1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
//! Secret management with multiple backend support
//!
//! This crate provides a unified interface for resolving secrets from various backends:
//!
//! - **OS Keychain** (`keychain://service/key`): macOS Keychain, Windows Credential Manager, Linux Secret Service
//! - **1Password CLI** (`op://vault/item/field`): Requires `op` CLI to be installed and authenticated
//! - **Environment variables** (`env://VAR_NAME`): Read from process environment
//! - **Files** (`file:///path` or just `/path`): Read content from filesystem
//! - **Plain values**: Any string without a URI scheme is treated as a literal value
//!
//! # Example
//!
//! ```rust,ignore
//! use siphon_secrets::{SecretUri, SecretResolver};
//!
//! // Parse a secret URI from config
//! let uri: SecretUri = "keychain://myapp/api-token".parse()?;
//!
//! // Resolve to actual value
//! let resolver = SecretResolver::new();
//! let secret = resolver.resolve(&uri)?;
//! ```
//!
//! # Features
//!
//! - `keychain` (default): Enable OS keychain support via `keyring` crate
//! - `onepassword` (default): Enable 1Password CLI support
//! - `env` (default): Enable environment variable support
//! - `file` (default): Enable file reading support
pub use SecretError;
pub use SecretResolver;
pub use SecretUri;
// Re-export keychain utilities for setup/management