bxcore, gatewayd, loopd: the secret store moves to bxcore::secrets

Co-Authored-By: ornith-1.5-35b-a3b <agent@wntrmute.dev>
2026-09-27 19:08:42 -07:00
parent de60c9e13a
commit f594e0d9d4
20 changed files with 385 additions and 146 deletions
@@ -13,7 +13,20 @@ serde.workspace = true
 serde_json.workspace = true
 humantime.workspace = true
 emsha.workspace = true
+zeroize = { workspace = true, optional = true }

 [dev-dependencies]
 toml.workspace = true

+# The secret store (M5b spec, section 5). A role that reads secrets enables it; `loopd` never does,
+# so its binary does not contain the code that reads them.
+[features]
+secrets = ["dep:zeroize"]
+
+[[test]]
+name = "secrets"
+required-features = ["secrets"]
+
+[[test]]
+name = "secrets_race"
+required-features = ["secrets"]