{
"$schema": "https://context7.com/schema/context7.json",
"excludeFolders": [
".github",
"benches",
"fuzz",
"scripts",
"supply-chain",
"tests"
],
"excludeFiles": [
"CHANGELOG.md"
],
"rules": [
"Read the CacheKit master key from the CACHEKIT_MASTER_KEY environment variable or a secret manager. Never hard-code a key in source, not even a placeholder such as [0u8; 32].",
"cachekit-core reads no environment variable. Hex-decode the key (for example from `CACHEKIT_MASTER_KEY` or a secret manager) to exactly 32 raw bytes before `derive_domain_key`. Never pass the hex string's bytes: that derives a key no CacheKit SDK derives, so cross-SDK decryption fails.",
"Install the official packages: `cachekit` on PyPI, `@cachekit-io/cachekit` on npm, and `cachekit-rs` on crates.io (imported as `cachekit`). The crates.io crate named `cachekit` is an unrelated project.",
"Applications normally use a CacheKit SDK. cachekit-core is the shared byte-storage and encryption layer underneath them."
]
}