@endora-commerce/contracts 0.100.0

package/dist/comparisons.js

@@ -0,0 +1,221 @@
+import { z } from 'zod';
+import { uuidSchema, moneySchema, multilingualStringSchema } from './common.js';
+import { attributeValueTypeSchema } from './catalog.js';
+// @endora-commerce/contracts — Compare module contracts (feature 007).
+//
+// Per Constitution V, this file is the source of truth for every Zod schema
+// crossing the comparisons HTTP boundary; TS types are inferred via z.infer.
+//
+// US1 schemas (this file): owner-facing CRUD payloads and the
+// `ComparisonOwnerView` response. US2 (recipient view), US4 (PDF export),
+// and US5 (admin overview) extend this file in their respective phases.
+// ---------------------------------------------------------------------------
+// Constants used by storefront + admin clients.
+// ---------------------------------------------------------------------------
+export const COMPARE_DISPLAY_MODES = ['all', 'common', 'differences'];
+export const COMPARE_MAX_PRODUCTS_LOWER_BOUND = 1;
+export const COMPARE_MAX_PRODUCTS_UPPER_BOUND = 16;
+// ---------------------------------------------------------------------------
+// Display mode and per-attribute row class.
+// ---------------------------------------------------------------------------
+export const comparisonDisplayModeSchema = z.enum(COMPARE_DISPLAY_MODES);
+/**
+ * Server-computed classification per attribute row, per research.md R-6:
+ *   - `'common'`     — every product carries the same value (set-equal for
+ *                      multi-value, ===-equal for scalars).
+ *   - `'different'`  — at least one product disagrees, OR at least one
+ *                      product has no value at all.
+ */
+export const comparisonRowClassSchema = z.enum(['common', 'different']);
+// ---------------------------------------------------------------------------
+// Per-product card (always-on row of the comparison page / PDF).
+// ---------------------------------------------------------------------------
+export const comparisonProductSummarySchema = z.object({
+    id: uuidSchema,
+    sku: z.string(),
+    name: multilingualStringSchema,
+    slug: z.string(),
+    type: z.enum(['simple', 'configurable', 'grouped', 'bundle', 'virtual']),
+    /**
+     * Resolved base image (asset URL); null when the product has no
+     * `gallery_item_labels.label='base_image'` row or its asset cannot be
+     * resolved. The PDF renderer renders a placeholder when null.
+     */
+    primaryAssetUrl: z.string().url().nullable(),
+    /**
+     * Price in the viewer's sales-channel currency. Null when the product
+     * has no resolvable price for the channel (e.g. shared-link recipient
+     * on a channel where the product is not listed).
+     */
+    price: moneySchema.nullable(),
+    /**
+     * False when the product is not currently sellable in the viewer's
+     * channel — archived, channel-restricted, or otherwise refused. The
+     * column still renders, but the *Add to cart* control is disabled.
+     */
+    available: z.boolean(),
+    addedAt: z.string().datetime(),
+});
+// ---------------------------------------------------------------------------
+// Body row of the comparison table (one per `comparable` attribute).
+// ---------------------------------------------------------------------------
+export const comparisonAttributeRowSchema = z.object({
+    key: z.string(),
+    label: multilingualStringSchema,
+    valueType: attributeValueTypeSchema,
+    /**
+     * One entry per product in the same column-order as `products`. Strings
+     * are pre-formatted by the server for display; multi-value attributes
+     * are joined with `', '`. `null` represents "no value" — the storefront
+     * renders it as `—` (per spec edge case "Missing values"). Per R-6,
+     * any `null` causes the row to be classified as `'different'`.
+     */
+    values: z.array(z.string().nullable()),
+    rowClass: comparisonRowClassSchema,
+});
+/**
+ * Whose prices the columns carry.
+ *
+ * The viewer's identity decides the figures, always: `organization` means they
+ * were resolved against the reader's own price lists, `channel` that they are
+ * the sales channel's public ones. A share token decides *which products* are
+ * in a comparison and never *which prices* are shown, so sender and recipient
+ * legitimately see different numbers on one link — and a reader who cannot tell
+ * which they are looking at cannot act on either.
+ */
+export const comparisonPricedForSchema = z.enum(['organization', 'channel']);
+// ---------------------------------------------------------------------------
+// Full owner-facing read response.
+// ---------------------------------------------------------------------------
+export const comparisonOwnerViewSchema = z.object({
+    id: uuidSchema,
+    shareToken: z.string().min(8).max(32),
+    displayMode: comparisonDisplayModeSchema,
+    /** Resolved `compare.max_products` for the owner's sales channel. */
+    maxProducts: z.number().int().positive(),
+    products: z.array(comparisonProductSummarySchema),
+    comparableAttributes: z.array(comparisonAttributeRowSchema),
+    /** Whose prices the `products[].price` figures are. */
+    pricedFor: comparisonPricedForSchema,
+    /**
+     * How many products the comparison holds that this viewer may not see.
+     * Zero for almost every read; non-zero for a recipient the owner's
+     * restricted products are not disclosed to, and for an owner whose own
+     * product was restricted after they added it. The count is what lets a
+     * shorter table say so instead of being silently shorter.
+     */
+    hiddenProductCount: z.number().int().nonnegative(),
+    createdAt: z.string().datetime(),
+    updatedAt: z.string().datetime(),
+});
+export const comparisonOwnerResponseSchema = z.object({
+    data: comparisonOwnerViewSchema,
+});
+// ---------------------------------------------------------------------------
+// Mutation inputs.
+// ---------------------------------------------------------------------------
+export const comparisonAddProductInputSchema = z.object({
+    productId: uuidSchema,
+});
+export const comparisonSetDisplayModeInputSchema = z.object({
+    displayMode: comparisonDisplayModeSchema,
+});
+// ---------------------------------------------------------------------------
+// US2 — recipient (share-token) view.
+// ---------------------------------------------------------------------------
+/**
+ * Recipient-side projection. Same column shape as the owner view minus
+ * `maxProducts` (the recipient cannot mutate the comparison, so the cap
+ * is irrelevant) plus `meta.viewerIsOwner` so the storefront knows
+ * whether to render owner-only affordances (Add to cart, Remove,
+ * Delete, Copy share link).
+ */
+export const comparisonSharedViewSchema = z.object({
+    id: uuidSchema,
+    shareToken: z.string().min(8).max(32),
+    displayMode: comparisonDisplayModeSchema,
+    products: z.array(comparisonProductSummarySchema),
+    comparableAttributes: z.array(comparisonAttributeRowSchema),
+    /**
+     * Whose prices these are — the recipient's own, or the channel's. The
+     * sender's are never among the answers: the token carries the products, not
+     * a pricing identity.
+     */
+    pricedFor: comparisonPricedForSchema,
+    /**
+     * How many of the sender's products this recipient may not see. The token
+     * grants access to the comparison, never to what is in it, so a recipient's
+     * table is the sender's minus whatever the sender's organisation alone is
+     * entitled to — and it says how much is missing rather than being quietly
+     * shorter.
+     */
+    hiddenProductCount: z.number().int().nonnegative(),
+    createdAt: z.string().datetime(),
+    updatedAt: z.string().datetime(),
+});
+export const comparisonSharedResponseSchema = z.object({
+    data: comparisonSharedViewSchema,
+    meta: z.object({
+        viewerIsOwner: z.boolean(),
+    }),
+});
+// ---------------------------------------------------------------------------
+// US5 — admin overview (read-only).
+// ---------------------------------------------------------------------------
+export const comparisonAdminOwnerSchema = z.object({
+    kind: z.enum(['customer', 'anonymous']),
+    customerAccountId: uuidSchema.nullable(),
+    /** Human-readable identifier for the list (email or display name). */
+    email: z.string().nullable(),
+    /** The opaque cookie token; null for authenticated owners. */
+    anonymousToken: z.string().nullable(),
+});
+export const comparisonAdminSalesChannelSchema = z.object({
+    id: uuidSchema,
+    code: z.string(),
+});
+export const comparisonAdminListItemSchema = z.object({
+    id: uuidSchema,
+    shareToken: z.string(),
+    owner: comparisonAdminOwnerSchema,
+    salesChannel: comparisonAdminSalesChannelSchema,
+    displayMode: comparisonDisplayModeSchema,
+    productCount: z.number().int().nonnegative(),
+    createdAt: z.string().datetime(),
+    updatedAt: z.string().datetime(),
+});
+export const comparisonAdminListQuerySchema = z.object({
+    salesChannelId: uuidSchema.optional(),
+    customerAccountId: uuidSchema.optional(),
+    ownerType: z.enum(['customer', 'anonymous']).optional(),
+    createdAfter: z.string().datetime().optional(),
+    createdBefore: z.string().datetime().optional(),
+    cursor: z.string().optional(),
+    limit: z.number().int().min(1).max(100).optional(),
+});
+export const comparisonAdminListResponseSchema = z.object({
+    data: z.array(comparisonAdminListItemSchema),
+    meta: z.object({
+        limit: z.number().int().positive(),
+        nextCursor: z.string().nullable(),
+    }),
+});
+/**
+ * Admin detail — same shape the storefront owner sees, plus the admin
+ * metadata block (owner identity, sales channel, raw shareToken). The
+ * detail endpoint renders prices in the comparison's RECORDED channel
+ * (the creator's), not the admin's preferred channel — so a support
+ * investigation matches what the customer reported.
+ */
+export const comparisonAdminDetailSchema = z.object({
+    id: uuidSchema,
+    shareToken: z.string(),
+    owner: comparisonAdminOwnerSchema,
+    salesChannel: comparisonAdminSalesChannelSchema,
+    displayMode: comparisonDisplayModeSchema,
+    products: z.array(comparisonProductSummarySchema),
+    comparableAttributes: z.array(comparisonAttributeRowSchema),
+    createdAt: z.string().datetime(),
+    updatedAt: z.string().datetime(),
+});
+//# sourceMappingURL=comparisons.js.map

package/dist/comparisons.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"comparisons.js","sourceRoot":"","sources":["../src/comparisons.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,wBAAwB,EAAE,MAAM,aAAa,CAAC;AAChF,OAAO,EAAE,wBAAwB,EAAE,MAAM,cAAc,CAAC;AAExD,uEAAuE;AACvE,EAAE;AACF,4EAA4E;AAC5E,6EAA6E;AAC7E,EAAE;AACF,8DAA8D;AAC9D,0EAA0E;AAC1E,wEAAwE;AAExE,8EAA8E;AAC9E,gDAAgD;AAChD,8EAA8E;AAE9E,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,KAAK,EAAE,QAAQ,EAAE,aAAa,CAAU,CAAC;AAC/E,MAAM,CAAC,MAAM,gCAAgC,GAAG,CAAC,CAAC;AAClD,MAAM,CAAC,MAAM,gCAAgC,GAAG,EAAE,CAAC;AAEnD,8EAA8E;AAC9E,4CAA4C;AAC5C,8EAA8E;AAE9E,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;AAGzE;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC,CAAC;AAGxE,8EAA8E;AAC9E,iEAAiE;AACjE,8EAA8E;AAE9E,MAAM,CAAC,MAAM,8BAA8B,GAAG,CAAC,CAAC,MAAM,CAAC;IACrD,EAAE,EAAE,UAAU;IACd,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE;IACf,IAAI,EAAE,wBAAwB;IAC9B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,cAAc,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;IACxE;;;;OAIG;IACH,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAC5C;;;;OAIG;IACH,KAAK,EAAE,WAAW,CAAC,QAAQ,EAAE;IAC7B;;;;OAIG;IACH,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE;IACtB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC/B,CAAC,CAAC;AAGH,8EAA8E;AAC9E,qEAAqE;AACrE,8EAA8E;AAE9E,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,CAAC,MAAM,CAAC;IACnD,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE;IACf,KAAK,EAAE,wBAAwB;IAC/B,SAAS,EAAE,wBAAwB;IACnC;;;;;;OAMG;IACH,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC;IACtC,QAAQ,EAAE,wBAAwB;CACnC,CAAC,CAAC;AAGH;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,cAAc,EAAE,SAAS,CAAC,CAAC,CAAC;AAG7E,8EAA8E;AAC9E,mCAAmC;AACnC,8EAA8E;AAE9E,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChD,EAAE,EAAE,UAAU;IACd,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;IACrC,WAAW,EAAE,2BAA2B;IACxC,qEAAqE;IACrE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IACxC,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,8BAA8B,CAAC;IACjD,oBAAoB,EAAE,CAAC,CAAC,KAAK,CAAC,4BAA4B,CAAC;IAC3D,uDAAuD;IACvD,SAAS,EAAE,yBAAyB;IACpC;;;;;;OAMG;IACH,kBAAkB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IAClD,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACjC,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,CAAC,MAAM,CAAC;IACpD,IAAI,EAAE,yBAAyB;CAChC,CAAC,CAAC;AAGH,8EAA8E;AAC9E,mBAAmB;AACnB,8EAA8E;AAE9E,MAAM,CAAC,MAAM,+BAA+B,GAAG,CAAC,CAAC,MAAM,CAAC;IACtD,SAAS,EAAE,UAAU;CACtB,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,mCAAmC,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1D,WAAW,EAAE,2BAA2B;CACzC,CAAC,CAAC;AAGH,8EAA8E;AAC9E,sCAAsC;AACtC,8EAA8E;AAE9E;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC;IACjD,EAAE,EAAE,UAAU;IACd,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;IACrC,WAAW,EAAE,2BAA2B;IACxC,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,8BAA8B,CAAC;IACjD,oBAAoB,EAAE,CAAC,CAAC,KAAK,CAAC,4BAA4B,CAAC;IAC3D;;;;OAIG;IACH,SAAS,EAAE,yBAAyB;IACpC;;;;;;OAMG;IACH,kBAAkB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IAClD,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACjC,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,8BAA8B,GAAG,CAAC,CAAC,MAAM,CAAC;IACrD,IAAI,EAAE,0BAA0B;IAChC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;QACb,aAAa,EAAE,CAAC,CAAC,OAAO,EAAE;KAC3B,CAAC;CACH,CAAC,CAAC;AAGH,8EAA8E;AAC9E,oCAAoC;AACpC,8EAA8E;AAE9E,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC;IACjD,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;IACvC,iBAAiB,EAAE,UAAU,CAAC,QAAQ,EAAE;IACxC,sEAAsE;IACtE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,8DAA8D;IAC9D,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACtC,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,iCAAiC,GAAG,CAAC,CAAC,MAAM,CAAC;IACxD,EAAE,EAAE,UAAU;IACd,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;CACjB,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,CAAC,MAAM,CAAC;IACpD,EAAE,EAAE,UAAU;IACd,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;IACtB,KAAK,EAAE,0BAA0B;IACjC,YAAY,EAAE,iCAAiC;IAC/C,WAAW,EAAE,2BAA2B;IACxC,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IAC5C,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACjC,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,8BAA8B,GAAG,CAAC,CAAC,MAAM,CAAC;IACrD,cAAc,EAAE,UAAU,CAAC,QAAQ,EAAE;IACrC,iBAAiB,EAAE,UAAU,CAAC,QAAQ,EAAE;IACxC,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC,CAAC,QAAQ,EAAE;IACvD,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC9C,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC/C,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC7B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;CACnD,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,iCAAiC,GAAG,CAAC,CAAC,MAAM,CAAC;IACxD,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,6BAA6B,CAAC;IAC5C,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;QACb,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;QAClC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KAClC,CAAC;CACH,CAAC,CAAC;AAGH;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,CAAC,MAAM,CAAC;IAClD,EAAE,EAAE,UAAU;IACd,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;IACtB,KAAK,EAAE,0BAA0B;IACjC,YAAY,EAAE,iCAAiC;IAC/C,WAAW,EAAE,2BAA2B;IACxC,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,8BAA8B,CAAC;IACjD,oBAAoB,EAAE,CAAC,CAAC,KAAK,CAAC,4BAA4B,CAAC;IAC3D,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACjC,CAAC,CAAC"}

package/dist/credentials.d.ts

@@ -0,0 +1,292 @@
+import { z } from 'zod';
+/**
+ * Credentials module (feature 058) — boundary schemas.
+ *
+ * The credentials core is type-agnostic (Principle XIV): a "configuration type"
+ * is a code-registered descriptor declaring its provider variants and per-field
+ * definitions (some `secret`). The core stores/validates the declared fields but
+ * never interprets provider meaning. These schemas are the single source of
+ * truth for the admin API and the in-process configuration-type registry.
+ *
+ * Secret field values are NEVER returned in plaintext by any read: the DTO
+ * replaces them with an `isSet` boolean. Only the server-side `resolve` path
+ * (not modelled as an HTTP response) exposes decrypted values for consumer use.
+ */
+/** Frozen field-kind set. */
+export declare const CREDENTIAL_FIELD_KINDS: readonly ["string", "number", "boolean", "select"];
+export declare const FieldKindSchema: z.ZodEnum<{
+    string: "string";
+    number: "number";
+    boolean: "boolean";
+    select: "select";
+}>;
+export type FieldKind = z.infer<typeof FieldKindSchema>;
+export declare const FieldOptionSchema: z.ZodObject<{
+    value: z.ZodString;
+    label: z.ZodString;
+}, z.core.$strip>;
+export type FieldOption = z.infer<typeof FieldOptionSchema>;
+export declare const FieldDefinitionSchema: z.ZodObject<{
+    key: z.ZodString;
+    label: z.ZodString;
+    kind: z.ZodEnum<{
+        string: "string";
+        number: "number";
+        boolean: "boolean";
+        select: "select";
+    }>;
+    required: z.ZodBoolean;
+    secret: z.ZodBoolean;
+    options: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        value: z.ZodString;
+        label: z.ZodString;
+    }, z.core.$strip>>>;
+    placeholder: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export type FieldDefinition = z.infer<typeof FieldDefinitionSchema>;
+export declare const ProviderVariantSchema: z.ZodObject<{
+    code: z.ZodString;
+    label: z.ZodString;
+    fields: z.ZodArray<z.ZodObject<{
+        key: z.ZodString;
+        label: z.ZodString;
+        kind: z.ZodEnum<{
+            string: "string";
+            number: "number";
+            boolean: "boolean";
+            select: "select";
+        }>;
+        required: z.ZodBoolean;
+        secret: z.ZodBoolean;
+        options: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            value: z.ZodString;
+            label: z.ZodString;
+        }, z.core.$strip>>>;
+        placeholder: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export type ProviderVariant = z.infer<typeof ProviderVariantSchema>;
+export declare const ConfigurationTypeDescriptorSchema: z.ZodObject<{
+    code: z.ZodString;
+    label: z.ZodString;
+    ownerModule: z.ZodString;
+    providers: z.ZodArray<z.ZodObject<{
+        code: z.ZodString;
+        label: z.ZodString;
+        fields: z.ZodArray<z.ZodObject<{
+            key: z.ZodString;
+            label: z.ZodString;
+            kind: z.ZodEnum<{
+                string: "string";
+                number: "number";
+                boolean: "boolean";
+                select: "select";
+            }>;
+            required: z.ZodBoolean;
+            secret: z.ZodBoolean;
+            options: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                value: z.ZodString;
+                label: z.ZodString;
+            }, z.core.$strip>>>;
+            placeholder: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>>;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export type ConfigurationTypeDescriptor = z.infer<typeof ConfigurationTypeDescriptorSchema>;
+/** `GET /api/v1/admin/credentials/types` response. */
+export declare const ConfigurationTypesResponseSchema: z.ZodObject<{
+    types: z.ZodArray<z.ZodObject<{
+        code: z.ZodString;
+        label: z.ZodString;
+        ownerModule: z.ZodString;
+        providers: z.ZodArray<z.ZodObject<{
+            code: z.ZodString;
+            label: z.ZodString;
+            fields: z.ZodArray<z.ZodObject<{
+                key: z.ZodString;
+                label: z.ZodString;
+                kind: z.ZodEnum<{
+                    string: "string";
+                    number: "number";
+                    boolean: "boolean";
+                    select: "select";
+                }>;
+                required: z.ZodBoolean;
+                secret: z.ZodBoolean;
+                options: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                    value: z.ZodString;
+                    label: z.ZodString;
+                }, z.core.$strip>>>;
+                placeholder: z.ZodOptional<z.ZodString>;
+            }, z.core.$strip>>;
+        }, z.core.$strip>>;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export type ConfigurationTypesResponse = z.infer<typeof ConfigurationTypesResponseSchema>;
+/** `POST /api/v1/admin/credentials` body. */
+export declare const CreateConfigurationSchema: z.ZodObject<{
+    code: z.ZodString;
+    name: z.ZodString;
+    typeCode: z.ZodString;
+    providerCode: z.ZodString;
+    values: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+}, z.core.$strip>;
+export type CreateConfiguration = z.infer<typeof CreateConfigurationSchema>;
+/**
+ * `PUT /api/v1/admin/credentials/:code` body.
+ *
+ * `typeCode`/`providerCode` are intentionally absent — they are immutable after
+ * create (a change is rejected with `CREDENTIAL_TYPE_IMMUTABLE`). A secret field
+ * omitted or submitted blank/`[redacted]` preserves the stored envelope
+ * (write-only semantics, FR-015). `expectedVersion` drives the optimistic lock.
+ */
+export declare const UpdateConfigurationSchema: z.ZodObject<{
+    name: z.ZodOptional<z.ZodString>;
+    values: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    expectedVersion: z.ZodOptional<z.ZodNumber>;
+}, z.core.$strip>;
+export type UpdateConfiguration = z.infer<typeof UpdateConfigurationSchema>;
+/**
+ * One field in a masked configuration DTO. Secret fields carry only `isSet`
+ * (never a value); non-secret fields carry their plain `value`.
+ */
+export declare const ConfigurationFieldDtoSchema: z.ZodObject<{
+    key: z.ZodString;
+    secret: z.ZodBoolean;
+    isSet: z.ZodOptional<z.ZodBoolean>;
+    value: z.ZodOptional<z.ZodUnknown>;
+}, z.core.$strip>;
+export type ConfigurationFieldDto = z.infer<typeof ConfigurationFieldDtoSchema>;
+export declare const ConfigurationDtoSchema: z.ZodObject<{
+    id: z.ZodString;
+    code: z.ZodString;
+    name: z.ZodString;
+    typeCode: z.ZodString;
+    typeLabel: z.ZodNullable<z.ZodString>;
+    providerCode: z.ZodString;
+    providerLabel: z.ZodNullable<z.ZodString>;
+    inert: z.ZodBoolean;
+    fields: z.ZodArray<z.ZodObject<{
+        key: z.ZodString;
+        secret: z.ZodBoolean;
+        isSet: z.ZodOptional<z.ZodBoolean>;
+        value: z.ZodOptional<z.ZodUnknown>;
+    }, z.core.$strip>>;
+    version: z.ZodNumber;
+    updatedAt: z.ZodString;
+}, z.core.$strip>;
+export type ConfigurationDto = z.infer<typeof ConfigurationDtoSchema>;
+/** `GET /api/v1/admin/credentials` response. */
+export declare const ConfigurationListResponseSchema: z.ZodObject<{
+    configurations: z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        code: z.ZodString;
+        name: z.ZodString;
+        typeCode: z.ZodString;
+        typeLabel: z.ZodNullable<z.ZodString>;
+        providerCode: z.ZodString;
+        providerLabel: z.ZodNullable<z.ZodString>;
+        inert: z.ZodBoolean;
+        fields: z.ZodArray<z.ZodObject<{
+            key: z.ZodString;
+            secret: z.ZodBoolean;
+            isSet: z.ZodOptional<z.ZodBoolean>;
+            value: z.ZodOptional<z.ZodUnknown>;
+        }, z.core.$strip>>;
+        version: z.ZodNumber;
+        updatedAt: z.ZodString;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export type ConfigurationListResponse = z.infer<typeof ConfigurationListResponseSchema>;
+/** Optional `?type=` filter on the list endpoint. */
+export declare const ConfigurationListQuerySchema: z.ZodObject<{
+    type: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export type ConfigurationListQuery = z.infer<typeof ConfigurationListQuerySchema>;
+/** Delete-blocked payload — the settings referencing a configuration (FR-012). */
+export declare const ConfigurationReferenceSchema: z.ZodObject<{
+    settingCode: z.ZodString;
+    salesChannelCode: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export type ConfigurationReference = z.infer<typeof ConfigurationReferenceSchema>;
+/** Frozen resolution-status set. */
+export declare const CREDENTIAL_RESOLVE_STATUSES: readonly ["ok", "not_configured", "unavailable"];
+export declare const CREDENTIAL_UNAVAILABLE_REASONS: readonly ["missing", "inert_type"];
+/**
+ * Discriminated result of `CredentialsService.resolve(code)`. `ok` carries
+ * decrypted secret values for in-memory consumer use only; the other variants
+ * fail closed (never a foreign configuration, never a plaintext leak).
+ */
+export declare const ResolveResultSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
+    status: z.ZodLiteral<"ok">;
+    typeCode: z.ZodString;
+    providerCode: z.ZodString;
+    values: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+}, z.core.$strip>, z.ZodObject<{
+    status: z.ZodLiteral<"not_configured">;
+}, z.core.$strip>, z.ZodObject<{
+    status: z.ZodLiteral<"unavailable">;
+    reason: z.ZodEnum<{
+        missing: "missing";
+        inert_type: "inert_type";
+    }>;
+}, z.core.$strip>], "status">;
+export type ResolveResult = z.infer<typeof ResolveResultSchema>;
+/**
+ * Container name: `credentialsService`. Owner: `credentials`.
+ *
+ * `resolve` is the one method that matters at run time: it decrypts a stored
+ * configuration's secrets for the integration about to use them. When
+ * `credentials` is off it fails closed, and it must — an integration that
+ * caught the refusal and proceeded would run against whatever it had cached,
+ * which for a credential means "the one the operator just revoked".
+ */
+export interface CredentialsPort {
+    list(typeFilter?: string): Promise<ConfigurationDto[]>;
+    getByCode(code: string): Promise<ConfigurationDto | null>;
+    create(data: CreateConfiguration): Promise<ConfigurationDto>;
+    update(code: string, data: UpdateConfiguration): Promise<ConfigurationDto>;
+    delete(code: string): Promise<void>;
+    resolve(configurationCode: string): Promise<ResolveResult>;
+}
+/**
+ * Container name: `configurationTypeRegistry`. Owner: `credentials`.
+ *
+ * A **contribution seam**: a module that needs a credential type describes it
+ * here from its boot hook, and the admin screen renders the form from the
+ * descriptor. Every edge into it classifies as `contributes`.
+ *
+ * `isAvailable` / `get` / `resolve` / `list` filter on the contributor's
+ * effective state; `entry`, `ownerOf` and `listAll` deliberately do not, so an
+ * admin screen can keep showing a stored configuration *and* the reason its
+ * type is unavailable — a credential row outlives the module that described
+ * its shape, and hiding the row would look like data loss.
+ *
+ * **Owner off:** nothing throws here. This is a **contribution seam**, a plain
+ * `di.register` rather than a `providePort`, so a push still lands and
+ * `credentials` filters by contributor when it enumerates. Converting it to
+ * `providePort` would move every edge into it from `contributes` to
+ * `fails-closed` in the deactivation-consequence ledger, and change the
+ * sentence the operator's confirmation dialog renders.
+ */
+export interface ConfigurationTypeRegistryPort {
+    register(descriptor: ConfigurationTypeDescriptor): void;
+    unregister(code: string): void;
+    /** Registered at all, presence-blind. */
+    isRegistered(code: string): boolean;
+    /** Registered **and** its contributing module effectively present. */
+    isAvailable(code: string): boolean;
+    /** The descriptor, presence-blind. */
+    entry(code: string): ConfigurationTypeDescriptor | undefined;
+    /** The descriptor, or `undefined` when unregistered or its owner is absent. */
+    get(code: string): ConfigurationTypeDescriptor | undefined;
+    /** Like {@link get}, but throws `ConfigurationTypeUnknown` instead. */
+    resolve(code: string): ConfigurationTypeDescriptor;
+    /** Descriptors whose contributor is present, in registration order. */
+    list(): ConfigurationTypeDescriptor[];
+    /** Every registered descriptor, presence-blind. */
+    listAll(): ConfigurationTypeDescriptor[];
+    /** Which module contributed the code, or `null` when nobody did. */
+    ownerOf(code: string): string | null;
+}
+//# sourceMappingURL=credentials.d.ts.map

package/dist/credentials.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"credentials.d.ts","sourceRoot":"","sources":["../src/credentials.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;;;;;;;;;;GAYG;AAMH,6BAA6B;AAC7B,eAAO,MAAM,sBAAsB,oDAAqD,CAAC;AACzF,eAAO,MAAM,eAAe;;;;;EAAiC,CAAC;AAC9D,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAExD,eAAO,MAAM,iBAAiB;;;iBAG5B,CAAC;AACH,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAE5D,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;iBAQhC,CAAC;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAEpE,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;iBAIhC,CAAC;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAEpE,eAAO,MAAM,iCAAiC;;;;;;;;;;;;;;;;;;;;;;;;;iBAK5C,CAAC;AACH,MAAM,MAAM,2BAA2B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iCAAiC,CAAC,CAAC;AAE5F,sDAAsD;AACtD,eAAO,MAAM,gCAAgC;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAE3C,CAAC;AACH,MAAM,MAAM,0BAA0B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gCAAgC,CAAC,CAAC;AAM1F,6CAA6C;AAC7C,eAAO,MAAM,yBAAyB;;;;;;iBAOpC,CAAC;AACH,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAE5E;;;;;;;GAOG;AACH,eAAO,MAAM,yBAAyB;;;;iBAIpC,CAAC;AACH,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAM5E;;;GAGG;AACH,eAAO,MAAM,2BAA2B;;;;;iBAOtC,CAAC;AACH,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAEhF,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;iBAejC,CAAC;AACH,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAEtE,gDAAgD;AAChD,eAAO,MAAM,+BAA+B;;;;;;;;;;;;;;;;;;;iBAE1C,CAAC;AACH,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,+BAA+B,CAAC,CAAC;AAExF,qDAAqD;AACrD,eAAO,MAAM,4BAA4B;;iBAEvC,CAAC;AACH,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC;AAElF,kFAAkF;AAClF,eAAO,MAAM,4BAA4B;;;iBAGvC,CAAC;AACH,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC;AAMlF,oCAAoC;AACpC,eAAO,MAAM,2BAA2B,kDAAmD,CAAC;AAC5F,eAAO,MAAM,8BAA8B,oCAAqC,CAAC;AAEjF;;;;GAIG;AACH,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;6BAY9B,CAAC;AACH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAYhE;;;;;;;;GAQG;AACH,MAAM,WAAW,eAAe;IAC9B,IAAI,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAAC;IACvD,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC,CAAC;IAC1D,MAAM,CAAC,IAAI,EAAE,mBAAmB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAC7D,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,mBAAmB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAC3E,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACpC,OAAO,CAAC,iBAAiB,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;CAC5D;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,CAAC,UAAU,EAAE,2BAA2B,GAAG,IAAI,CAAC;IACxD,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,yCAAyC;IACzC,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;IACpC,sEAAsE;IACtE,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;IACnC,sCAAsC;IACtC,KAAK,CAAC,IAAI,EAAE,MAAM,GAAG,2BAA2B,GAAG,SAAS,CAAC;IAC7D,+EAA+E;IAC/E,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,2BAA2B,GAAG,SAAS,CAAC;IAC3D,uEAAuE;IACvE,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,2BAA2B,CAAC;IACnD,uEAAuE;IACvE,IAAI,IAAI,2BAA2B,EAAE,CAAC;IACtC,mDAAmD;IACnD,OAAO,IAAI,2BAA2B,EAAE,CAAC;IACzC,oEAAoE;IACpE,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;CACtC"}

package/dist/credentials.js

@@ -0,0 +1,142 @@
+import { z } from 'zod';
+/**
+ * Credentials module (feature 058) — boundary schemas.
+ *
+ * The credentials core is type-agnostic (Principle XIV): a "configuration type"
+ * is a code-registered descriptor declaring its provider variants and per-field
+ * definitions (some `secret`). The core stores/validates the declared fields but
+ * never interprets provider meaning. These schemas are the single source of
+ * truth for the admin API and the in-process configuration-type registry.
+ *
+ * Secret field values are NEVER returned in plaintext by any read: the DTO
+ * replaces them with an `isSet` boolean. Only the server-side `resolve` path
+ * (not modelled as an HTTP response) exposes decrypted values for consumer use.
+ */
+// ---------------------------------------------------------------------------
+// Configuration-type descriptors (registry surface)
+// ---------------------------------------------------------------------------
+/** Frozen field-kind set. */
+export const CREDENTIAL_FIELD_KINDS = ['string', 'number', 'boolean', 'select'];
+export const FieldKindSchema = z.enum(CREDENTIAL_FIELD_KINDS);
+export const FieldOptionSchema = z.object({
+    value: z.string(),
+    label: z.string(),
+});
+export const FieldDefinitionSchema = z.object({
+    key: z.string().min(1),
+    label: z.string(),
+    kind: FieldKindSchema,
+    required: z.boolean(),
+    secret: z.boolean(),
+    options: z.array(FieldOptionSchema).optional(),
+    placeholder: z.string().optional(),
+});
+export const ProviderVariantSchema = z.object({
+    code: z.string().min(1),
+    label: z.string(),
+    fields: z.array(FieldDefinitionSchema),
+});
+export const ConfigurationTypeDescriptorSchema = z.object({
+    code: z.string().min(1),
+    label: z.string(),
+    ownerModule: z.string().min(1),
+    providers: z.array(ProviderVariantSchema),
+});
+/** `GET /api/v1/admin/credentials/types` response. */
+export const ConfigurationTypesResponseSchema = z.object({
+    types: z.array(ConfigurationTypeDescriptorSchema),
+});
+// ---------------------------------------------------------------------------
+// Write requests
+// ---------------------------------------------------------------------------
+/** `POST /api/v1/admin/credentials` body. */
+export const CreateConfigurationSchema = z.object({
+    code: z.string().min(1).max(128),
+    name: z.string().min(1).max(255),
+    typeCode: z.string().min(1).max(64),
+    providerCode: z.string().min(1).max(64),
+    /** Field-value bag keyed by `FieldDefinition.key`; validated per descriptor. */
+    values: z.record(z.string(), z.unknown()),
+});
+/**
+ * `PUT /api/v1/admin/credentials/:code` body.
+ *
+ * `typeCode`/`providerCode` are intentionally absent — they are immutable after
+ * create (a change is rejected with `CREDENTIAL_TYPE_IMMUTABLE`). A secret field
+ * omitted or submitted blank/`[redacted]` preserves the stored envelope
+ * (write-only semantics, FR-015). `expectedVersion` drives the optimistic lock.
+ */
+export const UpdateConfigurationSchema = z.object({
+    name: z.string().min(1).max(255).optional(),
+    values: z.record(z.string(), z.unknown()).optional(),
+    expectedVersion: z.number().int().nonnegative().optional(),
+});
+// ---------------------------------------------------------------------------
+// Read DTO (secrets masked)
+// ---------------------------------------------------------------------------
+/**
+ * One field in a masked configuration DTO. Secret fields carry only `isSet`
+ * (never a value); non-secret fields carry their plain `value`.
+ */
+export const ConfigurationFieldDtoSchema = z.object({
+    key: z.string(),
+    secret: z.boolean(),
+    /** Present for secret fields — whether a secret is stored. */
+    isSet: z.boolean().optional(),
+    /** Present for non-secret fields — the plain stored value. */
+    value: z.unknown().optional(),
+});
+export const ConfigurationDtoSchema = z.object({
+    id: z.string(),
+    code: z.string(),
+    name: z.string(),
+    typeCode: z.string(),
+    /** Null when the type is no longer registered (inert). */
+    typeLabel: z.string().nullable(),
+    providerCode: z.string(),
+    /** Null when the type/provider is no longer registered (inert). */
+    providerLabel: z.string().nullable(),
+    /** True when `typeCode` is no longer registered; the row renders read-only. */
+    inert: z.boolean(),
+    fields: z.array(ConfigurationFieldDtoSchema),
+    version: z.number().int(),
+    updatedAt: z.string(),
+});
+/** `GET /api/v1/admin/credentials` response. */
+export const ConfigurationListResponseSchema = z.object({
+    configurations: z.array(ConfigurationDtoSchema),
+});
+/** Optional `?type=` filter on the list endpoint. */
+export const ConfigurationListQuerySchema = z.object({
+    type: z.string().min(1).max(64).optional(),
+});
+/** Delete-blocked payload — the settings referencing a configuration (FR-012). */
+export const ConfigurationReferenceSchema = z.object({
+    settingCode: z.string(),
+    salesChannelCode: z.string().optional(),
+});
+// ---------------------------------------------------------------------------
+// Server-side resolution (never an HTTP response body)
+// ---------------------------------------------------------------------------
+/** Frozen resolution-status set. */
+export const CREDENTIAL_RESOLVE_STATUSES = ['ok', 'not_configured', 'unavailable'];
+export const CREDENTIAL_UNAVAILABLE_REASONS = ['missing', 'inert_type'];
+/**
+ * Discriminated result of `CredentialsService.resolve(code)`. `ok` carries
+ * decrypted secret values for in-memory consumer use only; the other variants
+ * fail closed (never a foreign configuration, never a plaintext leak).
+ */
+export const ResolveResultSchema = z.discriminatedUnion('status', [
+    z.object({
+        status: z.literal('ok'),
+        typeCode: z.string(),
+        providerCode: z.string(),
+        values: z.record(z.string(), z.unknown()),
+    }),
+    z.object({ status: z.literal('not_configured') }),
+    z.object({
+        status: z.literal('unavailable'),
+        reason: z.enum(CREDENTIAL_UNAVAILABLE_REASONS),
+    }),
+]);
+//# sourceMappingURL=credentials.js.map