Struct AtRestConfig 

pub struct AtRestConfig { /* private fields */ }

Environment-driven at-rest configuration.

Deliberately no Debug: it can carry the root key and the passphrase.

Implementations

impl AtRestConfig

pub const fn off() -> Self

Dark by default — zero behavior change.

pub fn from_env() -> Result<Self>

Read WM_AT_REST_MODE (off | keyfile | passphrase, default off), WM_AT_REST_KEY_FILE, WM_AT_REST_ROOT_KEY, WM_AT_REST_PASSPHRASE.

A set-but-unrecognized mode refuses the read (fail-closed): a typo must never silently downgrade an open to plaintext pass-through.

pub fn keyfile_with_root_key(material: impl Into<String>) -> Self

Mode-B config with an explicit material root key (64 hex chars or 32 raw bytes). Tests use this to avoid env mutation.

pub fn keyfile_with_key_file(path: impl Into<PathBuf>) -> Self

Mode-B config with an explicit key file (created if missing).

pub const fn keyfile() -> Self

Mode-B config that resolves the generated key file (generated_key_path: store root for the standard layout).

pub fn passphrase(passphrase: impl Into<String>) -> Self

Mode-C config with an explicit passphrase.

pub const fn mode(&self) -> AtRestMode

Configured mode.

Trait Implementations

impl Clone for AtRestConfig

fn clone(&self) -> AtRestConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Default for AtRestConfig

fn default() -> Self

Returns the “default value” for a type.