Struct SecretStore 

pub struct SecretStore { /* private fields */ }

Thin wrapper around keyring::Entry (or an in-process HashMap for CI / unattended environments) that scopes every secret under a single namespace. Cloning is cheap: the keyring variant clones the service string, the memory variant clones the Arc.

Implementations

impl SecretStore

pub fn with_service(service: impl Into<String>) -> Self

Override the keyring service identifier. Useful in tests where the suite wants its own namespace so it never clobbers a real operator install.

pub fn memory() -> Self

In-process backend that stores secrets in a HashMap shared between clones via an Arc<Mutex<_>>. Intended for CI and the integration test suite, where the platform keychain is either unavailable (Linux containers without secret-service) or would prompt for unlock (macOS).

pub fn from_env() -> Self

Select the backend from the NYX_AGENT_SECRETS_BACKEND environment variable: memory returns the in-process backend, anything else (including unset) falls back to the keyring under the default service name.

pub fn service(&self) -> &str

pub fn set(&self, account: &str, value: &str) -> Result<(), SecretError>

Persist value under account. Overwrites any existing value.

pub fn get(&self, account: &str) -> Result<Option<String>, SecretError>

Fetch the stored value, or Ok(None) if no entry exists yet.

pub fn delete(&self, account: &str) -> Result<(), SecretError>

Remove the entry. Idempotent: missing entries are not an error.

Trait Implementations

impl Clone for SecretStore

fn clone(&self) -> SecretStore

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for SecretStore

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for SecretStore

fn default() -> Self

Returns the “default value” for a type.