Struct Credential 

pub struct Credential { /* private fields */ }

Opaque credential bytes. The inner Arc<Zeroizing<Box<[u8]>>> clones are cheap (refcount bump) but every owning Credential zeroizes on drop. Arc lets the engine intern identical credentials without copying; when the last ref drops, Zeroizing<Box<[u8]>> overwrites the heap allocation before Box::drop returns it to the allocator.

Implementations

impl Credential

pub fn from_bytes(bytes: &[u8]) -> Self

Build a Credential from raw bytes. The bytes are copied into a fresh Zeroizing<Box<[u8]>> and the input slice is unchanged (caller is responsible for zeroizing whatever it came from).

pub fn from_text(s: &str) -> Self

Build a Credential from a borrowed str. Same semantics as from_bytes — bytes are copied into the zeroizing allocation. Named from_text (not from_str) to avoid the clippy::should_implement_trait lint and to keep the API distinct from core::str::FromStr (which has different error semantics — we never fail to construct a Credential).

pub fn len(&self) -> usize

Length in bytes.

pub fn is_empty(&self) -> bool

pub fn expose_secret(&self) -> &[u8]

Expose the underlying bytes. Every call site MUST be auditable — git grep expose_secret should surface every place credentials leave the opaque wrapper. Treat each one as a security review item.

Returns a &[u8] rather than &str because credentials may be non-UTF-8 (binary-encoded keys, raw private-key bytes, etc).

pub fn expose_str(&self) -> Option<&str>

Expose the credential as a &str if it’s valid UTF-8, otherwise None. Most production credentials ARE valid UTF-8 (provider keys, tokens, base64) so this is the common path.

Trait Implementations

impl Clone for Credential

fn clone(&self) -> Credential

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for Credential

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Refuse to format the bytes. This is a compile-time leak guard — every place that did eprintln!("{:?}", cred) or tracing::error!(?cred) now prints Credential(<redacted N bytes>) instead of the secret.

impl<'de> Deserialize<'de> for Credential

fn deserialize<D: Deserializer<'de>>(deserializer: D) -> Result<Self, D::Error>

Deserialize this value from the given Serde deserializer.

impl Display for Credential

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Same redaction as Debug — format!("{}", cred) returns the redacted form, never the bytes.

impl From<&[u8]> for Credential

fn from(b: &[u8]) -> Self

Converts to this type from the input type.

impl From<&str> for Credential

fn from(s: &str) -> Self

Converts to this type from the input type.

impl From<String> for Credential

fn from(s: String) -> Self

Converts to this type from the input type.

impl From<Vec<u8>> for Credential

fn from(v: Vec<u8>) -> Self

Converts to this type from the input type.

impl Hash for Credential

fn hash<H: Hasher>(&self, state: &mut H)

Feeds this value into the given Hasher.

fn hash_slice<H>(data: &[Self], state: &mut H)

where H: Hasher, Self: Sized,

Feeds a slice of this type into the given Hasher.

impl Ord for Credential

fn cmp(&self, other: &Self) -> Ordering

This method returns an Ordering between self and other.

fn max(self, other: Self) -> Self

where Self: Sized,

Compares and returns the maximum of two values.

fn min(self, other: Self) -> Self

where Self: Sized,

Compares and returns the minimum of two values.

fn clamp(self, min: Self, max: Self) -> Self

where Self: Sized,

Restrict a value to a certain interval.

impl PartialEq for Credential

fn eq(&self, other: &Self) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl PartialOrd for Credential

fn partial_cmp(&self, other: &Self) -> Option<Ordering>

This method returns an ordering between self and other values if one exists.

fn lt(&self, other: &Rhs) -> bool

Tests less than (for self and other) and is used by the < operator.

fn le(&self, other: &Rhs) -> bool

Tests less than or equal to (for self and other) and is used by the <= operator.

fn gt(&self, other: &Rhs) -> bool

Tests greater than (for self and other) and is used by the > operator.

fn ge(&self, other: &Rhs) -> bool

Tests greater than or equal to (for self and other) and is used by the >= operator.

impl Serialize for Credential

fn serialize<S: Serializer>(&self, serializer: S) -> Result<S::Ok, S::Error>

Serialize as a tagged JSON object so the encoding is unambiguous. kimi-wave2 §Critical: the previous "b64:<base64>" string-prefix scheme round-tripped a UTF-8 credential like "b64:SGVsbG8=" (a literal user-typed value) through the deserializer as if it were base64-encoded bytes, silently corrupting it. The tagged variant {"text":"…"} / {"b64":"…"} cannot be confused with either form.

impl Eq for Credential