secret

A single secret, statically identified by the (implements ..) label a component imports it under, instead of a runtime key argument.

A component that knows its exact secret names up front (the common case) can import one labeled instance of this interface per secret — e.g. import db-password: wasmcloud:secrets/secret;. Because the label is part of the component's own type, a host can check that every labeled secret it imports has a matching entry in the component's resolved bind-time config from the component's import list alone, before instantiating it — instead of only discovering a missing one when a dynamic store.get call returns not-found. store remains the interface for a component whose set of keys is only known at runtime.