credentials

type Secret ¶

type Secret struct {
	Value string
	Ref   string
}

type Store ¶

type Store interface {
	Resolve(ctx context.Context, scope string, ref string) (Secret, error)
}

Store resolves secret refs. When scope is GlobalScope, plugins use the global lookup chain (context override, config env, encrypted file, dotenv, process env). When scope is non-empty, integrations require each env: ref to be declared under that scope in the integration manifest (mcp.json / api.json).