Keychain secret
crbro_secretStore, read, and remove credentials in the operating system's keychain. Use it to keep secrets out of memory records and retrieve a value only when a task needs it.
Instructions
Read or write credentials in the operating system's keychain (macOS Keychain, Linux Secret Service, Windows DPAPI): CRBRO keeps no copy, invents no crypto, and no sync or team space can reach the store. When the user hands you a credential, set it here, then record only the NAME with crbro_learn. get returns the value for the task at hand — an environment variable of the same name wins; a missing secret returns found:false, not an error — never print it back unless the user asked. list returns names only; remove deletes one; status says which store this machine has (none is a normal answer; env vars still work). Names are SCREAMING_SNAKE_CASE; set updates in place and rejects empty values.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| name | No | SCREAMING_SNAKE_CASE, e.g. WORDPRESS_APP_PASSWORD. Required for get, set and remove. | |
| value | No | The credential itself, non-empty. Only for set. | |
| action | Yes | get = read one, set = store or update one, list = names only, remove = delete one, status = which keychain this machine offers, or why none. | |
| description | No | What it is for, e.g. "WordPress example.com - REST API". Only for set. |