@envseal/protocol 0.1.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -0,0 +1,1294 @@
1
+ import { z } from 'zod';
2
+ export declare const ManifestEntry: z.ZodEffects<z.ZodObject<{
3
+ key: z.ZodString;
4
+ description: z.ZodString;
5
+ required: z.ZodDefault<z.ZodBoolean>;
6
+ secret: z.ZodDefault<z.ZodBoolean>;
7
+ format: z.ZodOptional<z.ZodObject<{
8
+ pattern: z.ZodOptional<z.ZodString>;
9
+ minLength: z.ZodOptional<z.ZodNumber>;
10
+ maxLength: z.ZodOptional<z.ZodNumber>;
11
+ example: z.ZodOptional<z.ZodString>;
12
+ }, "strip", z.ZodTypeAny, {
13
+ pattern?: string | undefined;
14
+ minLength?: number | undefined;
15
+ maxLength?: number | undefined;
16
+ example?: string | undefined;
17
+ }, {
18
+ pattern?: string | undefined;
19
+ minLength?: number | undefined;
20
+ maxLength?: number | undefined;
21
+ example?: string | undefined;
22
+ }>>;
23
+ provider: z.ZodOptional<z.ZodObject<{
24
+ id: z.ZodString;
25
+ name: z.ZodString;
26
+ signupUrl: z.ZodOptional<z.ZodString>;
27
+ docsUrl: z.ZodOptional<z.ZodString>;
28
+ rotateUrl: z.ZodOptional<z.ZodString>;
29
+ scopesNeeded: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
30
+ }, "strip", z.ZodTypeAny, {
31
+ id: string;
32
+ name: string;
33
+ signupUrl?: string | undefined;
34
+ docsUrl?: string | undefined;
35
+ rotateUrl?: string | undefined;
36
+ scopesNeeded?: string[] | undefined;
37
+ }, {
38
+ id: string;
39
+ name: string;
40
+ signupUrl?: string | undefined;
41
+ docsUrl?: string | undefined;
42
+ rotateUrl?: string | undefined;
43
+ scopesNeeded?: string[] | undefined;
44
+ }>>;
45
+ verify: z.ZodOptional<z.ZodObject<{
46
+ method: z.ZodEnum<["GET", "POST"]>;
47
+ url: z.ZodString;
48
+ headerTemplate: z.ZodRecord<z.ZodString, z.ZodString>;
49
+ expectStatus: z.ZodDefault<z.ZodArray<z.ZodNumber, "many">>;
50
+ }, "strip", z.ZodTypeAny, {
51
+ method: "GET" | "POST";
52
+ url: string;
53
+ headerTemplate: Record<string, string>;
54
+ expectStatus: number[];
55
+ }, {
56
+ method: "GET" | "POST";
57
+ url: string;
58
+ headerTemplate: Record<string, string>;
59
+ expectStatus?: number[] | undefined;
60
+ }>>;
61
+ sink: z.ZodDefault<z.ZodEnum<["dotenv", "keychain", "sops", "onepassword", "doppler", "vault", "external"]>>;
62
+ rotation: z.ZodOptional<z.ZodObject<{
63
+ maxAgeDays: z.ZodNumber;
64
+ }, "strip", z.ZodTypeAny, {
65
+ maxAgeDays: number;
66
+ }, {
67
+ maxAgeDays: number;
68
+ }>>;
69
+ }, "strict", z.ZodTypeAny, {
70
+ key: string;
71
+ description: string;
72
+ required: boolean;
73
+ secret: boolean;
74
+ sink: "dotenv" | "keychain" | "sops" | "onepassword" | "doppler" | "vault" | "external";
75
+ format?: {
76
+ pattern?: string | undefined;
77
+ minLength?: number | undefined;
78
+ maxLength?: number | undefined;
79
+ example?: string | undefined;
80
+ } | undefined;
81
+ provider?: {
82
+ id: string;
83
+ name: string;
84
+ signupUrl?: string | undefined;
85
+ docsUrl?: string | undefined;
86
+ rotateUrl?: string | undefined;
87
+ scopesNeeded?: string[] | undefined;
88
+ } | undefined;
89
+ verify?: {
90
+ method: "GET" | "POST";
91
+ url: string;
92
+ headerTemplate: Record<string, string>;
93
+ expectStatus: number[];
94
+ } | undefined;
95
+ rotation?: {
96
+ maxAgeDays: number;
97
+ } | undefined;
98
+ }, {
99
+ key: string;
100
+ description: string;
101
+ required?: boolean | undefined;
102
+ secret?: boolean | undefined;
103
+ format?: {
104
+ pattern?: string | undefined;
105
+ minLength?: number | undefined;
106
+ maxLength?: number | undefined;
107
+ example?: string | undefined;
108
+ } | undefined;
109
+ provider?: {
110
+ id: string;
111
+ name: string;
112
+ signupUrl?: string | undefined;
113
+ docsUrl?: string | undefined;
114
+ rotateUrl?: string | undefined;
115
+ scopesNeeded?: string[] | undefined;
116
+ } | undefined;
117
+ verify?: {
118
+ method: "GET" | "POST";
119
+ url: string;
120
+ headerTemplate: Record<string, string>;
121
+ expectStatus?: number[] | undefined;
122
+ } | undefined;
123
+ sink?: "dotenv" | "keychain" | "sops" | "onepassword" | "doppler" | "vault" | "external" | undefined;
124
+ rotation?: {
125
+ maxAgeDays: number;
126
+ } | undefined;
127
+ }>, {
128
+ key: string;
129
+ description: string;
130
+ required: boolean;
131
+ secret: boolean;
132
+ sink: "dotenv" | "keychain" | "sops" | "onepassword" | "doppler" | "vault" | "external";
133
+ format?: {
134
+ pattern?: string | undefined;
135
+ minLength?: number | undefined;
136
+ maxLength?: number | undefined;
137
+ example?: string | undefined;
138
+ } | undefined;
139
+ provider?: {
140
+ id: string;
141
+ name: string;
142
+ signupUrl?: string | undefined;
143
+ docsUrl?: string | undefined;
144
+ rotateUrl?: string | undefined;
145
+ scopesNeeded?: string[] | undefined;
146
+ } | undefined;
147
+ verify?: {
148
+ method: "GET" | "POST";
149
+ url: string;
150
+ headerTemplate: Record<string, string>;
151
+ expectStatus: number[];
152
+ } | undefined;
153
+ rotation?: {
154
+ maxAgeDays: number;
155
+ } | undefined;
156
+ }, {
157
+ key: string;
158
+ description: string;
159
+ required?: boolean | undefined;
160
+ secret?: boolean | undefined;
161
+ format?: {
162
+ pattern?: string | undefined;
163
+ minLength?: number | undefined;
164
+ maxLength?: number | undefined;
165
+ example?: string | undefined;
166
+ } | undefined;
167
+ provider?: {
168
+ id: string;
169
+ name: string;
170
+ signupUrl?: string | undefined;
171
+ docsUrl?: string | undefined;
172
+ rotateUrl?: string | undefined;
173
+ scopesNeeded?: string[] | undefined;
174
+ } | undefined;
175
+ verify?: {
176
+ method: "GET" | "POST";
177
+ url: string;
178
+ headerTemplate: Record<string, string>;
179
+ expectStatus?: number[] | undefined;
180
+ } | undefined;
181
+ sink?: "dotenv" | "keychain" | "sops" | "onepassword" | "doppler" | "vault" | "external" | undefined;
182
+ rotation?: {
183
+ maxAgeDays: number;
184
+ } | undefined;
185
+ }>;
186
+ export type ManifestEntry = z.infer<typeof ManifestEntry>;
187
+ export declare const Manifest: z.ZodObject<{
188
+ $schema: z.ZodOptional<z.ZodString>;
189
+ version: z.ZodLiteral<1>;
190
+ entries: z.ZodDefault<z.ZodArray<z.ZodEffects<z.ZodObject<{
191
+ key: z.ZodString;
192
+ description: z.ZodString;
193
+ required: z.ZodDefault<z.ZodBoolean>;
194
+ secret: z.ZodDefault<z.ZodBoolean>;
195
+ format: z.ZodOptional<z.ZodObject<{
196
+ pattern: z.ZodOptional<z.ZodString>;
197
+ minLength: z.ZodOptional<z.ZodNumber>;
198
+ maxLength: z.ZodOptional<z.ZodNumber>;
199
+ example: z.ZodOptional<z.ZodString>;
200
+ }, "strip", z.ZodTypeAny, {
201
+ pattern?: string | undefined;
202
+ minLength?: number | undefined;
203
+ maxLength?: number | undefined;
204
+ example?: string | undefined;
205
+ }, {
206
+ pattern?: string | undefined;
207
+ minLength?: number | undefined;
208
+ maxLength?: number | undefined;
209
+ example?: string | undefined;
210
+ }>>;
211
+ provider: z.ZodOptional<z.ZodObject<{
212
+ id: z.ZodString;
213
+ name: z.ZodString;
214
+ signupUrl: z.ZodOptional<z.ZodString>;
215
+ docsUrl: z.ZodOptional<z.ZodString>;
216
+ rotateUrl: z.ZodOptional<z.ZodString>;
217
+ scopesNeeded: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
218
+ }, "strip", z.ZodTypeAny, {
219
+ id: string;
220
+ name: string;
221
+ signupUrl?: string | undefined;
222
+ docsUrl?: string | undefined;
223
+ rotateUrl?: string | undefined;
224
+ scopesNeeded?: string[] | undefined;
225
+ }, {
226
+ id: string;
227
+ name: string;
228
+ signupUrl?: string | undefined;
229
+ docsUrl?: string | undefined;
230
+ rotateUrl?: string | undefined;
231
+ scopesNeeded?: string[] | undefined;
232
+ }>>;
233
+ verify: z.ZodOptional<z.ZodObject<{
234
+ method: z.ZodEnum<["GET", "POST"]>;
235
+ url: z.ZodString;
236
+ headerTemplate: z.ZodRecord<z.ZodString, z.ZodString>;
237
+ expectStatus: z.ZodDefault<z.ZodArray<z.ZodNumber, "many">>;
238
+ }, "strip", z.ZodTypeAny, {
239
+ method: "GET" | "POST";
240
+ url: string;
241
+ headerTemplate: Record<string, string>;
242
+ expectStatus: number[];
243
+ }, {
244
+ method: "GET" | "POST";
245
+ url: string;
246
+ headerTemplate: Record<string, string>;
247
+ expectStatus?: number[] | undefined;
248
+ }>>;
249
+ sink: z.ZodDefault<z.ZodEnum<["dotenv", "keychain", "sops", "onepassword", "doppler", "vault", "external"]>>;
250
+ rotation: z.ZodOptional<z.ZodObject<{
251
+ maxAgeDays: z.ZodNumber;
252
+ }, "strip", z.ZodTypeAny, {
253
+ maxAgeDays: number;
254
+ }, {
255
+ maxAgeDays: number;
256
+ }>>;
257
+ }, "strict", z.ZodTypeAny, {
258
+ key: string;
259
+ description: string;
260
+ required: boolean;
261
+ secret: boolean;
262
+ sink: "dotenv" | "keychain" | "sops" | "onepassword" | "doppler" | "vault" | "external";
263
+ format?: {
264
+ pattern?: string | undefined;
265
+ minLength?: number | undefined;
266
+ maxLength?: number | undefined;
267
+ example?: string | undefined;
268
+ } | undefined;
269
+ provider?: {
270
+ id: string;
271
+ name: string;
272
+ signupUrl?: string | undefined;
273
+ docsUrl?: string | undefined;
274
+ rotateUrl?: string | undefined;
275
+ scopesNeeded?: string[] | undefined;
276
+ } | undefined;
277
+ verify?: {
278
+ method: "GET" | "POST";
279
+ url: string;
280
+ headerTemplate: Record<string, string>;
281
+ expectStatus: number[];
282
+ } | undefined;
283
+ rotation?: {
284
+ maxAgeDays: number;
285
+ } | undefined;
286
+ }, {
287
+ key: string;
288
+ description: string;
289
+ required?: boolean | undefined;
290
+ secret?: boolean | undefined;
291
+ format?: {
292
+ pattern?: string | undefined;
293
+ minLength?: number | undefined;
294
+ maxLength?: number | undefined;
295
+ example?: string | undefined;
296
+ } | undefined;
297
+ provider?: {
298
+ id: string;
299
+ name: string;
300
+ signupUrl?: string | undefined;
301
+ docsUrl?: string | undefined;
302
+ rotateUrl?: string | undefined;
303
+ scopesNeeded?: string[] | undefined;
304
+ } | undefined;
305
+ verify?: {
306
+ method: "GET" | "POST";
307
+ url: string;
308
+ headerTemplate: Record<string, string>;
309
+ expectStatus?: number[] | undefined;
310
+ } | undefined;
311
+ sink?: "dotenv" | "keychain" | "sops" | "onepassword" | "doppler" | "vault" | "external" | undefined;
312
+ rotation?: {
313
+ maxAgeDays: number;
314
+ } | undefined;
315
+ }>, {
316
+ key: string;
317
+ description: string;
318
+ required: boolean;
319
+ secret: boolean;
320
+ sink: "dotenv" | "keychain" | "sops" | "onepassword" | "doppler" | "vault" | "external";
321
+ format?: {
322
+ pattern?: string | undefined;
323
+ minLength?: number | undefined;
324
+ maxLength?: number | undefined;
325
+ example?: string | undefined;
326
+ } | undefined;
327
+ provider?: {
328
+ id: string;
329
+ name: string;
330
+ signupUrl?: string | undefined;
331
+ docsUrl?: string | undefined;
332
+ rotateUrl?: string | undefined;
333
+ scopesNeeded?: string[] | undefined;
334
+ } | undefined;
335
+ verify?: {
336
+ method: "GET" | "POST";
337
+ url: string;
338
+ headerTemplate: Record<string, string>;
339
+ expectStatus: number[];
340
+ } | undefined;
341
+ rotation?: {
342
+ maxAgeDays: number;
343
+ } | undefined;
344
+ }, {
345
+ key: string;
346
+ description: string;
347
+ required?: boolean | undefined;
348
+ secret?: boolean | undefined;
349
+ format?: {
350
+ pattern?: string | undefined;
351
+ minLength?: number | undefined;
352
+ maxLength?: number | undefined;
353
+ example?: string | undefined;
354
+ } | undefined;
355
+ provider?: {
356
+ id: string;
357
+ name: string;
358
+ signupUrl?: string | undefined;
359
+ docsUrl?: string | undefined;
360
+ rotateUrl?: string | undefined;
361
+ scopesNeeded?: string[] | undefined;
362
+ } | undefined;
363
+ verify?: {
364
+ method: "GET" | "POST";
365
+ url: string;
366
+ headerTemplate: Record<string, string>;
367
+ expectStatus?: number[] | undefined;
368
+ } | undefined;
369
+ sink?: "dotenv" | "keychain" | "sops" | "onepassword" | "doppler" | "vault" | "external" | undefined;
370
+ rotation?: {
371
+ maxAgeDays: number;
372
+ } | undefined;
373
+ }>, "many">>;
374
+ }, "strict", z.ZodTypeAny, {
375
+ entries: {
376
+ key: string;
377
+ description: string;
378
+ required: boolean;
379
+ secret: boolean;
380
+ sink: "dotenv" | "keychain" | "sops" | "onepassword" | "doppler" | "vault" | "external";
381
+ format?: {
382
+ pattern?: string | undefined;
383
+ minLength?: number | undefined;
384
+ maxLength?: number | undefined;
385
+ example?: string | undefined;
386
+ } | undefined;
387
+ provider?: {
388
+ id: string;
389
+ name: string;
390
+ signupUrl?: string | undefined;
391
+ docsUrl?: string | undefined;
392
+ rotateUrl?: string | undefined;
393
+ scopesNeeded?: string[] | undefined;
394
+ } | undefined;
395
+ verify?: {
396
+ method: "GET" | "POST";
397
+ url: string;
398
+ headerTemplate: Record<string, string>;
399
+ expectStatus: number[];
400
+ } | undefined;
401
+ rotation?: {
402
+ maxAgeDays: number;
403
+ } | undefined;
404
+ }[];
405
+ version: 1;
406
+ $schema?: string | undefined;
407
+ }, {
408
+ version: 1;
409
+ entries?: {
410
+ key: string;
411
+ description: string;
412
+ required?: boolean | undefined;
413
+ secret?: boolean | undefined;
414
+ format?: {
415
+ pattern?: string | undefined;
416
+ minLength?: number | undefined;
417
+ maxLength?: number | undefined;
418
+ example?: string | undefined;
419
+ } | undefined;
420
+ provider?: {
421
+ id: string;
422
+ name: string;
423
+ signupUrl?: string | undefined;
424
+ docsUrl?: string | undefined;
425
+ rotateUrl?: string | undefined;
426
+ scopesNeeded?: string[] | undefined;
427
+ } | undefined;
428
+ verify?: {
429
+ method: "GET" | "POST";
430
+ url: string;
431
+ headerTemplate: Record<string, string>;
432
+ expectStatus?: number[] | undefined;
433
+ } | undefined;
434
+ sink?: "dotenv" | "keychain" | "sops" | "onepassword" | "doppler" | "vault" | "external" | undefined;
435
+ rotation?: {
436
+ maxAgeDays: number;
437
+ } | undefined;
438
+ }[] | undefined;
439
+ $schema?: string | undefined;
440
+ }>;
441
+ export type Manifest = z.infer<typeof Manifest>;
442
+ export declare const KeyStatus: z.ZodObject<{
443
+ key: z.ZodString;
444
+ declared: z.ZodBoolean;
445
+ present: z.ZodBoolean;
446
+ sink: z.ZodString;
447
+ formatValid: z.ZodNullable<z.ZodBoolean>;
448
+ lengthBucket: z.ZodString;
449
+ fingerprint: z.ZodString;
450
+ lastVerified: z.ZodNullable<z.ZodString>;
451
+ verifyResult: z.ZodNullable<z.ZodEnum<["ok", "auth_failed", "forbidden", "rate_limited", "network_error", "no_probe", "probe_not_approved"]>>;
452
+ source: z.ZodEnum<["user-prompt", "preexisting", "ci", "imported"]>;
453
+ rotationDue: z.ZodNullable<z.ZodString>;
454
+ }, "strict", z.ZodTypeAny, {
455
+ key: string;
456
+ sink: string;
457
+ declared: boolean;
458
+ present: boolean;
459
+ formatValid: boolean | null;
460
+ lengthBucket: string;
461
+ fingerprint: string;
462
+ lastVerified: string | null;
463
+ verifyResult: "ok" | "auth_failed" | "forbidden" | "rate_limited" | "network_error" | "no_probe" | "probe_not_approved" | null;
464
+ source: "user-prompt" | "preexisting" | "ci" | "imported";
465
+ rotationDue: string | null;
466
+ }, {
467
+ key: string;
468
+ sink: string;
469
+ declared: boolean;
470
+ present: boolean;
471
+ formatValid: boolean | null;
472
+ lengthBucket: string;
473
+ fingerprint: string;
474
+ lastVerified: string | null;
475
+ verifyResult: "ok" | "auth_failed" | "forbidden" | "rate_limited" | "network_error" | "no_probe" | "probe_not_approved" | null;
476
+ source: "user-prompt" | "preexisting" | "ci" | "imported";
477
+ rotationDue: string | null;
478
+ }>;
479
+ export type KeyStatus = z.infer<typeof KeyStatus>;
480
+ export declare const Ticket: z.ZodObject<{
481
+ ticket: z.ZodString;
482
+ nonce: z.ZodString;
483
+ surface: z.ZodEnum<["loopback-browser", "native-dialog", "ide", "tty", "none"]>;
484
+ expiresAt: z.ZodString;
485
+ userMessage: z.ZodString;
486
+ }, "strict", z.ZodTypeAny, {
487
+ ticket: string;
488
+ nonce: string;
489
+ surface: "loopback-browser" | "native-dialog" | "ide" | "tty" | "none";
490
+ expiresAt: string;
491
+ userMessage: string;
492
+ }, {
493
+ ticket: string;
494
+ nonce: string;
495
+ surface: "loopback-browser" | "native-dialog" | "ide" | "tty" | "none";
496
+ expiresAt: string;
497
+ userMessage: string;
498
+ }>;
499
+ export type Ticket = z.infer<typeof Ticket>;
500
+ export declare const TicketKeyOutcome: z.ZodEnum<["stored", "skipped", "cancelled", "invalid_format", "verify_failed", "timeout"]>;
501
+ export type TicketKeyOutcome = z.infer<typeof TicketKeyOutcome>;
502
+ export declare const TicketOutcome: z.ZodObject<{
503
+ ticket: z.ZodString;
504
+ state: z.ZodEnum<["pending", "resolved", "expired", "cancelled"]>;
505
+ keys: z.ZodDefault<z.ZodArray<z.ZodObject<{
506
+ key: z.ZodString;
507
+ outcome: z.ZodEnum<["stored", "skipped", "cancelled", "invalid_format", "verify_failed", "timeout"]>;
508
+ }, "strict", z.ZodTypeAny, {
509
+ key: string;
510
+ outcome: "stored" | "skipped" | "cancelled" | "invalid_format" | "verify_failed" | "timeout";
511
+ }, {
512
+ key: string;
513
+ outcome: "stored" | "skipped" | "cancelled" | "invalid_format" | "verify_failed" | "timeout";
514
+ }>, "many">>;
515
+ }, "strict", z.ZodTypeAny, {
516
+ keys: {
517
+ key: string;
518
+ outcome: "stored" | "skipped" | "cancelled" | "invalid_format" | "verify_failed" | "timeout";
519
+ }[];
520
+ ticket: string;
521
+ state: "cancelled" | "pending" | "resolved" | "expired";
522
+ }, {
523
+ ticket: string;
524
+ state: "cancelled" | "pending" | "resolved" | "expired";
525
+ keys?: {
526
+ key: string;
527
+ outcome: "stored" | "skipped" | "cancelled" | "invalid_format" | "verify_failed" | "timeout";
528
+ }[] | undefined;
529
+ }>;
530
+ export type TicketOutcome = z.infer<typeof TicketOutcome>;
531
+ export declare const VerifyResult: z.ZodObject<{
532
+ key: z.ZodString;
533
+ result: z.ZodEnum<["ok", "auth_failed", "forbidden", "rate_limited", "network_error", "no_probe", "probe_not_approved"]>;
534
+ message: z.ZodString;
535
+ checkedAt: z.ZodString;
536
+ }, "strict", z.ZodTypeAny, {
537
+ key: string;
538
+ message: string;
539
+ result: "ok" | "auth_failed" | "forbidden" | "rate_limited" | "network_error" | "no_probe" | "probe_not_approved";
540
+ checkedAt: string;
541
+ }, {
542
+ key: string;
543
+ message: string;
544
+ result: "ok" | "auth_failed" | "forbidden" | "rate_limited" | "network_error" | "no_probe" | "probe_not_approved";
545
+ checkedAt: string;
546
+ }>;
547
+ export type VerifyResult = z.infer<typeof VerifyResult>;
548
+ export declare const ExecResult: z.ZodObject<{
549
+ exitCode: z.ZodNullable<z.ZodNumber>;
550
+ stdout: z.ZodString;
551
+ stderr: z.ZodString;
552
+ timedOut: z.ZodBoolean;
553
+ redactedCount: z.ZodNumber;
554
+ }, "strict", z.ZodTypeAny, {
555
+ exitCode: number | null;
556
+ stdout: string;
557
+ stderr: string;
558
+ timedOut: boolean;
559
+ redactedCount: number;
560
+ }, {
561
+ exitCode: number | null;
562
+ stdout: string;
563
+ stderr: string;
564
+ timedOut: boolean;
565
+ redactedCount: number;
566
+ }>;
567
+ export type ExecResult = z.infer<typeof ExecResult>;
568
+ export declare const DeclareResult: z.ZodObject<{
569
+ added: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
570
+ updated: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
571
+ unchanged: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
572
+ }, "strict", z.ZodTypeAny, {
573
+ added: string[];
574
+ updated: string[];
575
+ unchanged: string[];
576
+ }, {
577
+ added?: string[] | undefined;
578
+ updated?: string[] | undefined;
579
+ unchanged?: string[] | undefined;
580
+ }>;
581
+ export type DeclareResult = z.infer<typeof DeclareResult>;
582
+ export declare const RevokeResult: z.ZodObject<{
583
+ key: z.ZodString;
584
+ removed: z.ZodBoolean;
585
+ rotateUrl: z.ZodNullable<z.ZodString>;
586
+ }, "strict", z.ZodTypeAny, {
587
+ key: string;
588
+ rotateUrl: string | null;
589
+ removed: boolean;
590
+ }, {
591
+ key: string;
592
+ rotateUrl: string | null;
593
+ removed: boolean;
594
+ }>;
595
+ export type RevokeResult = z.infer<typeof RevokeResult>;
596
+ export declare const RevokeResults: z.ZodArray<z.ZodObject<{
597
+ key: z.ZodString;
598
+ removed: z.ZodBoolean;
599
+ rotateUrl: z.ZodNullable<z.ZodString>;
600
+ }, "strict", z.ZodTypeAny, {
601
+ key: string;
602
+ rotateUrl: string | null;
603
+ removed: boolean;
604
+ }, {
605
+ key: string;
606
+ rotateUrl: string | null;
607
+ removed: boolean;
608
+ }>, "many">;
609
+ export type RevokeResults = z.infer<typeof RevokeResults>;
610
+ export declare const ManifestStatus: z.ZodObject<{
611
+ projectRoot: z.ZodString;
612
+ manifestPath: z.ZodNullable<z.ZodString>;
613
+ entries: z.ZodArray<z.ZodObject<{
614
+ key: z.ZodString;
615
+ declared: z.ZodBoolean;
616
+ present: z.ZodBoolean;
617
+ sink: z.ZodString;
618
+ formatValid: z.ZodNullable<z.ZodBoolean>;
619
+ lengthBucket: z.ZodString;
620
+ fingerprint: z.ZodString;
621
+ lastVerified: z.ZodNullable<z.ZodString>;
622
+ verifyResult: z.ZodNullable<z.ZodEnum<["ok", "auth_failed", "forbidden", "rate_limited", "network_error", "no_probe", "probe_not_approved"]>>;
623
+ source: z.ZodEnum<["user-prompt", "preexisting", "ci", "imported"]>;
624
+ rotationDue: z.ZodNullable<z.ZodString>;
625
+ }, "strict", z.ZodTypeAny, {
626
+ key: string;
627
+ sink: string;
628
+ declared: boolean;
629
+ present: boolean;
630
+ formatValid: boolean | null;
631
+ lengthBucket: string;
632
+ fingerprint: string;
633
+ lastVerified: string | null;
634
+ verifyResult: "ok" | "auth_failed" | "forbidden" | "rate_limited" | "network_error" | "no_probe" | "probe_not_approved" | null;
635
+ source: "user-prompt" | "preexisting" | "ci" | "imported";
636
+ rotationDue: string | null;
637
+ }, {
638
+ key: string;
639
+ sink: string;
640
+ declared: boolean;
641
+ present: boolean;
642
+ formatValid: boolean | null;
643
+ lengthBucket: string;
644
+ fingerprint: string;
645
+ lastVerified: string | null;
646
+ verifyResult: "ok" | "auth_failed" | "forbidden" | "rate_limited" | "network_error" | "no_probe" | "probe_not_approved" | null;
647
+ source: "user-prompt" | "preexisting" | "ci" | "imported";
648
+ rotationDue: string | null;
649
+ }>, "many">;
650
+ missingRequired: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
651
+ }, "strict", z.ZodTypeAny, {
652
+ entries: {
653
+ key: string;
654
+ sink: string;
655
+ declared: boolean;
656
+ present: boolean;
657
+ formatValid: boolean | null;
658
+ lengthBucket: string;
659
+ fingerprint: string;
660
+ lastVerified: string | null;
661
+ verifyResult: "ok" | "auth_failed" | "forbidden" | "rate_limited" | "network_error" | "no_probe" | "probe_not_approved" | null;
662
+ source: "user-prompt" | "preexisting" | "ci" | "imported";
663
+ rotationDue: string | null;
664
+ }[];
665
+ projectRoot: string;
666
+ manifestPath: string | null;
667
+ missingRequired: string[];
668
+ }, {
669
+ entries: {
670
+ key: string;
671
+ sink: string;
672
+ declared: boolean;
673
+ present: boolean;
674
+ formatValid: boolean | null;
675
+ lengthBucket: string;
676
+ fingerprint: string;
677
+ lastVerified: string | null;
678
+ verifyResult: "ok" | "auth_failed" | "forbidden" | "rate_limited" | "network_error" | "no_probe" | "probe_not_approved" | null;
679
+ source: "user-prompt" | "preexisting" | "ci" | "imported";
680
+ rotationDue: string | null;
681
+ }[];
682
+ projectRoot: string;
683
+ manifestPath: string | null;
684
+ missingRequired?: string[] | undefined;
685
+ }>;
686
+ export type ManifestStatus = z.infer<typeof ManifestStatus>;
687
+ export declare const EnvDescribeInput: z.ZodObject<{
688
+ scope: z.ZodOptional<z.ZodString>;
689
+ }, "strict", z.ZodTypeAny, {
690
+ scope?: string | undefined;
691
+ }, {
692
+ scope?: string | undefined;
693
+ }>;
694
+ export type EnvDescribeInput = z.infer<typeof EnvDescribeInput>;
695
+ export declare const EnvDeclareInput: z.ZodObject<{
696
+ entries: z.ZodArray<z.ZodEffects<z.ZodObject<{
697
+ key: z.ZodString;
698
+ description: z.ZodString;
699
+ required: z.ZodDefault<z.ZodBoolean>;
700
+ secret: z.ZodDefault<z.ZodBoolean>;
701
+ format: z.ZodOptional<z.ZodObject<{
702
+ pattern: z.ZodOptional<z.ZodString>;
703
+ minLength: z.ZodOptional<z.ZodNumber>;
704
+ maxLength: z.ZodOptional<z.ZodNumber>;
705
+ example: z.ZodOptional<z.ZodString>;
706
+ }, "strip", z.ZodTypeAny, {
707
+ pattern?: string | undefined;
708
+ minLength?: number | undefined;
709
+ maxLength?: number | undefined;
710
+ example?: string | undefined;
711
+ }, {
712
+ pattern?: string | undefined;
713
+ minLength?: number | undefined;
714
+ maxLength?: number | undefined;
715
+ example?: string | undefined;
716
+ }>>;
717
+ provider: z.ZodOptional<z.ZodObject<{
718
+ id: z.ZodString;
719
+ name: z.ZodString;
720
+ signupUrl: z.ZodOptional<z.ZodString>;
721
+ docsUrl: z.ZodOptional<z.ZodString>;
722
+ rotateUrl: z.ZodOptional<z.ZodString>;
723
+ scopesNeeded: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
724
+ }, "strip", z.ZodTypeAny, {
725
+ id: string;
726
+ name: string;
727
+ signupUrl?: string | undefined;
728
+ docsUrl?: string | undefined;
729
+ rotateUrl?: string | undefined;
730
+ scopesNeeded?: string[] | undefined;
731
+ }, {
732
+ id: string;
733
+ name: string;
734
+ signupUrl?: string | undefined;
735
+ docsUrl?: string | undefined;
736
+ rotateUrl?: string | undefined;
737
+ scopesNeeded?: string[] | undefined;
738
+ }>>;
739
+ verify: z.ZodOptional<z.ZodObject<{
740
+ method: z.ZodEnum<["GET", "POST"]>;
741
+ url: z.ZodString;
742
+ headerTemplate: z.ZodRecord<z.ZodString, z.ZodString>;
743
+ expectStatus: z.ZodDefault<z.ZodArray<z.ZodNumber, "many">>;
744
+ }, "strip", z.ZodTypeAny, {
745
+ method: "GET" | "POST";
746
+ url: string;
747
+ headerTemplate: Record<string, string>;
748
+ expectStatus: number[];
749
+ }, {
750
+ method: "GET" | "POST";
751
+ url: string;
752
+ headerTemplate: Record<string, string>;
753
+ expectStatus?: number[] | undefined;
754
+ }>>;
755
+ sink: z.ZodDefault<z.ZodEnum<["dotenv", "keychain", "sops", "onepassword", "doppler", "vault", "external"]>>;
756
+ rotation: z.ZodOptional<z.ZodObject<{
757
+ maxAgeDays: z.ZodNumber;
758
+ }, "strip", z.ZodTypeAny, {
759
+ maxAgeDays: number;
760
+ }, {
761
+ maxAgeDays: number;
762
+ }>>;
763
+ }, "strict", z.ZodTypeAny, {
764
+ key: string;
765
+ description: string;
766
+ required: boolean;
767
+ secret: boolean;
768
+ sink: "dotenv" | "keychain" | "sops" | "onepassword" | "doppler" | "vault" | "external";
769
+ format?: {
770
+ pattern?: string | undefined;
771
+ minLength?: number | undefined;
772
+ maxLength?: number | undefined;
773
+ example?: string | undefined;
774
+ } | undefined;
775
+ provider?: {
776
+ id: string;
777
+ name: string;
778
+ signupUrl?: string | undefined;
779
+ docsUrl?: string | undefined;
780
+ rotateUrl?: string | undefined;
781
+ scopesNeeded?: string[] | undefined;
782
+ } | undefined;
783
+ verify?: {
784
+ method: "GET" | "POST";
785
+ url: string;
786
+ headerTemplate: Record<string, string>;
787
+ expectStatus: number[];
788
+ } | undefined;
789
+ rotation?: {
790
+ maxAgeDays: number;
791
+ } | undefined;
792
+ }, {
793
+ key: string;
794
+ description: string;
795
+ required?: boolean | undefined;
796
+ secret?: boolean | undefined;
797
+ format?: {
798
+ pattern?: string | undefined;
799
+ minLength?: number | undefined;
800
+ maxLength?: number | undefined;
801
+ example?: string | undefined;
802
+ } | undefined;
803
+ provider?: {
804
+ id: string;
805
+ name: string;
806
+ signupUrl?: string | undefined;
807
+ docsUrl?: string | undefined;
808
+ rotateUrl?: string | undefined;
809
+ scopesNeeded?: string[] | undefined;
810
+ } | undefined;
811
+ verify?: {
812
+ method: "GET" | "POST";
813
+ url: string;
814
+ headerTemplate: Record<string, string>;
815
+ expectStatus?: number[] | undefined;
816
+ } | undefined;
817
+ sink?: "dotenv" | "keychain" | "sops" | "onepassword" | "doppler" | "vault" | "external" | undefined;
818
+ rotation?: {
819
+ maxAgeDays: number;
820
+ } | undefined;
821
+ }>, {
822
+ key: string;
823
+ description: string;
824
+ required: boolean;
825
+ secret: boolean;
826
+ sink: "dotenv" | "keychain" | "sops" | "onepassword" | "doppler" | "vault" | "external";
827
+ format?: {
828
+ pattern?: string | undefined;
829
+ minLength?: number | undefined;
830
+ maxLength?: number | undefined;
831
+ example?: string | undefined;
832
+ } | undefined;
833
+ provider?: {
834
+ id: string;
835
+ name: string;
836
+ signupUrl?: string | undefined;
837
+ docsUrl?: string | undefined;
838
+ rotateUrl?: string | undefined;
839
+ scopesNeeded?: string[] | undefined;
840
+ } | undefined;
841
+ verify?: {
842
+ method: "GET" | "POST";
843
+ url: string;
844
+ headerTemplate: Record<string, string>;
845
+ expectStatus: number[];
846
+ } | undefined;
847
+ rotation?: {
848
+ maxAgeDays: number;
849
+ } | undefined;
850
+ }, {
851
+ key: string;
852
+ description: string;
853
+ required?: boolean | undefined;
854
+ secret?: boolean | undefined;
855
+ format?: {
856
+ pattern?: string | undefined;
857
+ minLength?: number | undefined;
858
+ maxLength?: number | undefined;
859
+ example?: string | undefined;
860
+ } | undefined;
861
+ provider?: {
862
+ id: string;
863
+ name: string;
864
+ signupUrl?: string | undefined;
865
+ docsUrl?: string | undefined;
866
+ rotateUrl?: string | undefined;
867
+ scopesNeeded?: string[] | undefined;
868
+ } | undefined;
869
+ verify?: {
870
+ method: "GET" | "POST";
871
+ url: string;
872
+ headerTemplate: Record<string, string>;
873
+ expectStatus?: number[] | undefined;
874
+ } | undefined;
875
+ sink?: "dotenv" | "keychain" | "sops" | "onepassword" | "doppler" | "vault" | "external" | undefined;
876
+ rotation?: {
877
+ maxAgeDays: number;
878
+ } | undefined;
879
+ }>, "many">;
880
+ }, "strict", z.ZodTypeAny, {
881
+ entries: {
882
+ key: string;
883
+ description: string;
884
+ required: boolean;
885
+ secret: boolean;
886
+ sink: "dotenv" | "keychain" | "sops" | "onepassword" | "doppler" | "vault" | "external";
887
+ format?: {
888
+ pattern?: string | undefined;
889
+ minLength?: number | undefined;
890
+ maxLength?: number | undefined;
891
+ example?: string | undefined;
892
+ } | undefined;
893
+ provider?: {
894
+ id: string;
895
+ name: string;
896
+ signupUrl?: string | undefined;
897
+ docsUrl?: string | undefined;
898
+ rotateUrl?: string | undefined;
899
+ scopesNeeded?: string[] | undefined;
900
+ } | undefined;
901
+ verify?: {
902
+ method: "GET" | "POST";
903
+ url: string;
904
+ headerTemplate: Record<string, string>;
905
+ expectStatus: number[];
906
+ } | undefined;
907
+ rotation?: {
908
+ maxAgeDays: number;
909
+ } | undefined;
910
+ }[];
911
+ }, {
912
+ entries: {
913
+ key: string;
914
+ description: string;
915
+ required?: boolean | undefined;
916
+ secret?: boolean | undefined;
917
+ format?: {
918
+ pattern?: string | undefined;
919
+ minLength?: number | undefined;
920
+ maxLength?: number | undefined;
921
+ example?: string | undefined;
922
+ } | undefined;
923
+ provider?: {
924
+ id: string;
925
+ name: string;
926
+ signupUrl?: string | undefined;
927
+ docsUrl?: string | undefined;
928
+ rotateUrl?: string | undefined;
929
+ scopesNeeded?: string[] | undefined;
930
+ } | undefined;
931
+ verify?: {
932
+ method: "GET" | "POST";
933
+ url: string;
934
+ headerTemplate: Record<string, string>;
935
+ expectStatus?: number[] | undefined;
936
+ } | undefined;
937
+ sink?: "dotenv" | "keychain" | "sops" | "onepassword" | "doppler" | "vault" | "external" | undefined;
938
+ rotation?: {
939
+ maxAgeDays: number;
940
+ } | undefined;
941
+ }[];
942
+ }>;
943
+ export type EnvDeclareInput = z.infer<typeof EnvDeclareInput>;
944
+ export declare const EnvRequestInput: z.ZodObject<{
945
+ keys: z.ZodArray<z.ZodString, "many">;
946
+ reason: z.ZodString;
947
+ }, "strict", z.ZodTypeAny, {
948
+ keys: string[];
949
+ reason: string;
950
+ }, {
951
+ keys: string[];
952
+ reason: string;
953
+ }>;
954
+ export type EnvRequestInput = z.infer<typeof EnvRequestInput>;
955
+ export declare const EnvAwaitInput: z.ZodObject<{
956
+ ticket: z.ZodString;
957
+ timeoutMs: z.ZodDefault<z.ZodNumber>;
958
+ }, "strict", z.ZodTypeAny, {
959
+ ticket: string;
960
+ timeoutMs: number;
961
+ }, {
962
+ ticket: string;
963
+ timeoutMs?: number | undefined;
964
+ }>;
965
+ export type EnvAwaitInput = z.infer<typeof EnvAwaitInput>;
966
+ export declare const EnvVerifyInput: z.ZodObject<{
967
+ keys: z.ZodArray<z.ZodString, "many">;
968
+ }, "strict", z.ZodTypeAny, {
969
+ keys: string[];
970
+ }, {
971
+ keys: string[];
972
+ }>;
973
+ export type EnvVerifyInput = z.infer<typeof EnvVerifyInput>;
974
+ export declare const EnvUseInput: z.ZodObject<{
975
+ keys: z.ZodArray<z.ZodString, "many">;
976
+ command: z.ZodArray<z.ZodString, "many">;
977
+ }, "strict", z.ZodTypeAny, {
978
+ keys: string[];
979
+ command: string[];
980
+ }, {
981
+ keys: string[];
982
+ command: string[];
983
+ }>;
984
+ export type EnvUseInput = z.infer<typeof EnvUseInput>;
985
+ export declare const EnvRevokeInput: z.ZodObject<{
986
+ keys: z.ZodArray<z.ZodString, "many">;
987
+ }, "strict", z.ZodTypeAny, {
988
+ keys: string[];
989
+ }, {
990
+ keys: string[];
991
+ }>;
992
+ export type EnvRevokeInput = z.infer<typeof EnvRevokeInput>;
993
+ export declare const INPUT_SCHEMAS: {
994
+ readonly env_describe: z.ZodObject<{
995
+ scope: z.ZodOptional<z.ZodString>;
996
+ }, "strict", z.ZodTypeAny, {
997
+ scope?: string | undefined;
998
+ }, {
999
+ scope?: string | undefined;
1000
+ }>;
1001
+ readonly env_declare: z.ZodObject<{
1002
+ entries: z.ZodArray<z.ZodEffects<z.ZodObject<{
1003
+ key: z.ZodString;
1004
+ description: z.ZodString;
1005
+ required: z.ZodDefault<z.ZodBoolean>;
1006
+ secret: z.ZodDefault<z.ZodBoolean>;
1007
+ format: z.ZodOptional<z.ZodObject<{
1008
+ pattern: z.ZodOptional<z.ZodString>;
1009
+ minLength: z.ZodOptional<z.ZodNumber>;
1010
+ maxLength: z.ZodOptional<z.ZodNumber>;
1011
+ example: z.ZodOptional<z.ZodString>;
1012
+ }, "strip", z.ZodTypeAny, {
1013
+ pattern?: string | undefined;
1014
+ minLength?: number | undefined;
1015
+ maxLength?: number | undefined;
1016
+ example?: string | undefined;
1017
+ }, {
1018
+ pattern?: string | undefined;
1019
+ minLength?: number | undefined;
1020
+ maxLength?: number | undefined;
1021
+ example?: string | undefined;
1022
+ }>>;
1023
+ provider: z.ZodOptional<z.ZodObject<{
1024
+ id: z.ZodString;
1025
+ name: z.ZodString;
1026
+ signupUrl: z.ZodOptional<z.ZodString>;
1027
+ docsUrl: z.ZodOptional<z.ZodString>;
1028
+ rotateUrl: z.ZodOptional<z.ZodString>;
1029
+ scopesNeeded: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
1030
+ }, "strip", z.ZodTypeAny, {
1031
+ id: string;
1032
+ name: string;
1033
+ signupUrl?: string | undefined;
1034
+ docsUrl?: string | undefined;
1035
+ rotateUrl?: string | undefined;
1036
+ scopesNeeded?: string[] | undefined;
1037
+ }, {
1038
+ id: string;
1039
+ name: string;
1040
+ signupUrl?: string | undefined;
1041
+ docsUrl?: string | undefined;
1042
+ rotateUrl?: string | undefined;
1043
+ scopesNeeded?: string[] | undefined;
1044
+ }>>;
1045
+ verify: z.ZodOptional<z.ZodObject<{
1046
+ method: z.ZodEnum<["GET", "POST"]>;
1047
+ url: z.ZodString;
1048
+ headerTemplate: z.ZodRecord<z.ZodString, z.ZodString>;
1049
+ expectStatus: z.ZodDefault<z.ZodArray<z.ZodNumber, "many">>;
1050
+ }, "strip", z.ZodTypeAny, {
1051
+ method: "GET" | "POST";
1052
+ url: string;
1053
+ headerTemplate: Record<string, string>;
1054
+ expectStatus: number[];
1055
+ }, {
1056
+ method: "GET" | "POST";
1057
+ url: string;
1058
+ headerTemplate: Record<string, string>;
1059
+ expectStatus?: number[] | undefined;
1060
+ }>>;
1061
+ sink: z.ZodDefault<z.ZodEnum<["dotenv", "keychain", "sops", "onepassword", "doppler", "vault", "external"]>>;
1062
+ rotation: z.ZodOptional<z.ZodObject<{
1063
+ maxAgeDays: z.ZodNumber;
1064
+ }, "strip", z.ZodTypeAny, {
1065
+ maxAgeDays: number;
1066
+ }, {
1067
+ maxAgeDays: number;
1068
+ }>>;
1069
+ }, "strict", z.ZodTypeAny, {
1070
+ key: string;
1071
+ description: string;
1072
+ required: boolean;
1073
+ secret: boolean;
1074
+ sink: "dotenv" | "keychain" | "sops" | "onepassword" | "doppler" | "vault" | "external";
1075
+ format?: {
1076
+ pattern?: string | undefined;
1077
+ minLength?: number | undefined;
1078
+ maxLength?: number | undefined;
1079
+ example?: string | undefined;
1080
+ } | undefined;
1081
+ provider?: {
1082
+ id: string;
1083
+ name: string;
1084
+ signupUrl?: string | undefined;
1085
+ docsUrl?: string | undefined;
1086
+ rotateUrl?: string | undefined;
1087
+ scopesNeeded?: string[] | undefined;
1088
+ } | undefined;
1089
+ verify?: {
1090
+ method: "GET" | "POST";
1091
+ url: string;
1092
+ headerTemplate: Record<string, string>;
1093
+ expectStatus: number[];
1094
+ } | undefined;
1095
+ rotation?: {
1096
+ maxAgeDays: number;
1097
+ } | undefined;
1098
+ }, {
1099
+ key: string;
1100
+ description: string;
1101
+ required?: boolean | undefined;
1102
+ secret?: boolean | undefined;
1103
+ format?: {
1104
+ pattern?: string | undefined;
1105
+ minLength?: number | undefined;
1106
+ maxLength?: number | undefined;
1107
+ example?: string | undefined;
1108
+ } | undefined;
1109
+ provider?: {
1110
+ id: string;
1111
+ name: string;
1112
+ signupUrl?: string | undefined;
1113
+ docsUrl?: string | undefined;
1114
+ rotateUrl?: string | undefined;
1115
+ scopesNeeded?: string[] | undefined;
1116
+ } | undefined;
1117
+ verify?: {
1118
+ method: "GET" | "POST";
1119
+ url: string;
1120
+ headerTemplate: Record<string, string>;
1121
+ expectStatus?: number[] | undefined;
1122
+ } | undefined;
1123
+ sink?: "dotenv" | "keychain" | "sops" | "onepassword" | "doppler" | "vault" | "external" | undefined;
1124
+ rotation?: {
1125
+ maxAgeDays: number;
1126
+ } | undefined;
1127
+ }>, {
1128
+ key: string;
1129
+ description: string;
1130
+ required: boolean;
1131
+ secret: boolean;
1132
+ sink: "dotenv" | "keychain" | "sops" | "onepassword" | "doppler" | "vault" | "external";
1133
+ format?: {
1134
+ pattern?: string | undefined;
1135
+ minLength?: number | undefined;
1136
+ maxLength?: number | undefined;
1137
+ example?: string | undefined;
1138
+ } | undefined;
1139
+ provider?: {
1140
+ id: string;
1141
+ name: string;
1142
+ signupUrl?: string | undefined;
1143
+ docsUrl?: string | undefined;
1144
+ rotateUrl?: string | undefined;
1145
+ scopesNeeded?: string[] | undefined;
1146
+ } | undefined;
1147
+ verify?: {
1148
+ method: "GET" | "POST";
1149
+ url: string;
1150
+ headerTemplate: Record<string, string>;
1151
+ expectStatus: number[];
1152
+ } | undefined;
1153
+ rotation?: {
1154
+ maxAgeDays: number;
1155
+ } | undefined;
1156
+ }, {
1157
+ key: string;
1158
+ description: string;
1159
+ required?: boolean | undefined;
1160
+ secret?: boolean | undefined;
1161
+ format?: {
1162
+ pattern?: string | undefined;
1163
+ minLength?: number | undefined;
1164
+ maxLength?: number | undefined;
1165
+ example?: string | undefined;
1166
+ } | undefined;
1167
+ provider?: {
1168
+ id: string;
1169
+ name: string;
1170
+ signupUrl?: string | undefined;
1171
+ docsUrl?: string | undefined;
1172
+ rotateUrl?: string | undefined;
1173
+ scopesNeeded?: string[] | undefined;
1174
+ } | undefined;
1175
+ verify?: {
1176
+ method: "GET" | "POST";
1177
+ url: string;
1178
+ headerTemplate: Record<string, string>;
1179
+ expectStatus?: number[] | undefined;
1180
+ } | undefined;
1181
+ sink?: "dotenv" | "keychain" | "sops" | "onepassword" | "doppler" | "vault" | "external" | undefined;
1182
+ rotation?: {
1183
+ maxAgeDays: number;
1184
+ } | undefined;
1185
+ }>, "many">;
1186
+ }, "strict", z.ZodTypeAny, {
1187
+ entries: {
1188
+ key: string;
1189
+ description: string;
1190
+ required: boolean;
1191
+ secret: boolean;
1192
+ sink: "dotenv" | "keychain" | "sops" | "onepassword" | "doppler" | "vault" | "external";
1193
+ format?: {
1194
+ pattern?: string | undefined;
1195
+ minLength?: number | undefined;
1196
+ maxLength?: number | undefined;
1197
+ example?: string | undefined;
1198
+ } | undefined;
1199
+ provider?: {
1200
+ id: string;
1201
+ name: string;
1202
+ signupUrl?: string | undefined;
1203
+ docsUrl?: string | undefined;
1204
+ rotateUrl?: string | undefined;
1205
+ scopesNeeded?: string[] | undefined;
1206
+ } | undefined;
1207
+ verify?: {
1208
+ method: "GET" | "POST";
1209
+ url: string;
1210
+ headerTemplate: Record<string, string>;
1211
+ expectStatus: number[];
1212
+ } | undefined;
1213
+ rotation?: {
1214
+ maxAgeDays: number;
1215
+ } | undefined;
1216
+ }[];
1217
+ }, {
1218
+ entries: {
1219
+ key: string;
1220
+ description: string;
1221
+ required?: boolean | undefined;
1222
+ secret?: boolean | undefined;
1223
+ format?: {
1224
+ pattern?: string | undefined;
1225
+ minLength?: number | undefined;
1226
+ maxLength?: number | undefined;
1227
+ example?: string | undefined;
1228
+ } | undefined;
1229
+ provider?: {
1230
+ id: string;
1231
+ name: string;
1232
+ signupUrl?: string | undefined;
1233
+ docsUrl?: string | undefined;
1234
+ rotateUrl?: string | undefined;
1235
+ scopesNeeded?: string[] | undefined;
1236
+ } | undefined;
1237
+ verify?: {
1238
+ method: "GET" | "POST";
1239
+ url: string;
1240
+ headerTemplate: Record<string, string>;
1241
+ expectStatus?: number[] | undefined;
1242
+ } | undefined;
1243
+ sink?: "dotenv" | "keychain" | "sops" | "onepassword" | "doppler" | "vault" | "external" | undefined;
1244
+ rotation?: {
1245
+ maxAgeDays: number;
1246
+ } | undefined;
1247
+ }[];
1248
+ }>;
1249
+ readonly env_request: z.ZodObject<{
1250
+ keys: z.ZodArray<z.ZodString, "many">;
1251
+ reason: z.ZodString;
1252
+ }, "strict", z.ZodTypeAny, {
1253
+ keys: string[];
1254
+ reason: string;
1255
+ }, {
1256
+ keys: string[];
1257
+ reason: string;
1258
+ }>;
1259
+ readonly env_await: z.ZodObject<{
1260
+ ticket: z.ZodString;
1261
+ timeoutMs: z.ZodDefault<z.ZodNumber>;
1262
+ }, "strict", z.ZodTypeAny, {
1263
+ ticket: string;
1264
+ timeoutMs: number;
1265
+ }, {
1266
+ ticket: string;
1267
+ timeoutMs?: number | undefined;
1268
+ }>;
1269
+ readonly env_verify: z.ZodObject<{
1270
+ keys: z.ZodArray<z.ZodString, "many">;
1271
+ }, "strict", z.ZodTypeAny, {
1272
+ keys: string[];
1273
+ }, {
1274
+ keys: string[];
1275
+ }>;
1276
+ readonly env_use: z.ZodObject<{
1277
+ keys: z.ZodArray<z.ZodString, "many">;
1278
+ command: z.ZodArray<z.ZodString, "many">;
1279
+ }, "strict", z.ZodTypeAny, {
1280
+ keys: string[];
1281
+ command: string[];
1282
+ }, {
1283
+ keys: string[];
1284
+ command: string[];
1285
+ }>;
1286
+ readonly env_revoke: z.ZodObject<{
1287
+ keys: z.ZodArray<z.ZodString, "many">;
1288
+ }, "strict", z.ZodTypeAny, {
1289
+ keys: string[];
1290
+ }, {
1291
+ keys: string[];
1292
+ }>;
1293
+ };
1294
+ //# sourceMappingURL=schemas.d.ts.map