Struct OnePasswordResolver 

pub struct OnePasswordResolver { /* private fields */ }

Resolves secrets from 1Password

Mode is auto-negotiated based on environment:

• If OP_SERVICE_ACCOUNT_TOKEN is set AND WASM SDK is installed → HTTP mode
• Otherwise → CLI mode (uses op CLI)

To enable HTTP mode, run: cuenv secrets setup onepassword

The source field in SecretSpec can be:

• A JSON-encoded OnePasswordConfig
• A simple reference string (e.g., op://vault/item/field)

Implementations

impl OnePasswordResolver

pub fn new() -> Result<Self, SecretError>

Create a new 1Password resolver with auto-detected mode

If 1Password service account token is available AND the WASM SDK is installed, uses HTTP mode. Otherwise, CLI mode will be used.

Errors

Returns an error if HTTP mode is detected (WASM + token) but WASM initialization fails. This prevents silent fallback to CLI mode which masks configuration errors.

Trait Implementations

impl Debug for OnePasswordResolver

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Drop for OnePasswordResolver

fn drop(&mut self)

Executes the destructor for this type.

impl SecretResolver for OnePasswordResolver

fn provider_name(&self) -> &'static str

Get the provider name for this resolver.

fn supports_native_batch(&self) -> bool

Check if this resolver supports native batch resolution.

fn resolve<'life0, 'life1, 'life2, 'async_trait>( &'life0 self, name: &'life1 str, spec: &'life2 SecretSpec, ) -> Pin<Box<dyn Future<Output = Result<String, SecretError>> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait, 'life1: 'async_trait, 'life2: 'async_trait,

Resolve a single secret by name and spec.

fn resolve_batch<'life0, 'life1, 'async_trait>( &'life0 self, secrets: &'life1 HashMap<String, SecretSpec>, ) -> Pin<Box<dyn Future<Output = Result<HashMap<String, SecureSecret>, SecretError>> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait, 'life1: 'async_trait,

Resolve multiple secrets in batch with concurrent execution.

fn resolve_secure<'life0, 'life1, 'life2, 'async_trait>( &'life0 self, name: &'life1 str, spec: &'life2 SecretSpec, ) -> Pin<Box<dyn Future<Output = Result<SecureSecret, SecretError>> + Send + 'async_trait>>

where 'life0: 'async_trait, 'life1: 'async_trait, 'life2: 'async_trait, Self: 'async_trait,

Resolve a single secret returning a secure value.