Struct PackagePayload 

pub struct PackagePayload {
    pub schema_version: u32,
    pub environment: String,
    pub created: String,
    pub expires_at: u64,
    pub token_commitment: String,
    pub entries: Vec<SecretRecord>,
}

The plaintext that gets sealed into a Package.

Debug is safe: the only secret-bearing material lives inside the entries (a literal’s value, a keypair’s private, a totp’s seed), all SecretValues whose Debug is redacted (I12). The token_commitment is a BLAKE3 hash of the token secret — not the secret itself.

Fields

schema_version: u32

Schema version of this payload.

environment: String

The environment scope the package was cut for (e.g. dev). All entries share it; never prod (I4a).

created: String

RFC-3339 creation timestamp (provenance metadata, not a secret).

expires_at: u64

Expiry as Unix seconds. Mirrored in the cleartext Package header so a reader can reject an expired package before attempting decryption.

token_commitment: String

BLAKE3(token_secret) — the commitment an unattended open checks the presented token secret against (factor 2). Set by seal.

entries: Vec<SecretRecord>

The packaged records, each in its stored modality. Literals carry their value; references carry only the pointer URI (I8); keypair/totp carry their sealed private half / seed.

Implementations

impl PackagePayload

pub fn new( environment: impl Into<String>, created: impl Into<String>, expires_at: u64, entries: Vec<SecretRecord>, ) -> Self

Build a payload for environment, expiring at expires_at (Unix secs), over entries. token_commitment is left empty; seal fills it.

Trait Implementations

impl Debug for PackagePayload

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for PackagePayload

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for PackagePayload

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.