Skip to content

Graphorin API reference v0.15.1


Graphorin API reference / @graphorin/security / secrets

secrets ​

Secrets foundations for @graphorin/security. Exposes the runtime-safe SecretValue wrapper, the strict SecretRef URI parser, the pluggable resolver registry, four built-in SecretsStore implementations, the per-tool ACL primitives, and the createSecretsStore({ kind: 'auto' }) factory with downgrade audit.

References ​

_getSecretsAuditListenerCountForTesting ​

Re-exports _getSecretsAuditListenerCountForTesting


_resetFileResolverWarningsForTesting ​

Re-exports _resetFileResolverWarningsForTesting


_resetLiteralResolverForTesting ​

Re-exports _resetLiteralResolverForTesting


_resetResolversForTesting ​

Re-exports _resetResolversForTesting


_resetSecretsAuditListenersForTesting ​

Re-exports _resetSecretsAuditListenersForTesting


_resetSecretsFactoryForTesting ​

Re-exports _resetSecretsFactoryForTesting


_resetSecretValueAuditListenersForTesting ​

Re-exports _resetSecretValueAuditListenersForTesting


_resetWithSecretListenersForTesting ​

Re-exports _resetWithSecretListenersForTesting


_setArgon2idForTesting ​

Re-exports _setArgon2idForTesting


_setKeyringEntryCtorForTesting ​

Re-exports _setKeyringEntryCtorForTesting


areBuiltinsInstalled ​

Re-exports areBuiltinsInstalled


Argon2idFn ​

Re-exports Argon2idFn


assertNotNakedString ​

Re-exports assertNotNakedString


AUTHORITY_OPTIONAL_SCHEMES ​

Re-exports AUTHORITY_OPTIONAL_SCHEMES


BUILTIN_SCHEMES ​

Re-exports BUILTIN_SCHEMES


composeChain ​

Re-exports composeChain


computeEffectiveAllowlist ​

Re-exports computeEffectiveAllowlist


createSecretsStore ​

Re-exports createSecretsStore


CreateSecretsStoreOptions ​

Re-exports CreateSecretsStoreOptions


decryptBundle ​

Re-exports decryptBundle


deriveAesKey ​

Re-exports deriveAesKey


describeParseErrorKind ​

Re-exports describeParseErrorKind


detectHeadless ​

Re-exports detectHeadless


emitSecretsAudit ​

Re-exports emitSecretsAudit


ENCRYPTED_FILE_MAGIC ​

Re-exports ENCRYPTED_FILE_MAGIC


encryptedFileResolver ​

Re-exports encryptedFileResolver


EncryptedFileSecretsStore ​

Re-exports EncryptedFileSecretsStore


EncryptedFileSecretsStoreOptions ​

Re-exports EncryptedFileSecretsStoreOptions


enforceSecretAcl ​

Re-exports enforceSecretAcl


envResolver ​

Re-exports envResolver


EnvSecretsStore ​

Re-exports EnvSecretsStore


EnvSecretsStoreOptions ​

Re-exports EnvSecretsStoreOptions


fileResolver ​

Re-exports fileResolver


getActiveSecretsStore ​

Re-exports getActiveSecretsStore


getActiveToolSecretsContext ​

Re-exports getActiveToolSecretsContext


getQueryParam ​

Re-exports getQueryParam


getQueryParamAll ​

Re-exports getQueryParamAll


getQueryParamRequired ​

Re-exports getQueryParamRequired


getResolver ​

Re-exports getResolver


getSecretsStoreStatus ​

Re-exports getSecretsStoreStatus


GraphorinSecretsError ​

Re-exports GraphorinSecretsError


installBuiltinResolvers ​

Re-exports installBuiltinResolvers


isLiteralAllowed ​

Re-exports isLiteralAllowed


KEYRING_DEFAULT_SERVICE ​

Re-exports KEYRING_DEFAULT_SERVICE


KeyringEntryCtor ​

Re-exports KeyringEntryCtor


keyringResolver ​

Re-exports keyringResolver


KeyringSecretsStore ​

Re-exports KeyringSecretsStore


KeyringSecretsStoreOptions ​

Re-exports KeyringSecretsStoreOptions


listResolverSchemes ​

Re-exports listResolverSchemes


literalResolver ​

Re-exports literalResolver


LiteralSecretsForbiddenError ​

Re-exports LiteralSecretsForbiddenError


MemorySecretsStore ​

Re-exports MemorySecretsStore


MemoryStoreInProductionError ​

Re-exports MemoryStoreInProductionError


MissingPeerDependencyError ​

Re-exports MissingPeerDependencyError


onSecretsAudit ​

Re-exports onSecretsAudit


onSecretValueAudit ​

Re-exports onSecretValueAudit


onWithSecretAudit ​

Re-exports onWithSecretAudit


OPAQUE_ONLY_SCHEMES ​

Re-exports OPAQUE_ONLY_SCHEMES


parseAuthority ​

Re-exports parseAuthority


ParsedSecretRef ​

Re-exports ParsedSecretRef


parseOrAssert ​

Re-exports parseOrAssert


parseSecretRef ​

Re-exports parseSecretRef


parseSecretsSourceEnv ​

Re-exports parseSecretsSourceEnv


refResolver ​

Re-exports refResolver


RefStoreLookup ​

Re-exports RefStoreLookup


registerResolver ​

Re-exports registerResolver


RegisterResolverOptions ​

Re-exports RegisterResolverOptions


resolveSecret ​

Re-exports resolveSecret


SecretAccessDeniedError ​

Re-exports SecretAccessDeniedError


SecretRefParseError ​

Re-exports SecretRefParseError


SecretRefParseErrorKind ​

Re-exports SecretRefParseErrorKind


SecretRefValidationResult ​

Re-exports SecretRefValidationResult


SecretRequiredError ​

Re-exports SecretRequiredError


SecretResolutionError ​

Re-exports SecretResolutionError


SecretsAuditAction ​

Re-exports SecretsAuditAction


SecretsAuditActor ​

Re-exports SecretsAuditActor


SecretsAuditDecision ​

Re-exports SecretsAuditDecision


SecretsAuditEvent ​

Re-exports SecretsAuditEvent


SecretsAuditListener ​

Re-exports SecretsAuditListener


SecretsStoreKind ​

Re-exports SecretsStoreKind


SecretsStoreStatus ​

Re-exports SecretsStoreStatus


SecretValue ​

Re-exports SecretValue


SecretValueAuditEvent ​

Re-exports SecretValueAuditEvent


SecretValueAuditListener ​

Re-exports SecretValueAuditListener


setLiteralAllowed ​

Re-exports setLiteralAllowed


setRefStoreLookup ​

Re-exports setRefStoreLookup


setVaultAdapter ​

Re-exports setVaultAdapter


StrictSecretsUnavailableError ​

Re-exports StrictSecretsUnavailableError


ToolSecretsContext ​

Re-exports ToolSecretsContext


UnknownSchemeError ​

Re-exports UnknownSchemeError


unregisterResolver ​

Re-exports unregisterResolver


validateSecretRefs ​

Re-exports validateSecretRefs


ValidateSecretRefsOptions ​

Re-exports ValidateSecretRefsOptions


VaultAdapter ​

Re-exports VaultAdapter


vaultResolver ​

Re-exports vaultResolver


withChildToolSecretsContext ​

Re-exports withChildToolSecretsContext


withSecret ​

Re-exports withSecret


WithSecretAuditEvent ​

Re-exports WithSecretAuditEvent


WithSecretListener ​

Re-exports WithSecretListener


withToolSecretsContext ​

Re-exports withToolSecretsContext