Struct AgeVaultProvider 

pub struct AgeVaultProvider { /* private fields */ }

Implementations

impl AgeVaultProvider

pub fn new( key_path: &Path, vault_path: &Path, ) -> Result<AgeVaultProvider, AgeVaultError>

Decrypt an age-encrypted JSON secrets file.

key_path — path to the age identity (private key) file. vault_path — path to the age-encrypted JSON file.

Errors

Returns AgeVaultError on key/vault read failure, parse error, or decryption failure.

pub fn load( key_path: &Path, vault_path: &Path, ) -> Result<AgeVaultProvider, AgeVaultError>

Load vault from disk, storing paths for subsequent write operations.

Errors

Returns AgeVaultError on key/vault read failure, parse error, or decryption failure.

pub fn save(&self) -> Result<(), AgeVaultError>

Serialize and re-encrypt secrets to vault file using atomic write (temp + rename).

Errors

Returns AgeVaultError on encryption or write failure.

Note: re-reads and re-parses the key file on each call. For CLI one-shot use this is acceptable; if used in a long-lived context consider caching the parsed identity.

pub fn set_secret_mut(&mut self, key: String, value: String)

Insert or update a secret in the in-memory map.

pub fn remove_secret_mut(&mut self, key: &str) -> bool

Remove a secret from the in-memory map. Returns true if the key existed.

pub fn list_keys(&self) -> Vec<&str>

Return sorted list of secret keys (no values exposed).

pub fn get(&self, key: &str) -> Option<&str>

Look up a secret value by key, returning None if not present.

pub fn init_vault(dir: &Path) -> Result<(), AgeVaultError>

Generate a new x25519 keypair, write key file (mode 0600), and create an empty encrypted vault.

Outputs:

• <dir>/vault-key.txt — age identity (private + public key comment)
• <dir>/secrets.age — age-encrypted empty JSON object

Errors

Returns AgeVaultError on key/vault write failure or encryption failure.

Trait Implementations

impl Debug for AgeVaultProvider

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl VaultProvider for AgeVaultProvider

fn get_secret( &self, key: &str, ) -> Pin<Box<dyn Future<Output = Result<Option<String>, VaultError>> + Send + '_>>

Retrieve a secret by key.

fn list_keys(&self) -> Vec<String>

Return all known secret keys. Used for scanning ZEPH_SECRET_* prefixes.