Struct SecretsCore 

pub struct SecretsCore { /* private fields */ }

Embedded secrets client that can be used directly from Rust runtimes.

Implementations

impl SecretsCore

pub fn builder() -> CoreBuilder

Start building a new embedded core instance.

pub fn config(&self) -> &CoreConfig

Access the runtime configuration. Return an immutable reference to the runtime configuration.

pub async fn get_bytes(&self, uri: &str) -> Result<Vec<u8>, SecretsError>

Retrieve secret bytes for the provided URI.

pub async fn get_text(&self, uri: &str) -> Result<String, SecretsError>

Retrieve a secret as UTF-8 text.

pub async fn get_json<T: DeserializeOwned>( &self, uri: &str, ) -> Result<T, SecretsError>

Retrieve a secret and deserialize it as JSON.

pub async fn get_secret_with_meta( &self, uri: &str, ) -> Result<BrokerSecret, SecretsError>

Retrieve a secret along with its metadata (decrypted).

pub async fn put_bytes( &self, uri: &str, value: &[u8], content_type: ContentType, ) -> Result<SecretMeta, SecretsError>

Store raw bytes at the provided URI under the given content type.

The symmetric write counterpart to get_bytes: the payload is persisted verbatim (envelope-encrypted by the broker) and read back byte-for-byte, with no serialization framing. Use it to seed a value a consumer reads raw — e.g. a provider token — where the JSON quoting put_json adds would corrupt the round-trip.

pub async fn put_text( &self, uri: &str, value: &str, ) -> Result<SecretMeta, SecretsError>

Store UTF-8 text at the provided URI. Convenience wrapper over put_bytes with ContentType::Text; round-trips byte-for-byte with get_text.

pub async fn put_json<T: Serialize>( &self, uri: &str, value: &T, ) -> Result<SecretMeta, SecretsError>

Store JSON content at the provided URI. Serializes value and stores it via put_bytes under ContentType::Json.

pub async fn delete(&self, uri: &str) -> Result<(), SecretsError>

Delete a secret.

pub async fn list(&self, prefix: &str) -> Result<Vec<SecretMeta>, SecretsError>

List secret metadata matching the provided prefix.

pub fn purge_cache(&self, uris: &[String])

Remove cached entries whose keys match the provided exact URIs or prefixes (indicated by a trailing *).

impl SecretsCore

pub async fn validate_specs_at_prefix( &self, base_prefix: &str, specs: &[SecretSpec], ) -> Result<SecretValidationResult, SecretsError>

Validate that every secret in specs exists under the provided prefix.

Example: base prefix secrets://dev/example/_/ would test URIs such as secrets://dev/example/_/configs/TELEGRAM_TOKEN.