Enum ApproveOnUse 

pub enum ApproveOnUse {
    Never,
    Session,
    PerCall,
}

How the secret is rotated.

Manual is the only method that ships in the first release; ProviderUi and ProviderApi are reserved for future ADRs (see Per-path policy for AI-agent secret USE (not provision).

Controls whether the framework demands an interactive user approval each time an agent’s high-level provider tool resolves a @secret:<path> alias backed by this entry. Designed for the case where the user wants to provision once but still wants fine-grained control over which agent calls “spend” sensitive credentials. See ADR-023 §3.7 (P25 phase) for the protocol.

Default — Never — preserves the existing zero-prompt resolve path so most paths stay frictionless.

Variants

Never

No approval required — alias resolves silently. The default for every existing manifest.

Session

First use this session opens an approval dialog; once the user clicks “Allow always (this session)” further uses skip the prompt for the remainder of the session.

PerCall

Every use opens an approval dialog. Right for high- stakes paths (prod DB password, signing keys).

Trait Implementations

impl Clone for ApproveOnUse

fn clone(&self) -> ApproveOnUse

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for ApproveOnUse

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for ApproveOnUse

fn default() -> ApproveOnUse

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for ApproveOnUse

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl From<ApproveOnUse> for ApproveOnUsePolicy

fn from(v: ApproveOnUse) -> Self

Converts to this type from the input type.

impl PartialEq for ApproveOnUse

fn eq(&self, other: &ApproveOnUse) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for ApproveOnUse

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl Copy for ApproveOnUse

impl Eq for ApproveOnUse

impl StructuralPartialEq for ApproveOnUse