Enum Secret 

pub enum Secret {
    Value(String),
    Env(String),
}

A value resolved at runtime: either a literal baked into the config or a reference to an environment variable read when the pipeline runs. Deferring resolution is what lets a compiled config travel without its secrets — a literal is carried as-is, an Env reference carries only the variable name, and the real value is read in the environment that runs it.

Serialized exactly as it is written in flusso.toml: a plain string for a literal, { env = "VAR" } for a reference. The Deserialize is hand-written (not #[serde(untagged)]) so a wrong shape reports what was expected instead of serde’s opaque “data did not match any variant”.

Variants

Value(String)

A literal value, stored verbatim.

Env(String)

Read from this environment variable at resolution time.

Implementations

impl Secret

pub fn env(var: impl Into<String>) -> Self

A reference to the environment variable var, read at resolution time.

pub fn resolve(&self, override_var: &str) -> Result<String, ResolveError>

Resolve a required secret with override_var as its deployment override (see override_var). Precedence: an explicit Env reference names its own source and wins; otherwise the override variable, if set; otherwise the literal.

pub fn resolve_optional( secret: Option<&Secret>, override_var: &str, ) -> Result<Option<String>, ResolveError>

Resolve an optional secret: same precedence as resolve, and when the config omits it the override variable fills it if set.

Trait Implementations

impl Clone for Secret

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for Secret

Redacted, so a debug-printed config never leaks a literal. An Env reference shows its variable name (not a secret); a literal shows ***.

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for Secret

fn deserialize<D: Deserializer<'de>>(deserializer: D) -> Result<Self, D::Error>

Deserialize this value from the given Serde deserializer.

impl Display for Secret

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Eq for Secret

impl From<&str> for Secret

fn from(value: &str) -> Self

Converts to this type from the input type.

impl From<String> for Secret

fn from(value: String) -> Self

Converts to this type from the input type.

impl JsonSchema for Secret

A secret is a string or { env = "VAR" }; the schema says so and plants the SECRET_MARKER so an adapter description can list its override variable.

fn schema_name() -> Cow<'static, str>

The name of the generated JSON Schema.

fn json_schema(_: &mut SchemaGenerator) -> Schema

Generates a JSON Schema for this type.

fn inline_schema() -> bool

Whether JSON Schemas generated for this type should be included directly in parent schemas, rather than being re-used where possible using the $ref keyword.

fn schema_id() -> Cow<'static, str>

Returns a string that uniquely identifies the schema produced by this type.

impl PartialEq for Secret

fn eq(&self, other: &Self) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl Serialize for Secret

fn serialize<S: Serializer>(&self, serializer: S) -> Result<S::Ok, S::Error>

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for Secret