Struct LocalCredentialStore 

pub struct LocalCredentialStore { /* private fields */ }

Implementations

impl LocalCredentialStore

pub fn production_setup_root_path() -> Result<PathBuf, CredentialStoreError>

Returns the fixed device-setup root without touching the filesystem. The path is suitable for internal use only and must never be emitted.

pub fn ensure_production_setup_root() -> Result<PathBuf, CredentialStoreError>

Creates the fixed owner-only device-setup root and returns its path.

pub fn production() -> Result<Self, CredentialStoreError>

Opens the fixed, non-synchronizing credential root for this OS account.

pub fn production_existing() -> Result<Self, CredentialStoreError>

Opens an already initialized fixed store without creating any filesystem object.

pub fn add( &self, provider: &str, label: &str, secret: &[u8], ) -> Result<CredentialMetadata, CredentialStoreError>

pub fn rotate_preview( &self, credential_ref: &str, expires_at_epoch_seconds: u64, ) -> Result<CredentialLifecyclePreview, CredentialStoreError>

pub fn remove_preview( &self, credential_ref: &str, expires_at_epoch_seconds: u64, ) -> Result<CredentialLifecyclePreview, CredentialStoreError>

pub fn reconcile_rotate( &self, credential_ref: &str, request: CredentialLifecycleRequestIdentity<'_>, ) -> Result<CredentialRotationReconciliation, CredentialStoreError>

Reconciles an already-journaled rotation without reading a new secret or requiring a second confirmation. The request identity is matched to the durable journal, but its user-facing preview expiry is intentionally not re-evaluated: authorization was validated before the journal became durable.

pub fn reconcile_remove( &self, credential_ref: &str, request: CredentialLifecycleRequestIdentity<'_>, ) -> Result<CredentialRemovalReconciliation, CredentialStoreError>

Reconciles an already-authorized removal from its durable journal. Matching recovery is independent of the expired preview clock because the original confirmation and complete request identity are journaled before the descriptor-bound erasure boundary.

pub fn rotate_apply( &self, credential_ref: &str, secret: &[u8], approval: CredentialLifecycleApproval<'_>, ) -> Result<CredentialLifecycleOutcome, CredentialStoreError>

pub fn remove_apply( &self, credential_ref: &str, approval: CredentialLifecycleApproval<'_>, ) -> Result<CredentialLifecycleOutcome, CredentialStoreError>

pub fn list(&self) -> Result<Vec<CredentialMetadata>, CredentialStoreError>

pub fn lock_inventory( &self, ) -> Result<CredentialInventoryGuard, CredentialStoreError>

pub fn lock_lifecycle_inventory( &self, ) -> Result<CredentialInventoryGuard, CredentialStoreError>

pub fn status( &self, credential_ref: &str, ) -> Result<CredentialStatus, CredentialStoreError>

pub fn resolve( &self, credential_ref: &str, ) -> Result<Zeroizing<Vec<u8>>, CredentialStoreError>

Trait Implementations

impl Clone for LocalCredentialStore

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for LocalCredentialStore

fn fmt(&self, formatter: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.