CLI Reference
ctxindex secrets
Inspect and select the secret-storage backend safely.
Secret values never appear in status output, diagnostics, or logs. The available backends are keychain and file.
Usage
ctxindex secrets status [--json]
ctxindex secrets backend set <keychain|file>Commands and flags
| Command or flag | Purpose |
|---|---|
status | Show the configured backend, availability, and aggregate referenced-secret counts. |
status --json | Print safe deterministic status JSON. |
backend set <target> | Copy and verify stored values, commit the new backend, then clean the old backend. |
The runtime never silently changes the selected backend. Long-lived secret values are not accepted on the command line.
JSON output
Only secrets status accepts --json. secrets backend set prints readable progress or confirmation and never prints secret material.
Stable exit codes
Exit codes are API: 0 success; 2 invalid usage; 10 needs_auth; 20 rate limited; 30 network/provider; 40 permission denied; 50 other sync failure; 130 cancelled by SIGINT.