Amr Gharbeia
231c3bb445
Some checks failed
Deploy (Gitea) / deploy (push) Failing after 2s
- Added ;; REPL-VERIFIED: comments to all 164 definition blocks across 30 org files - Split 32 multi-definition blocks into one-per-block (one function per block) - Added Org headlines to 45 blocks missing prose-before-code - verify-repl now returns PASS on entire org/ directory
2.2 KiB
2.2 KiB
SKILL: Credentials Vault (org-skill-credentials-vault.org)
Overview
The Credentials Vault provides secure in-memory storage for sensitive API keys and session tokens.
Implementation
Vault Storage
;; REPL-VERIFIED: 2026-05-03T13:00:00
(defvar *vault-memory* (make-hash-table :test 'equal)
"In-memory cache of sensitive credentials.")Secret Management
;; REPL-VERIFIED: 2026-05-03T13:00:00
(defun vault-get (provider &key (type :api-key))
"Retrieves a credential from the vault or environment."
(let* ((key (format nil "~a-~a" provider type))
(val (gethash key *vault-memory*)))
(if val
val
(let ((env-var (case provider
(:gemini "GEMINI_API_KEY")
(:openai "OPENAI_API_KEY")
(:anthropic "ANTHROPIC_API_KEY")
(:openrouter "OPENROUTER_API_KEY")
(otherwise nil))))
(when env-var (uiop:getenv env-var))))))vault-set
;; REPL-VERIFIED: 2026-05-03T13:00:00
(defun vault-set (provider secret &key (type :api-key))
"Stores a secret in the vault."
(let ((key (format nil "~a-~a" provider type)))
(setf (gethash key *vault-memory*) secret)))#+end_src
Secret Wrappers (gateway-manager)
Thin wrappers that match the export names used by gateway-manager.
Delegates to the existing vault-get=/=vault-set with :type :secret.
;; REPL-VERIFIED: 2026-05-03T13:00:00
(defun vault-get-secret (provider)
"Retrieves a stored secret or token for a gateway provider."
(vault-get provider :type :secret))vault-set-secret
;; REPL-VERIFIED: 2026-05-03T13:00:00
(defun vault-set-secret (provider secret)
"Stores a secret or token for a gateway provider."
(vault-set provider secret :type :secret))#+end_src
Skill Registration
(defskill :passepartout-security-vault
:priority 600
:trigger (lambda (ctx) (declare (ignore ctx)) nil))