nxm-tui — KeyStore Secret Resolution Lifecycle

nxm-tui — KeyStore Secret Resolution Lifecycle A lifecycle diagram generated by Archify. Env First · NEXUM_API_KEY / OPENAI_API_KEY · Lifecycle state · level 0 01 Env First NEXUM_API_KEY / OPENAI_API_KEY level 0 OS Keychain · keyring::Entry native store · Lifecycle state · level 1 02 OS Keychain keyring::Entry native store level 1 Encrypted File · AES-256-GCM + Argon2id · Lifecycle state · level 2 03 Encrypted File AES-256-GCM + Argon2id level 2 Secret Resolved · Zeroizing<String> to caller · Lifecycle state · success 04 Secret Resolved Zeroizing<String> to caller success Passphrase Prompt · masked input for encrypted file · Lifecycle state · session once 05 Passphrase Prompt masked input for encrypted file session once Unavailable · no backend reachable · Lifecycle state · terminal 06 Unavailable no backend reachable terminal Corrupt · wrong passphrase or bad file · Lifecycle state · terminal 07 Corrupt wrong passphrase or bad file terminal Env Fallback · non-persistent key only · Lifecycle state · dev friendly 08 Env Fallback non-persistent key only dev friendly not in env no keychain decrypted OK passphrase missing passphrase entered Esc / cancelled file missing or locked decrypt failed keychain unavailable env key present key found key in env Legend initial state active waiting decision success failure / exit neutral final state