Expand description
Export/bundle helpers for uselesskey fixture handoff.
This crate intentionally focuses on one-shot local export targets and metadata manifests. It does not implement rotation, retrieval, leasing, or long-running key-store behavior.
Structs§
- Bundle
Manifest - Bundle manifest describing generated artifacts and handoff metadata.
- Export
Artifact - In-memory artifact material and metadata used by exporters.
- Fingerprint
- Cryptographic fingerprint metadata.
- Manifest
Artifact - Per-artifact metadata in
BundleManifest. - Materialize
Fixture Spec - One fixture entry in a
MaterializeManifest. - Materialize
Manifest - Manifest describing deterministic fixture outputs that can be written or verified.
- Materialize
Summary - Summary returned after a materialize or verify pass.
Enums§
- Artifact
Type - Artifact kinds for bundle metadata.
- Bundle
Error - Export errors.
- KeyRef
- Secret-key external reference model.
- Materialize
Error - Errors for manifest-driven fixture materialization.
- Materialize
Kind - Supported fixture kinds for manifest-driven materialization.
Constants§
- MATERIALIZE_
MANIFEST_ VERSION - Materialization manifest schema version supported by this crate.
Functions§
- emit_
include_ bytes_ module - Emit a Rust module containing
include_bytes!constants for each manifest entry. - export_
envdir - Write artifacts as envdir files (
root/<ENV_VAR_NAME>=> value). - export_
flat_ files - Write a set of artifacts to
root/<key>as flat files. - load_
materialize_ manifest - Load and validate a manifest from disk.
- materialize_
manifest_ file - Load a manifest from disk, then materialize or verify it under
out_dir. - materialize_
manifest_ to_ dir - Materialize or verify the manifest contents under
out_dir. - parse_
materialize_ manifest_ str - Parse a manifest string and validate the supported schema.
- render_
dotenv_ fragment - Render dotenv fragment (
KEY="value") using the first env-var name per artifact. - render_
k8s_ secret_ yaml - Render a Kubernetes Secret manifest (opaque string data encoded as base64 under
data). - render_
sops_ ready_ yaml - Render a SOPS-ready YAML skeleton with encrypted placeholders and metadata section.
- render_
vault_ kv_ json - Render a Vault KV-v2 JSON payload (
{"data":{...},"metadata":{...}}).