Documentation
¶
Overview ¶
Package secrets stages short-lived credentials for an agent to install.
Values never pass through chat input, are not persisted in the user's message, and Moa does not send them to the model. It is not a vault or a boundary against the agent: its shell runs as the same Unix user and can read these files. A value the agent reads or prints enters model context and the transcript like any other tool output.
Index ¶
Constants ¶
This section is empty.
Variables ¶
This section is empty.
Functions ¶
func Forget ¶
Forget best-effort removes one batch. It refuses paths outside this package's base directory and never removes the base itself.
func Reap ¶
func Reap()
Reap best-effort removes batches older than six hours. It only touches this package's random batch directory names, does not follow symlinks, and never removes the base directory itself.
func StartReaper ¶
StartReaper removes expired batches periodically until ctx is cancelled. The returned channel closes after the ticker and its goroutine have stopped.
Source Files