@cat-factory/contracts 0.17.1 → 0.19.0

package/dist/user-secret.d.ts

@@ -0,0 +1,52 @@
+import * as v from 'valibot';
+/** The per-user secret kinds. Each maps to a registered handler (fields + test). */
+export declare const USER_SECRET_KINDS: readonly ['github_pat'];
+export declare const userSecretKindSchema: v.PicklistSchema<readonly ["github_pat"], undefined>;
+export type UserSecretKind = v.InferOutput<typeof userSecretKindSchema>;
+/** Read-only status of one stored per-user secret — never the secret value. */
+export declare const userSecretStatusSchema: v.ObjectSchema<{
+    readonly kind: v.PicklistSchema<readonly ["github_pat"], undefined>;
+    readonly label: v.StringSchema<undefined>;
+    /** Whether a (write-only) secret is stored for this kind. */
+    readonly hasSecret: v.BooleanSchema<undefined>;
+    /** Non-secret metadata the kind keeps (e.g. `{ apiBase }`). */
+    readonly metadata: v.OptionalSchema<v.RecordSchema<v.StringSchema<undefined>, v.StringSchema<undefined>, undefined>, undefined>;
+    readonly connectedAt: v.NumberSchema<undefined>;
+}, undefined>;
+export type UserSecretStatus = v.InferOutput<typeof userSecretStatusSchema>;
+/** Store (or replace) the signed-in user's secret for a kind. */
+export declare const storeUserSecretSchema: v.ObjectSchema<{
+    readonly label: v.OptionalSchema<v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.TrimAction, v.MaxLengthAction<string, 120, undefined>]>, undefined>;
+    /** The raw secret (write-only); stored encrypted at rest. */
+    readonly secret: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.TrimAction, v.MinLengthAction<string, 1, undefined>, v.MaxLengthAction<string, 4000, undefined>]>;
+    /** Optional non-secret metadata the kind understands (e.g. `apiBase`). */
+    readonly metadata: v.OptionalSchema<v.RecordSchema<v.StringSchema<undefined>, v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.TrimAction, v.MaxLengthAction<string, 2000, undefined>]>, undefined>, undefined>;
+}, undefined>;
+export type StoreUserSecretInput = v.InferOutput<typeof storeUserSecretSchema>;
+/** Probe a (not-yet-saved) secret + metadata for reachability/validity. */
+export declare const testUserSecretSchema: v.ObjectSchema<{
+    readonly secret: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.TrimAction, v.MinLengthAction<string, 1, undefined>, v.MaxLengthAction<string, 4000, undefined>]>;
+    readonly metadata: v.OptionalSchema<v.RecordSchema<v.StringSchema<undefined>, v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.TrimAction, v.MaxLengthAction<string, 2000, undefined>]>, undefined>, undefined>;
+}, undefined>;
+export type TestUserSecretInput = v.InferOutput<typeof testUserSecretSchema>;
+/** A kind's self-description for the generic connect form. */
+export declare const userSecretDescriptorSchema: v.ObjectSchema<{
+    readonly kind: v.PicklistSchema<readonly ["github_pat"], undefined>;
+    readonly label: v.StringSchema<undefined>;
+    readonly configFields: v.ArraySchema<v.ObjectSchema<{
+        readonly key: v.StringSchema<undefined>;
+        readonly label: v.StringSchema<undefined>;
+        readonly help: v.OptionalSchema<v.StringSchema<undefined>, undefined>;
+        readonly placeholder: v.OptionalSchema<v.StringSchema<undefined>, undefined>;
+        readonly secret: v.OptionalSchema<v.BooleanSchema<undefined>, undefined>;
+        readonly required: v.OptionalSchema<v.BooleanSchema<undefined>, undefined>;
+        readonly type: v.OptionalSchema<v.PicklistSchema<["text", "password", "select"], undefined>, undefined>;
+        readonly options: v.OptionalSchema<v.ArraySchema<v.ObjectSchema<{
+            readonly value: v.StringSchema<undefined>;
+            readonly label: v.StringSchema<undefined>;
+        }, undefined>, undefined>, undefined>;
+    }, undefined>, undefined>;
+    readonly supportsTest: v.BooleanSchema<undefined>;
+}, undefined>;
+export type UserSecretDescriptor = v.InferOutput<typeof userSecretDescriptorSchema>;
+//# sourceMappingURL=user-secret.d.ts.map

package/dist/user-secret.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-secret.d.ts","sourceRoot":"","sources":["../src/user-secret.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,SAAS,CAAA;AAgB5B,oFAAoF;AACpF,eAAO,MAAM,iBAAiB,YAAI,YAAY,CAAU,CAAA;AACxD,eAAO,MAAM,oBAAoB,sDAAgC,CAAA;AACjE,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,oBAAoB,CAAC,CAAA;AAEvE,+EAA+E;AAC/E,eAAO,MAAM,sBAAsB;;;IAGjC,6DAA6D;;IAE7D,+DAA+D;;;aAG/D,CAAA;AACF,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,sBAAsB,CAAC,CAAA;AAM3E,iEAAiE;AACjE,eAAO,MAAM,qBAAqB;;IAEhC,6DAA6D;;IAE7D,0EAA0E;;aAE1E,CAAA;AACF,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,qBAAqB,CAAC,CAAA;AAE9E,2EAA2E;AAC3E,eAAO,MAAM,oBAAoB;;;aAG/B,CAAA;AACF,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,oBAAoB,CAAC,CAAA;AAE5E,8DAA8D;AAC9D,eAAO,MAAM,0BAA0B;;;;;;;;;;;;;;;;;aAKrC,CAAA;AACF,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,0BAA0B,CAAC,CAAA"}

package/dist/user-secret.js

@@ -0,0 +1,51 @@
+import * as v from 'valibot';
+import { providerConfigFieldSchema } from './provider-config.js';
+// ---------------------------------------------------------------------------
+// Per-user secret wire contracts. A generic, `kind`-discriminated store for
+// token-style per-user credentials — a GitHub personal access token today, and
+// future repository/provider tokens (GitLab PAT, …) as new kinds with NO schema
+// change. Each kind declares the config fields it needs (rendered generically,
+// like the provider descriptors) and may expose a connection test.
+//
+// Distinct from `personal_subscriptions` (double-encrypted under a personal
+// password, with per-run activation) and `local_model_endpoints` (base URL +
+// enabled-model selection) — those carry real specializations and stay separate.
+// This store is only for `{ secret, optional non-secret metadata }`.
+// ---------------------------------------------------------------------------
+/** The per-user secret kinds. Each maps to a registered handler (fields + test). */
+export const USER_SECRET_KINDS = ['github_pat'];
+export const userSecretKindSchema = v.picklist(USER_SECRET_KINDS);
+/** Read-only status of one stored per-user secret — never the secret value. */
+export const userSecretStatusSchema = v.object({
+    kind: userSecretKindSchema,
+    label: v.string(),
+    /** Whether a (write-only) secret is stored for this kind. */
+    hasSecret: v.boolean(),
+    /** Non-secret metadata the kind keeps (e.g. `{ apiBase }`). */
+    metadata: v.optional(v.record(v.string(), v.string())),
+    connectedAt: v.number(),
+});
+const labelSchema = v.pipe(v.string(), v.trim(), v.maxLength(120));
+const secretSchema = v.pipe(v.string(), v.trim(), v.minLength(1), v.maxLength(4000));
+const metadataSchema = v.record(v.string(), v.pipe(v.string(), v.trim(), v.maxLength(2000)));
+/** Store (or replace) the signed-in user's secret for a kind. */
+export const storeUserSecretSchema = v.object({
+    label: v.optional(labelSchema),
+    /** The raw secret (write-only); stored encrypted at rest. */
+    secret: secretSchema,
+    /** Optional non-secret metadata the kind understands (e.g. `apiBase`). */
+    metadata: v.optional(metadataSchema),
+});
+/** Probe a (not-yet-saved) secret + metadata for reachability/validity. */
+export const testUserSecretSchema = v.object({
+    secret: secretSchema,
+    metadata: v.optional(metadataSchema),
+});
+/** A kind's self-description for the generic connect form. */
+export const userSecretDescriptorSchema = v.object({
+    kind: userSecretKindSchema,
+    label: v.string(),
+    configFields: v.array(providerConfigFieldSchema),
+    supportsTest: v.boolean(),
+});
+//# sourceMappingURL=user-secret.js.map

package/dist/user-secret.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-secret.js","sourceRoot":"","sources":["../src/user-secret.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,SAAS,CAAA;AAC5B,OAAO,EAAE,yBAAyB,EAAE,MAAM,sBAAsB,CAAA;AAEhE,8EAA8E;AAC9E,4EAA4E;AAC5E,+EAA+E;AAC/E,gFAAgF;AAChF,+EAA+E;AAC/E,mEAAmE;AACnE,EAAE;AACF,4EAA4E;AAC5E,6EAA6E;AAC7E,iFAAiF;AACjF,qEAAqE;AACrE,8EAA8E;AAE9E,oFAAoF;AACpF,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,YAAY,CAAU,CAAA;AACxD,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAA;AAGjE,+EAA+E;AAC/E,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7C,IAAI,EAAE,oBAAoB;IAC1B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,6DAA6D;IAC7D,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE;IACtB,+DAA+D;IAC/D,QAAQ,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;IACtD,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;CACxB,CAAC,CAAA;AAGF,MAAM,WAAW,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAA;AAClE,MAAM,YAAY,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAA;AACpF,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;AAE5F,iEAAiE;AACjE,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,KAAK,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC;IAC9B,6DAA6D;IAC7D,MAAM,EAAE,YAAY;IACpB,0EAA0E;IAC1E,QAAQ,EAAE,CAAC,CAAC,QAAQ,CAAC,cAAc,CAAC;CACrC,CAAC,CAAA;AAGF,2EAA2E;AAC3E,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,MAAM,EAAE,YAAY;IACpB,QAAQ,EAAE,CAAC,CAAC,QAAQ,CAAC,cAAc,CAAC;CACrC,CAAC,CAAA;AAGF,8DAA8D;AAC9D,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC;IACjD,IAAI,EAAE,oBAAoB;IAC1B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,yBAAyB,CAAC;IAChD,YAAY,EAAE,CAAC,CAAC,OAAO,EAAE;CAC1B,CAAC,CAAA"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cat-factory/contracts",
-  "version": "0.17.1",
+  "version": "0.19.0",
   "description": "Valibot wire contract shared between the Agent Architecture Board frontend and backend.",
   "repository": {
     "type": "git",