credentials

Documentation

Index

• Constants
• type EnvPairResolver
• type EnvPairsOptions
• type Secret
• type Store

Constants

const GlobalScope = ""

GlobalScope is used for YAML-level refs (apiKeyRef, botTokenRef, telemetry keys). Integration tools pass a non-empty scope (mcp.<server>, openapi.<api>, shell-bash.<cmd>, etc.).

Types

type EnvPairResolver

type EnvPairResolver interface {
	EnvPairs(ctx context.Context, scope string, opts EnvPairsOptions) ([]string, error)
}

EnvPairResolver is implemented by credentials/integrations. It resolves scoped secrets to KEY=value strings (opts.Keys or stored keys for scope).

type EnvPairsOptions

type EnvPairsOptions struct {
	Keys []string
}

EnvPairsOptions selects env var names for scoped subprocess injection. When Keys is non-empty it overrides stored scoped key enumeration.

type Secret

type Secret struct {
	Value string
	Ref   string
}

type Store

type Store interface {
	Resolve(ctx context.Context, scope string, ref string) (Secret, error)
}

Store resolves secret refs. When scope is GlobalScope, plugins use the global lookup chain (context override, process env, config env, encrypted file, dotenv). When scope is non-empty, integrations resolve scoped values only (context, L1 scopedEnv, /env add, or encrypted/dotenv SCOPE::KEY).