Struct PendingIntake 

pub struct PendingIntake {
    pub id: String,
    pub created_unix: u64,
    pub coordinate: String,
    pub sensitivity: Sensitivity,
    pub environment: String,
    pub origin: Origin,
    pub requesting_process: Option<String>,
    pub description: Option<Untrusted>,
    pub project: Option<String>,
}

A pending agent-initiated secret-creation request, persisted for the human-summoned fulfillment surface (CLI kovra intake list, the menu-bar app).

Carries only the authoritative address/metadata the agent named — never a value (I11/I12/I14). There is no value field by construction; the value is supplied out-of-band at fulfillment and goes straight to the vault.

Fields

id: String

The operator-typable intake id (<unix>-<pid>-<n>, same scheme as the approval broker).

created_unix: u64

Seconds since the Unix epoch when the intake was created.

coordinate: String

The coordinate the value will be sealed under (an address, not a value).

sensitivity: Sensitivity

Sensitivity the secret will be born with (a prod secret is born high, I5 — enforced at the seal, recorded here for the fulfillment prompt).

environment: String

Environment (prod is highlighted by the renderer).

origin: Origin

Who initiated the intake — weighs into the human’s decision.

requesting_process: Option<String>

The requesting process / caller identity, a trusted, observed fact set by the FFI/CLI boundary (never from requester text). Carries no value.

description: Option<Untrusted>

Optional requester free-text, segregated as untrusted (I16) — the agent’s “why”, never the authoritative line.

project: Option<String>

Optional destination project vault the value should be sealed into (None ⇒ the global vault). An address hint, never a value — it just routes which vault the fulfillment seals into and preselects the project in the native fulfill window. #[serde(default)] keeps intakes written before this field deserializable.

Implementations

impl PendingIntake

pub fn new( coordinate: impl Into<String>, sensitivity: Sensitivity, environment: impl Into<String>, origin: Origin, ) -> Self

Build an intake request from the authoritative fields. id/created_unix are placeholders until IntakeBroker::create stamps them.

pub fn with_requesting_process(self, s: impl Into<String>) -> Self

Attach the trusted, observed requesting-process identity (mirrors crate::confirm::ConfirmRequest::with_requesting_process).

pub fn with_description(self, text: impl Into<String>) -> Self

Attach segregated, untrusted requester free-text.

pub fn with_project(self, project: Option<String>) -> Self

Attach the destination project vault (None ⇒ global). Routes which vault the fulfillment seals into and preselects it in the fulfill window.

Trait Implementations

impl Clone for PendingIntake

fn clone(&self) -> PendingIntake

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for PendingIntake

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for PendingIntake

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Eq for PendingIntake

impl PartialEq for PendingIntake

fn eq(&self, other: &PendingIntake) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for PendingIntake

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for PendingIntake