Struct GrantedSecret 

pub struct GrantedSecret {
    pub value: Secret,
    pub expires_at: Instant,
}

A resolved secret value delivered to a sub-agent loop, paired with the absolute instant its originating grant expires.

Sent over the secret_tx/secret_rx channel (see SubAgentHandle::secret_tx) instead of a bare Secret so the spawned agent loop task — which has no further access to the manager-side PermissionGrants once the value is delivered — can still re-validate the TTL locally before every tool call and evict the value once it expires.

Examples

use std::time::{Duration, Instant};
use zeph_common::secret::Secret;
use zeph_subagent::grants::GrantedSecret;

let granted = GrantedSecret {
    value: Secret::new("sekrit"),
    expires_at: Instant::now() + Duration::from_mins(5),
};
assert!(!granted.is_expired());

Fields

value: Secret

The resolved vault secret value.

expires_at: Instant

The absolute instant after which this value must no longer be used.

Implementations

impl GrantedSecret

pub fn is_expired(&self) -> bool

Returns true if expires_at has already passed.

Examples

use std::time::{Duration, Instant};
use zeph_common::secret::Secret;
use zeph_subagent::grants::GrantedSecret;

let expired = GrantedSecret {
    value: Secret::new("sekrit"),
    expires_at: Instant::now().checked_sub(Duration::from_secs(1)).unwrap(),
};
assert!(expired.is_expired());

Trait Implementations

impl Debug for GrantedSecret

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.