[StuartMeeks]

Adds an accounts info command and releases it as 2.3.0.

What it shows

Backend                Encrypted files
Credentials directory  /home/me/.my-cli/credentials
Directory permissions  0700 (owner only)
Encryption             AES-256-GCM (data key sealed with PBKDF2-HMAC-SHA256)
Keystore               /home/me/.my-cli/credentials/.keystore
Key binding            None (default; portable, protected by directory permissions)
Selections file        /home/me/.my-cli/credentials/selections.json
Library version        2.3.0
Platform               Ubuntu 26.04.1 LTS (ubuntu.26.04-x64)

• DPAPI stores show Windows DPAPI (current user scope). A custom ICredentialEncryption shows its type name. Keychain and libsecret show the app identifier, plus the collection for libsecret.
• AdditionalEntropy is shown only as set or not set, never the value.
• A yellow warning appears when the directory is open to group or other users (Unix), or inherits its ACL (Windows). Those permissions are the default store's only protection.

Design notes

• It describes the store that was actually resolved, not CredentialStoreOptions. So it is right for the README's hand-registered DPAPI setup, where there are no options to read. It also shows when a custom encryption registered in the wrong order was silently ignored.
• It never decrypts or queries Keychain/libsecret, so it can't trigger an unlock prompt.
• Values are written unwrapped. Spectre's table layout split long paths with real newlines, which broke copy-paste.
• Backends gain internal getters only. No provider-facing interface changes.

Release

• Version is 2.3.0 and the CHANGELOG has a [2.3.0] section.
• Tag v2.3.0 after merge to publish.

Testing

• New CredentialStoreDescriberTests.
• Full suite passes locally on net8.0 and net10.0 (Linux).
• Ran end to end in a scratch CLI.
• The DPAPI, Windows ACL, Keychain and libsecret output was not run locally. The Windows CI leg runs the ACL test.

🤖 Generated with Claude Code