Documentation
¶
Overview ¶
Package credentials provides secure credential storage using native OS keychains (macOS Keychain, Linux libsecret, Windows Credential Manager) with file-based fallback.
Keychain entries use:
- Service: com.noblefactor.DevLore
- Account: the key (e.g., "ai/anthropic", "ai/openai")
- Password: the secret value
Lookup priority: Native keystore > Credentials file Environment variables are handled by the caller, not here.
Index ¶
Constants ¶
This section is empty.
Variables ¶
This section is empty.
Functions ¶
func Delete ¶
Delete removes a credential from keychain and/or file. The root is received for the file half, as in Set.
func Get ¶
Get retrieves a credential with priority: keychain > file. Environment variables should be checked by the caller before calling this.
func Set ¶
Set stores a credential in keychain (preferred) or file fallback.
The config tree's root is received, never constructed (#558; #405 phase 3): the file fallback writes a secret, and only a write through the caller's root makes its 0600 enforceable on Windows. The keychain path never touches it.
Types ¶
This section is empty.
Source Files