@fabrika/provider-zerops 0.9.0-dev.1 → 0.9.0-dev.3

package/types/src/api/service-env-limit.d.ts

@@ -0,0 +1,17 @@
+/**
+ * The largest service variable value fabrika writes, in UTF-8 bytes. Measured live on 2026-10-15 (issue #3): a value
+ * of 32,000 bytes is created, one of 32,768 bytes or more answers a bare `500` with no error code. The bytes between
+ * were not probed, so the bound is the largest size that was seen to work.
+ */
+export declare const ZEROPS_SERVICE_ENV_VALUE_MAX_BYTES = 32000;
+/** The provider's code for a value over the bound; the platform has none of its own, only the 500. */
+export declare const ZEROPS_SERVICE_ENV_VALUE_TOO_LARGE = "serviceEnvValueTooLarge";
+/** A write refused before it was sent. The message names the variable and the sizes, never the value. */
+export declare class ZeropsServiceEnvValueTooLargeError extends Error {
+    readonly key: string;
+    readonly bytes: number;
+    readonly code = "serviceEnvValueTooLarge";
+    constructor(key: string, bytes: number);
+}
+/** Refuse a value Zerops would answer with a bare 500, which reads as an outage and is retried for ever. */
+export declare const assertServiceEnvValueFits: (key: string, value: string) => void;

package/types/src/api/service-env-response.d.ts

@@ -0,0 +1,23 @@
+import type { ZeropsServiceEnv } from './types';
+/** One user-data record as the platform sends it, before `withoutSensitiveContent`. */
+interface RawServiceEnv {
+    readonly id: string;
+    readonly key: string;
+    readonly content: string;
+    readonly serviceStackId?: string | undefined;
+    readonly type?: string | undefined;
+    readonly sensitive: boolean;
+}
+/**
+ * Drop a sensitive record's `content`, whatever it says.
+ *
+ * Zerops answers `REDACTED` outside sudo mode and the real value inside it (measured 2026-10-15), so the
+ * same call reads differently depending on the token. Dropping it here makes every caller behave the
+ * same for both, and no caller can compare, merge or leak a secret it read back.
+ */
+export declare const withoutSensitiveContent: (raw: RawServiceEnv) => ZeropsServiceEnv;
+/** The value of a record fabrika can read: absent when there is no record or it is sensitive. */
+export declare const readableContent: (record: ZeropsServiceEnv | undefined) => string | undefined;
+/** Parse at the raw HTTP boundary, before permissive legacy readers can coerce a malformed field. */
+export declare function parseServiceEnvResponse(value: unknown, serviceId: string): ZeropsServiceEnv[];
+export {};