@parke.dev/pi-integration-auth
v0.1.0
Published
Shared credential resolution and secure local storage for Pi integration packages
Maintainers
Readme
@parke.dev/pi-integration-auth
Shared authentication support for the integration packages in this repository.
It is a library, not a Pi extension. Users normally install @parke.dev/pi-github, pi-slack, pi-linear, pi-notion, or the pi-integrations bundle rather than installing this directly.
Resolution order
- Provider environment variables
~/.pi/agent/integration-auth.json- A provider CLI credential when supported (
gh auth tokenfor GitHub)
The agent directory follows PI_CODING_AGENT_DIR; no home path is hardcoded.
Interactive setup
Provider packages register /github-login, /slack-login, /linear-login, and /notion-login. These commands use a masked terminal prompt, validate the credential before storing it, and never put it in the model conversation or session JSONL.
Saved credentials use an atomic temporary-file + rename write and mode 0600. Environment variables always win, making CI and per-shell overrides predictable.
Security boundary
A 0600 file is readable by any process running as the same OS user. Use environment variables or an external credential helper if that is not an acceptable boundary for your machine.
