Session-scoped secrets for agent tool execution.

Condukt.Secrets resolves trusted secret declarations into environment variables while a session starts. The resolved values are not added to the system prompt, user messages, or persisted session snapshots. Built-in tools receive them through their execution environment when they spawn commands.

Secret declarations

Configure secrets as a map or keyword list whose keys are the environment variable names exposed to tools:

MyApp.Agent.start_link(
  secrets: [
    GH_TOKEN: {:one_password, "op://Engineering/GitHub/token"},
    DATABASE_URL: {:env, "DATABASE_URL"}
  ]
)

The built-in provider aliases are:

• :one_password or :op for Condukt.Secrets.Providers.OnePassword
• :env for Condukt.Secrets.Providers.Env
• :static for Condukt.Secrets.Providers.Static

Custom providers can be used directly:

secrets: [
  API_TOKEN: {MyApp.Secrets.Vault, path: "agents/api-token"}
]

Later declarations for the same environment variable replace earlier ones.

Redaction

Resolved secret values are exact-match redacted from tool results before they are stored in the session history or sent back to the model. They are also redacted from outbound user and tool messages as a final guard.