Struct SecretValue 

pub struct SecretValue(/* private fields */);

Toolkit-owned secret newtype — NEVER returns raw bytes from SecretsProvider.

Intentionally does NOT implement Debug, Display, Clone, Serialize, Deserialize, PartialEq, Eq. Compile-fail tests at tests/compile_fail/token_secret_no_*.rs enforce this via trybuild (per Phase 83 review R5 + R6 + Pattern E + CMSUP-02).

Available unconditionally — does NOT depend on the code-mode feature. When the code-mode feature is enabled, an impl From<SecretValue> for pmcp_code_mode::TokenSecret is provided for interop with the HMAC token machinery.

The underlying bytes are zeroed on drop via secrecy::SecretBox.

Implementations

impl SecretValue

pub fn new(bytes: impl Into<Vec<u8>>) -> Self

Create from raw bytes. The input is moved into the SecretBox without an intermediate copy — no plaintext residue is left behind by the constructor.

pub fn from_env(var: &str) -> Result<Self, VarError>

Read from an environment variable. The string value is converted to bytes and wrapped immediately.

Errors

Returns std::env::VarError if the variable is not set or not UTF-8.

pub fn expose_secret(&self) -> &[u8]

Expose the secret bytes for use by callers (HMAC, header construction, etc.). Callers MUST NOT log or persist the returned slice.

Trait Implementations

impl From<SecretValue> for TokenSecret

Available on crate feature code-mode only.

Interop with pmcp_code_mode::TokenSecret when the code-mode feature is on.

Allows a SecretValue resolved by a SecretsProvider to be fed into the HMAC token machinery in pmcp-code-mode without forcing every toolkit consumer to depend on code-mode.

fn from(v: SecretValue) -> Self

Converts to this type from the input type.