Locker — Secret storage for guppi skills
Provides a single, deterministic interface for storing and retrieving secrets. Secrets are encrypted locally using a master key stored in the OS keychain. Skills call guppi-locker get SERVICE KEY to retrieve secrets.
Setup
guppi-locker init
Commands
guppi-locker get SERVICE KEY
Retrieve a secret. Prints the value to stdout.
token=$(guppi-locker get courier handoffs)
guppi-locker set SERVICE KEY [--value VALUE] [--force]
Store a secret. Prompts interactively if --value is omitted.
guppi-locker set courier handoffs --value "token-value"
guppi-locker set courier handoffs # prompts for value
guppi-locker set courier handoffs --force # overwrite without confirmation
Options:
--value— secret value (prompts if omitted)--force— overwrite existing secret without confirmation
guppi-locker delete SERVICE KEY
Remove a secret.
guppi-locker list [SERVICE]
List secrets (never prints values).
guppi-locker list # all secrets
guppi-locker list courier # secrets for courier only
guppi-locker init
First-time setup. Generates a master encryption key, stores it in the OS keychain, and creates the encrypted secrets file.
Skill Management
guppi-locker skill install # Register with guppi-cli
guppi-locker skill show # Display SKILL.md contents