Struct Vault 

pub struct Vault {
    pub version: String,
    pub created: String,
    pub vault_name: String,
    pub repo: String,
    pub recipients: Vec<String>,
    pub schema: BTreeMap<String, SchemaEntry>,
    pub policy: Option<Policy>,
    pub secrets: BTreeMap<String, SecretEntry>,
    pub meta: String,
}

Fields

version: String

created: String

vault_name: String

repo: String

Repository URL, auto-detected from git remote during init.

recipients: Vec<String>

Public keys only — no names. Name mappings live in the encrypted meta blob.

schema: BTreeMap<String, SchemaEntry>

Key metadata — public, readable without decryption.

policy: Option<Policy>

Optional agent access policy. Lives in the plaintext header (like schema) so it is readable on no-key paths and at the same trust level as the recipient list. Covered by the keyed MAC (blake3v6:) so it is tamper-evident. Absent when no policy is set, keeping policy-free vaults byte-identical to pre-policy murk.

secrets: BTreeMap<String, SecretEntry>

Per-value encrypted secrets. Each value is a separate age ciphertext.

meta: String

Encrypted metadata blob: recipient names and integrity MAC.

Trait Implementations

impl Clone for Vault

fn clone(&self) -> Vault

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for Vault

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for Vault

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for Vault

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.