Struct SecretStore 

pub struct SecretStore { /* private fields */ }

In-process store of sealed secrets.

Constructed by the host at Uni instance startup; populated from secure config (KMS, env vars, secrets manager). Plugins acquire handles via SecretStore::acquire; capability-gated host imports resolve handles back to bytes via SecretStore::unseal_for_host_use which is itself private to the framework’s host-import implementations.

Implementations

impl SecretStore

pub fn new() -> Self

Construct an empty store.

pub fn seal(&self, name: impl Into<String>, bytes: Vec<u8>)

Seal bytes under name, replacing any previous value.

Host-side only; plugin code never seals secrets.

pub fn acquire(&self, name: &str) -> Result<SecretHandle, FnError>

Plugin-facing API: acquire a handle for the named secret.

Emits a tracing event so security teams can monitor acquire frequency.

Errors

Returns FnError with code 0xA00 if name is not present.

pub fn unseal_for_host_use(&self, h: SecretHandle) -> Result<Vec<u8>, FnError>

Host-only: resolve a handle to its underlying bytes.

Used by host-import implementations (e.g., http_get_with_secret) to attach the secret to an outbound HTTP header before invoking the actual network call. This must not be exposed to plugin code — it’s pub within the crate but not re-exported through the WIT binding layer.

Errors

Returns FnError with code 0xA01 if the handle is invalid (e.g., from a different store, or revoked).

pub fn revoke(&self, h: SecretHandle)

Revoke a handle (e.g., on plugin reload).

pub fn clear(&self)

Clear every sealed secret (e.g., on Uni shutdown).

Trait Implementations

impl Debug for SecretStore

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for SecretStore

fn default() -> Self

Returns the “default value” for a type.