@agentproto/secrets 0.1.0-alpha.0 → 0.2.0

package/dist/{types-C2dZDHn7.d.ts → types-DS9Qe9Cv.d.ts}

@@ -1,7 +1,7 @@
 /**
  * SecretExposure — describes HOW a secret value reaches the runtime
- * that needs it (env var, config file, egress placeholder, future
- * MCP-header injection, future HTTP-bearer routing, …).
+ * that needs it (env var, config file, egress placeholder, MCP-header
+ * injection, future HTTP-bearer routing, …).
  *
  * Distinct from `SecretEntry` (AIP-19), which describes the secret's
  * *declaration* (slug, kind, access policy). Exposure is a *runtime*
@@ -83,15 +83,27 @@ interface EgressSubstituteExposure {
      *  "this secret is for OpenAI" without parsing the slug. */
     intendedProviders?: string[];
 }
+/** Inject the secret as an HTTP header on an MCP server's transport,
+ *  resolved fresh at connect-time via a credential broker. The broker
+ *  (not this exposure) owns refresh/rotation — this variant just names
+ *  WHICH credential and, optionally, the upstream server. */
+interface McpHeaderExposure {
+    kind: "mcp-header";
+    /** Broker path: "<providerId>" or "<providerId>/<account>". */
+    credentialPath: string;
+    /** Optional upstream server / apiBase override forwarded to the
+     *  broker. Omit to let the broker use the provider's default. */
+    server?: string;
+}
 /**
  * Discriminated union of all exposure mechanisms. Add new variants here
- * as new exposure surfaces are added (MCP-header, HTTP-bearer, etc.) —
- * each adds one variant, one switch case in consumers.
+ * as new exposure surfaces are added (HTTP-bearer, etc.) — each adds one
+ * variant, one switch case in consumers.
  */
-type SecretExposure = EnvExposure | FileExposure | EgressSubstituteExposure;
+type SecretExposure = EnvExposure | FileExposure | EgressSubstituteExposure | McpHeaderExposure;
 /** Type guard — convenient for filtering an exposures array by kind. */
 declare function isExposureKind<K extends SecretExposure["kind"]>(exposure: SecretExposure, kind: K): exposure is Extract<SecretExposure, {
     kind: K;
 }>;
 
-export { type EgressSubstituteExposure as E, type FileExposure as F, type SecretExposure as S, type EnvExposure as a, type SecretExposureWrap as b, type SecretExposureWrapContext as c, isExposureKind as i };
+export { type EgressSubstituteExposure as E, type FileExposure as F, type McpHeaderExposure as M, type SecretExposure as S, type EnvExposure as a, type SecretExposureWrap as b, type SecretExposureWrapContext as c, isExposureKind as i };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agentproto/secrets",
-  "version": "0.1.0-alpha.0",
+  "version": "0.2.0",
   "description": "@agentproto/secrets — AIP-19 SECRETS.md reference implementation. A workspace-level manifest format for declaring secret slugs, their purpose, access grants, and audit metadata — without ever storing the values themselves. Hosts resolve slugs against a real vault at reveal time.",
   "keywords": [
     "agentproto",
@@ -19,7 +19,7 @@
   "bugs": {
     "url": "https://github.com/agentproto/ts/issues"
   },
-  "license": "MIT",
+  "license": "Apache-2.0",
   "type": "module",
   "main": "dist/index.mjs",
   "module": "dist/index.mjs",
@@ -45,6 +45,16 @@
       "import": "./dist/seal/index.mjs",
       "default": "./dist/seal/index.mjs"
     },
+    "./identity": {
+      "types": "./dist/identity/index.d.ts",
+      "import": "./dist/identity/index.mjs",
+      "default": "./dist/identity/index.mjs"
+    },
+    "./pairing": {
+      "types": "./dist/pairing/index.d.ts",
+      "import": "./dist/pairing/index.mjs",
+      "default": "./dist/pairing/index.mjs"
+    },
     "./provision": {
       "types": "./dist/provision/index.d.ts",
       "import": "./dist/provision/index.mjs",
@@ -72,7 +82,8 @@
   "dependencies": {
     "gray-matter": "^4.0.3",
     "zod": "^4.4.3",
-    "@agentproto/define-doctype": "0.1.0"
+    "@agentproto/auth": "0.1.1",
+    "@agentproto/define-doctype": "0.1.1"
   },
   "devDependencies": {
     "@types/node": "^25.6.2",