@mcpfold/secrets 1.0.0

package/LICENSE

@@ -0,0 +1,28 @@
+MIT License
+
+Copyright (c) 2026 mcpfold contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+
+---
+
+The MIT license above covers the open-source packages: packages/* (@mcpfold/core,
+@mcpfold/adapters, @mcpfold/secrets, @mcpfold/proxy, @mcpfold/schema) and the `mcpfold`
+CLI. The cloud layer (apps/web, services/edge) is commercial/closed and NOT covered by
+this license.

package/dist/exec.d.ts

@@ -0,0 +1,13 @@
+/**
+ * A minimal command runner shared by the keychain and 1Password providers. Injectable so
+ * provider logic is testable without invoking the real OS backend or CLI. Never logs args
+ * or output (they may contain secrets).
+ */
+export interface ExecResult {
+    code: number;
+    stdout: string;
+    stderr: string;
+}
+export type CommandExec = (command: string, args: string[]) => Promise<ExecResult>;
+export declare const defaultExec: CommandExec;
+//# sourceMappingURL=exec.d.ts.map

package/dist/exec.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"exec.d.ts","sourceRoot":"","sources":["../src/exec.ts"],"names":[],"mappings":"AAEA;;;;GAIG;AAEH,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,MAAM,WAAW,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,OAAO,CAAC,UAAU,CAAC,CAAC;AAEnF,eAAO,MAAM,WAAW,EAAE,WAiBtB,CAAC"}

package/dist/exec.js

@@ -0,0 +1,20 @@
+import { spawn } from 'node:child_process';
+export const defaultExec = (command, args) => new Promise((resolve, reject) => {
+    let child;
+    try {
+        child = spawn(command, args, { stdio: ['ignore', 'pipe', 'pipe'] });
+    }
+    catch (error) {
+        reject(error);
+        return;
+    }
+    let stdout = '';
+    let stderr = '';
+    child.stdout.setEncoding('utf8');
+    child.stderr.setEncoding('utf8');
+    child.stdout.on('data', (d) => (stdout += d));
+    child.stderr.on('data', (d) => (stderr += d));
+    child.on('error', reject);
+    child.on('close', (code) => resolve({ code: code ?? 1, stdout, stderr }));
+});
+//# sourceMappingURL=exec.js.map

package/dist/exec.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"exec.js","sourceRoot":"","sources":["../src/exec.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAgB3C,MAAM,CAAC,MAAM,WAAW,GAAgB,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,CACxD,IAAI,OAAO,CAAa,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;IAC1C,IAAI,KAAK,CAAC;IACV,IAAI,CAAC;QACH,KAAK,GAAG,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;IACtE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,KAAK,CAAC,CAAC;QACd,OAAO;IACT,CAAC;IACD,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;IACjC,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;IACjC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC;IACtD,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC;IACtD,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC1B,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;AAC5E,CAAC,CAAC,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,20 @@
+import type { SecretProvider } from './types.js';
+/**
+ * @mcpfold/secrets — secret providers and the fail-closed resolver. Impure by design
+ * (env/fs/network); injected into the pure core.
+ */
+export type { SecretProvider, SecretResolveContext } from './types.js';
+export { resolveSecrets, DEFAULT_TIMEOUT_MS, type ResolveOptions } from './resolver.js';
+export { defaultExec, type CommandExec, type ExecResult } from './exec.js';
+export { envProvider } from './providers/env.js';
+export { dotenvProvider, parseDotenv } from './providers/dotenv.js';
+export { infisicalProvider, parseInfisicalPath, type InfisicalConfig, type InfisicalFetch, type InfisicalFetchParams, } from './providers/infisical.js';
+export { keychainProvider, keychainCommand, type KeychainConfig } from './providers/keychain.js';
+export { opProvider, opReference, type OpConfig } from './providers/op.js';
+/**
+ * All built-in providers (spec §6 order): env, dotenv, infisical, keychain, op. Each is
+ * registered so any `${scheme:path}` resolves; providers that need configuration fail with
+ * an actionable message at resolve time rather than "no provider for scheme".
+ */
+export declare function defaultProviders(cwd?: string): SecretProvider[];
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAEjD;;;GAGG;AAEH,YAAY,EAAE,cAAc,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AACvE,OAAO,EAAE,cAAc,EAAE,kBAAkB,EAAE,KAAK,cAAc,EAAE,MAAM,eAAe,CAAC;AACxF,OAAO,EAAE,WAAW,EAAE,KAAK,WAAW,EAAE,KAAK,UAAU,EAAE,MAAM,WAAW,CAAC;AAC3E,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AACpE,OAAO,EACL,iBAAiB,EACjB,kBAAkB,EAClB,KAAK,eAAe,EACpB,KAAK,cAAc,EACnB,KAAK,oBAAoB,GAC1B,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,gBAAgB,EAAE,eAAe,EAAE,KAAK,cAAc,EAAE,MAAM,yBAAyB,CAAC;AACjG,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,KAAK,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAE3E;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,GAAG,GAAE,MAAsB,GAAG,cAAc,EAAE,CAQ9E"}

package/dist/index.js

@@ -0,0 +1,28 @@
+import { join } from 'node:path';
+import { envProvider } from './providers/env.js';
+import { dotenvProvider } from './providers/dotenv.js';
+import { infisicalProvider } from './providers/infisical.js';
+import { keychainProvider } from './providers/keychain.js';
+import { opProvider } from './providers/op.js';
+export { resolveSecrets, DEFAULT_TIMEOUT_MS } from './resolver.js';
+export { defaultExec } from './exec.js';
+export { envProvider } from './providers/env.js';
+export { dotenvProvider, parseDotenv } from './providers/dotenv.js';
+export { infisicalProvider, parseInfisicalPath, } from './providers/infisical.js';
+export { keychainProvider, keychainCommand } from './providers/keychain.js';
+export { opProvider, opReference } from './providers/op.js';
+/**
+ * All built-in providers (spec §6 order): env, dotenv, infisical, keychain, op. Each is
+ * registered so any `${scheme:path}` resolves; providers that need configuration fail with
+ * an actionable message at resolve time rather than "no provider for scheme".
+ */
+export function defaultProviders(cwd = process.cwd()) {
+    return [
+        envProvider(),
+        dotenvProvider(join(cwd, '.env')),
+        infisicalProvider(),
+        keychainProvider(),
+        opProvider(),
+    ];
+}
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAC3D,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAS/C,OAAO,EAAE,cAAc,EAAE,kBAAkB,EAAuB,MAAM,eAAe,CAAC;AACxF,OAAO,EAAE,WAAW,EAAqC,MAAM,WAAW,CAAC;AAC3E,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AACpE,OAAO,EACL,iBAAiB,EACjB,kBAAkB,GAInB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,gBAAgB,EAAE,eAAe,EAAuB,MAAM,yBAAyB,CAAC;AACjG,OAAO,EAAE,UAAU,EAAE,WAAW,EAAiB,MAAM,mBAAmB,CAAC;AAE3E;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,MAAc,OAAO,CAAC,GAAG,EAAE;IAC1D,OAAO;QACL,WAAW,EAAE;QACb,cAAc,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QACjC,iBAAiB,EAAE;QACnB,gBAAgB,EAAE;QAClB,UAAU,EAAE;KACb,CAAC;AACJ,CAAC"}

package/dist/providers/dotenv.d.ts

@@ -0,0 +1,13 @@
+import type { SecretProvider } from '../types.js';
+/**
+ * `dotenv` provider (S4.2) — resolves `${dotenv:NAME}` from a designated `.env` file.
+ *
+ * Path convention: the file path is supplied when the provider is constructed (the CLI
+ * defaults to `<cwd>/.env`). Values are read into a private cache — they are **never**
+ * written to `process.env`, so a dotenv secret can't leak to child processes or other code
+ * that inspects the global environment.
+ */
+/** Minimal .env parser: `KEY=VALUE` lines, `#` comments, optional surrounding quotes. */
+export declare function parseDotenv(text: string): Record<string, string>;
+export declare function dotenvProvider(filePath: string): SecretProvider;
+//# sourceMappingURL=dotenv.d.ts.map

package/dist/providers/dotenv.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dotenv.d.ts","sourceRoot":"","sources":["../../src/providers/dotenv.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAElD;;;;;;;GAOG;AAEH,yFAAyF;AACzF,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAkBhE;AAED,wBAAgB,cAAc,CAAC,QAAQ,EAAE,MAAM,GAAG,cAAc,CAqB/D"}

package/dist/providers/dotenv.js

@@ -0,0 +1,54 @@
+import { readFileSync } from 'node:fs';
+/**
+ * `dotenv` provider (S4.2) — resolves `${dotenv:NAME}` from a designated `.env` file.
+ *
+ * Path convention: the file path is supplied when the provider is constructed (the CLI
+ * defaults to `<cwd>/.env`). Values are read into a private cache — they are **never**
+ * written to `process.env`, so a dotenv secret can't leak to child processes or other code
+ * that inspects the global environment.
+ */
+/** Minimal .env parser: `KEY=VALUE` lines, `#` comments, optional surrounding quotes. */
+export function parseDotenv(text) {
+    const out = {};
+    for (const rawLine of text.split(/\r?\n/)) {
+        const line = rawLine.trim();
+        if (!line || line.startsWith('#'))
+            continue;
+        const eq = line.indexOf('=');
+        if (eq === -1)
+            continue;
+        const key = line.slice(0, eq).trim();
+        let value = line.slice(eq + 1).trim();
+        if ((value.startsWith('"') && value.endsWith('"')) ||
+            (value.startsWith("'") && value.endsWith("'"))) {
+            value = value.slice(1, -1);
+        }
+        if (key)
+            out[key] = value;
+    }
+    return out;
+}
+export function dotenvProvider(filePath) {
+    let cache = null;
+    return {
+        scheme: 'dotenv',
+        async resolve(path) {
+            if (!cache) {
+                let text;
+                try {
+                    text = readFileSync(filePath, 'utf8');
+                }
+                catch {
+                    throw new Error(`could not read dotenv file at ${filePath}`);
+                }
+                cache = parseDotenv(text);
+            }
+            const value = cache[path];
+            if (value === undefined) {
+                throw new Error(`"${path}" not found in ${filePath}`);
+            }
+            return value;
+        },
+    };
+}
+//# sourceMappingURL=dotenv.js.map

package/dist/providers/dotenv.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dotenv.js","sourceRoot":"","sources":["../../src/providers/dotenv.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAGvC;;;;;;;GAOG;AAEH,yFAAyF;AACzF,MAAM,UAAU,WAAW,CAAC,IAAY;IACtC,MAAM,GAAG,GAA2B,EAAE,CAAC;IACvC,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QAC1C,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;QAC5B,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS;QAC5C,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC7B,IAAI,EAAE,KAAK,CAAC,CAAC;YAAE,SAAS;QACxB,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACrC,IAAI,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACtC,IACE,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;YAC9C,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EAC9C,CAAC;YACD,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAC7B,CAAC;QACD,IAAI,GAAG;YAAE,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IAC5B,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,QAAgB;IAC7C,IAAI,KAAK,GAAkC,IAAI,CAAC;IAChD,OAAO;QACL,MAAM,EAAE,QAAQ;QAChB,KAAK,CAAC,OAAO,CAAC,IAAI;YAChB,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,IAAI,IAAY,CAAC;gBACjB,IAAI,CAAC;oBACH,IAAI,GAAG,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;gBACxC,CAAC;gBAAC,MAAM,CAAC;oBACP,MAAM,IAAI,KAAK,CAAC,iCAAiC,QAAQ,EAAE,CAAC,CAAC;gBAC/D,CAAC;gBACD,KAAK,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;YAC5B,CAAC;YACD,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC;YAC1B,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;gBACxB,MAAM,IAAI,KAAK,CAAC,IAAI,IAAI,kBAAkB,QAAQ,EAAE,CAAC,CAAC;YACxD,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/providers/env.d.ts

@@ -0,0 +1,7 @@
+import type { SecretProvider } from '../types.js';
+/**
+ * `env` provider (S4.2) — resolves `${env:NAME}` from the process environment. A missing
+ * variable is a clear, fail-closed error. Writes secret values nowhere.
+ */
+export declare function envProvider(env?: NodeJS.ProcessEnv): SecretProvider;
+//# sourceMappingURL=env.d.ts.map

package/dist/providers/env.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"env.d.ts","sourceRoot":"","sources":["../../src/providers/env.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAElD;;;GAGG;AACH,wBAAgB,WAAW,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,cAAc,CAWhF"}

package/dist/providers/env.js

@@ -0,0 +1,17 @@
+/**
+ * `env` provider (S4.2) — resolves `${env:NAME}` from the process environment. A missing
+ * variable is a clear, fail-closed error. Writes secret values nowhere.
+ */
+export function envProvider(env = process.env) {
+    return {
+        scheme: 'env',
+        async resolve(path) {
+            const value = env[path];
+            if (value === undefined) {
+                throw new Error(`environment variable "${path}" is not set`);
+            }
+            return value;
+        },
+    };
+}
+//# sourceMappingURL=env.js.map

package/dist/providers/env.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"env.js","sourceRoot":"","sources":["../../src/providers/env.ts"],"names":[],"mappings":"AAEA;;;GAGG;AACH,MAAM,UAAU,WAAW,CAAC,MAAyB,OAAO,CAAC,GAAG;IAC9D,OAAO;QACL,MAAM,EAAE,KAAK;QACb,KAAK,CAAC,OAAO,CAAC,IAAI;YAChB,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC;YACxB,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;gBACxB,MAAM,IAAI,KAAK,CAAC,yBAAyB,IAAI,cAAc,CAAC,CAAC;YAC/D,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/providers/infisical.d.ts

@@ -0,0 +1,32 @@
+import type { SecretProvider } from '../types.js';
+/**
+ * Infisical provider (S4.3) — resolves `${infisical:env/path/KEY}` against a configured
+ * Infisical project (spec §6). Auth is via a machine-identity/service token taken from the
+ * environment (`INFISICAL_TOKEN`) — never hardcoded. The network call is isolated behind an
+ * injectable `fetchSecret` so tests need no real Infisical.
+ *
+ * Ref grammar: the FIRST path segment is the environment slug, the LAST is the secret key,
+ * and anything in between is the folder path — e.g. `dev/mcp/GITHUB_PAT` →
+ * env `dev`, path `/mcp`, key `GITHUB_PAT`.
+ */
+export interface InfisicalFetchParams {
+    key: string;
+    environment: string;
+    secretPath: string;
+    token: string;
+    projectId: string;
+    apiUrl: string;
+}
+export type InfisicalFetch = (params: InfisicalFetchParams) => Promise<string>;
+export interface InfisicalConfig {
+    env?: NodeJS.ProcessEnv;
+    /** Injectable network call; defaults to the Infisical v3 raw-secret REST endpoint. */
+    fetchSecret?: InfisicalFetch;
+}
+export declare function parseInfisicalPath(path: string): {
+    environment: string;
+    secretPath: string;
+    key: string;
+};
+export declare function infisicalProvider(config?: InfisicalConfig): SecretProvider;
+//# sourceMappingURL=infisical.d.ts.map

package/dist/providers/infisical.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"infisical.d.ts","sourceRoot":"","sources":["../../src/providers/infisical.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAElD;;;;;;;;;GASG;AAEH,MAAM,WAAW,oBAAoB;IACnC,GAAG,EAAE,MAAM,CAAC;IACZ,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,MAAM,cAAc,GAAG,CAAC,MAAM,EAAE,oBAAoB,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;AAE/E,MAAM,WAAW,eAAe;IAC9B,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,sFAAsF;IACtF,WAAW,CAAC,EAAE,cAAc,CAAC;CAC9B;AAED,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG;IAChD,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,GAAG,EAAE,MAAM,CAAC;CACb,CAWA;AAwBD,wBAAgB,iBAAiB,CAAC,MAAM,GAAE,eAAoB,GAAG,cAAc,CAqB9E"}

package/dist/providers/infisical.js

@@ -0,0 +1,46 @@
+export function parseInfisicalPath(path) {
+    const segments = path.split('/').filter(Boolean);
+    if (segments.length < 2) {
+        throw new Error(`infisical reference "${path}" must be "env/[folder/…/]KEY" (e.g. dev/mcp/GITHUB_PAT)`);
+    }
+    const environment = segments[0];
+    const key = segments[segments.length - 1];
+    const folder = segments.slice(1, -1);
+    return { environment, secretPath: `/${folder.join('/')}`, key };
+}
+const defaultFetch = async ({ key, environment, secretPath, token, projectId, apiUrl, }) => {
+    const url = new URL(`${apiUrl.replace(/\/$/, '')}/api/v3/secrets/raw/${encodeURIComponent(key)}`);
+    url.searchParams.set('workspaceId', projectId);
+    url.searchParams.set('environment', environment);
+    url.searchParams.set('secretPath', secretPath);
+    const response = await fetch(url, { headers: { Authorization: `Bearer ${token}` } });
+    if (!response.ok) {
+        throw new Error(`Infisical API responded ${response.status} for "${key}"`);
+    }
+    const body = (await response.json());
+    const value = body.secret?.secretValue;
+    if (value === undefined)
+        throw new Error(`Infisical returned no value for "${key}"`);
+    return value;
+};
+export function infisicalProvider(config = {}) {
+    const env = config.env ?? process.env;
+    const fetchSecret = config.fetchSecret ?? defaultFetch;
+    return {
+        scheme: 'infisical',
+        async resolve(path) {
+            const token = env.INFISICAL_TOKEN;
+            const projectId = env.INFISICAL_PROJECT_ID;
+            const apiUrl = env.INFISICAL_API_URL ?? 'https://app.infisical.com';
+            if (!token) {
+                throw new Error('INFISICAL_TOKEN is not set (use an Infisical machine-identity/service token)');
+            }
+            if (!projectId) {
+                throw new Error('INFISICAL_PROJECT_ID is not set');
+            }
+            const { environment, secretPath, key } = parseInfisicalPath(path);
+            return fetchSecret({ key, environment, secretPath, token, projectId, apiUrl });
+        },
+    };
+}
+//# sourceMappingURL=infisical.js.map

package/dist/providers/infisical.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"infisical.js","sourceRoot":"","sources":["../../src/providers/infisical.ts"],"names":[],"mappings":"AA8BA,MAAM,UAAU,kBAAkB,CAAC,IAAY;IAK7C,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACjD,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CACb,wBAAwB,IAAI,0DAA0D,CACvF,CAAC;IACJ,CAAC;IACD,MAAM,WAAW,GAAG,QAAQ,CAAC,CAAC,CAAE,CAAC;IACjC,MAAM,GAAG,GAAG,QAAQ,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC;IAC3C,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACrC,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC;AAClE,CAAC;AAED,MAAM,YAAY,GAAmB,KAAK,EAAE,EAC1C,GAAG,EACH,WAAW,EACX,UAAU,EACV,KAAK,EACL,SAAS,EACT,MAAM,GACP,EAAE,EAAE;IACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,uBAAuB,kBAAkB,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAClG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,aAAa,EAAE,SAAS,CAAC,CAAC;IAC/C,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC;IACjD,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC;IAC/C,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC;IACrF,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CAAC,2BAA2B,QAAQ,CAAC,MAAM,SAAS,GAAG,GAAG,CAAC,CAAC;IAC7E,CAAC;IACD,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAA0C,CAAC;IAC9E,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC;IACvC,IAAI,KAAK,KAAK,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,GAAG,GAAG,CAAC,CAAC;IACrF,OAAO,KAAK,CAAC;AACf,CAAC,CAAC;AAEF,MAAM,UAAU,iBAAiB,CAAC,SAA0B,EAAE;IAC5D,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACtC,MAAM,WAAW,GAAG,MAAM,CAAC,WAAW,IAAI,YAAY,CAAC;IACvD,OAAO;QACL,MAAM,EAAE,WAAW;QACnB,KAAK,CAAC,OAAO,CAAC,IAAI;YAChB,MAAM,KAAK,GAAG,GAAG,CAAC,eAAe,CAAC;YAClC,MAAM,SAAS,GAAG,GAAG,CAAC,oBAAoB,CAAC;YAC3C,MAAM,MAAM,GAAG,GAAG,CAAC,iBAAiB,IAAI,2BAA2B,CAAC;YACpE,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,MAAM,IAAI,KAAK,CACb,8EAA8E,CAC/E,CAAC;YACJ,CAAC;YACD,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;YACrD,CAAC;YACD,MAAM,EAAE,WAAW,EAAE,UAAU,EAAE,GAAG,EAAE,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;YAClE,OAAO,WAAW,CAAC,EAAE,GAAG,EAAE,WAAW,EAAE,UAAU,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC;QACjF,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/providers/keychain.d.ts

@@ -0,0 +1,23 @@
+import { type CommandExec } from '../exec.js';
+import type { SecretProvider } from '../types.js';
+/**
+ * OS keychain provider (S4.4) — resolves `${keychain:account}` from the platform's native
+ * secret store under a fixed service name (`mcpfold` by default):
+ *   - macOS:   `security find-generic-password -s <service> -a <account> -w`
+ *   - Linux:   `secret-tool lookup service <service> account <account>` (libsecret)
+ *   - Windows: PowerShell + the CredentialManager module (`Get-StoredCredential`)
+ *
+ * Store a value with `mcpfold secret set` (or the OS tool directly). The backend call is
+ * injectable for tests.
+ */
+export interface KeychainConfig {
+    platform?: NodeJS.Platform;
+    service?: string;
+    exec?: CommandExec;
+}
+export declare function keychainCommand(platform: NodeJS.Platform, service: string, account: string): {
+    command: string;
+    args: string[];
+};
+export declare function keychainProvider(config?: KeychainConfig): SecretProvider;
+//# sourceMappingURL=keychain.d.ts.map

package/dist/providers/keychain.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"keychain.d.ts","sourceRoot":"","sources":["../../src/providers/keychain.ts"],"names":[],"mappings":"AAAA,OAAO,EAAe,KAAK,WAAW,EAAE,MAAM,YAAY,CAAC;AAC3D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAElD;;;;;;;;;GASG;AAEH,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC;IAC3B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,WAAW,CAAC;CACpB;AAED,wBAAgB,eAAe,CAC7B,QAAQ,EAAE,MAAM,CAAC,QAAQ,EACzB,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,MAAM,GACd;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,EAAE,CAAA;CAAE,CAmBrC;AAED,wBAAgB,gBAAgB,CAAC,MAAM,GAAE,cAAmB,GAAG,cAAc,CA0B5E"}

package/dist/providers/keychain.js

@@ -0,0 +1,46 @@
+import { defaultExec } from '../exec.js';
+export function keychainCommand(platform, service, account) {
+    switch (platform) {
+        case 'darwin':
+            return {
+                command: 'security',
+                args: ['find-generic-password', '-s', service, '-a', account, '-w'],
+            };
+        case 'win32':
+            return {
+                command: 'powershell',
+                args: [
+                    '-NoProfile',
+                    '-Command',
+                    `(Get-StoredCredential -Target '${service}:${account}').GetNetworkCredential().Password`,
+                ],
+            };
+        default: // linux / libsecret
+            return { command: 'secret-tool', args: ['lookup', 'service', service, 'account', account] };
+    }
+}
+export function keychainProvider(config = {}) {
+    const platform = config.platform ?? process.platform;
+    const service = config.service ?? 'mcpfold';
+    const exec = config.exec ?? defaultExec;
+    return {
+        scheme: 'keychain',
+        async resolve(account) {
+            const { command, args } = keychainCommand(platform, service, account);
+            let result;
+            try {
+                result = await exec(command, args);
+            }
+            catch {
+                throw new Error(`keychain backend "${command}" is not available — install it (macOS: built-in; ` +
+                    `Linux: libsecret/secret-tool; Windows: CredentialManager module) or use a different provider`);
+            }
+            if (result.code !== 0) {
+                throw new Error(`keychain has no entry for "${service}:${account}" (store it with \`mcpfold secret set\`)`);
+            }
+            // `security -w` and secret-tool return a trailing newline.
+            return result.stdout.replace(/\r?\n$/, '');
+        },
+    };
+}
+//# sourceMappingURL=keychain.js.map

package/dist/providers/keychain.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"keychain.js","sourceRoot":"","sources":["../../src/providers/keychain.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAoB,MAAM,YAAY,CAAC;AAoB3D,MAAM,UAAU,eAAe,CAC7B,QAAyB,EACzB,OAAe,EACf,OAAe;IAEf,QAAQ,QAAQ,EAAE,CAAC;QACjB,KAAK,QAAQ;YACX,OAAO;gBACL,OAAO,EAAE,UAAU;gBACnB,IAAI,EAAE,CAAC,uBAAuB,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC;aACpE,CAAC;QACJ,KAAK,OAAO;YACV,OAAO;gBACL,OAAO,EAAE,YAAY;gBACrB,IAAI,EAAE;oBACJ,YAAY;oBACZ,UAAU;oBACV,kCAAkC,OAAO,IAAI,OAAO,oCAAoC;iBACzF;aACF,CAAC;QACJ,SAAS,oBAAoB;YAC3B,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,CAAC;IAChG,CAAC;AACH,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,SAAyB,EAAE;IAC1D,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAC;IACrD,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,IAAI,SAAS,CAAC;IAC5C,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,IAAI,WAAW,CAAC;IACxC,OAAO;QACL,MAAM,EAAE,UAAU;QAClB,KAAK,CAAC,OAAO,CAAC,OAAO;YACnB,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,eAAe,CAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;YACtE,IAAI,MAAM,CAAC;YACX,IAAI,CAAC;gBACH,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;YACrC,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,IAAI,KAAK,CACb,qBAAqB,OAAO,oDAAoD;oBAC9E,8FAA8F,CACjG,CAAC;YACJ,CAAC;YACD,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;gBACtB,MAAM,IAAI,KAAK,CACb,8BAA8B,OAAO,IAAI,OAAO,0CAA0C,CAC3F,CAAC;YACJ,CAAC;YACD,2DAA2D;YAC3D,OAAO,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QAC7C,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/providers/op.d.ts

@@ -0,0 +1,14 @@
+import { type CommandExec } from '../exec.js';
+import type { SecretProvider } from '../types.js';
+/**
+ * 1Password provider (S4.5) — resolves `${op:vault/item/field}` by shelling out to the `op`
+ * CLI (`op read op://vault/item/field`). The CLI must be installed and signed in; a
+ * missing/locked CLI produces an actionable message. Secret values are never logged. The
+ * `op` invocation is injectable for tests.
+ */
+export interface OpConfig {
+    exec?: CommandExec;
+}
+export declare function opReference(path: string): string;
+export declare function opProvider(config?: OpConfig): SecretProvider;
+//# sourceMappingURL=op.d.ts.map

package/dist/providers/op.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"op.d.ts","sourceRoot":"","sources":["../../src/providers/op.ts"],"names":[],"mappings":"AAAA,OAAO,EAAe,KAAK,WAAW,EAAE,MAAM,YAAY,CAAC;AAC3D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAElD;;;;;GAKG;AAEH,MAAM,WAAW,QAAQ;IACvB,IAAI,CAAC,EAAE,WAAW,CAAC;CACpB;AAED,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAEhD;AAED,wBAAgB,UAAU,CAAC,MAAM,GAAE,QAAa,GAAG,cAAc,CAuBhE"}

package/dist/providers/op.js

@@ -0,0 +1,28 @@
+import { defaultExec } from '../exec.js';
+export function opReference(path) {
+    return `op://${path.replace(/^op:\/\//, '')}`;
+}
+export function opProvider(config = {}) {
+    const exec = config.exec ?? defaultExec;
+    return {
+        scheme: 'op',
+        async resolve(path) {
+            const reference = opReference(path);
+            let result;
+            try {
+                result = await exec('op', ['read', reference]);
+            }
+            catch {
+                throw new Error('the 1Password CLI `op` is not installed or not on PATH — install it from https://developer.1password.com/docs/cli');
+            }
+            if (result.code !== 0) {
+                const hint = /not signed in|authorization|sign in/i.test(result.stderr)
+                    ? 'run `op signin` first'
+                    : `check that "${reference}" exists`;
+                throw new Error(`op could not read "${reference}" (${hint})`);
+            }
+            return result.stdout.replace(/\r?\n$/, '');
+        },
+    };
+}
+//# sourceMappingURL=op.js.map

package/dist/providers/op.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"op.js","sourceRoot":"","sources":["../../src/providers/op.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAoB,MAAM,YAAY,CAAC;AAc3D,MAAM,UAAU,WAAW,CAAC,IAAY;IACtC,OAAO,QAAQ,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,EAAE,CAAC;AAChD,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,SAAmB,EAAE;IAC9C,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,IAAI,WAAW,CAAC;IACxC,OAAO;QACL,MAAM,EAAE,IAAI;QACZ,KAAK,CAAC,OAAO,CAAC,IAAI;YAChB,MAAM,SAAS,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;YACpC,IAAI,MAAM,CAAC;YACX,IAAI,CAAC;gBACH,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC;YACjD,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,IAAI,KAAK,CACb,mHAAmH,CACpH,CAAC;YACJ,CAAC;YACD,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;gBACtB,MAAM,IAAI,GAAG,sCAAsC,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;oBACrE,CAAC,CAAC,uBAAuB;oBACzB,CAAC,CAAC,eAAe,SAAS,UAAU,CAAC;gBACvC,MAAM,IAAI,KAAK,CAAC,sBAAsB,SAAS,MAAM,IAAI,GAAG,CAAC,CAAC;YAChE,CAAC;YACD,OAAO,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QAC7C,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/resolver.d.ts

@@ -0,0 +1,24 @@
+import { type ResolvedServer } from '@mcpfold/core';
+import type { SecretProvider } from './types.js';
+/**
+ * The fail-closed secret resolver (S4.1 + the S0.9 contract).
+ *
+ * Selects a provider by scheme, resolves every `${scheme:path}` reference in a server set,
+ * and injects the values — memoizing within a run so the same ref is fetched once. If ANY
+ * reference cannot be resolved (missing provider, missing value, provider error, or
+ * timeout) the whole call rejects with a {@link SecretResolutionError} naming the provider
+ * and ref, and NO server is returned partially resolved (fail closed).
+ */
+/** Default per-provider timeout. A hung provider aborts cleanly rather than blocking forever. */
+export declare const DEFAULT_TIMEOUT_MS = 10000;
+export interface ResolveOptions {
+    providers: SecretProvider[];
+    /** Global per-provider timeout (ms); a provider's own `timeoutMs` overrides it. */
+    timeoutMs?: number;
+}
+/**
+ * Resolve all secret references in `servers`, returning new servers with values injected.
+ * Rejects (fail closed) on the first unresolved reference.
+ */
+export declare function resolveSecrets(servers: ResolvedServer[], options: ResolveOptions): Promise<ResolvedServer[]>;
+//# sourceMappingURL=resolver.d.ts.map

package/dist/resolver.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolver.d.ts","sourceRoot":"","sources":["../src/resolver.ts"],"names":[],"mappings":"AAAA,OAAO,EAAiD,KAAK,cAAc,EAAE,MAAM,eAAe,CAAC;AACnG,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAEjD;;;;;;;;GAQG;AAEH,iGAAiG;AACjG,eAAO,MAAM,kBAAkB,QAAS,CAAC;AAEzC,MAAM,WAAW,cAAc;IAC7B,SAAS,EAAE,cAAc,EAAE,CAAC;IAC5B,mFAAmF;IACnF,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAwBD;;;GAGG;AACH,wBAAsB,cAAc,CAClC,OAAO,EAAE,cAAc,EAAE,EACzB,OAAO,EAAE,cAAc,GACtB,OAAO,CAAC,cAAc,EAAE,CAAC,CAqE3B"}

package/dist/resolver.js

@@ -0,0 +1,101 @@
+import { findSecretRefsInString, SecretResolutionError } from '@mcpfold/core';
+/**
+ * The fail-closed secret resolver (S4.1 + the S0.9 contract).
+ *
+ * Selects a provider by scheme, resolves every `${scheme:path}` reference in a server set,
+ * and injects the values — memoizing within a run so the same ref is fetched once. If ANY
+ * reference cannot be resolved (missing provider, missing value, provider error, or
+ * timeout) the whole call rejects with a {@link SecretResolutionError} naming the provider
+ * and ref, and NO server is returned partially resolved (fail closed).
+ */
+/** Default per-provider timeout. A hung provider aborts cleanly rather than blocking forever. */
+export const DEFAULT_TIMEOUT_MS = 10_000;
+function buildRegistry(providers) {
+    const registry = new Map();
+    for (const p of providers)
+        registry.set(p.scheme, p);
+    return registry;
+}
+async function withTimeout(work, ms) {
+    const controller = new AbortController();
+    let timer;
+    const timeout = new Promise((_, reject) => {
+        timer = setTimeout(() => {
+            controller.abort();
+            reject(new Error(`timed out after ${ms}ms`));
+        }, ms);
+    });
+    try {
+        return await Promise.race([work(controller.signal), timeout]);
+    }
+    finally {
+        if (timer)
+            clearTimeout(timer);
+    }
+}
+/**
+ * Resolve all secret references in `servers`, returning new servers with values injected.
+ * Rejects (fail closed) on the first unresolved reference.
+ */
+export async function resolveSecrets(servers, options) {
+    const registry = buildRegistry(options.providers);
+    const defaultTimeout = options.timeoutMs ?? DEFAULT_TIMEOUT_MS;
+    const memo = new Map();
+    const resolveOne = async (raw, scheme, path) => {
+        const cached = memo.get(raw);
+        if (cached !== undefined)
+            return cached;
+        const provider = registry.get(scheme);
+        if (!provider) {
+            throw new SecretResolutionError(`No secret provider registered for scheme "${scheme}" (reference ${raw}).`, {
+                hint: `Register a provider for "${scheme}", or use a supported scheme (env, dotenv, infisical, keychain, op).`,
+            });
+        }
+        let value;
+        try {
+            value = await withTimeout((signal) => provider.resolve(path, { signal }), provider.timeoutMs ?? defaultTimeout);
+        }
+        catch (error) {
+            throw new SecretResolutionError(`Failed to resolve ${raw} via provider "${scheme}": ${error.message}`, {
+                cause: error,
+                hint: `Check that "${path}" exists and the "${scheme}" provider is reachable.`,
+            });
+        }
+        memo.set(raw, value);
+        return value;
+    };
+    /** Replace every embedded ref in a string with its resolved value. */
+    const resolveString = async (input) => {
+        let out = input;
+        for (const ref of findSecretRefsInString(input)) {
+            const value = await resolveOne(ref.raw, ref.scheme, ref.path);
+            out = out.split(ref.raw).join(value);
+        }
+        return out;
+    };
+    const resolved = [];
+    for (const server of servers) {
+        const clone = { ...server };
+        if (server.auth) {
+            const auth = { ...server.auth };
+            if (server.auth.token)
+                auth.token = await resolveString(server.auth.token);
+            if (server.auth.headers) {
+                const headers = {};
+                for (const [k, v] of Object.entries(server.auth.headers))
+                    headers[k] = await resolveString(v);
+                auth.headers = headers;
+            }
+            clone.auth = auth;
+        }
+        if (server.env) {
+            const env = {};
+            for (const [k, v] of Object.entries(server.env))
+                env[k] = await resolveString(v);
+            clone.env = env;
+        }
+        resolved.push(clone);
+    }
+    return resolved;
+}
+//# sourceMappingURL=resolver.js.map

package/dist/resolver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolver.js","sourceRoot":"","sources":["../src/resolver.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,sBAAsB,EAAE,qBAAqB,EAAuB,MAAM,eAAe,CAAC;AAGnG;;;;;;;;GAQG;AAEH,iGAAiG;AACjG,MAAM,CAAC,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAQzC,SAAS,aAAa,CAAC,SAA2B;IAChD,MAAM,QAAQ,GAAG,IAAI,GAAG,EAA0B,CAAC;IACnD,KAAK,MAAM,CAAC,IAAI,SAAS;QAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IACrD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,KAAK,UAAU,WAAW,CAAI,IAAyC,EAAE,EAAU;IACjF,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,IAAI,KAAgD,CAAC;IACrD,MAAM,OAAO,GAAG,IAAI,OAAO,CAAQ,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE;QAC/C,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YACtB,UAAU,CAAC,KAAK,EAAE,CAAC;YACnB,MAAM,CAAC,IAAI,KAAK,CAAC,mBAAmB,EAAE,IAAI,CAAC,CAAC,CAAC;QAC/C,CAAC,EAAE,EAAE,CAAC,CAAC;IACT,CAAC,CAAC,CAAC;IACH,IAAI,CAAC;QACH,OAAO,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;IAChE,CAAC;YAAS,CAAC;QACT,IAAI,KAAK;YAAE,YAAY,CAAC,KAAK,CAAC,CAAC;IACjC,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,OAAyB,EACzB,OAAuB;IAEvB,MAAM,QAAQ,GAAG,aAAa,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAClD,MAAM,cAAc,GAAG,OAAO,CAAC,SAAS,IAAI,kBAAkB,CAAC;IAC/D,MAAM,IAAI,GAAG,IAAI,GAAG,EAAkB,CAAC;IAEvC,MAAM,UAAU,GAAG,KAAK,EAAE,GAAW,EAAE,MAAc,EAAE,IAAY,EAAmB,EAAE;QACtF,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC7B,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,MAAM,CAAC;QAExC,MAAM,QAAQ,GAAG,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACtC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,IAAI,qBAAqB,CAC7B,6CAA6C,MAAM,gBAAgB,GAAG,IAAI,EAC1E;gBACE,IAAI,EAAE,4BAA4B,MAAM,sEAAsE;aAC/G,CACF,CAAC;QACJ,CAAC;QACD,IAAI,KAAa,CAAC;QAClB,IAAI,CAAC;YACH,KAAK,GAAG,MAAM,WAAW,CACvB,CAAC,MAAM,EAAE,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,CAAC,EAC9C,QAAQ,CAAC,SAAS,IAAI,cAAc,CACrC,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,qBAAqB,CAC7B,qBAAqB,GAAG,kBAAkB,MAAM,MAAO,KAAe,CAAC,OAAO,EAAE,EAChF;gBACE,KAAK,EAAE,KAAK;gBACZ,IAAI,EAAE,eAAe,IAAI,qBAAqB,MAAM,0BAA0B;aAC/E,CACF,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QACrB,OAAO,KAAK,CAAC;IACf,CAAC,CAAC;IAEF,sEAAsE;IACtE,MAAM,aAAa,GAAG,KAAK,EAAE,KAAa,EAAmB,EAAE;QAC7D,IAAI,GAAG,GAAG,KAAK,CAAC;QAChB,KAAK,MAAM,GAAG,IAAI,sBAAsB,CAAC,KAAK,CAAC,EAAE,CAAC;YAChD,MAAM,KAAK,GAAG,MAAM,UAAU,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;YAC9D,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACvC,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC,CAAC;IAEF,MAAM,QAAQ,GAAqB,EAAE,CAAC;IACtC,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,MAAM,KAAK,GAAmB,EAAE,GAAG,MAAM,EAAE,CAAC;QAC5C,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;YAChB,MAAM,IAAI,GAAG,EAAE,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;YAChC,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK;gBAAE,IAAI,CAAC,KAAK,GAAG,MAAM,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC3E,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;gBACxB,MAAM,OAAO,GAA2B,EAAE,CAAC;gBAC3C,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC;oBACtD,OAAO,CAAC,CAAC,CAAC,GAAG,MAAM,aAAa,CAAC,CAAC,CAAC,CAAC;gBACtC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;YACzB,CAAC;YACD,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC;QACpB,CAAC;QACD,IAAI,MAAM,CAAC,GAAG,EAAE,CAAC;YACf,MAAM,GAAG,GAA2B,EAAE,CAAC;YACvC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC;gBAAE,GAAG,CAAC,CAAC,CAAC,GAAG,MAAM,aAAa,CAAC,CAAC,CAAC,CAAC;YACjF,KAAK,CAAC,GAAG,GAAG,GAAG,CAAC;QAClB,CAAC;QACD,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACvB,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/types.d.ts

@@ -0,0 +1,21 @@
+/**
+ * Secret-provider interface (S4.1, spec §6) and the resolver contract (S0.9).
+ *
+ * A provider resolves the `path` portion of a `${scheme:path}` reference to a value. It may
+ * touch env/fs/network (this package is impure by design); it is injected into the pure
+ * core. Resolution is **fail-closed**: any failure aborts the whole operation — a blank or
+ * partial secret is NEVER injected.
+ */
+export interface SecretResolveContext {
+    /** Aborted when the per-provider timeout elapses; providers should honor it. */
+    signal?: AbortSignal;
+}
+export interface SecretProvider {
+    /** The scheme this provider handles, e.g. `env`, `dotenv`, `infisical`. */
+    readonly scheme: string;
+    /** Optional per-provider timeout override (ms). Falls back to the resolver default. */
+    readonly timeoutMs?: number;
+    /** Resolve the path portion of a ref to its secret value, or throw. */
+    resolve(path: string, ctx?: SecretResolveContext): Promise<string>;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,MAAM,WAAW,oBAAoB;IACnC,gFAAgF;IAChF,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAED,MAAM,WAAW,cAAc;IAC7B,2EAA2E;IAC3E,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,uFAAuF;IACvF,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,uEAAuE;IACvE,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,oBAAoB,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;CACpE"}

package/dist/types.js

@@ -0,0 +1,10 @@
+/**
+ * Secret-provider interface (S4.1, spec §6) and the resolver contract (S0.9).
+ *
+ * A provider resolves the `path` portion of a `${scheme:path}` reference to a value. It may
+ * touch env/fs/network (this package is impure by design); it is injected into the pure
+ * core. Resolution is **fail-closed**: any failure aborts the whole operation — a blank or
+ * partial secret is NEVER injected.
+ */
+export {};
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG"}

package/package.json

@@ -0,0 +1,39 @@
+{
+  "name": "@mcpfold/secrets",
+  "version": "1.0.0",
+  "description": "Secret providers (env, dotenv, infisical, keychain, 1Password) and the fail-closed resolver.",
+  "license": "MIT",
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    }
+  },
+  "files": [
+    "dist"
+  ],
+  "dependencies": {
+    "@mcpfold/core": "1.0.0"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/dj-pearson/MCPFold.git",
+    "directory": "packages/secrets"
+  },
+  "homepage": "https://mcpfold.com",
+  "bugs": {
+    "url": "https://github.com/dj-pearson/MCPFold/issues"
+  },
+  "scripts": {
+    "build": "tsc -p tsconfig.build.json",
+    "test": "vitest run",
+    "lint": "eslint . --max-warnings=0",
+    "typecheck": "tsc --noEmit"
+  }
+}