Struct CredentialStore 

pub struct CredentialStore { /* private fields */ }

Credential storage with encryption at rest.

Uses AES-256-GCM for authenticated encryption.

Implementations

impl CredentialStore

pub fn new(encryption_key: [u8; 32], store_path: PathBuf) -> Self

Create a new credential store.

Arguments

• encryption_key - 32-byte encryption key (derive from master password with Argon2)
• store_path - Directory to store encrypted credentials

pub fn store( &self, name: &str, credential: &ApiKey, ) -> Result<(), CredentialError>

Store an encrypted credential.

The credential is encrypted with AES-256-GCM and written to disk with restrictive permissions (0600 on Unix).

Errors

Returns error if encryption or file write fails.

pub fn load(&self, name: &str) -> Result<ApiKey, CredentialError>

Load and decrypt a credential.

Errors

Returns error if file not found, decryption fails, or invalid UTF-8.

pub fn delete(&self, name: &str) -> Result<(), CredentialError>

Delete a stored credential.

Errors

Returns error if file deletion fails.

pub fn list(&self) -> Result<Vec<String>, CredentialError>

List all stored credential names.

Errors

Returns error if directory read fails.