brainos_vault/lib.rs
1//! # Brain Credential Vault
2//!
3//! Secure credential storage with OS keychain preferred and an AES-256-GCM
4//! encrypted-file fallback. Raw values are injected at execution time and
5//! never passed through BrainOS memory in plaintext form outside the vault
6//! call site.
7
8pub mod backend;
9pub mod file;
10pub mod inject;
11pub mod vault;
12
13#[cfg(target_os = "macos")]
14pub mod keychain;
15
16#[cfg(target_os = "linux")]
17pub mod keyring;
18
19pub use backend::{BackendKind, VaultBackend};
20pub use inject::{CredentialMetadata, CredentialValue, InjectedCredential, InjectionShape};
21pub use vault::{
22 resolve_backend, BackendSelection, CredentialVault, DefaultVault, VaultConfig, VaultError,
23};