Trait SecretResolver 

pub trait SecretResolver: Send + Sync {
    // Required method
    fn resolve(&self, path: &str) -> Result<SecretString, AliasResolverError>;
}

Resolves an @secret:<path> alias to its current value.

devboy-core defines this trait so the config loader takes a resolver by trait object without pulling in devboy-storage’s router. Production wiring lives in devboy_storage; tests implement it inline against a HashMap.

Required Methods

fn resolve(&self, path: &str) -> Result<SecretString, AliasResolverError>

Resolve path (the portion after @secret:) to its current value. Implementations consume the path verbatim; path validation belongs in the credential layer per ADR-020.

Implementors

impl<R, F> SecretResolver for ApprovalGatedResolver<R, F>

where R: SecretResolver, F: Fn(&str) -> ApproveOnUsePolicy + Send + Sync,