pub struct ResolvedSecrets {Show 13 fields
pub claude_api_key: Option<Secret>,
pub openai_api_key: Option<Secret>,
pub gemini_api_key: Option<Secret>,
pub compatible_api_keys: HashMap<String, Secret>,
pub discord_token: Option<Secret>,
pub slack_bot_token: Option<Secret>,
pub slack_signing_secret: Option<Secret>,
pub gonka_private_key: Option<Secret>,
pub gonka_address: Option<Secret>,
pub cocoon_access_hash: Option<Secret>,
pub skill_registry_token: Option<Secret>,
pub web_search_api_key: Option<Secret>,
pub custom: HashMap<String, Secret>,
}Expand description
Secrets resolved from the vault at runtime.
Populated by SecretResolver::resolve_secrets() in zeph-core.
Never serialized to TOML.
Fields§
§claude_api_key: Option<Secret>§openai_api_key: Option<Secret>§gemini_api_key: Option<Secret>§compatible_api_keys: HashMap<String, Secret>§discord_token: Option<Secret>§slack_bot_token: Option<Secret>§slack_signing_secret: Option<Secret>§gonka_private_key: Option<Secret>Gonka wallet private key for signing blockchain transactions.
gonka_address: Option<Secret>Gonka wallet address for node identity verification.
cocoon_access_hash: Option<Secret>Cocoon sidecar access hash resolved from the vault key ZEPH_COCOON_ACCESS_HASH.
skill_registry_token: Option<Secret>Skill/plugin registry bearer credential, resolved from the vault key named by
skills.registry.auth_vault_key when skills.registry.enabled = true (spec-045,
#5869). None when the registry is disabled or auth_vault_key is unset.
web_search_api_key: Option<Secret>web_search tool API key, resolved from the vault key named by
tools.search.api_key_vault_key when tools.search.enabled = true (spec
006-1-web-search). None when the tool is disabled or the key is unset.
custom: HashMap<String, Secret>Arbitrary named secrets resolved from ZEPH_SECRET_* vault keys.
Key is the lowercased name after stripping the prefix (e.g. github_token).
Shared by two consumers: skill requires_secrets injection (see
zeph-core::agent::tool_execution::inject_active_skill_env) and sub-agent
permissions.secrets approval (see zeph-core::agent::subagent_commands::resolve_subagent_secret).