cadrumo.adapters.persistence.storage.secret_store package

Inert namespace for keyed secret records over encrypted blobs.

The defining store module owns the typed SecretRecord payload and the SecretStore repository that wraps records in adapters.persistence.storage.envelope.contract.Envelope, persists them via adapters.persistence.storage.blob_store.blob_store.EncryptedBlobStore, and indexes natural keys by HMAC-SHA256 lookup digest.

The index is deliberately not a plaintext inventory: secret keys, payload bytes, and blob digests are kept out of user-facing miss, collision, corruption, and cleanup messages. SECRET and SESSION records must also carry explicit expiry before write. This package owns opaque secret persistence, not tempfile lifecycle; every current consumer reads bytes directly rather than through a filesystem path. The package initializer exports no symbols.

Submodules

• cadrumo.adapters.persistence.storage.secret_store.store module
  • SECRET_STORE_CLASSES
  • SecretRecord
    • SecretRecord.key
    • SecretRecord.value
    • SecretRecord.classification
    • SecretRecord.metadata
    • SecretRecord.created_at
    • SecretRecord.expires_at
  • SecretStore
    • SecretStore.store_dir
    • SecretStore.value_witness()
    • SecretStore.put()
    • SecretStore.get()
    • SecretStore.delete()
    • SecretStore.list_digests()
    • SecretStore.rotate()