Struct SecretsConfig 

pub struct SecretsConfig {
    pub secrets: HashMap<String, String>,
}

Parsed ~/.yah/qed/secrets.toml. Missing file is not an error.

Fields

secrets: HashMap<String, String>

Implementations

impl SecretsConfig

pub fn load_default() -> Self

Path: <home>/.yah/qed/secrets.toml. Returns Default::default() when the file or HOME is unavailable.

pub fn load_from(path: &Path) -> Self

pub fn resolve_all(&self) -> Value

Build the secrets.* Value::Object the qed-gha executor expects. Each declared GHA secret name is resolved through its source URI using the canonical yah vault; unresolved sources surface as "" (matches GHA’s unset behavior).

pub fn resolve_one(&self, name: &str) -> Option<String>

Resolve a single declared secret by its bridged name, running the same vault: / env: / pipe-fallback chain as [resolve_all]. Returns None when the name isn’t declared in the bridge, or when its source chain yields nothing. Opens the vault once per call — fine for the handful of credential slots a release-provider adapter reads at publish time (R509). For resolving the whole bridge at once, prefer [resolve_all], which amortizes the vault open across all entries.

pub fn names(&self) -> Vec<String>

Names of declared GHA secrets (sorted). Used by the desktop vault-explorer to show which workflow names are bridged + which vault slots they map to.

pub fn resolve_status(&self) -> Vec<EntryStatus>

Per-entry presence report — runs the same fallback chain as [resolve_all] but reports only whether each entry resolves to a non-empty value, never the value itself. Sorted by GHA name so the editor UI gets a stable row order. (R500-F1)

Trait Implementations

impl Clone for SecretsConfig

fn clone(&self) -> SecretsConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for SecretsConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for SecretsConfig

fn default() -> SecretsConfig

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for SecretsConfig

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl SecretSource for SecretsConfig

fn resolve(&self, name: &str) -> Option<String>

Resolve name (a bridged slot name, e.g. "APPLE_API_KEY") to its value, or None when it isn’t declared / doesn’t resolve.