Struct RuntimeMetadata 

pub struct RuntimeMetadata {

    pub deletion_policy: DeletionPolicy,
    pub credential_retry: Option<CredentialRetry>,
    pub initial_setup_authority: InitialSetupAuthority,
    pub automatic_setup: bool,
    pub last_synced_env_vars_hash: Option<String>,
    pub last_synced_secret_names: Vec<String>,
    pub vault_credentials_revoked: bool,
    pub retained_storage_protection_hash: Option<String>,
    pub retained_storage_protection_confirmed_at: Option<DateTime<Utc>>,
    pub retained_data_protection_started_at: Option<DateTime<Utc>>,
    pub prepared_stack: Option<Stack>,
    pub persisted_gate_answers: GateAnswers,
    pub pending_prepared_stack: Option<Stack>,
    pub pending_prepared_release_id: Option<String>,
    pub setup_update_authorization: Option<SetupUpdateAuthorization>,
    pub direct_setup_revision: Option<String>,
    pub registry_access_granted: bool,
    pub registry_access: Option<RegistryAccess>,
    pub setup_scaffolding: BTreeMap<String, SetupScaffolding>,
    pub deployer_secrets: Vec<DeployerSecretReport>,
}

Runtime metadata for deployment

Stores deployment state that needs to persist across step calls.

Fields

deletion_policy: DeletionPolicy

User-authorized data disposition, persisted before deletion starts.

credential_retry: Option<CredentialRetry>

Bounded credential retry state shared by all deployment drivers.

initial_setup_authority: InitialSetupAuthority

Actor authorized to perform structural Frozen-resource work during InitialSetup. Missing legacy values fail closed as ImportedHandoff.

automatic_setup: bool

Setup-owned grant to keep using the direct setup executor for updates. Runtime settings and release contents must never create or change this grant.

last_synced_env_vars_hash: Option<String>

Hash of the environment variables snapshot that was last synced to the vault Used to avoid redundant sync operations during incremental deployment

last_synced_secret_names: Vec<String>

Exact vault keys owned by the deployment secret synchronizer. This inventory lets a later snapshot delete removed keys without listing or touching unrelated values in the same vault.

vault_credentials_revoked: bool

Credential revocation completed before resource teardown. A delete retry can use this receipt after the vault or its binding is gone. Secret sync clears it before a deployment can write runtime credentials again.

retained_storage_protection_hash: Option<String>

Digest of the installed data inventory whose runtime public-access and expiry configuration was protected before cleanup. The serialized field name is retained for compatibility. This is not a receipt for effective expiry propagation or privileged setup teardown.

retained_storage_protection_confirmed_at: Option<DateTime<Utc>>

UTC API-confirmation time for the matching data protection digest. Provider propagation must be qualified separately before final retention.

retained_data_protection_started_at: Option<DateTime<Utc>>

Start of the bounded wait for retained data’s expiry controls to disable. Cleared on confirmation, explicit retry, or returning to normal execution.

prepared_stack: Option<Stack>

The prepared (mutated) stack from the last successful deployment phase This is the stack AFTER mutations have been applied (with service accounts, vault, etc.) Used for compatibility checks during updates to compare mutated stacks

persisted_gate_answers: GateAnswers

Canonical resolved answers for inputs that gate Frozen resources, keyed by input id, recorded when the deployment is created or its setup import registers.

Manual installations keep these answers fixed. An installation with an ongoing-management grant refreshes them when preparing a release. Live resources sharing a gate use the same recorded answer as Frozen resources.

pending_prepared_stack: Option<Stack>

Prepared target for an update that has not reached Running yet. Keeping it separate preserves the last successful baseline across retries.

pending_prepared_release_id: Option<String>

Release the in-flight stack was prepared from: pending_prepared_stack during updates, or prepared_stack during local first startup. The target can move to a newer release while that stack is still being applied; this tells the update which release actually converged.

setup_update_authorization: Option<SetupUpdateAuthorization>

One-shot setup update authority. It contains only non-secret identity and canonical resource digests, never the imported payload or tokens.

direct_setup_revision: Option<String>

Last generated CLI package revision whose direct setup was applied. This lets a newer generated CLI refresh setup-owned infrastructure once before handing runtime changes back to the hosted manager.

registry_access_granted: bool

Whether cross-account registry access has been successfully granted. Set to true after the manager successfully sets the ECR/GAR repo policy for this deployment’s target account. Prevents redundant API calls on every reconcile tick.

registry_access: Option<RegistryAccess>

What that grant opened, compared against what the deployment needs now so a grant made before a resource existed is finished rather than skipped, and the revoke names what was granted. Absent on a grant recorded before this field existed.

setup_scaffolding: BTreeMap<String, SetupScaffolding>

What a direct setup created for resources it does not own, keyed by resource id. Setup teardown removes exactly what is recorded here.

deployer_secrets: Vec<DeployerSecretReport>

Whether each vault-native deployer secret is in the customer’s secret store, with where it goes. Checked from metadata only; no value is ever read or recorded here.

Trait Implementations

impl Clone for RuntimeMetadata

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for RuntimeMetadata

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for RuntimeMetadata

fn default() -> Self

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for RuntimeMetadata

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Eq for RuntimeMetadata

impl PartialEq for RuntimeMetadata

fn eq(&self, other: &Self) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl Serialize for RuntimeMetadata

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for RuntimeMetadata