Struct AccessRequest 

pub struct AccessRequest<'a> {
    pub coordinate: &'a Coordinate,
    pub project: Option<&'a str>,
    pub sensitivity: Sensitivity,
    pub revealable: bool,
    pub operation: Operation,
    pub surface: Surface,
    pub origin: Origin,
}

A request to act on a secret. The environment is read from the coordinate.

Fields

coordinate: &'a Coordinate

The (resolved) coordinate being acted on.

project: Option<&'a str>

The owning project, or None for the global vault.

sensitivity: Sensitivity

The secret’s sensitivity.

revealable: bool

Whether the secret is opted into reveal (the §3.1 “revealable” flag).

This MUST be sourced from the stored secret, never from caller intent — otherwise a face could fabricate revealable: true and defeat I11. It is persisted on crate::SecretRecord (L9) and read back via crate::SecretRecord::revealable, like sensitivity. The CLI reveal path leaves it false (it never consults the MCP-only opt-in); the FFI reveal path populates it from the record.

operation: Operation

What the caller wants to do.

surface: Surface

Which face is asking.

origin: Origin

Who initiated it.

Trait Implementations

impl<'a> Clone for AccessRequest<'a>

fn clone(&self) -> AccessRequest<'a>

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl<'a> Debug for AccessRequest<'a>

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.