Struct MasterKey 

pub struct MasterKey(/* private fields */);

A 32-byte AES-256 master key.

Construct via MasterKey::from_bytes, MasterKey::from_file, MasterKey::from_keyring, MasterKey::resolve, or MasterKey::generate.

Implementations

impl MasterKey

pub const fn from_bytes(bytes: [u8; 32]) -> Self

Construct from explicit bytes. The agent must keep the bytes confidential; the wrapper offers no extra protection beyond not implementing Debug or Display.

pub fn from_file(path: impl AsRef<Path>) -> Result<Self>

Read a 32-byte master key from path.

pub fn from_keyring() -> Result<Self>

Look up the master key in the OS keyring under (vibesurfer, default). Reads the entry as a hex string so it round-trips through cross-platform secret stores that don’t tolerate raw bytes.

pub fn resolve(fallback_path: impl AsRef<Path>) -> Result<Self>

Try the OS keyring first; fall back to path. Errors only if both fail.

pub fn generate() -> Result<Self>

Generate a fresh random key from the system CSPRNG.

pub fn write_to_file(&self, path: impl AsRef<Path>) -> Result<()>

Persist the key as 32 raw bytes at path. Caller is responsible for chmod-ing the file (typically 0600) and for ensuring the destination directory exists.

pub fn write_to_keyring(&self) -> Result<()>

Persist the key into the OS keyring as a hex string.

Trait Implementations

impl Clone for MasterKey

fn clone(&self) -> MasterKey

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for MasterKey

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.