Struct ResolvedSecrets

Source

pub struct ResolvedSecrets {Show 13 fields
    pub claude_api_key: Option<Secret>,
    pub openai_api_key: Option<Secret>,
    pub gemini_api_key: Option<Secret>,
    pub compatible_api_keys: HashMap<String, Secret>,
    pub discord_token: Option<Secret>,
    pub slack_bot_token: Option<Secret>,
    pub slack_signing_secret: Option<Secret>,
    pub gonka_private_key: Option<Secret>,
    pub gonka_address: Option<Secret>,
    pub cocoon_access_hash: Option<Secret>,
    pub skill_registry_token: Option<Secret>,
    pub web_search_api_key: Option<Secret>,
    pub custom: HashMap<String, Secret>,
}

Expand description

Secrets resolved from the vault at runtime.

Populated by SecretResolver::resolve_secrets() in zeph-core. Never serialized to TOML.

Fields§

§claude_api_key: Option<Secret>§openai_api_key: Option<Secret>§gemini_api_key: Option<Secret>§compatible_api_keys: HashMap<String, Secret>§discord_token: Option<Secret>§slack_bot_token: Option<Secret>§slack_signing_secret: Option<Secret>§gonka_private_key: Option<Secret>

Gonka wallet private key for signing blockchain transactions.

§gonka_address: Option<Secret>

Gonka wallet address for node identity verification.

§cocoon_access_hash: Option<Secret>

Cocoon sidecar access hash resolved from the vault key ZEPH_COCOON_ACCESS_HASH.

§skill_registry_token: Option<Secret>

Skill/plugin registry bearer credential, resolved from the vault key named by skills.registry.auth_vault_key when skills.registry.enabled = true (spec-045, #5869). None when the registry is disabled or auth_vault_key is unset.

§web_search_api_key: Option<Secret>

web_search tool API key, resolved from the vault key named by tools.search.api_key_vault_key when tools.search.enabled = true (spec 006-1-web-search). None when the tool is disabled or the key is unset.

§custom: HashMap<String, Secret>

Arbitrary named secrets resolved from ZEPH_SECRET_* vault keys. Key is the lowercased name after stripping the prefix (e.g. github_token).

Shared by two consumers: skill requires_secrets injection (see zeph-core::agent::tool_execution::inject_active_skill_env) and sub-agent permissions.secrets approval (see zeph-core::agent::subagent_commands::resolve_subagent_secret).

ResolvedSecrets

Struct ResolvedSecrets Copy item path

Fields§

Trait Implementations§

impl Debug for ResolvedSecrets

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

impl Default for ResolvedSecrets

fn default() -> ResolvedSecrets

Auto Trait Implementations§

impl Freeze for ResolvedSecrets

impl RefUnwindSafe for ResolvedSecrets

impl Send for ResolvedSecrets

impl Sync for ResolvedSecrets

impl Unpin for ResolvedSecrets

impl UnsafeUnpin for ResolvedSecrets

impl UnwindSafe for ResolvedSecrets

Blanket Implementations§

impl<T> Any for Twhere T: 'static + ?Sized,

fn type_id(&self) -> TypeId

impl<T> Borrow<T> for Twhere T: ?Sized,

fn borrow(&self) -> &T

impl<T> BorrowMut<T> for Twhere T: ?Sized,

fn borrow_mut(&mut self) -> &mut T

impl<ST, DT> CastableFrom<ST, Initialized, Initialized> for DTwhere ST: ?Sized, DT: ?Sized,

impl<ST, DT> CastableFrom<ST, Uninit, Uninit> for DTwhere ST: ?Sized, DT: ?Sized,

impl<T> From<T> for T

fn from(t: T) -> T

impl<T> Instrument for T

fn instrument(self, span: Span) -> Instrumented<Self> ⓘ

fn in_current_span(self) -> Instrumented<Self> ⓘ

impl<T, U> Into<U> for Twhere U: From<T>,

fn into(self) -> U

impl<T> IntoEither for T

fn into_either(self, into_left: bool) -> Either<Self, Self> ⓘ

fn into_either_with<F>(self, into_left: F) -> Either<Self, Self> ⓘwhere F: FnOnce(&Self) -> bool,

impl<T> IntoRequest<T> for T

fn into_request(self) -> Request<T>

impl<L> LayerExt<L> for L

fn named_layer<S>(&self, service: S) -> Layered<<L as Layer<S>>::Service, S>where L: Layer<S>,

impl<T> Pointable for T

const ALIGN: usize

type Init = T

unsafe fn init(init: <T as Pointable>::Init) -> usize

unsafe fn deref<'a>(ptr: usize) -> &'a T

unsafe fn deref_mut<'a>(ptr: usize) -> &'a mut T

unsafe fn drop(ptr: usize)

impl<T> PolicyExt for Twhere T: ?Sized,

fn and<P, B, E>(self, other: P) -> And<T, P>where T: Sized + Policy<B, E>, P: Policy<B, E>,

fn or<P, B, E>(self, other: P) -> Or<T, P>where T: Sized + Policy<B, E>, P: Policy<B, E>,

impl<T> Read<Exclusive, BecauseExclusive> for Twhere T: ?Sized,

impl<T> Same for T

type Output = T

impl<T, U> TryFrom<U> for Twhere U: Into<T>,

type Error = Infallible

fn try_from(value: U) -> Result<T, <T as TryFrom<U>>::Error>

impl<T, U> TryInto<U> for Twhere U: TryFrom<T>,

type Error = <U as TryFrom<T>>::Error

fn try_into(self) -> Result<U, <U as TryFrom<T>>::Error>

impl<V, T> VZip<V> for Twhere V: MultiLane<T>,

fn vzip(self) -> V

impl<T> WithSubscriber for T

fn with_subscriber<S>(self, subscriber: S) -> WithDispatch<Self> ⓘwhere S: Into<Dispatch>,

fn with_current_subscriber(self) -> WithDispatch<Self> ⓘ

Struct ResolvedSecrets

impl<T> Any for T
where T: 'static + ?Sized,

impl<T> Borrow<T> for T
where T: ?Sized,

impl<T> BorrowMut<T> for T
where T: ?Sized,

impl<ST, DT> CastableFrom<ST, Initialized, Initialized> for DT
where ST: ?Sized, DT: ?Sized,

impl<ST, DT> CastableFrom<ST, Uninit, Uninit> for DT
where ST: ?Sized, DT: ?Sized,

impl<T, U> Into<U> for T
where U: From<T>,

fn into_either_with<F>(self, into_left: F) -> Either<Self, Self> ⓘ
where F: FnOnce(&Self) -> bool,

fn named_layer<S>(&self, service: S) -> Layered<<L as Layer<S>>::Service, S>
where L: Layer<S>,

impl<T> PolicyExt for T
where T: ?Sized,

fn and<P, B, E>(self, other: P) -> And<T, P>
where T: Sized + Policy<B, E>, P: Policy<B, E>,

fn or<P, B, E>(self, other: P) -> Or<T, P>
where T: Sized + Policy<B, E>, P: Policy<B, E>,

impl<T> Read<Exclusive, BecauseExclusive> for T
where T: ?Sized,

impl<T, U> TryFrom<U> for T
where U: Into<T>,

impl<T, U> TryInto<U> for T
where U: TryFrom<T>,

impl<V, T> VZip<V> for T
where V: MultiLane<T>,

fn with_subscriber<S>(self, subscriber: S) -> WithDispatch<Self> ⓘ
where S: Into<Dispatch>,