Struct ResolvedVar 

pub struct ResolvedVar {
    pub name: String,
    pub value: SecretValue,
    pub sensitivity: Option<Sensitivity>,
    pub environment: String,
    pub coordinate: Option<String>,
    pub origin: Option<VaultOrigin>,
    pub reference: Option<String>,
}

A single resolved variable, ready for the Wrapper to inject. The value is a SecretValue regardless of source (everything flows into a child env next).

Fields

name: String

The local variable name.

value: SecretValue

The resolved value (zeroized, redacted Debug).

sensitivity: Option<Sensitivity>

Sensitivity of the backing secret — Some only for a vault coordinate; None for literals / env passthrough. The Wrapper uses it to decide confirmation (L5).

environment: String

The environment this variable resolved under.

coordinate: Option<String>

The canonical coordinate, Some only for a vault coordinate.

origin: Option<VaultOrigin>

Which vault produced it (project vs global) — Some only for a vault hit. Carried so the Wrapper/audit (§10/§13) need not re-look-up the origin.

reference: Option<String>

The external reference URI when the value was materialized from a reference (e.g. azure-kv://…), else None. Some ⇒ this was a reference (the bool the audit log’s scheme field is derived from).

Trait Implementations

impl Debug for ResolvedVar

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.