imports

Opaque-handle access to a secrets backend. Returning secret rather than the underlying value lets the host gate reveal independently of lookup.

Unwraps an opaque secret handle into its underlying value. Split from store so a host can audit or restrict reveal calls separately.

A single secret, statically identified by the (implements ..) label a component imports it under, instead of a runtime key argument.