Module config 

Configuration and authentication for the ROMM client.

This module is deliberately independent of any particular frontend: both the TUI and the command-line subcommands share the same Config and AuthConfig types.

Configuration precedence

Call load_config to read config:

1. Variables already set in the process environment (highest priority), including API_TOKEN and paths ROMM_TOKEN_FILE / API_TOKEN_FILE (file contents used as bearer token when API_TOKEN is unset).
2. User config.json (see user_config_json_path) — fills any field not already set from the environment.

There is no automatic loading of a .env file; set variables in your shell or process manager, or rely on config.json written by romm-cli init / the TUI setup wizard.

After env + JSON merge, secrets that are still placeholders (including KEYRING_SECRET_PLACEHOLDER) are resolved via the OS keyring (keyring crate, service name romm-cli). On Windows the stored credential target is typically API_TOKEN.romm-cli, API_PASSWORD.romm-cli, or API_KEY.romm-cli. Missing entries are silent; other keyring errors are logged at warn (never with secret values). On save, a successful store is followed by read-back verification before writing the sentinel to JSON.

load_config vs config.json

load_config merges sources per field: process environment wins over values from config.json for API_BASE_URL, ROMM_DOWNLOAD_DIR, API_USE_HTTPS, and auth-related fields. The keyring is used only to replace placeholder or sentinel secret strings after that merge.

Structs

Config

Enums

AuthConfig

Constants

KEYRING_SECRET_PLACEHOLDER

Written to config.json when the real secret is stored in the OS keyring (persist_user_config).

Functions

auth_for_persist_merge

Auth to pass to persist_user_config when saving non-auth fields (e.g. TUI Settings).

disk_has_unresolved_keyring_sentinel

Returns true when load_config has no resolved AuthConfig::Bearer (etc.) but config.json on disk still contains KEYRING_SECRET_PLACEHOLDER (OS keyring could not supply the secret).

is_keyring_placeholder

True if s is the sentinel written to disk when the secret lives in the keyring.

keyring_store

Store a secret in the OS keyring under the romm-cli service name.

load_config

Loads merged config from env, optional config.json, and the OS keyring.

normalize_romm_origin

RomM site URL: the same origin you use in the browser (scheme, host, optional port).

openapi_cache_path

Where the OpenAPI spec is cached (.../romm-cli/openapi.json).

persist_user_config

Write user-level romm-cli/config.json and store secrets in the OS keyring when possible (same layout as interactive romm-cli init).

read_user_config_json_from_disk

Reads config.json from disk only (no env merge, no keyring resolution). Used by the TUI setup wizard to detect <stored-in-keyring> placeholders.

user_config_dir

Directory for user-level config (romm-cli under the OS config dir).

user_config_json_path

Path to the user-level config.json file (.../romm-cli/config.json).