Module secret 

Typed reference to a secret value. The reference itself is safe to commit / log / serialize; the resolved value (SecretString) is zeroized on drop.

Wire format is a single string with a colon-prefixed scheme: env:VAR_NAME keychain:service/account file:/absolute/or/~-path[.age] cmd:./script-or-binary args…

Enums

SecretError

SecretRef

Functions

keychain_delete

Delete a secret from the OS keychain. Idempotent: missing entries are not an error. Used by mur agent secret delete.

keychain_get

Read a secret from the OS keychain.

keychain_set

Write a secret to the OS keychain. Used by mur agent secret set and the GUI’s set_secret command.