Struct SecretsCore 

pub struct SecretsCore { /* private fields */ }

Embedded secrets client that can be used directly from Rust runtimes.

Implementations

impl SecretsCore

pub fn builder() -> CoreBuilder

Start building a new embedded core instance.

pub fn config(&self) -> &CoreConfig

Access the runtime configuration. Return an immutable reference to the runtime configuration.

pub async fn get_bytes(&self, uri: &str) -> Result<Vec<u8>, SecretsError>

Retrieve secret bytes for the provided URI.

pub async fn get_text(&self, uri: &str) -> Result<String, SecretsError>

Retrieve a secret as UTF-8 text.

pub async fn get_json<T: DeserializeOwned>( &self, uri: &str, ) -> Result<T, SecretsError>

Retrieve a secret and deserialize it as JSON.

pub async fn get_secret_with_meta( &self, uri: &str, ) -> Result<BrokerSecret, SecretsError>

Retrieve a secret along with its metadata (decrypted).

pub async fn put_json<T: Serialize>( &self, uri: &str, value: &T, ) -> Result<SecretMeta, SecretsError>

Store JSON content at the provided URI.

pub async fn delete(&self, uri: &str) -> Result<(), SecretsError>

Delete a secret.

pub async fn list(&self, prefix: &str) -> Result<Vec<SecretMeta>, SecretsError>

List secret metadata matching the provided prefix.

pub fn purge_cache(&self, uris: &[String])

Remove cached entries whose keys match the provided exact URIs or prefixes (indicated by a trailing *).

impl SecretsCore

pub async fn validate_specs_at_prefix( &self, base_prefix: &str, specs: &[SecretSpec], ) -> Result<SecretValidationResult, SecretsError>

Validate that every secret in specs exists under the provided prefix.

Example: base prefix secrets://dev/example/_/ would test URIs such as secrets://dev/example/_/configs/TELEGRAM_TOKEN.