curo1305 7617a80595 feat(vault): API key storage in vault only ...

- vault/reader.py: get_key() reads from ~/.pyra/vault/secrets/api_keys.json
- vault/writer.py: set_key(), delete_key() — only writer callable from setup
- Both call assert_safe_path() as defense-in-depth
- Keys file stays chmod 400; temporarily 600 during write then locked again
- Config.yaml never touched by either module

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-05-17 12:50:24 +02:00

.claude

chore: init project skeleton

2026-05-17 12:48:32 +02:00

src/pyra

feat(vault): API key storage in vault only

2026-05-17 12:50:24 +02:00

tests

chore: init project skeleton

2026-05-17 12:48:32 +02:00

.gitignore

chore: init project skeleton

2026-05-17 12:48:32 +02:00

pyproject.toml

chore: init project skeleton

2026-05-17 12:48:32 +02:00

S

Description

No description provided

516 KiB

Languages

Python 100%