Crate starpod_vault 

Modules

env

Deploy.toml ↔ vault env resolution.

known_hosts

Default allowed-host suggestions for well-known API key names.

Structs

Vault

Encrypted credential vault backed by SQLite + AES-256-GCM.

VaultEntry

Metadata for a vault entry (returned by Vault::get_entry / Vault::list_entries).

Constants

SYSTEM_KEYS

Environment variable names that are system-managed secrets.

Functions

derive_master_key

Derive or load the 32-byte master key for a vault instance.

is_system_key

Returns true if key is a system-managed secret that the agent must not read or modify at runtime.