Struct Vault 

pub struct Vault { /* private fields */ }

Encrypted key-value vault with platform-adaptive master key protection.

Implementations

impl Vault

pub fn open(data_dir: &Path) -> Result<Vault, VaultError>

Open (or create) a vault rooted at data_dir.

Automatically selects the strongest available master key backend: platform credential store first, machine-bound derivation as fallback.

pub fn backend_name(&self) -> &'static str

Which backend protects the master key.

pub fn store(&self, key: &str, value: &str) -> Result<(), VaultError>

Store a secret value under key. Overwrites if exists.

pub fn retrieve(&self, key: &str) -> Result<Option<String>, VaultError>

Retrieve a secret by key. Returns None if not found.

pub fn delete(&self, key: &str) -> Result<(), VaultError>

Delete a secret by key.

pub fn list_keys(&self) -> Result<Vec<String>, VaultError>

List all stored keys (not values).