Module secrets 

Secret storage via the OS keychain.

API keys (today only LLM providers) live in libsecret / kwallet on Linux, the macOS Keychain on macOS, and the Credential Manager on Windows — never on disk in config.toml.

Entries are keyed by (service = "hyprcorrect", account = name). name is something descriptive like "llm.anthropic".

Enums

SecretError

An error talking to the OS keychain.

Functions

delete

Remove a stored secret. Removing a non-existent entry is not an error.

get

Fetch a stored secret. Ok(None) means “no entry” (not an error).

set

Store (or overwrite) a secret.