[PR #1703] [CLOSED] feat: store sensitive info in keychain #10025

Closed
opened 2026-02-16 18:14:34 -05:00 by yindo · 0 comments
Owner

📋 Pull Request Information

Original PR: https://github.com/anomalyco/opencode/pull/1703
Author: @kevcube
Created: 8/8/2025
Status: Closed

Base: devHead: keychain


📝 Commits (7)

📊 Changes

3 files changed (+189 additions, -17 deletions)

View changed files

📝 packages/opencode/src/auth/index.ts (+11 -17)
📝 packages/opencode/src/global/index.ts (+1 -0)
packages/opencode/test/auth.test.ts (+177 -0)

📄 Description

Stores sensitive information in keychain. Tested on macOS only.

updated to use new bun.secrets API

replaces get() set() all() delete() functions in auth to use keychain instead of file.

pros:

  • increases security

cons:

  • removes text-editability of API keys
  • breaking change to UX, requiring either automatic migrations of secrets into keychain, or users must re-auth to everything.

🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.

## 📋 Pull Request Information **Original PR:** https://github.com/anomalyco/opencode/pull/1703 **Author:** [@kevcube](https://github.com/kevcube) **Created:** 8/8/2025 **Status:** ❌ Closed **Base:** `dev` ← **Head:** `keychain` --- ### 📝 Commits (7) - [`13e8249`](https://github.com/anomalyco/opencode/commit/13e824920a48ef209304ca0cb33e03520b7344e4) feat: store sensitive info in keychain - [`701d5c3`](https://github.com/anomalyco/opencode/commit/701d5c30a206e7a636381e18af9beb6271cb7136) Merge branch 'dev' of https://github.com/sst/opencode into keychain - [`dc3016f`](https://github.com/anomalyco/opencode/commit/dc3016f7fd9e88ee1b8405d2316dbdd1fdd52676) Merge branch 'dev' of https://github.com/sst/opencode into keychain - [`9154a46`](https://github.com/anomalyco/opencode/commit/9154a46e92fe7cf1917ad152c08b3d07567ab9a7) update to bun secrets - [`f8fe54c`](https://github.com/anomalyco/opencode/commit/f8fe54c69b78c711bd3f7ef6bf96ed0957a2c394) Merge branch 'dev' into keychain - [`af680cf`](https://github.com/anomalyco/opencode/commit/af680cf9c32a4180be380b8712e7808e6cc2658d) remove unused import - [`de6d4c8`](https://github.com/anomalyco/opencode/commit/de6d4c81b6863f9f648b518a9e0f40d76b5a6419) Merge branch 'keychain' of https://github.com/kevcube/opencode into keychain ### 📊 Changes **3 files changed** (+189 additions, -17 deletions) <details> <summary>View changed files</summary> 📝 `packages/opencode/src/auth/index.ts` (+11 -17) 📝 `packages/opencode/src/global/index.ts` (+1 -0) ➕ `packages/opencode/test/auth.test.ts` (+177 -0) </details> ### 📄 Description Stores sensitive information in keychain. Tested on macOS only. updated to use new bun.secrets API replaces `get() set() all() delete()` functions in auth to use keychain instead of file. pros: - increases security cons: - removes text-editability of API keys - breaking change to UX, requiring either automatic migrations of secrets into keychain, or users must re-auth to everything. --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>
yindo added the pull-request label 2026-02-16 18:14:34 -05:00
yindo closed this issue 2026-02-16 18:14:34 -05:00
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: anomalyco/opencode#10025