From 25e1b30a3f0d550ba7fe1b9eea80fab96b03857b Mon Sep 17 00:00:00 2001
From: Egutierrez <egutierrez@dead.dd>
Date: Fri, 22 May 2026 21:48:21 +0200
Subject: [PATCH] =?UTF-8?q?fix(auto):=20fix=20secret=5Fstore.md=20YAML=20?=
 =?UTF-8?q?=E2=80=94=20returns/error=5Ftype/imports=20format?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

- returns: [] (was empty string)
- error_type: error_go_core (was empty, required for impure)
- imports: [list] (was string)
- Removed stale id: field (auto-computed from filename)
- Added output: field for params_schema

fn index now clean: 1324 functions, 45 apps

Co-Authored-By: fn-orquestador <noreply@fn-registry.local>
---
 cpp/functions/infra/secret_store.md | 35 ++++++++++-------------------
 1 file changed, 12 insertions(+), 23 deletions(-)

diff --git a/cpp/functions/infra/secret_store.md b/cpp/functions/infra/secret_store.md
index d08db9f6..b6ff2bf5 100644
--- a/cpp/functions/infra/secret_store.md
+++ b/cpp/functions/infra/secret_store.md
@@ -1,41 +1,30 @@
 ---
-id: secret_store_cpp_infra
 name: secret_store
 kind: function
 lang: cpp
 domain: infra
-version: 1.0.0
+version: "1.0.0"
 purity: impure
-signature: "fn_secret::encrypt(plaintext) -> blob; fn_secret::decrypt(blob) -> string; fn_secret::is_strong() -> bool"
+signature: "fn_secret::encrypt(plaintext) -> vector<uint8_t>; fn_secret::decrypt(blob) -> string; fn_secret::is_strong() -> bool"
 description: "Encrypt/decrypt sensitive strings for local SQLite storage. Windows: DPAPI (user-bound, machine-local, cryptographically strong). Linux/WSL fallback: XOR with per-user seed key (not crypto-secure, shows warning). Used by agents_dashboard to store API keys."
 tags: [security, credentials, dpapi, encrypt, infra, agents]
 uses_functions: []
 uses_types: []
-returns: ""
+returns: []
 returns_optional: false
-error_type: ""
-imports: "infra/secret_store.h"
-example: |
-  #include "infra/secret_store.h"
-
-  // Encrypt an API key before storing in SQLite:
-  std::string apikey = "sk-mykey-123";
-  auto blob = fn_secret::encrypt(apikey);
-  // store blob in SQLite BLOB column...
-
-  // Decrypt when needed:
-  std::string recovered = fn_secret::decrypt(blob);
-  assert(recovered == apikey);
-
-  // Check platform strength:
-  if (!fn_secret::is_strong()) {
-      // Show warning: Linux fallback is NOT crypto-secure
-  }
+error_type: "error_go_core"
+imports: [infra/secret_store.h]
 tested: false
 tests: []
 test_file_path: ""
 file_path: "cpp/functions/infra/secret_store.cpp"
-params_schema: '{"params":[{"name":"plaintext","desc":"Sensitive string to encrypt (API key, password, token)."},{"name":"blob","desc":"Opaque byte vector returned by encrypt(), stored as SQLite BLOB."}],"output":"encrypt returns vector<uint8_t> blob (empty on failure). decrypt returns plaintext string (empty on failure). is_strong() returns true on Windows (DPAPI), false on Linux (XOR fallback)."}'
+framework: ""
+params:
+  - name: plaintext
+    desc: "Sensitive string to encrypt (API key, password, token)."
+  - name: blob
+    desc: "Opaque byte vector returned by encrypt(), stored as SQLite BLOB column."
+output: "encrypt returns vector<uint8_t> blob (empty on failure). decrypt returns plaintext string (empty on failure). is_strong() returns true on Windows (DPAPI), false on Linux (XOR fallback)."
 ---
 
 # secret_store