Struct CPUserSecretManager

controlplane/user_secrets.go:24–27

CPUserSecretManager implements server.UserSecretManager on top of the config store: it seals user CREATE PERSISTENT SECRET statements with AES-GCM and persists them per (org, user, name) for replay at session creation. With no encryption key configured, writes are disabled (Ready errors, so the clie

// errors, so the client gets a clear message) but deletes still work, so
// stale rows remain removable.
type CPUserSecretManager struct {
	store  *configstore.ConfigStore
	cipher *usersecrets.Cipher // nil when DUCKGRES_USER_SECRET_KEY is unset
}

// NewCPUserSecretManager builds the manager. encodedKey is the value of
// DUCKGRES_USER_SECRET_KEY; empty disables persistence (not an error), a