brainos-vault 0.3.0

Credential vault with OS keychain and encrypted-file fallback
Documentation
//! # Brain Credential Vault
//!
//! Secure credential storage with OS keychain preferred and an AES-256-GCM
//! encrypted-file fallback. Raw values are injected at execution time and
//! never passed through BrainOS memory in plaintext form outside the vault
//! call site.
//!
//! See `docs/AUTONOMOUS_IMPLEMENTATION.md ยง1.2` for the Phase 1b MVP spec.

pub mod backend;
pub mod file;
pub mod inject;
pub mod vault;

#[cfg(target_os = "macos")]
pub mod keychain;

#[cfg(target_os = "linux")]
pub mod keyring;

pub use backend::{BackendKind, VaultBackend};
pub use inject::{CredentialMetadata, CredentialValue, InjectedCredential, InjectionShape};
pub use vault::{
    resolve_backend, BackendSelection, CredentialVault, DefaultVault, VaultConfig, VaultError,
};