Graphorin API reference v0.1.0

---

Graphorin API reference / @graphorin/security / / EncryptedFileSecretsStore

Class: EncryptedFileSecretsStore

Defined in: packages/security/src/secrets/stores/encrypted-file.ts:60

SecretsStore backed by an AES-256-GCM bundle on disk.

Stable

Implements

• SecretsStore

Constructors

Constructor

new EncryptedFileSecretsStore(opts): EncryptedFileSecretsStore;

Defined in: packages/security/src/secrets/stores/encrypted-file.ts:66

Parameters

Parameter	Type
opts	EncryptedFileSecretsStoreOptions

Returns

EncryptedFileSecretsStore

Properties

Property	Modifier	Type	Defined in
kind	readonly	"encrypted-file"	packages/security/src/secrets/stores/encrypted-file.ts:61

Methods

delete()

delete(key, _scope?): Promise<void>;

Defined in: packages/security/src/secrets/stores/encrypted-file.ts:118

Parameters

Parameter	Type
key	string
_scope?	SessionScope

Returns

Promise<void>

Implementation of

SecretsStore.delete

---

get()

get(key, _scope?): Promise<SecretValue | null>;

Defined in: packages/security/src/secrets/stores/encrypted-file.ts:72

Returns the secret if it exists, null otherwise.

Parameters

Parameter	Type
key	string
_scope?	SessionScope

Returns

Promise<SecretValue | null>

Implementation of

SecretsStore.get

---

list()

list(_scope?): Promise<readonly SecretMetadata[]>;

Defined in: packages/security/src/secrets/stores/encrypted-file.ts:129

Returns metadata about every key — never the values themselves.

Parameters

Parameter	Type
_scope?	SessionScope

Returns

Promise<readonly SecretMetadata[]>

Implementation of

SecretsStore.list

---

require()

require(key, _scope?): Promise<SecretValue>;

Defined in: packages/security/src/secrets/stores/encrypted-file.ts:90

Returns the secret or throws. Implementations enforce the per-tool secretsAllowed ACL: if the current tool context disallows key, throw SecretAccessDeniedError.

Parameters

Parameter	Type
key	string
_scope?	SessionScope

Returns

Promise<SecretValue>

Implementation of

SecretsStore.require

---

set()

set(
   key, 
   value, 
opts?): Promise<void>;

Defined in: packages/security/src/secrets/stores/encrypted-file.ts:103

Persist a secret. Implementations auto-wrap a plain string into a SecretValue so callers don't have to.

Parameters

Parameter	Type
key	string
value	| string | SecretValue
opts?	SecretsSetOptions

Returns

Promise<void>

Implementation of

SecretsStore.set