Module secrets 

Secrets domain wire/storage types.

Lifted from zlayer-secrets so cross-crate consumers (zlayer-api, zlayer-agent, the CLI) can name secrets shapes without depending on zlayer-secrets. The zlayer-secrets crate re-exports these for backward compatibility and continues to own the trait definitions, crypto, and persistent-store implementations.

Re-exports

pub use client_keys::ActorKind;

pub use client_keys::ClientPublicKey;

pub use client_keys::PUBLIC_KEY_LEN;

pub use error::Result;

pub use error::SecretsError;

pub use git::GitCredential;

pub use git::GitCredentialKind;

pub use registry::RegistryAuthType;

pub use registry::RegistryCredential;

pub use sealed::RecipientPublicKey;

pub use sealed::SealedError;

pub use sealed::SealedSecret;

pub use types::RotationResult;

pub use types::Secret;

pub use types::SecretMetadata;

pub use types::SecretRef;

pub use types::SecretScope;

Modules

client_keys

Client public key data shapes for sealed-box recipient registration.

error

Error type for secrets operations.

git

Git credential data shapes (the wire/storage form, not the store impl).

registry

Registry credential data shapes (the wire/storage form, not the store impl).

sealed

Sealed-box wire types and errors (recipient pubkey + ciphertext envelope).

types

Data types for the secrets domain.