v0.2.7 - Secure API Key Storage

New Features

Secure API Key Storage (Optional Feature)

Store your Linear API keys in your operating system's secure credential storage instead of plaintext config files:

• macOS: Keychain
• Windows: Credential Manager
• Linux: Secret Service (requires D-Bus and a keyring daemon)

Usage

Enable the feature when building:

cargo install linear-cli --features secure-storage

Store a key securely:

linear-cli auth login --secure

Migrate existing keys from config to keyring:

linear-cli auth migrate

Check storage status:

linear-cli auth status

Priority Order

API keys are resolved in this order:

1. LINEAR_API_KEY environment variable
2. OS keyring (if secure-storage feature enabled)
3. Config file (~/.config/linear-cli/config.toml)

Notes

• Feature is opt-in to avoid adding keyring dependencies for users who don't need it
• Graceful fallback to config file if keyring is unavailable
• Profile-aware: each workspace has its own keyring entry
• auth logout removes keys from both keyring and config