Enum CredentialRef 

pub enum CredentialRef {
    Custodian(CredentialName),
    LegacyEnv {
        var: String,
    },
    LegacyTag {
        tag: String,
    },
}

One parsed operator-config credential reference (DR-0053 Migration).

Five subsystems arrived at reference-not-value independently with four spellings (env:OPENAI_API_KEY, secret:claude, credential:model, credential:account:openai); this is the one namespace they unify onto. credential:<name> names a custodian entry; every legacy spelling still parses but resolves degraded at r0 — visible, never silent — and is removed at the first release that requires a rung.

Variants

Custodian(CredentialName)

credential:<name> — a custodian entry; the rung is whatever the custodian derives from evidence.

LegacyEnv

env:<VAR> — the legacy environment shim: material read from whip’s own environment, so the honest resolution is r0 and degraded.

Fields

var: String

LegacyTag

A pre-unification spelling (secret:<x>, credential:account:<x>, or a legacy credential:<x> that names no custodian entry). Carried as an opaque tag so existing bindings keep matching; r0 degraded.

Fields

tag: String

Implementations

impl CredentialRef

pub fn parse(raw: &str) -> Result<Self, String>

pub fn shim_rung(&self) -> (Rung, bool)

The honest rung/degraded pair this reference can claim WITHOUT asking a custodian: legacy shims are r0 degraded by construction. For Custodian references the truth is whatever the custodian’s reply derives — this method reports the r0 floor and the caller must prefer the reply’s values (credential-rung-evidence.maude: configuration is not evidence).

pub fn is_legacy(&self) -> bool

Whether this reference is a legacy spelling that the unification will retire once a rung is required.

Trait Implementations

impl Clone for CredentialRef

fn clone(&self) -> CredentialRef

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for CredentialRef

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Eq for CredentialRef

impl PartialEq for CredentialRef

fn eq(&self, other: &CredentialRef) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for CredentialRef