Module config 

Secret injection configuration types.

The data types (SecretsConfig, SecretEntry, HostPattern, SecretInjection, ViolationAction) and their validation live in the shared microsandbox-types crate so the cloud control plane, the SDKs, and this engine all speak one contract. This module re-exports them and adds the engine-internal query helpers used by the proxy.

Structs

SecretEntry

A single secret entry.

SecretInjection

Where in the HTTP request a secret can be injected.

SecretsConfig

Placeholder-based secret injection for a sandbox’s TLS-intercepted egress.

Enums

HostPattern

Host pattern for a secret allowlist.

SecretConfigError

Invalid secret configuration.

SecretSource

Host-side source for secret material.

ViolationAction

Action when a secret placeholder is detected going to a disallowed host.

Constants

MAX_SECRET_PLACEHOLDER_BYTES

Maximum supported secret placeholder length in bytes.