Add provider-neutral secret store support#230

Merged

prk-Jr merged 19 commits intomainfrom

feature/secret-store-abstraction

Apr 6, 2026

Commits on Mar 24, 2026

chore: add .worktrees/ to .gitignore

prk-Jr
authored and
prk-Jr
committed
feat(core): add SecretStore trait, SecretHandle, and contract test macro

prk-Jr
authored and
prk-Jr
committed
refactor(core): use Bytes::into() for zero-copy UTF-8 conversion in SecretHandle

prk-Jr
authored and
prk-Jr
committed
feat(core): add secret_handle() to RequestContext and Secrets extractor

prk-Jr
authored and
prk-Jr
committed
feat(core): add [stores.secrets] manifest schema and secret_store_name()

prk-Jr
authored and
prk-Jr
committed
feat(fastly): add FastlySecretStore adapter and dispatch_with_secrets

prk-Jr
authored and
prk-Jr
committed
style: apply rustfmt to Task 4 changes

prk-Jr
authored and
prk-Jr
committed
feat(cloudflare): add CloudflareSecretStore adapter and dispatch_with_secrets

prk-Jr
authored and
prk-Jr
committed
feat(cloudflare): add CloudflareSecretStore adapter and dispatch_with_secrets

prk-Jr
authored and
prk-Jr
committed
feat(axum): add EnvSecretStore for local dev and wire into service/dev server

prk-Jr
authored and
prk-Jr
committed
feat(cli): log secret store binding info during edgezero build

prk-Jr
authored and
prk-Jr
committed
test: add secret store contract tests across all adapters

prk-Jr
authored and
prk-Jr
committed
fix(secret-store): address security findings from review

prk-Jr
authored and
prk-Jr
committed
test(axum): add TCP integration tests for secret store wiring

prk-Jr
authored and
prk-Jr
committed
feat(demo): add secrets_echo handler and [stores.secrets] manifest config

prk-Jr
authored and
prk-Jr
committed
docs(guide): document runtime secret store configuration

prk-Jr
authored and
prk-Jr
committed

Commits on Mar 26, 2026

refactor(secret-store): collapse two-trait design into single SecretStore + SecretHandle

prk-Jr
authored and
prk-Jr
committed

Commits on Mar 27, 2026

Address PR review findings on secret-store branch

prk-Jr
authored and
prk-Jr
committed

Commits on Apr 6, 2026

Test uses InMemorySecretStore instead of env mutation

prk-Jr
authored and
prk-Jr
committed