This is a secure API key storage library for Eio applications.

The library follows OCaml best practices with abstract types (type t) per module, comprehensive constructors/accessors, and proper pretty printers. Each core concept gets its own module with a clean interface.

Current Status#

We are at STEP 1: Interface-only design. The keyeio.mli file documents the complete API without implementation. Once the interface is validated, we will proceed to STEP 2 (sample binaries) and STEP 3 (implementation).

Design Principles#

• Store credentials in XDG_CONFIG_HOME/appname/keys/ with 0o600 permissions
• TOML format supporting multiple profiles per service
• Cmdliner integration following xdge patterns
• Future-proof design for Secret Service API integration
• Security-conscious pretty printing (mask sensitive values)