zeroize the hmac_secret buffer in place. Idempotent. The Drop impl below delegates here so the helper is the single source of truth for the zero-on-secret-loss contract. Tests probe the buffer via this entry point so they observe the post-zeroize state of a still-live allocation (probing after the owning value is dropped is UB — the allocator’s free-list bookkeeping stamps the first 8-16 bytes of the just-freed slot and that’s not a zeroize defect; see #1321).

Trait Implementations

impl Clone for HooksSubscriptionConfig

fn clone(&self) -> HooksSubscriptionConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for HooksSubscriptionConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

#1262 — redact hmac_secret to <redacted> when present.

impl Default for HooksSubscriptionConfig

fn default() -> HooksSubscriptionConfig

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for HooksSubscriptionConfig

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Drop for HooksSubscriptionConfig

fn drop(&mut self)

#1258 — zeroize hmac_secret on scope exit. Delegates to HooksSubscriptionConfig::zeroize_secrets.

fn pin_drop(self: Pin<&mut Self>)

🔬This is a nightly-only experimental API. (pin_ergonomics)

Execute the destructor for this type, but different to Drop::drop, it requires self to be pinned.

impl Serialize for HooksSubscriptionConfig

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.