Struct SecretsConfig 

pub struct SecretsConfig {
    pub identity: String,
    pub recipients: Vec<String>,
    pub passkey_wrapped: Option<String>,
    pub passkey_recipients: Vec<String>,
    pub passkey_identities: Option<String>,
}

[secrets] — wires the age encryption pipeline into apply.

identity is the path to your local age secret key file (NOT committed). recipients is the public-key list every new encryption is wrapped to — at minimum, the public key matching identity, and any additional machines / users that should also be able to decrypt. yui defaults the identity path to ~/.config/yui/age.txt and treats an empty recipients list as “secrets feature off”.

Fields

identity: String

Path to the X25519 secret key used by apply to decrypt *.age files. Plain (AGE-SECRET-KEY-1…) text, gitignored. Default ~/.config/yui/age.txt.

recipients: Vec<String>

X25519 public keys that *.age files are encrypted to. Empty = secrets feature off. Each machine usually adds its own here so multi-recipient encryption lets all machines decrypt.

passkey_wrapped: Option<String>

Optional path (source-relative or absolute) where yui secret wrap stashes the X25519 identity, encrypted to passkey_recipients. Committed to the dotfiles repo so it travels to new machines; yui secret unlock reads it there. Off when absent.

passkey_recipients: Vec<String>

Public keys (X25519 or plugin) that passkey_wrapped is encrypted to. Multiple = redundancy: any one device can recover the X25519 secret on a new machine.

passkey_identities: Option<String>

Optional path (source-relative or absolute) to the file holding the identity descriptors (AGE-PLUGIN-… lines) that yui secret unlock tries against passkey_wrapped. Plugin identity descriptors are device addresses, not secrets — committing them is fine.

Implementations

impl SecretsConfig

pub fn enabled(&self) -> bool

[secrets] is “on” once the user has populated recipients (which yui secret init does). Until then, the apply walker won’t even look for *.age files — keeps every existing dotfiles repo behaving exactly the same as before this PR.

Trait Implementations

impl Clone for SecretsConfig

fn clone(&self) -> SecretsConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for SecretsConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for SecretsConfig

fn default() -> Self

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for SecretsConfig

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.