[Bug]: kion-cli is using ~/.kion/Kion-CLI Cache instead of macOS Keychain

[frielp]

Kion CLI version (kion --version)

v0.10.0

Operating system/version

MacOS 15.3.2

Installation method

Built with Go 1.24.2

Describe the bug

When I build kion-cli 0.9.0 or 0.10.0 and run it on my mac 15.3.2 system it always uses the ~/.kion/Kion-CLI Cache file.

When I open my keychains and search for "Kion" in the default and system keychains I don't see it listed anywhere.

Steps To Reproduce

1. Build kion-cli from 0.10.0 source
2. Try to run kion-cli, allow the application in Privacy & Security (my system always blocks it by default)
3. Set url, saml settings in ~/.kion.yml
4. Run command like kion setenv --account=1234567890 --cloud-access-role=my-cloud-access-role-here
5. Browser window opens as expected to complete SAML auth
6. kion-cli now says "Enter passphrase to unlock /Users/pfriel/.kion"

Expected Behavior

Same as above but use built-in macOS keychain instead

[bdljohnson]

There's a silent failure here opening the macOS Keychain - the underlying library used for the keychain is designed to step through potential backends until it finds a working one, and will only return an error if there's 0 available implementations.

I'll look at adding a debug mode to ensure we can get the output of the library.

[codybuell]

@frielp we just released v0.11.0 which adds a --debug flag intended to help with troubleshooting this issue. Let us know if you can upgrade and replicate the problem with that option set. The option to disable cache was also expanded to fully disable the package we use for STAK caching (it was still caching kion session data) so that may be another useful option for you here until we figure out what's going on.