Remove broker

2026-05-25 10:37:21 +02:00
parent 154412b0a7
commit c9081ee2da
40 changed files with 902 additions and 2504 deletions
@@ -7,7 +7,7 @@ How sherlock persists secrets and runtime state.
 | Topic | Decision |
 |---|---|
 | Token storage | OS keyring via [`github.com/zalando/go-keyring`](https://github.com/zalando/go-keyring). No on-disk credential files, no `age` blobs, no plaintext. |
-| Pre-flight | Both `sherlock` and `sherlock-broker` call `keyring.Probe()` at startup. A missing/locked keyring fails fast with a platform-appropriate hint and exit code `3`. |
+| Pre-flight | `sherlock` calls `keyring.Probe()` at startup of every subcommand. A missing/locked keyring fails fast with a platform-appropriate hint and exit code `3`. |
 | Service name | `sherlock` for real tokens; `sherlock-preflight` for the probe sentinel. |
 | Account key  | The Authentik `sub` claim once logged in, `default` before. |
 | Runtime files | `$XDG_RUNTIME_DIR/sherlock.sock`, `sherlock.pid`, `sherlock.log`, `sherlock/<agent>.mcp.json`. All `0600` (files) / `0700` (dirs). |