zlayer_types/secrets/mod.rs
1//! Secrets domain wire/storage types.
2//!
3//! Lifted from `zlayer-secrets` so cross-crate consumers (`zlayer-api`,
4//! `zlayer-agent`, the CLI) can name secrets shapes without depending on
5//! `zlayer-secrets`. The `zlayer-secrets` crate re-exports these for
6//! backward compatibility and continues to own the trait definitions,
7//! crypto, and persistent-store implementations.
8
9pub mod client_keys;
10pub mod error;
11pub mod git;
12pub mod registry;
13pub mod sealed;
14pub mod types;
15
16// Convenience flat re-exports so callers can `use zlayer_types::secrets::Secret;`
17// rather than reaching into submodule paths.
18pub use client_keys::{ActorKind, ClientPublicKey, PUBLIC_KEY_LEN};
19pub use error::{Result, SecretsError};
20pub use git::{GitCredential, GitCredentialKind};
21pub use registry::{RegistryAuthType, RegistryCredential};
22pub use sealed::{RecipientPublicKey, SealedError, SealedSecret};
23pub use types::{RotationResult, Secret, SecretMetadata, SecretRef, SecretScope};