Module secrets 

Secret and resolver types

Based on schema/secrets.cue

This module provides:

• Secret: CUE-compatible secret definition with resolver-based resolution
• SecretRegistry: Dynamic resolver registration and lookup
• create_default_registry(): Creates a registry with built-in resolvers
• Re-exports from cuenv_secrets: Trait-based secret resolution system

Structs

BatchResolver

Multi-provider batch resolver.

EnvSecretResolver

Resolves secrets from environment variables

ExecResolver

Resolver for executing commands to retrieve secret values

ExecSecretResolver

Resolves secrets by executing commands

OnePasswordConfig

Configuration for 1Password secret resolution

OnePasswordResolver

Resolves secrets from 1Password

ResolvedSecrets

Resolved secrets ready for injection

SaltConfig

Salt configuration for secret fingerprinting with rotation support

Secret

Secret definition with resolver

SecretRegistry

Registry for secret resolvers

SecretSpec

Configuration for a secret to resolve

Enums

SecretError

Error types for secret resolution

Traits

SecretResolver

Trait for resolving secrets from various providers.

Functions

compute_secret_fingerprint

Compute HMAC-SHA256 fingerprint for a secret

create_default_registry

Create a default secret registry with all built-in resolvers