Struct StagedMasterKeyCustody 

pub struct StagedMasterKeyCustody { /* private fields */ }

A generated master key retained in memory until cloud setup commits.

Implementations

impl StagedMasterKeyCustody

pub fn new( destination: Arc<dyn MasterKeyCustody>, proposed: MasterKeyring, ) -> Result<Arc<Self>, MasterKeyError>

pub fn commit(&self) -> Result<(), KeyError>

pub fn rollback(&self) -> Result<(), KeyError>

Trait Implementations

impl MasterKeyCustody for StagedMasterKeyCustody

fn unlock(&self) -> Result<Option<MasterKeyring>, KeyError>

The store’s master keyring for this session. Ok(None) means the store has never had one established (a fresh store before create/join) — distinct from a failure to produce one (wrong passphrase, unreadable backing store), which is Err.

fn persist(&self, keyring: &MasterKeyring) -> Result<(), KeyError>

Protect and store keyring, replacing whatever is stored. Serves both establishment (create/join/restore) and rotation re-protection (member removal, the per-cycle refresh adoption). Idempotent.

fn forget(&self) -> Result<(), KeyError>

Remove the stored keyring. Ok when nothing was stored.