Struct SecretRef 

pub struct SecretRef(/* private fields */);

Reference into an environment’s secrets: secret://<env>/<path>.

The first path segment after the scheme is the env id the ref is scoped to and must be present and non-empty (see SecretRef::env_segment). The concrete secret material never appears in the deployment object model — it is resolved at runtime via SecretRef::to_store_uri.

Implementations

impl SecretRef

pub fn try_new(raw: impl Into<String>) -> Result<SecretRef, SecretRefParseError>

Construct and validate a secret:// reference.

pub fn as_str(&self) -> &str

The raw secret://... string.

pub fn env_segment(&self) -> &str

First path segment after the scheme — the env id the ref is scoped to.

pub fn to_store_uri(&self) -> Result<SecretUri, Error>

Convert this deployment ref into the canonical runtime store URI (secrets://), applying normalize_team to the team segment.

This is the single authoritative replacement for the replacen-based secret_ref_to_store_uri helpers previously duplicated across start/setup/deployer. It is only valid for store-aligned refs — those whose path is exactly <env>/<tenant>/<team>/<category>/<name>. Refs with a different shape (e.g. pack-config secret://<env>/<bundle>/<pack>/<question>) are resolved through their own mapping and return a parse error here rather than silently producing a wrong URI.

pub fn from_store_uri(uri: &SecretUri) -> Result<SecretRef, SecretRefParseError>

Build a secret:// deployment ref from a runtime store URI (the inverse prefix flip of SecretRef::to_store_uri).

Trait Implementations

impl Clone for SecretRef

fn clone(&self) -> SecretRef

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for SecretRef

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for SecretRef

fn deserialize<__D>( __deserializer: __D, ) -> Result<SecretRef, <__D as Deserializer<'de>>::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Display for SecretRef

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl Eq for SecretRef

impl From<SecretRef> for String

fn from(value: SecretRef) -> String

Converts to this type from the input type.

impl FromStr for SecretRef

type Err = SecretRefParseError

The associated error which can be returned from parsing.

fn from_str(s: &str) -> Result<SecretRef, <SecretRef as FromStr>::Err>

Parses a string s to return a value of this type.

impl Hash for SecretRef

fn hash<__H>(&self, state: &mut __H)

where __H: Hasher,

Feeds this value into the given Hasher.

fn hash_slice<H>(data: &[Self], state: &mut H)

where H: Hasher, Self: Sized,

Feeds a slice of this type into the given Hasher.

impl PartialEq for SecretRef

fn eq(&self, other: &SecretRef) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for SecretRef

fn serialize<__S>( &self, __serializer: __S, ) -> Result<<__S as Serializer>::Ok, <__S as Serializer>::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for SecretRef

impl TryFrom<String> for SecretRef

type Error = SecretRefParseError

The type returned in the event of a conversion error.

fn try_from( value: String, ) -> Result<SecretRef, <SecretRef as TryFrom<String>>::Error>

Performs the conversion.