@plumbus/core 0.7.1 → 0.8.0-beta.1

package/dist/credentials/catalog.d.ts

@@ -0,0 +1,71 @@
+import { PlumbusError } from '../errors/plumbus-error.js';
+import { ErrorCode } from '../types/enums.js';
+/** What a scrubbed secret is replaced with wherever one could have appeared. */
+export declare const CREDENTIAL_REDACTED = "[redacted]";
+export declare class CredentialCatalogError extends PlumbusError {
+    constructor(code: ErrorCode, message: string, metadata?: Record<string, unknown>);
+}
+export interface CredentialFieldSpec {
+    name: string;
+    /** Secret fields are omitted from describe/JSON/inspect and read via `secret()`. */
+    secret: boolean;
+}
+export interface CredentialTypeDeclaration {
+    /** Host-chosen type id (`smtp`, `object-storage`, …). Not a built-in list. */
+    id: string;
+    fields: readonly CredentialFieldSpec[];
+}
+export interface CredentialTypeRecord {
+    id: string;
+    fields: readonly CredentialFieldSpec[];
+}
+export interface CredentialBinding {
+    name: string;
+    typeId: string;
+    /** Opaque reference the host stores. Never a secret value. */
+    ref: string;
+    /** Public labels only. Names of secret fields are refused. */
+    labels?: Record<string, string>;
+}
+export interface CredentialRecord {
+    name: string;
+    typeId: string;
+    ref: string;
+    labels: Readonly<Record<string, string>>;
+}
+/**
+ * Revealed material. `fields` holds non-secret values only. Secret values are
+ * read with `secret(fieldName)` so a log of the object or a spread of `fields`
+ * cannot leak them.
+ */
+export interface CredentialMaterial {
+    readonly typeId: string;
+    readonly name: string;
+    readonly ref: string;
+    readonly fields: Readonly<Record<string, string>>;
+    secret(fieldName: string): string;
+}
+export type CredentialResolver = (record: CredentialRecord) => Promise<Record<string, string>> | Record<string, string>;
+export interface CredentialCatalog {
+    listTypes(): readonly CredentialTypeRecord[];
+    getType(typeId: string): CredentialTypeRecord | undefined;
+    bind(binding: CredentialBinding): CredentialRecord;
+    get(name: string): CredentialRecord | undefined;
+    getByRef(ref: string): CredentialRecord | undefined;
+    list(): readonly CredentialRecord[];
+    reveal(name: string): Promise<CredentialMaterial>;
+}
+export interface MemoryCredentialCatalogOptions {
+    types: readonly CredentialTypeDeclaration[];
+    /**
+     * Host lookup of field values for a bound ref. Omitted: `reveal` refuses.
+     * The catalog never stores the returned values.
+     */
+    resolve?: CredentialResolver;
+}
+/**
+ * In-memory catalog of host-declared credential types and opaque bindings.
+ * No built-in types. Secrets live in the host resolver, not in the catalog.
+ */
+export declare function createMemoryCredentialCatalog(options: MemoryCredentialCatalogOptions): CredentialCatalog;
+//# sourceMappingURL=catalog.d.ts.map

package/dist/credentials/catalog.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"catalog.d.ts","sourceRoot":"","sources":["../../src/credentials/catalog.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAC1D,OAAO,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAE9C,gFAAgF;AAChF,eAAO,MAAM,mBAAmB,eAAe,CAAC;AAQhD,qBAAa,sBAAuB,SAAQ,YAAY;gBAC1C,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;CAIjF;AAED,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,oFAAoF;IACpF,MAAM,EAAE,OAAO,CAAC;CACjB;AAED,MAAM,WAAW,yBAAyB;IACxC,8EAA8E;IAC9E,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,SAAS,mBAAmB,EAAE,CAAC;CACxC;AAED,MAAM,WAAW,oBAAoB;IACnC,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,SAAS,mBAAmB,EAAE,CAAC;CACxC;AAED,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,8DAA8D;IAC9D,GAAG,EAAE,MAAM,CAAC;IACZ,8DAA8D;IAC9D,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACjC;AAED,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;CAC1C;AAED;;;;GAIG;AACH,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAClD,MAAM,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAAC;CACnC;AAED,MAAM,MAAM,kBAAkB,GAAG,CAC/B,MAAM,EAAE,gBAAgB,KACrB,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;AAE9D,MAAM,WAAW,iBAAiB;IAChC,SAAS,IAAI,SAAS,oBAAoB,EAAE,CAAC;IAC7C,OAAO,CAAC,MAAM,EAAE,MAAM,GAAG,oBAAoB,GAAG,SAAS,CAAC;IAC1D,IAAI,CAAC,OAAO,EAAE,iBAAiB,GAAG,gBAAgB,CAAC;IACnD,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,gBAAgB,GAAG,SAAS,CAAC;IAChD,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,gBAAgB,GAAG,SAAS,CAAC;IACpD,IAAI,IAAI,SAAS,gBAAgB,EAAE,CAAC;IACpC,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC;CACnD;AAED,MAAM,WAAW,8BAA8B;IAC7C,KAAK,EAAE,SAAS,yBAAyB,EAAE,CAAC;IAC5C;;;OAGG;IACH,OAAO,CAAC,EAAE,kBAAkB,CAAC;CAC9B;AA6PD;;;GAGG;AACH,wBAAgB,6BAA6B,CAC3C,OAAO,EAAE,8BAA8B,GACtC,iBAAiB,CAgGnB"}

package/dist/credentials/catalog.js

@@ -0,0 +1,293 @@
+// ── Credential catalog ──
+// Named credential *types* a host declares. The catalog holds type shapes and
+// opaque bindings (name + ref). It does not mint IAM, store secrets, or ship
+// built-in types. The host supplies field values at reveal time; secret fields
+// never appear in describe(), JSON, inspect, or error text.
+import { inspect } from 'node:util';
+import { PlumbusError } from '../errors/plumbus-error.js';
+import { ErrorCode } from '../types/enums.js';
+/** What a scrubbed secret is replaced with wherever one could have appeared. */
+export const CREDENTIAL_REDACTED = '[redacted]';
+const TYPE_ID_PATTERN = /^[a-z][a-z0-9-]{0,62}$/;
+const FIELD_NAME_PATTERN = /^[a-z][a-z0-9-]{0,62}$/;
+const BINDING_NAME_PATTERN = /^[a-z][a-z0-9-]{0,62}$/;
+const REF_PATTERN = /^[a-zA-Z0-9][a-zA-Z0-9._:/=#@-]{0,255}$/;
+const LABEL_VALUE_MAX = 256;
+export class CredentialCatalogError extends PlumbusError {
+    constructor(code, message, metadata) {
+        super(code, message, metadata);
+        this.name = 'CredentialCatalogError';
+    }
+}
+function catalogError(code, message, metadata) {
+    return new CredentialCatalogError(code, message, metadata);
+}
+function hasControlCharacter(value) {
+    for (const character of value) {
+        const code = character.codePointAt(0) ?? 0;
+        if (code < 0x20 || code === 0x7f)
+            return true;
+    }
+    return false;
+}
+function assertPattern(value, pattern, field) {
+    if (!pattern.test(value)) {
+        throw catalogError(ErrorCode.Validation, `${field} is not a valid catalog identifier`, {
+            field,
+        });
+    }
+    return value;
+}
+function freezeType(type) {
+    return Object.freeze({
+        id: type.id,
+        fields: Object.freeze(type.fields.map((field) => Object.freeze({ ...field }))),
+    });
+}
+function freezeRecord(record) {
+    return Object.freeze({
+        name: record.name,
+        typeId: record.typeId,
+        ref: record.ref,
+        labels: Object.freeze({ ...record.labels }),
+    });
+}
+function normalizeTypes(types) {
+    if (!Array.isArray(types)) {
+        throw catalogError(ErrorCode.Validation, 'types must be an array', { field: 'types' });
+    }
+    const byId = new Map();
+    for (const declared of types) {
+        if (declared === null || typeof declared !== 'object') {
+            throw catalogError(ErrorCode.Validation, 'each type must be an object', { field: 'types' });
+        }
+        const id = assertPattern(declared.id, TYPE_ID_PATTERN, 'type id');
+        if (byId.has(id)) {
+            throw catalogError(ErrorCode.Conflict, `credential type "${id}" is already declared`, {
+                typeId: id,
+            });
+        }
+        if (!Array.isArray(declared.fields) || declared.fields.length === 0) {
+            throw catalogError(ErrorCode.Validation, `credential type "${id}" must declare at least one field`, {
+                typeId: id,
+                field: 'fields',
+            });
+        }
+        const fieldNames = new Set();
+        const fields = [];
+        for (const field of declared.fields) {
+            if (field === null || typeof field !== 'object') {
+                throw catalogError(ErrorCode.Validation, `credential type "${id}" has an invalid field`, {
+                    typeId: id,
+                });
+            }
+            const name = assertPattern(field.name, FIELD_NAME_PATTERN, 'field name');
+            if (fieldNames.has(name)) {
+                throw catalogError(ErrorCode.Conflict, `credential type "${id}" repeats field "${name}"`, {
+                    typeId: id,
+                    field: name,
+                });
+            }
+            if (typeof field.secret !== 'boolean') {
+                throw catalogError(ErrorCode.Validation, `field "${name}" on type "${id}" must set secret`, {
+                    typeId: id,
+                    field: name,
+                });
+            }
+            fieldNames.add(name);
+            fields.push({ name, secret: field.secret });
+        }
+        byId.set(id, freezeType({ id, fields }));
+    }
+    return byId;
+}
+function normalizeLabels(labels, secretFields) {
+    if (labels === undefined)
+        return {};
+    if (labels === null || typeof labels !== 'object' || Array.isArray(labels)) {
+        throw catalogError(ErrorCode.Validation, 'labels must be a string map', { field: 'labels' });
+    }
+    const normalized = {};
+    for (const [key, value] of Object.entries(labels)) {
+        assertPattern(key, FIELD_NAME_PATTERN, 'label key');
+        if (secretFields.has(key)) {
+            throw catalogError(ErrorCode.Validation, `label "${key}" names a secret field and cannot be stored on the binding`, { field: 'labels', label: key });
+        }
+        if (typeof value !== 'string' || value.length === 0 || value.length > LABEL_VALUE_MAX) {
+            throw catalogError(ErrorCode.Validation, `label "${key}" must be a non-empty string`, {
+                field: 'labels',
+                label: key,
+            });
+        }
+        if (hasControlCharacter(value)) {
+            throw catalogError(ErrorCode.Validation, `label "${key}" must not contain control characters`, {
+                field: 'labels',
+                label: key,
+            });
+        }
+        normalized[key] = value;
+    }
+    return normalized;
+}
+function publicView(record, fields) {
+    return {
+        typeId: record.typeId,
+        name: record.name,
+        ref: record.ref,
+        fields: { ...fields },
+    };
+}
+function wrapMaterial(record, publicFields, secrets) {
+    const frozenPublic = Object.freeze({ ...publicFields });
+    const frozenSecrets = Object.freeze({ ...secrets });
+    const material = {
+        typeId: record.typeId,
+        name: record.name,
+        ref: record.ref,
+        fields: frozenPublic,
+    };
+    Object.defineProperty(material, 'secret', {
+        enumerable: false,
+        value(fieldName) {
+            if (Object.hasOwn(frozenPublic, fieldName)) {
+                throw catalogError(ErrorCode.Validation, `field "${fieldName}" on credential "${record.name}" is not secret`, { name: record.name, field: fieldName });
+            }
+            const secret = Object.hasOwn(frozenSecrets, fieldName) ? frozenSecrets[fieldName] : undefined;
+            if (secret === undefined) {
+                throw catalogError(ErrorCode.NotFound, `credential "${record.name}" has no secret field "${fieldName}"`, { name: record.name, field: fieldName });
+            }
+            return secret;
+        },
+    });
+    Object.defineProperty(material, 'toJSON', {
+        value: () => publicView(record, frozenPublic),
+        enumerable: false,
+    });
+    Object.defineProperty(material, 'toString', {
+        value: () => `CredentialMaterial(${record.typeId} ${record.name})`,
+        enumerable: false,
+    });
+    Object.defineProperty(material, inspect.custom, {
+        value: () => publicView(record, frozenPublic),
+        enumerable: false,
+    });
+    return Object.freeze(material);
+}
+function splitResolvedFields(type, record, resolved) {
+    if (resolved === null || typeof resolved !== 'object' || Array.isArray(resolved)) {
+        throw catalogError(ErrorCode.Validation, `resolver for credential "${record.name}" must return a field map`, { name: record.name, typeId: record.typeId });
+    }
+    const declared = new Map(type.fields.map((field) => [field.name, field.secret]));
+    const extra = Object.keys(resolved).filter((name) => !declared.has(name));
+    if (extra.length > 0) {
+        throw catalogError(ErrorCode.Validation, `resolver for credential "${record.name}" returned unknown fields`, { name: record.name, typeId: record.typeId, fields: extra });
+    }
+    const publicFields = {};
+    const secrets = {};
+    for (const field of type.fields) {
+        const value = resolved[field.name];
+        if (typeof value !== 'string' || value.length === 0) {
+            throw catalogError(ErrorCode.Validation, `resolver for credential "${record.name}" omitted field "${field.name}"`, { name: record.name, typeId: record.typeId, field: field.name });
+        }
+        if (hasControlCharacter(value) && !field.secret) {
+            throw catalogError(ErrorCode.Validation, `field "${field.name}" on credential "${record.name}" must not contain control characters`, { name: record.name, field: field.name });
+        }
+        if (field.secret) {
+            secrets[field.name] = value;
+        }
+        else {
+            publicFields[field.name] = value;
+        }
+    }
+    return { publicFields, secrets };
+}
+/**
+ * In-memory catalog of host-declared credential types and opaque bindings.
+ * No built-in types. Secrets live in the host resolver, not in the catalog.
+ */
+export function createMemoryCredentialCatalog(options) {
+    if (options === null || typeof options !== 'object') {
+        throw catalogError(ErrorCode.Validation, 'catalog options are required', { field: 'options' });
+    }
+    const types = normalizeTypes(options.types);
+    const byName = new Map();
+    const byRef = new Map();
+    const resolve = options.resolve;
+    return {
+        listTypes() {
+            return [...types.values()];
+        },
+        getType(typeId) {
+            return types.get(typeId);
+        },
+        bind(binding) {
+            if (binding === null || typeof binding !== 'object') {
+                throw catalogError(ErrorCode.Validation, 'binding must be an object', { field: 'binding' });
+            }
+            const name = assertPattern(binding.name, BINDING_NAME_PATTERN, 'binding name');
+            const typeId = assertPattern(binding.typeId, TYPE_ID_PATTERN, 'type id');
+            const type = types.get(typeId);
+            if (!type) {
+                throw catalogError(ErrorCode.NotFound, `credential type "${typeId}" is not declared`, {
+                    typeId,
+                });
+            }
+            if (typeof binding.ref !== 'string' || !REF_PATTERN.test(binding.ref)) {
+                throw catalogError(ErrorCode.Validation, 'binding ref is not a valid opaque reference', {
+                    field: 'ref',
+                });
+            }
+            if (byName.has(name)) {
+                throw catalogError(ErrorCode.Conflict, `credential "${name}" is already bound`, { name });
+            }
+            if (byRef.has(binding.ref)) {
+                throw catalogError(ErrorCode.Conflict, 'binding ref is already in use', { field: 'ref' });
+            }
+            const secretFields = new Set(type.fields.filter((field) => field.secret).map((field) => field.name));
+            const record = freezeRecord({
+                name,
+                typeId,
+                ref: binding.ref,
+                labels: normalizeLabels(binding.labels, secretFields),
+            });
+            byName.set(name, record);
+            byRef.set(record.ref, record);
+            return record;
+        },
+        get(name) {
+            return byName.get(name);
+        },
+        getByRef(ref) {
+            return byRef.get(ref);
+        },
+        list() {
+            return [...byName.values()];
+        },
+        async reveal(name) {
+            const record = byName.get(name);
+            if (!record) {
+                throw catalogError(ErrorCode.NotFound, `credential "${name}" is not bound`, { name });
+            }
+            if (!resolve) {
+                throw catalogError(ErrorCode.Internal, `credential catalog has no resolver for "${record.name}"`, { name: record.name, typeId: record.typeId });
+            }
+            const type = types.get(record.typeId);
+            if (!type) {
+                throw catalogError(ErrorCode.Internal, `credential type "${record.typeId}" is missing`, {
+                    typeId: record.typeId,
+                });
+            }
+            let resolved;
+            try {
+                resolved = await resolve(record);
+            }
+            catch {
+                // Host errors are not re-thrown: their text may contain the secret.
+                throw catalogError(ErrorCode.Internal, `Could not resolve credential "${record.name}" of type "${record.typeId}"`, { name: record.name, typeId: record.typeId, ref: record.ref });
+            }
+            const { publicFields, secrets } = splitResolvedFields(type, record, resolved);
+            return wrapMaterial(record, publicFields, secrets);
+        },
+    };
+}
+//# sourceMappingURL=catalog.js.map

package/dist/credentials/catalog.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"catalog.js","sourceRoot":"","sources":["../../src/credentials/catalog.ts"],"names":[],"mappings":"AAAA,2BAA2B;AAC3B,8EAA8E;AAC9E,6EAA6E;AAC7E,+EAA+E;AAC/E,4DAA4D;AAE5D,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAC1D,OAAO,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAE9C,gFAAgF;AAChF,MAAM,CAAC,MAAM,mBAAmB,GAAG,YAAY,CAAC;AAEhD,MAAM,eAAe,GAAG,wBAAwB,CAAC;AACjD,MAAM,kBAAkB,GAAG,wBAAwB,CAAC;AACpD,MAAM,oBAAoB,GAAG,wBAAwB,CAAC;AACtD,MAAM,WAAW,GAAG,yCAAyC,CAAC;AAC9D,MAAM,eAAe,GAAG,GAAG,CAAC;AAE5B,MAAM,OAAO,sBAAuB,SAAQ,YAAY;IACtD,YAAY,IAAe,EAAE,OAAe,EAAE,QAAkC;QAC9E,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;QAC/B,IAAI,CAAC,IAAI,GAAG,wBAAwB,CAAC;IACvC,CAAC;CACF;AAuED,SAAS,YAAY,CACnB,IAAe,EACf,OAAe,EACf,QAAkC;IAElC,OAAO,IAAI,sBAAsB,CAAC,IAAI,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;AAC7D,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAa;IACxC,KAAK,MAAM,SAAS,IAAI,KAAK,EAAE,CAAC;QAC9B,MAAM,IAAI,GAAG,SAAS,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAC3C,IAAI,IAAI,GAAG,IAAI,IAAI,IAAI,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;IAChD,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,aAAa,CAAC,KAAa,EAAE,OAAe,EAAE,KAAa;IAClE,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,YAAY,CAAC,SAAS,CAAC,UAAU,EAAE,GAAG,KAAK,oCAAoC,EAAE;YACrF,KAAK;SACN,CAAC,CAAC;IACL,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,UAAU,CAAC,IAA0B;IAC5C,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,EAAE,EAAE,IAAI,CAAC,EAAE;QACX,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC;KAC/E,CAAC,CAAC;AACL,CAAC;AAED,SAAS,YAAY,CAAC,MAAwB;IAC5C,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,GAAG,EAAE,MAAM,CAAC,GAAG;QACf,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC;KAC5C,CAAC,CAAC;AACL,CAAC;AAED,SAAS,cAAc,CACrB,KAA2C;IAE3C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,MAAM,YAAY,CAAC,SAAS,CAAC,UAAU,EAAE,wBAAwB,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;IACzF,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAgC,CAAC;IACrD,KAAK,MAAM,QAAQ,IAAI,KAAK,EAAE,CAAC;QAC7B,IAAI,QAAQ,KAAK,IAAI,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;YACtD,MAAM,YAAY,CAAC,SAAS,CAAC,UAAU,EAAE,6BAA6B,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;QAC9F,CAAC;QACD,MAAM,EAAE,GAAG,aAAa,CAAC,QAAQ,CAAC,EAAE,EAAE,eAAe,EAAE,SAAS,CAAC,CAAC;QAClE,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;YACjB,MAAM,YAAY,CAAC,SAAS,CAAC,QAAQ,EAAE,oBAAoB,EAAE,uBAAuB,EAAE;gBACpF,MAAM,EAAE,EAAE;aACX,CAAC,CAAC;QACL,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,QAAQ,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACpE,MAAM,YAAY,CAChB,SAAS,CAAC,UAAU,EACpB,oBAAoB,EAAE,mCAAmC,EACzD;gBACE,MAAM,EAAE,EAAE;gBACV,KAAK,EAAE,QAAQ;aAChB,CACF,CAAC;QACJ,CAAC;QACD,MAAM,UAAU,GAAG,IAAI,GAAG,EAAU,CAAC;QACrC,MAAM,MAAM,GAA0B,EAAE,CAAC;QACzC,KAAK,MAAM,KAAK,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;YACpC,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;gBAChD,MAAM,YAAY,CAAC,SAAS,CAAC,UAAU,EAAE,oBAAoB,EAAE,wBAAwB,EAAE;oBACvF,MAAM,EAAE,EAAE;iBACX,CAAC,CAAC;YACL,CAAC;YACD,MAAM,IAAI,GAAG,aAAa,CAAC,KAAK,CAAC,IAAI,EAAE,kBAAkB,EAAE,YAAY,CAAC,CAAC;YACzE,IAAI,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBACzB,MAAM,YAAY,CAAC,SAAS,CAAC,QAAQ,EAAE,oBAAoB,EAAE,oBAAoB,IAAI,GAAG,EAAE;oBACxF,MAAM,EAAE,EAAE;oBACV,KAAK,EAAE,IAAI;iBACZ,CAAC,CAAC;YACL,CAAC;YACD,IAAI,OAAO,KAAK,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;gBACtC,MAAM,YAAY,CAChB,SAAS,CAAC,UAAU,EACpB,UAAU,IAAI,cAAc,EAAE,mBAAmB,EACjD;oBACE,MAAM,EAAE,EAAE;oBACV,KAAK,EAAE,IAAI;iBACZ,CACF,CAAC;YACJ,CAAC;YACD,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACrB,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;QAC9C,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,UAAU,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;IAC3C,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,eAAe,CACtB,MAA0C,EAC1C,YAAiC;IAEjC,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IACpC,IAAI,MAAM,KAAK,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3E,MAAM,YAAY,CAAC,SAAS,CAAC,UAAU,EAAE,6BAA6B,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC/F,CAAC;IACD,MAAM,UAAU,GAA2B,EAAE,CAAC;IAC9C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAClD,aAAa,CAAC,GAAG,EAAE,kBAAkB,EAAE,WAAW,CAAC,CAAC;QACpD,IAAI,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YAC1B,MAAM,YAAY,CAChB,SAAS,CAAC,UAAU,EACpB,UAAU,GAAG,4DAA4D,EACzE,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,EAAE,CAChC,CAAC;QACJ,CAAC;QACD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,eAAe,EAAE,CAAC;YACtF,MAAM,YAAY,CAAC,SAAS,CAAC,UAAU,EAAE,UAAU,GAAG,8BAA8B,EAAE;gBACpF,KAAK,EAAE,QAAQ;gBACf,KAAK,EAAE,GAAG;aACX,CAAC,CAAC;QACL,CAAC;QACD,IAAI,mBAAmB,CAAC,KAAK,CAAC,EAAE,CAAC;YAC/B,MAAM,YAAY,CAChB,SAAS,CAAC,UAAU,EACpB,UAAU,GAAG,uCAAuC,EACpD;gBACE,KAAK,EAAE,QAAQ;gBACf,KAAK,EAAE,GAAG;aACX,CACF,CAAC;QACJ,CAAC;QACD,UAAU,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IAC1B,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,UAAU,CAAC,MAAwB,EAAE,MAAwC;IACpF,OAAO;QACL,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,GAAG,EAAE,MAAM,CAAC,GAAG;QACf,MAAM,EAAE,EAAE,GAAG,MAAM,EAAE;KACtB,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CACnB,MAAwB,EACxB,YAAoC,EACpC,OAA+B;IAE/B,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,YAAY,EAAE,CAAC,CAAC;IACxD,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC;IAEpD,MAAM,QAAQ,GAAG;QACf,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,GAAG,EAAE,MAAM,CAAC,GAAG;QACf,MAAM,EAAE,YAAY;KACC,CAAC;IAExB,MAAM,CAAC,cAAc,CAAC,QAAQ,EAAE,QAAQ,EAAE;QACxC,UAAU,EAAE,KAAK;QACjB,KAAK,CAAC,SAAiB;YACrB,IAAI,MAAM,CAAC,MAAM,CAAC,YAAY,EAAE,SAAS,CAAC,EAAE,CAAC;gBAC3C,MAAM,YAAY,CAChB,SAAS,CAAC,UAAU,EACpB,UAAU,SAAS,oBAAoB,MAAM,CAAC,IAAI,iBAAiB,EACnE,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,CACxC,CAAC;YACJ,CAAC;YACD,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,aAAa,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9F,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;gBACzB,MAAM,YAAY,CAChB,SAAS,CAAC,QAAQ,EAClB,eAAe,MAAM,CAAC,IAAI,0BAA0B,SAAS,GAAG,EAChE,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,CACxC,CAAC;YACJ,CAAC;YACD,OAAO,MAAM,CAAC;QAChB,CAAC;KACF,CAAC,CAAC;IACH,MAAM,CAAC,cAAc,CAAC,QAAQ,EAAE,QAAQ,EAAE;QACxC,KAAK,EAAE,GAAG,EAAE,CAAC,UAAU,CAAC,MAAM,EAAE,YAAY,CAAC;QAC7C,UAAU,EAAE,KAAK;KAClB,CAAC,CAAC;IACH,MAAM,CAAC,cAAc,CAAC,QAAQ,EAAE,UAAU,EAAE;QAC1C,KAAK,EAAE,GAAG,EAAE,CAAC,sBAAsB,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,GAAG;QAClE,UAAU,EAAE,KAAK;KAClB,CAAC,CAAC;IACH,MAAM,CAAC,cAAc,CAAC,QAAQ,EAAE,OAAO,CAAC,MAAM,EAAE;QAC9C,KAAK,EAAE,GAAG,EAAE,CAAC,UAAU,CAAC,MAAM,EAAE,YAAY,CAAC;QAC7C,UAAU,EAAE,KAAK;KAClB,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;AACjC,CAAC;AAED,SAAS,mBAAmB,CAC1B,IAA0B,EAC1B,MAAwB,EACxB,QAAgC;IAEhC,IAAI,QAAQ,KAAK,IAAI,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QACjF,MAAM,YAAY,CAChB,SAAS,CAAC,UAAU,EACpB,4BAA4B,MAAM,CAAC,IAAI,2BAA2B,EAClE,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAC7C,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IACjF,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;IAC1E,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrB,MAAM,YAAY,CAChB,SAAS,CAAC,UAAU,EACpB,4BAA4B,MAAM,CAAC,IAAI,2BAA2B,EAClE,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,CAC5D,CAAC;IACJ,CAAC;IAED,MAAM,YAAY,GAA2B,EAAE,CAAC;IAChD,MAAM,OAAO,GAA2B,EAAE,CAAC;IAC3C,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QAChC,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACnC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACpD,MAAM,YAAY,CAChB,SAAS,CAAC,UAAU,EACpB,4BAA4B,MAAM,CAAC,IAAI,oBAAoB,KAAK,CAAC,IAAI,GAAG,EACxE,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,EAAE,KAAK,CAAC,IAAI,EAAE,CAChE,CAAC;QACJ,CAAC;QACD,IAAI,mBAAmB,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;YAChD,MAAM,YAAY,CAChB,SAAS,CAAC,UAAU,EACpB,UAAU,KAAK,CAAC,IAAI,oBAAoB,MAAM,CAAC,IAAI,uCAAuC,EAC1F,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,IAAI,EAAE,CACzC,CAAC;QACJ,CAAC;QACD,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;YACjB,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;QAC9B,CAAC;aAAM,CAAC;YACN,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;QACnC,CAAC;IACH,CAAC;IACD,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,CAAC;AACnC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,6BAA6B,CAC3C,OAAuC;IAEvC,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QACpD,MAAM,YAAY,CAAC,SAAS,CAAC,UAAU,EAAE,8BAA8B,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;IACjG,CAAC;IACD,MAAM,KAAK,GAAG,cAAc,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAC5C,MAAM,MAAM,GAAG,IAAI,GAAG,EAA4B,CAAC;IACnD,MAAM,KAAK,GAAG,IAAI,GAAG,EAA4B,CAAC;IAClD,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;IAEhC,OAAO;QACL,SAAS;YACP,OAAO,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;QAC7B,CAAC;QACD,OAAO,CAAC,MAAM;YACZ,OAAO,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC3B,CAAC;QACD,IAAI,CAAC,OAAO;YACV,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;gBACpD,MAAM,YAAY,CAAC,SAAS,CAAC,UAAU,EAAE,2BAA2B,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;YAC9F,CAAC;YACD,MAAM,IAAI,GAAG,aAAa,CAAC,OAAO,CAAC,IAAI,EAAE,oBAAoB,EAAE,cAAc,CAAC,CAAC;YAC/E,MAAM,MAAM,GAAG,aAAa,CAAC,OAAO,CAAC,MAAM,EAAE,eAAe,EAAE,SAAS,CAAC,CAAC;YACzE,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YAC/B,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,MAAM,YAAY,CAAC,SAAS,CAAC,QAAQ,EAAE,oBAAoB,MAAM,mBAAmB,EAAE;oBACpF,MAAM;iBACP,CAAC,CAAC;YACL,CAAC;YACD,IAAI,OAAO,OAAO,CAAC,GAAG,KAAK,QAAQ,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;gBACtE,MAAM,YAAY,CAAC,SAAS,CAAC,UAAU,EAAE,6CAA6C,EAAE;oBACtF,KAAK,EAAE,KAAK;iBACb,CAAC,CAAC;YACL,CAAC;YACD,IAAI,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBACrB,MAAM,YAAY,CAAC,SAAS,CAAC,QAAQ,EAAE,eAAe,IAAI,oBAAoB,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;YAC5F,CAAC;YACD,IAAI,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC3B,MAAM,YAAY,CAAC,SAAS,CAAC,QAAQ,EAAE,+BAA+B,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;YAC5F,CAAC;YACD,MAAM,YAAY,GAAG,IAAI,GAAG,CAC1B,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CACvE,CAAC;YACF,MAAM,MAAM,GAAG,YAAY,CAAC;gBAC1B,IAAI;gBACJ,MAAM;gBACN,GAAG,EAAE,OAAO,CAAC,GAAG;gBAChB,MAAM,EAAE,eAAe,CAAC,OAAO,CAAC,MAAM,EAAE,YAAY,CAAC;aACtD,CAAC,CAAC;YACH,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YACzB,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;YAC9B,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,GAAG,CAAC,IAAI;YACN,OAAO,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC1B,CAAC;QACD,QAAQ,CAAC,GAAG;YACV,OAAO,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACxB,CAAC;QACD,IAAI;YACF,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;QAC9B,CAAC;QACD,KAAK,CAAC,MAAM,CAAC,IAAI;YACf,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAChC,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,MAAM,YAAY,CAAC,SAAS,CAAC,QAAQ,EAAE,eAAe,IAAI,gBAAgB,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;YACxF,CAAC;YACD,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,MAAM,YAAY,CAChB,SAAS,CAAC,QAAQ,EAClB,2CAA2C,MAAM,CAAC,IAAI,GAAG,EACzD,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAC7C,CAAC;YACJ,CAAC;YACD,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YACtC,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,MAAM,YAAY,CAAC,SAAS,CAAC,QAAQ,EAAE,oBAAoB,MAAM,CAAC,MAAM,cAAc,EAAE;oBACtF,MAAM,EAAE,MAAM,CAAC,MAAM;iBACtB,CAAC,CAAC;YACL,CAAC;YAED,IAAI,QAAgC,CAAC;YACrC,IAAI,CAAC;gBACH,QAAQ,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;YACnC,CAAC;YAAC,MAAM,CAAC;gBACP,oEAAoE;gBACpE,MAAM,YAAY,CAChB,SAAS,CAAC,QAAQ,EAClB,iCAAiC,MAAM,CAAC,IAAI,cAAc,MAAM,CAAC,MAAM,GAAG,EAC1E,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,CAC9D,CAAC;YACJ,CAAC;YAED,MAAM,EAAE,YAAY,EAAE,OAAO,EAAE,GAAG,mBAAmB,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;YAC9E,OAAO,YAAY,CAAC,MAAM,EAAE,YAAY,EAAE,OAAO,CAAC,CAAC;QACrD,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/credentials/index.d.ts

@@ -0,0 +1,3 @@
+export { CREDENTIAL_REDACTED, CredentialCatalogError, createMemoryCredentialCatalog, } from './catalog.js';
+export type { CredentialBinding, CredentialCatalog, CredentialFieldSpec, CredentialMaterial, CredentialRecord, CredentialResolver, CredentialTypeDeclaration, CredentialTypeRecord, MemoryCredentialCatalogOptions, } from './catalog.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/credentials/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/credentials/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,mBAAmB,EACnB,sBAAsB,EACtB,6BAA6B,GAC9B,MAAM,cAAc,CAAC;AACtB,YAAY,EACV,iBAAiB,EACjB,iBAAiB,EACjB,mBAAmB,EACnB,kBAAkB,EAClB,gBAAgB,EAChB,kBAAkB,EAClB,yBAAyB,EACzB,oBAAoB,EACpB,8BAA8B,GAC/B,MAAM,cAAc,CAAC"}

package/dist/credentials/index.js

@@ -0,0 +1,2 @@
+export { CREDENTIAL_REDACTED, CredentialCatalogError, createMemoryCredentialCatalog, } from './catalog.js';
+//# sourceMappingURL=index.js.map

package/dist/credentials/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/credentials/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,mBAAmB,EACnB,sBAAsB,EACtB,6BAA6B,GAC9B,MAAM,cAAc,CAAC"}

package/dist/data/drift-inspector.d.ts

@@ -1,7 +1,7 @@
 import type { PostgresJsDatabase } from 'drizzle-orm/postgres-js';
 import type { EntityDefinition } from '../types/entity.js';
 /** Framework-managed table names (actual DB names). */
-export declare const FRAMEWORK_TABLE_NAMES: readonly ["audit_records", "event_outbox", "event_idempotency", "event_dead_letter", "flow_executions", "flow_dead_letter", "flow_schedules", "job_executions", "documents", "document_chunks"];
+export declare const FRAMEWORK_TABLE_NAMES: readonly ["audit_records", "event_outbox", "event_idempotency", "event_dead_letter", "flow_executions", "flow_dead_letter", "flow_schedules", "job_executions", "documents", "document_chunks", "execution_state", "step_execution", "wait_state", "terminal_state", "dispatch_outbox", "side_effect_log", "human_task", "approval_request", "approval_decision"];
 export type FrameworkTableName = (typeof FRAMEWORK_TABLE_NAMES)[number];
 export interface ColumnDrift {
     column: string;
@@ -20,9 +20,6 @@ export interface DriftReport {
     missingFrameworkTables: string[];
     tables: TableDrift[];
 }
-/**
- * Check which framework-managed tables currently exist in the live database.
- */
 export declare function getExistingFrameworkTables(db: PostgresJsDatabase): Promise<string[]>;
 /**
  * Inspect all framework-managed tables for drift between the live DB

package/dist/data/drift-inspector.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"drift-inspector.d.ts","sourceRoot":"","sources":["../../src/data/drift-inspector.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAClE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAG3D,uDAAuD;AACvD,eAAO,MAAM,qBAAqB,iMAWxB,CAAC;AAEX,MAAM,MAAM,kBAAkB,GAAG,CAAC,OAAO,qBAAqB,CAAC,CAAC,MAAM,CAAC,CAAC;AAIxE,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,eAAe,GAAG,aAAa,GAAG,eAAe,GAAG,sBAAsB,CAAC;IACjF,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,UAAU;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,OAAO,CAAC;IAChB,YAAY,EAAE,WAAW,EAAE,CAAC;CAC7B;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,EAAE,OAAO,CAAC;IAClB,uBAAuB,EAAE,MAAM,EAAE,CAAC;IAClC,sBAAsB,EAAE,MAAM,EAAE,CAAC;IACjC,MAAM,EAAE,UAAU,EAAE,CAAC;CACtB;AAgID;;GAEG;AACH,wBAAsB,0BAA0B,CAAC,EAAE,EAAE,kBAAkB,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAG1F;AAED;;;GAGG;AACH,wBAAsB,qBAAqB,CACzC,EAAE,EAAE,kBAAkB,EACtB,QAAQ,EAAE,gBAAgB,EAAE,GAC3B,OAAO,CAAC,WAAW,CAAC,CAgCtB;AAED;;;GAGG;AACH,wBAAgB,uBAAuB,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,EAAE,CAQtE;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,WAAW,GAAG,MAAM,EAAE,CAwC/D"}
+{"version":3,"file":"drift-inspector.d.ts","sourceRoot":"","sources":["../../src/data/drift-inspector.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAClE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAG3D,uDAAuD;AACvD,eAAO,MAAM,qBAAqB,mWAoBxB,CAAC;AAEX,MAAM,MAAM,kBAAkB,GAAG,CAAC,OAAO,qBAAqB,CAAC,CAAC,MAAM,CAAC,CAAC;AAIxE,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,eAAe,GAAG,aAAa,GAAG,eAAe,GAAG,sBAAsB,CAAC;IACjF,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,UAAU;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,OAAO,CAAC;IAChB,YAAY,EAAE,WAAW,EAAE,CAAC;CAC7B;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,EAAE,OAAO,CAAC;IAClB,uBAAuB,EAAE,MAAM,EAAE,CAAC;IAClC,sBAAsB,EAAE,MAAM,EAAE,CAAC;IACjC,MAAM,EAAE,UAAU,EAAE,CAAC;CACtB;AAuID,wBAAsB,0BAA0B,CAAC,EAAE,EAAE,kBAAkB,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAgB1F;AAED;;;GAGG;AACH,wBAAsB,qBAAqB,CACzC,EAAE,EAAE,kBAAkB,EACtB,QAAQ,EAAE,gBAAgB,EAAE,GAC3B,OAAO,CAAC,WAAW,CAAC,CAuCtB;AAED;;;GAGG;AACH,wBAAgB,uBAAuB,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,EAAE,CAStE;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,WAAW,GAAG,MAAM,EAAE,CAwC/D"}

package/dist/data/drift-inspector.js

@@ -4,6 +4,7 @@
 // `migrate apply` and `migrate push` to fail fast when manually-created
 // tables conflict with the framework schema.
 import { getTableColumns, sql } from 'drizzle-orm';
+import { getTableConfig } from 'drizzle-orm/pg-core';
 import { collectSchemas } from './migration.js';
 /** Framework-managed table names (actual DB names). */
 export const FRAMEWORK_TABLE_NAMES = [
@@ -17,6 +18,15 @@ export const FRAMEWORK_TABLE_NAMES = [
     'job_executions',
     'documents',
     'document_chunks',
+    'execution_state',
+    'step_execution',
+    'wait_state',
+    'terminal_state',
+    'dispatch_outbox',
+    'side_effect_log',
+    'human_task',
+    'approval_request',
+    'approval_decision',
 ];
 // ── Type Normalization ──
 /**
@@ -108,9 +118,27 @@ function compareTable(tableName, expected, live) {
 /**
  * Check which framework-managed tables currently exist in the live database.
  */
+function drizzleTableSchema(table) {
+    return getTableConfig(table).schema ?? 'public';
+}
 export async function getExistingFrameworkTables(db) {
-    const liveTables = await getLiveTables(db);
-    return FRAMEWORK_TABLE_NAMES.filter((name) => liveTables.has(name));
+    const schemas = collectSchemas([]);
+    const liveBySchema = new Map();
+    const found = [];
+    for (const name of FRAMEWORK_TABLE_NAMES) {
+        const drizzleTable = schemas[`__${name}`];
+        if (!drizzleTable)
+            continue;
+        const schema = drizzleTableSchema(drizzleTable);
+        let live = liveBySchema.get(schema);
+        if (!live) {
+            live = await getLiveTables(db, schema);
+            liveBySchema.set(schema, live);
+        }
+        if (live.has(name))
+            found.push(name);
+    }
+    return found;
 }
 /**
  * Inspect all framework-managed tables for drift between the live DB
@@ -118,7 +146,7 @@ export async function getExistingFrameworkTables(db) {
  */
 export async function inspectFrameworkDrift(db, entities) {
     const schemas = collectSchemas(entities);
-    const liveTables = await getLiveTables(db);
+    const liveBySchema = new Map();
     const existingFrameworkTables = [];
     const missingFrameworkTables = [];
     const tables = [];
@@ -127,10 +155,16 @@ export async function inspectFrameworkDrift(db, entities) {
         const drizzleTable = schemas[schemaKey];
         if (!drizzleTable)
             continue;
+        const schema = drizzleTableSchema(drizzleTable);
+        let liveTables = liveBySchema.get(schema);
+        if (!liveTables) {
+            liveTables = await getLiveTables(db, schema);
+            liveBySchema.set(schema, liveTables);
+        }
         if (liveTables.has(name)) {
             existingFrameworkTables.push(name);
             const expected = getExpectedColumns(drizzleTable);
-            const live = await getLiveColumns(db, name);
+            const live = await getLiveColumns(db, name, schema);
             tables.push(compareTable(name, expected, live));
         }
         else {
@@ -151,7 +185,7 @@ export async function inspectFrameworkDrift(db, entities) {
  * Handles `CREATE TABLE "name"` and `CREATE TABLE name` syntax.
  */
 export function extractCreateTableNames(migrationSql) {
-    const regex = /CREATE\s+TABLE\s+(?:IF\s+NOT\s+EXISTS\s+)?(?:"([^"]+)"|([a-zA-Z_]\w*))/gi;
+    const regex = /CREATE\s+TABLE\s+(?:IF\s+NOT\s+EXISTS\s+)?(?:(?:"[^"]+"|[a-zA-Z_]\w*)\.)?(?:"([^"]+)"|([a-zA-Z_]\w*))/gi;
     const names = [];
     for (const match of migrationSql.matchAll(regex)) {
         const name = match[1] ?? match[2];

package/dist/data/drift-inspector.js.map

@@ -1 +1 @@
-{"version":3,"file":"drift-inspector.js","sourceRoot":"","sources":["../../src/data/drift-inspector.ts"],"names":[],"mappings":"AAAA,+BAA+B;AAC/B,sEAAsE;AACtE,mEAAmE;AACnE,wEAAwE;AACxE,6CAA6C;AAE7C,OAAO,EAAE,eAAe,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AAInD,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAEhD,uDAAuD;AACvD,MAAM,CAAC,MAAM,qBAAqB,GAAG;IACnC,eAAe;IACf,cAAc;IACd,mBAAmB;IACnB,mBAAmB;IACnB,iBAAiB;IACjB,kBAAkB;IAClB,gBAAgB;IAChB,gBAAgB;IAChB,WAAW;IACX,iBAAiB;CACT,CAAC;AA0BX,2BAA2B;AAE3B;;;GAGG;AACH,SAAS,aAAa,CAAC,CAAS;IAC9B,OAAO,CAAC;SACL,OAAO,CAAC,oBAAoB,EAAE,SAAS,CAAC;SACxC,OAAO,CAAC,8BAA8B,EAAE,WAAW,CAAC;SACpD,IAAI,EAAE;SACN,WAAW,EAAE,CAAC;AACnB,CAAC;AAUD;;GAEG;AACH,KAAK,UAAU,aAAa,CAAC,EAAsB,EAAE,MAAM,GAAG,QAAQ;IACpE,MAAM,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC,OAAO,CAC5B,GAAG,CAAA;+BACwB,MAAM,gCAAgC,CAClE,CAA6C,CAAC;IAC/C,OAAO,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC;AAChD,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,cAAc,CAC3B,EAAsB,EACtB,SAAiB,EACjB,MAAM,GAAG,QAAQ;IAEjB,MAAM,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC,OAAO,CAC5B,GAAG,CAAA;;;;;;;4BAOqB,SAAS;4BACT,MAAM;;;0BAGR,CACvB,CAAuF,CAAC;IACzF,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACtB,IAAI,EAAE,CAAC,CAAC,WAAW;QACnB,QAAQ,EAAE,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;QACpC,UAAU,EAAE,CAAC,CAAC,WAAW;KAC1B,CAAC,CAAC,CAAC;AACN,CAAC;AAUD,SAAS,kBAAkB,CAAC,KAA8B;IACxD,MAAM,OAAO,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;IACvC,OAAO,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,GAAQ,EAAE,EAAE,CAAC,CAAC;QAC/C,IAAI,EAAE,GAAG,CAAC,IAAc;QACxB,QAAQ,EAAE,aAAa,CAAC,GAAG,CAAC,UAAU,EAAY,CAAC;QACnD,UAAU,EAAE,CAAE,GAAG,CAAC,OAAmB;KACtC,CAAC,CAAC,CAAC;AACN,CAAC;AAED,mBAAmB;AAEnB,SAAS,YAAY,CACnB,SAAiB,EACjB,QAA0B,EAC1B,IAAkB;IAElB,MAAM,MAAM,GAAkB,EAAE,CAAC;IACjC,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACtD,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAE9D,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;QAC3B,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACtC,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,eAAe,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;YACjF,SAAS;QACX,CAAC;QACD,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,CAAC,QAAQ,EAAE,CAAC;YACtC,MAAM,CAAC,IAAI,CAAC;gBACV,MAAM,EAAE,GAAG,CAAC,IAAI;gBAChB,IAAI,EAAE,eAAe;gBACrB,QAAQ,EAAE,GAAG,CAAC,QAAQ;gBACtB,MAAM,EAAE,OAAO,CAAC,QAAQ;aACzB,CAAC,CAAC;QACL,CAAC;QACD,IAAI,GAAG,CAAC,UAAU,KAAK,OAAO,CAAC,UAAU,EAAE,CAAC;YAC1C,MAAM,CAAC,IAAI,CAAC;gBACV,MAAM,EAAE,GAAG,CAAC,IAAI;gBAChB,IAAI,EAAE,sBAAsB;gBAC5B,QAAQ,EAAE,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU;gBAClD,MAAM,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU;aACrD,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,KAAK,MAAM,OAAO,IAAI,IAAI,EAAE,CAAC;QAC3B,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YACnC,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;QACvF,CAAC;IACH,CAAC;IAED,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,CAAC;AAC3D,CAAC;AAED,mBAAmB;AAEnB;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAAC,EAAsB;IACrE,MAAM,UAAU,GAAG,MAAM,aAAa,CAAC,EAAE,CAAC,CAAC;IAC3C,OAAO,qBAAqB,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;AACtE,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,EAAsB,EACtB,QAA4B;IAE5B,MAAM,OAAO,GAAG,cAAc,CAAC,QAAQ,CAAC,CAAC;IACzC,MAAM,UAAU,GAAG,MAAM,aAAa,CAAC,EAAE,CAAC,CAAC;IAE3C,MAAM,uBAAuB,GAAa,EAAE,CAAC;IAC7C,MAAM,sBAAsB,GAAa,EAAE,CAAC;IAC5C,MAAM,MAAM,GAAiB,EAAE,CAAC;IAEhC,KAAK,MAAM,IAAI,IAAI,qBAAqB,EAAE,CAAC;QACzC,MAAM,SAAS,GAAG,KAAK,IAAI,EAAE,CAAC;QAC9B,MAAM,YAAY,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;QACxC,IAAI,CAAC,YAAY;YAAE,SAAS;QAE5B,IAAI,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACzB,uBAAuB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACnC,MAAM,QAAQ,GAAG,kBAAkB,CAAC,YAAY,CAAC,CAAC;YAClD,MAAM,IAAI,GAAG,MAAM,cAAc,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;YAC5C,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC;QAClD,CAAC;aAAM,CAAC;YACN,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAClC,MAAM,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC,CAAC;QACpE,CAAC;IACH,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAE3E,OAAO;QACL,QAAQ;QACR,uBAAuB;QACvB,sBAAsB;QACtB,MAAM;KACP,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,uBAAuB,CAAC,YAAoB;IAC1D,MAAM,KAAK,GAAG,0EAA0E,CAAC;IACzF,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,KAAK,IAAI,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACjD,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC;QAClC,IAAI,IAAI;YAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC7B,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAAC,MAAmB;IACnD,MAAM,KAAK,GAAa,EAAE,CAAC;IAE3B,IAAI,MAAM,CAAC,uBAAuB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9C,KAAK,CAAC,IAAI,CAAC,kCAAkC,MAAM,CAAC,uBAAuB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC5F,CAAC;IAED,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;QAClC,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,YAAY,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QAC/D,KAAK,CAAC,IAAI,CAAC,YAAY,KAAK,CAAC,SAAS,cAAc,CAAC,CAAC;QACtD,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,YAAY,EAAE,CAAC;YACnC,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC;gBACf,KAAK,eAAe;oBAClB,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,MAAM,2BAA2B,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC;oBAC9E,MAAM;gBACR,KAAK,aAAa;oBAChB,KAAK,CAAC,IAAI,CACR,iBAAiB,CAAC,CAAC,MAAM,2CAA2C,CAAC,CAAC,MAAM,GAAG,CAChF,CAAC;oBACF,MAAM;gBACR,KAAK,eAAe;oBAClB,KAAK,CAAC,IAAI,CACR,iBAAiB,CAAC,CAAC,MAAM,6BAA6B,CAAC,CAAC,QAAQ,SAAS,CAAC,CAAC,MAAM,EAAE,CACpF,CAAC;oBACF,MAAM;gBACR,KAAK,sBAAsB;oBACzB,KAAK,CAAC,IAAI,CACR,iBAAiB,CAAC,CAAC,MAAM,2BAA2B,CAAC,CAAC,QAAQ,SAAS,CAAC,CAAC,MAAM,EAAE,CAClF,CAAC;oBACF,MAAM;YACV,CAAC;QACH,CAAC;IACH,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,0EAA0E,CAAC,CAAC;IACvF,KAAK,CAAC,IAAI,CAAC,0EAA0E,CAAC,CAAC;IACvF,KAAK,CAAC,IAAI,CAAC,4EAA4E,CAAC,CAAC;IAEzF,OAAO,KAAK,CAAC;AACf,CAAC"}
+{"version":3,"file":"drift-inspector.js","sourceRoot":"","sources":["../../src/data/drift-inspector.ts"],"names":[],"mappings":"AAAA,+BAA+B;AAC/B,sEAAsE;AACtE,mEAAmE;AACnE,wEAAwE;AACxE,6CAA6C;AAE7C,OAAO,EAAE,eAAe,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AAEnD,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAGrD,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAEhD,uDAAuD;AACvD,MAAM,CAAC,MAAM,qBAAqB,GAAG;IACnC,eAAe;IACf,cAAc;IACd,mBAAmB;IACnB,mBAAmB;IACnB,iBAAiB;IACjB,kBAAkB;IAClB,gBAAgB;IAChB,gBAAgB;IAChB,WAAW;IACX,iBAAiB;IACjB,iBAAiB;IACjB,gBAAgB;IAChB,YAAY;IACZ,gBAAgB;IAChB,iBAAiB;IACjB,iBAAiB;IACjB,YAAY;IACZ,kBAAkB;IAClB,mBAAmB;CACX,CAAC;AA0BX,2BAA2B;AAE3B;;;GAGG;AACH,SAAS,aAAa,CAAC,CAAS;IAC9B,OAAO,CAAC;SACL,OAAO,CAAC,oBAAoB,EAAE,SAAS,CAAC;SACxC,OAAO,CAAC,8BAA8B,EAAE,WAAW,CAAC;SACpD,IAAI,EAAE;SACN,WAAW,EAAE,CAAC;AACnB,CAAC;AAUD;;GAEG;AACH,KAAK,UAAU,aAAa,CAAC,EAAsB,EAAE,MAAM,GAAG,QAAQ;IACpE,MAAM,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC,OAAO,CAC5B,GAAG,CAAA;+BACwB,MAAM,gCAAgC,CAClE,CAA6C,CAAC;IAC/C,OAAO,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC;AAChD,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,cAAc,CAC3B,EAAsB,EACtB,SAAiB,EACjB,MAAM,GAAG,QAAQ;IAEjB,MAAM,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC,OAAO,CAC5B,GAAG,CAAA;;;;;;;4BAOqB,SAAS;4BACT,MAAM;;;0BAGR,CACvB,CAAuF,CAAC;IACzF,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACtB,IAAI,EAAE,CAAC,CAAC,WAAW;QACnB,QAAQ,EAAE,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;QACpC,UAAU,EAAE,CAAC,CAAC,WAAW;KAC1B,CAAC,CAAC,CAAC;AACN,CAAC;AAUD,SAAS,kBAAkB,CAAC,KAA8B;IACxD,MAAM,OAAO,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;IACvC,OAAO,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,GAAQ,EAAE,EAAE,CAAC,CAAC;QAC/C,IAAI,EAAE,GAAG,CAAC,IAAc;QACxB,QAAQ,EAAE,aAAa,CAAC,GAAG,CAAC,UAAU,EAAY,CAAC;QACnD,UAAU,EAAE,CAAE,GAAG,CAAC,OAAmB;KACtC,CAAC,CAAC,CAAC;AACN,CAAC;AAED,mBAAmB;AAEnB,SAAS,YAAY,CACnB,SAAiB,EACjB,QAA0B,EAC1B,IAAkB;IAElB,MAAM,MAAM,GAAkB,EAAE,CAAC;IACjC,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACtD,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAE9D,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;QAC3B,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACtC,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,eAAe,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;YACjF,SAAS;QACX,CAAC;QACD,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,CAAC,QAAQ,EAAE,CAAC;YACtC,MAAM,CAAC,IAAI,CAAC;gBACV,MAAM,EAAE,GAAG,CAAC,IAAI;gBAChB,IAAI,EAAE,eAAe;gBACrB,QAAQ,EAAE,GAAG,CAAC,QAAQ;gBACtB,MAAM,EAAE,OAAO,CAAC,QAAQ;aACzB,CAAC,CAAC;QACL,CAAC;QACD,IAAI,GAAG,CAAC,UAAU,KAAK,OAAO,CAAC,UAAU,EAAE,CAAC;YAC1C,MAAM,CAAC,IAAI,CAAC;gBACV,MAAM,EAAE,GAAG,CAAC,IAAI;gBAChB,IAAI,EAAE,sBAAsB;gBAC5B,QAAQ,EAAE,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU;gBAClD,MAAM,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU;aACrD,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,KAAK,MAAM,OAAO,IAAI,IAAI,EAAE,CAAC;QAC3B,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YACnC,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;QACvF,CAAC;IACH,CAAC;IAED,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,CAAC;AAC3D,CAAC;AAED,mBAAmB;AAEnB;;GAEG;AACH,SAAS,kBAAkB,CAAC,KAA8B;IACxD,OAAO,cAAc,CAAC,KAAK,CAAC,CAAC,MAAM,IAAI,QAAQ,CAAC;AAClD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAAC,EAAsB;IACrE,MAAM,OAAO,GAAG,cAAc,CAAC,EAAE,CAAC,CAAC;IACnC,MAAM,YAAY,GAAG,IAAI,GAAG,EAAuB,CAAC;IACpD,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,IAAI,IAAI,qBAAqB,EAAE,CAAC;QACzC,MAAM,YAAY,GAAG,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;QAC1C,IAAI,CAAC,YAAY;YAAE,SAAS;QAC5B,MAAM,MAAM,GAAG,kBAAkB,CAAC,YAAY,CAAC,CAAC;QAChD,IAAI,IAAI,GAAG,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACpC,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,IAAI,GAAG,MAAM,aAAa,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;YACvC,YAAY,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACjC,CAAC;QACD,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACvC,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,EAAsB,EACtB,QAA4B;IAE5B,MAAM,OAAO,GAAG,cAAc,CAAC,QAAQ,CAAC,CAAC;IACzC,MAAM,YAAY,GAAG,IAAI,GAAG,EAAuB,CAAC;IAEpD,MAAM,uBAAuB,GAAa,EAAE,CAAC;IAC7C,MAAM,sBAAsB,GAAa,EAAE,CAAC;IAC5C,MAAM,MAAM,GAAiB,EAAE,CAAC;IAEhC,KAAK,MAAM,IAAI,IAAI,qBAAqB,EAAE,CAAC;QACzC,MAAM,SAAS,GAAG,KAAK,IAAI,EAAE,CAAC;QAC9B,MAAM,YAAY,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;QACxC,IAAI,CAAC,YAAY;YAAE,SAAS;QAE5B,MAAM,MAAM,GAAG,kBAAkB,CAAC,YAAY,CAAC,CAAC;QAChD,IAAI,UAAU,GAAG,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC1C,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,UAAU,GAAG,MAAM,aAAa,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;YAC7C,YAAY,CAAC,GAAG,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;QACvC,CAAC;QAED,IAAI,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACzB,uBAAuB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACnC,MAAM,QAAQ,GAAG,kBAAkB,CAAC,YAAY,CAAC,CAAC;YAClD,MAAM,IAAI,GAAG,MAAM,cAAc,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;YACpD,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC;QAClD,CAAC;aAAM,CAAC;YACN,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAClC,MAAM,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC,CAAC;QACpE,CAAC;IACH,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAE3E,OAAO;QACL,QAAQ;QACR,uBAAuB;QACvB,sBAAsB;QACtB,MAAM;KACP,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,uBAAuB,CAAC,YAAoB;IAC1D,MAAM,KAAK,GACT,yGAAyG,CAAC;IAC5G,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,KAAK,IAAI,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACjD,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC;QAClC,IAAI,IAAI;YAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC7B,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAAC,MAAmB;IACnD,MAAM,KAAK,GAAa,EAAE,CAAC;IAE3B,IAAI,MAAM,CAAC,uBAAuB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9C,KAAK,CAAC,IAAI,CAAC,kCAAkC,MAAM,CAAC,uBAAuB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC5F,CAAC;IAED,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;QAClC,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,YAAY,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QAC/D,KAAK,CAAC,IAAI,CAAC,YAAY,KAAK,CAAC,SAAS,cAAc,CAAC,CAAC;QACtD,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,YAAY,EAAE,CAAC;YACnC,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC;gBACf,KAAK,eAAe;oBAClB,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,MAAM,2BAA2B,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC;oBAC9E,MAAM;gBACR,KAAK,aAAa;oBAChB,KAAK,CAAC,IAAI,CACR,iBAAiB,CAAC,CAAC,MAAM,2CAA2C,CAAC,CAAC,MAAM,GAAG,CAChF,CAAC;oBACF,MAAM;gBACR,KAAK,eAAe;oBAClB,KAAK,CAAC,IAAI,CACR,iBAAiB,CAAC,CAAC,MAAM,6BAA6B,CAAC,CAAC,QAAQ,SAAS,CAAC,CAAC,MAAM,EAAE,CACpF,CAAC;oBACF,MAAM;gBACR,KAAK,sBAAsB;oBACzB,KAAK,CAAC,IAAI,CACR,iBAAiB,CAAC,CAAC,MAAM,2BAA2B,CAAC,CAAC,QAAQ,SAAS,CAAC,CAAC,MAAM,EAAE,CAClF,CAAC;oBACF,MAAM;YACV,CAAC;QACH,CAAC;IACH,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,0EAA0E,CAAC,CAAC;IACvF,KAAK,CAAC,IAAI,CAAC,0EAA0E,CAAC,CAAC;IACvF,KAAK,CAAC,IAAI,CAAC,4EAA4E,CAAC,CAAC;IAEzF,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/data/field-encryption.d.ts

@@ -6,6 +6,13 @@ export declare const ENCRYPTION_PREFIX = "plumbus:enc:v1:";
  */
 export declare function resolveEncryptionKey(env?: Record<string, string | undefined>): Buffer | undefined;
 export declare function isEncryptedValue(value: unknown): value is string;
+/**
+ * AES-256-GCM over raw bytes. Packed layout is `iv (12) || authTag (16) || ciphertext`.
+ * Field encryption and export envelope wrapping both use this; do not reimplement it in apps.
+ */
+export declare function encryptBytes(plain: Buffer, key: Buffer): Buffer;
+/** Inverse of {@link encryptBytes}. Throws {@link EncryptionPayloadError} on truncation or tamper. */
+export declare function decryptBytes(packed: Buffer, key: Buffer): Buffer;
 /** Encrypt a string field value. Returns ciphertext prefixed with `plumbus:enc:v1:`. */
 export declare function encryptFieldValue(plaintext: string, key: Buffer): string;
 /**

package/dist/data/field-encryption.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"field-encryption.d.ts","sourceRoot":"","sources":["../../src/data/field-encryption.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAE3D,eAAO,MAAM,iBAAiB,oBAAoB,CAAC;AAKnD;;;GAGG;AACH,wBAAgB,oBAAoB,CAClC,GAAG,GAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAe,GACpD,MAAM,GAAG,SAAS,CAyBpB;AAED,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,MAAM,CAEhE;AAED,wFAAwF;AACxF,wBAAgB,iBAAiB,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,CAOxE;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,CAqBpE;AAED,mFAAmF;AACnF,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,gBAAgB,GAAG,MAAM,EAAE,CAQrE"}
+{"version":3,"file":"field-encryption.d.ts","sourceRoot":"","sources":["../../src/data/field-encryption.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAE3D,eAAO,MAAM,iBAAiB,oBAAoB,CAAC;AAKnD;;;GAGG;AACH,wBAAgB,oBAAoB,CAClC,GAAG,GAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAe,GACpD,MAAM,GAAG,SAAS,CAyBpB;AAED,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,MAAM,CAEhE;AAED;;;GAGG;AACH,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,CAK/D;AAED,sGAAsG;AACtG,wBAAgB,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,CAgBhE;AAED,wFAAwF;AACxF,wBAAgB,iBAAiB,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,CAGxE;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,CAcpE;AAED,mFAAmF;AACnF,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,gBAAgB,GAAG,MAAM,EAAE,CAQrE"}