Struct SecretBuilder 

pub struct SecretBuilder { /* private fields */ }

Fluent builder for a single SecretEntry.

SecretBuilder::new()
    .env("OPENAI_API_KEY")
    .value(api_key)
    .allow_host("api.openai.com")
    .build()

Implementations

impl SecretBuilder

pub fn new() -> Self

Start building a secret.

pub fn env(self, var: impl Into<String>) -> Self

Set the environment variable to expose the placeholder as (required).

pub fn value(self, value: impl Into<String>) -> Self

Set the secret value (required).

pub fn placeholder(self, placeholder: impl Into<String>) -> Self

Set a custom placeholder string. If not set, auto-generated as $MSB_<env_var>.

pub fn allow_host(self, host: impl Into<String>) -> Self

Add an allowed host (exact match).

pub fn allow_host_pattern(self, pattern: impl Into<String>) -> Self

Add an allowed host with wildcard pattern (e.g., *.openai.com).

pub fn allow_any_host_dangerous(self, i_understand_the_risk: bool) -> Self

Allow for any host. Dangerous: secret can be exfiltrated to any destination. Requires explicit acknowledgment.

pub fn require_tls_identity(self, enabled: bool) -> Self

Require verified TLS identity before substituting (default: true).

pub fn inject_headers(self, enabled: bool) -> Self

Configure header injection (default: true).

pub fn inject_basic_auth(self, enabled: bool) -> Self

Configure Basic Auth injection (default: true).

pub fn inject_query(self, enabled: bool) -> Self

Configure query parameter injection (default: false).

pub fn inject_body(self, enabled: bool) -> Self

Configure body injection (default: false).

pub fn build(self) -> SecretEntry

Consume the builder and return a SecretEntry.

Panics

Panics if env or value was not set.

Trait Implementations

impl Default for SecretBuilder

fn default() -> Self

Returns the “default value” for a type.