Module external_credentials 

Structs

ExternalCredentialConsentStatus

Side-effect-free projection used by picker, config, and doctor surfaces.

ExternalCredentialConsentToml

Persisted, provider-scoped consent for one exact external credential file.

ExternalCredentialReadGrant

Opaque proof that one exact provider/source/path tuple may be read.

Enums

ExternalCredentialAccess

The side-effect envelope Codewhale may use for an external credential.

ExternalCredentialSource

External credential owners supported by the consent schema.

Constants

EXTERNAL_CREDENTIAL_CONSENT_VERSION

Schema version for informed consent to another CLI’s credential file.

EXTERNAL_CREDENTIAL_READ_ONLY_SEMANTICS

The complete side-effect contract for read-only external credentials.

Functions

default_agy_credentials_path

Default Antigravity credential store, resolved without probing: the official agy CLI persists its OAuth token in the Antigravity app’s VSCode-style state.vscdb under the user profile. Consent is pinned to this exact path; an ambient move is reported, never followed.

default_dsh_credentials_path

Default DeepSeek Harness credentials document, resolved without probing.

external_credential_consent_status

Describe persisted external-credential policy without filesystem or network access. expected_path is resolved lexically by the caller.

quote_os_path

Quote an OS path for terminals, logs, JSON display fields, and errors.

resolve_external_credential_path

Resolve a user-selected path without touching the filesystem.