@alpacakit/integrations-conventions 0.1.0-beta.36 → 0.1.0-beta.39

package/README.md

@@ -1,4 +1,16 @@
 # @alpacakit/integrations-conventions
 
 Published AlpacaLoop-family XDG path and keyring conventions for
-`@alpacakit/integrations`.
+`@alpacakit/integrations`: the `ALPACA_INTEGRATIONS_HOME` /
+`~/.config/alpacaloop/integrations` config root and the `alpaca.integrations`
+keychain service.
+
+The keychain itself is not implemented here. This package names the service
+and the account layout, then opens it through `@alpacakit/core/keyring` — the
+one module in the workspace that talks to an OS keychain.
+
+A keychain account is `profile:<profileId>:<materialKind>:<revision>`. The
+`revision` is supplied by the caller and identifies **the stored material**,
+not the profile: a rotation writes the new secret under a new locator before
+retiring the old one, so two revisions of one profile must never share a
+locator or retiring the old revision would delete the key just saved.

package/dist/index.d.ts

@@ -1,6 +1,7 @@
-import type { IntegrationAuthMaterialKind, IntegrationAuthProfile, IntegrationAuthProfileId, SecretRef } from "@alpacakit/integrations";
+import type { IntegrationAuthMaterialKind, IntegrationAuthProfileId, SecretRef } from "@alpacakit/integrations";
 import { integrationsConfigPaths } from "@alpacakit/integrations/config";
-export declare const ALPACA_LOOP_KEYRING_SERVICE = "alpacaloop.agents-home";
+/** Keychain service for integration credentials — distinct from agents (I1). */
+export declare const ALPACA_LOOP_INTEGRATIONS_KEYRING_SERVICE = "alpaca.integrations";
 export declare const ALPACA_LOOP_INTEGRATIONS_KEYRING_RESOLVER = "integrations-keyring";
 export type IntegrationsConventionInput = {
     readonly homeDir: string;
@@ -8,8 +9,19 @@ export type IntegrationsConventionInput = {
 };
 export declare function resolveIntegrationsConfigRoot(input: IntegrationsConventionInput): string;
 export declare function resolveIntegrationsConfigPaths(input: IntegrationsConventionInput): ReturnType<typeof integrationsConfigPaths>;
-export declare function createIntegrationKeyringSecretRef(profileId: IntegrationAuthProfileId, materialKind: IntegrationAuthMaterialKind): SecretRef;
-export declare function isManagedIntegrationKeyringProfile(profile: IntegrationAuthProfile): boolean;
+export type IntegrationKeyringSecretRefInput = {
+    readonly profileId: IntegrationAuthProfileId;
+    readonly materialKind: IntegrationAuthMaterialKind;
+    /**
+     * Caller-supplied unique string identifying THIS stored material, not the
+     * profile. A rotation writes the new secret under a new locator before
+     * retiring the old one, so two revisions of one profile must never collide:
+     * a deterministic `profile:<id>:<kind>` locator would make the retirement of
+     * the old revision delete the key that was just saved.
+     */
+    readonly revision: string;
+};
+export declare function createIntegrationKeyringSecretRef(input: IntegrationKeyringSecretRefInput): SecretRef;
 export declare function integrationKeyringResolver(): import("@alpacakit/integrations").SecretResolver;
-export declare function integrationKeyringSecretStore(): import("@alpacakit/integrations/keyring").KeyringSecretStore;
+export declare function integrationKeyringSecretStore(): import("@alpacakit/core/keyring").KeyringSecretStore;
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACV,2BAA2B,EAC3B,sBAAsB,EACtB,wBAAwB,EACxB,SAAS,EACV,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,uBAAuB,EAAE,MAAM,gCAAgC,CAAC;AASzE,eAAO,MAAM,2BAA2B,2BAA2B,CAAC;AACpE,eAAO,MAAM,yCAAyC,yBAAyB,CAAC;AAEhF,MAAM,MAAM,2BAA2B,GAAG;IACxC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC,CAAC;CAC5D,CAAC;AAEF,wBAAgB,6BAA6B,CAC3C,KAAK,EAAE,2BAA2B,GACjC,MAAM,CAYR;AAED,wBAAgB,8BAA8B,CAC5C,KAAK,EAAE,2BAA2B,GACjC,UAAU,CAAC,OAAO,uBAAuB,CAAC,CAE5C;AAED,wBAAgB,iCAAiC,CAC/C,SAAS,EAAE,wBAAwB,EACnC,YAAY,EAAE,2BAA2B,GACxC,SAAS,CAKX;AAED,wBAAgB,kCAAkC,CAChD,OAAO,EAAE,sBAAsB,GAC9B,OAAO,CAST;AAED,wBAAgB,0BAA0B,qDAEzC;AAED,wBAAgB,6BAA6B,iEAE5C"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACV,2BAA2B,EAC3B,wBAAwB,EACxB,SAAS,EACV,MAAM,yBAAyB,CAAC;AAEjC,OAAO,EAAE,uBAAuB,EAAE,MAAM,gCAAgC,CAAC;AAKzE,gFAAgF;AAChF,eAAO,MAAM,wCAAwC,wBAAwB,CAAC;AAC9E,eAAO,MAAM,yCAAyC,yBAAyB,CAAC;AAEhF,MAAM,MAAM,2BAA2B,GAAG;IACxC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC,CAAC;CAC5D,CAAC;AAEF,wBAAgB,6BAA6B,CAC3C,KAAK,EAAE,2BAA2B,GACjC,MAAM,CAYR;AAED,wBAAgB,8BAA8B,CAC5C,KAAK,EAAE,2BAA2B,GACjC,UAAU,CAAC,OAAO,uBAAuB,CAAC,CAE5C;AAED,MAAM,MAAM,gCAAgC,GAAG;IAC7C,QAAQ,CAAC,SAAS,EAAE,wBAAwB,CAAC;IAC7C,QAAQ,CAAC,YAAY,EAAE,2BAA2B,CAAC;IACnD;;;;;;OAMG;IACH,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B,CAAC;AAEF,wBAAgB,iCAAiC,CAC/C,KAAK,EAAE,gCAAgC,GACtC,SAAS,CAKX;AAED,wBAAgB,0BAA0B,qDAEzC;AAED,wBAAgB,6BAA6B,yDAI5C"}

package/dist/index.js

@@ -1,9 +1,10 @@
 import path from "node:path";
+import { keyringResolver, keyringSecretStore } from "@alpacakit/core/keyring";
 import { integrationsConfigPaths } from "@alpacakit/integrations/config";
-import { keyringResolver, keyringSecretStore, } from "@alpacakit/integrations/keyring";
 const ALPACA_LOOP_INTEGRATIONS_CONFIG_ENV_VAR = "ALPACA_INTEGRATIONS_HOME";
 const ALPACA_LOOP_INTEGRATIONS_CONFIG_DIRECTORY = ".config/alpacaloop/integrations";
-export const ALPACA_LOOP_KEYRING_SERVICE = "alpacaloop.agents-home";
+/** Keychain service for integration credentials — distinct from agents (I1). */
+export const ALPACA_LOOP_INTEGRATIONS_KEYRING_SERVICE = "alpaca.integrations";
 export const ALPACA_LOOP_INTEGRATIONS_KEYRING_RESOLVER = "integrations-keyring";
 export function resolveIntegrationsConfigRoot(input) {
     const override = readNonBlank(input.env, ALPACA_LOOP_INTEGRATIONS_CONFIG_ENV_VAR);
@@ -18,22 +19,19 @@ export function resolveIntegrationsConfigRoot(input) {
 export function resolveIntegrationsConfigPaths(input) {
     return integrationsConfigPaths(resolveIntegrationsConfigRoot(input));
 }
-export function createIntegrationKeyringSecretRef(profileId, materialKind) {
+export function createIntegrationKeyringSecretRef(input) {
     return {
         resolver: ALPACA_LOOP_INTEGRATIONS_KEYRING_RESOLVER,
-        id: `profile:${profileId}:${materialKind}`,
+        id: `profile:${input.profileId}:${input.materialKind}:${input.revision}`,
     };
 }
-export function isManagedIntegrationKeyringProfile(profile) {
-    const expected = createIntegrationKeyringSecretRef(profile.id, profile.material.kind);
-    return (profile.material.secret.resolver === expected.resolver &&
-        profile.material.secret.id === expected.id);
-}
 export function integrationKeyringResolver() {
-    return keyringResolver(ALPACA_LOOP_KEYRING_SERVICE);
+    return keyringResolver({ service: ALPACA_LOOP_INTEGRATIONS_KEYRING_SERVICE });
 }
 export function integrationKeyringSecretStore() {
-    return keyringSecretStore(ALPACA_LOOP_KEYRING_SERVICE);
+    return keyringSecretStore({
+        service: ALPACA_LOOP_INTEGRATIONS_KEYRING_SERVICE,
+    });
 }
 function readNonBlank(env, name) {
     const value = env[name];

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@alpacakit/integrations-conventions",
-  "version": "0.1.0-beta.36",
+  "version": "0.1.0-beta.39",
   "description": "AlpacaKit-family conventions for @alpacakit/integrations machine-local config.",
   "license": "MIT",
   "type": "module",
@@ -21,7 +21,8 @@
     "LICENSE"
   ],
   "dependencies": {
-    "@alpacakit/integrations": "0.1.0-beta.36"
+    "@alpacakit/core": "0.1.0-beta.39",
+    "@alpacakit/integrations": "0.1.0-beta.39"
   },
   "devDependencies": {
     "typescript": "^5.9.3",