@rafads/plugin-onepassword 1.5.38

package/dist/client.js

@@ -0,0 +1,20 @@
+// src/react/plugin-client.tsx
+import { defineClientPlugin } from "@rafads/sdk/client";
+
+// src/react/secret-provider-plugin.ts
+import { lazy } from "react";
+var onePasswordSecretProviderPlugin = {
+  key: "onepassword",
+  label: "1Password",
+  settings: lazy(() => import("./OnePasswordSettings-YYVXN2JL.js"))
+};
+
+// src/react/plugin-client.tsx
+var plugin_client_default = defineClientPlugin({
+  id: "onepassword",
+  secretProviderPlugin: onePasswordSecretProviderPlugin
+});
+export {
+  plugin_client_default as default
+};
+//# sourceMappingURL=client.js.map

package/dist/client.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/react/plugin-client.tsx","../src/react/secret-provider-plugin.ts"],"sourcesContent":["import { defineClientPlugin } from \"@rafads/sdk/client\";\n\nimport { onePasswordSecretProviderPlugin } from \"./secret-provider-plugin\";\n\nexport default defineClientPlugin({\n  id: \"onepassword\" as const,\n  secretProviderPlugin: onePasswordSecretProviderPlugin,\n});\n","import { lazy } from \"react\";\nimport type { SecretProviderPlugin } from \"@rafads/sdk/client\";\n\nexport const onePasswordSecretProviderPlugin: SecretProviderPlugin = {\n  key: \"onepassword\",\n  label: \"1Password\",\n  settings: lazy(() => import(\"./OnePasswordSettings\")),\n};\n"],"mappings":";AAAA,SAAS,0BAA0B;;;ACAnC,SAAS,YAAY;AAGd,IAAM,kCAAwD;AAAA,EACnE,KAAK;AAAA,EACL,OAAO;AAAA,EACP,UAAU,KAAK,MAAM,OAAO,mCAAuB,CAAC;AACtD;;;ADHA,IAAO,wBAAQ,mBAAmB;AAAA,EAChC,IAAI;AAAA,EACJ,sBAAsB;AACxB,CAAC;","names":[]}

package/dist/core.js

@@ -0,0 +1,39 @@
+import {
+  OnePasswordServiceTag,
+  makeCliService,
+  makeNativeSdkService,
+  makeOnePasswordService,
+  makeOnePasswordStore,
+  onepasswordPlugin
+} from "./chunk-JNJOYLVW.js";
+import {
+  ConnectionStatus,
+  DesktopAppAuth,
+  OnePasswordAuth,
+  OnePasswordConfig,
+  OnePasswordError,
+  RedactedOnePasswordAuth,
+  RedactedOnePasswordConfig,
+  ServiceAccountAuth,
+  Vault,
+  redactConfig
+} from "./chunk-OYHEG6OK.js";
+export {
+  ConnectionStatus,
+  DesktopAppAuth,
+  OnePasswordAuth,
+  OnePasswordConfig,
+  OnePasswordError,
+  OnePasswordServiceTag,
+  RedactedOnePasswordAuth,
+  RedactedOnePasswordConfig,
+  ServiceAccountAuth,
+  Vault,
+  makeCliService,
+  makeNativeSdkService,
+  makeOnePasswordService,
+  makeOnePasswordStore,
+  onepasswordPlugin,
+  redactConfig
+};
+//# sourceMappingURL=core.js.map

package/dist/core.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}

package/dist/index.js

@@ -0,0 +1,23 @@
+import {
+  onepasswordPlugin
+} from "./chunk-JNJOYLVW.js";
+import {
+  ConnectionStatus,
+  DesktopAppAuth,
+  OnePasswordAuth,
+  OnePasswordConfig,
+  OnePasswordError,
+  ServiceAccountAuth,
+  Vault
+} from "./chunk-OYHEG6OK.js";
+export {
+  ConnectionStatus,
+  DesktopAppAuth,
+  OnePasswordAuth,
+  OnePasswordConfig,
+  OnePasswordError,
+  ServiceAccountAuth,
+  Vault,
+  onepasswordPlugin
+};
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}

package/dist/onepassword-sdk-BT5LZEVG.js

@@ -0,0 +1,7 @@
+// src/sdk/onepassword-sdk.ts
+import * as sdk from "@1password/sdk";
+var onePasswordSdk = sdk;
+export {
+  onePasswordSdk
+};
+//# sourceMappingURL=onepassword-sdk-BT5LZEVG.js.map

package/dist/onepassword-sdk-BT5LZEVG.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/sdk/onepassword-sdk.ts"],"sourcesContent":["import * as sdk from \"@1password/sdk\";\n\nexport type OnePasswordSdkModule = typeof sdk;\n\n// Keep the package import static in this local shim. The service dynamically\n// imports this file so normal app boot stays lazy, while Bun's compiler sees\n// the concrete @1password/sdk dependency and its sdk-core WASM loader.\nexport const onePasswordSdk: OnePasswordSdkModule = sdk;\n"],"mappings":";AAAA,YAAY,SAAS;AAOd,IAAM,iBAAuC;","names":[]}

package/dist/promise.d.ts

@@ -0,0 +1,4 @@
+export { onepasswordPlugin } from "./sdk/plugin";
+export type { OnePasswordExtension, OnePasswordPluginOptions } from "./sdk/plugin";
+export { OnePasswordConfig, ConnectionStatus, Vault, OnePasswordAuth, DesktopAppAuth, ServiceAccountAuth, } from "./sdk/types";
+export { OnePasswordError } from "./sdk/errors";

package/dist/react/OnePasswordSettings.d.ts

@@ -0,0 +1 @@
+export default function OnePasswordSettings(): import("react/jsx-runtime").JSX.Element;

package/dist/react/atoms.d.ts

@@ -0,0 +1,43 @@
+export declare const onepasswordWriteKeys: readonly ["providers"];
+export declare const onepasswordConfigAtom: import("effect/unstable/reactivity/Atom").Atom<import("effect/unstable/reactivity/AsyncResult").AsyncResult<{
+    readonly name: string;
+    readonly auth: {
+        readonly kind: "desktop-app";
+        readonly accountName: string;
+    } | {
+        readonly kind: "service-account";
+    };
+    readonly vaultId: string;
+} | null, import("@rafads/sdk").InternalError | import("../promise").OnePasswordError>>;
+export declare const onepasswordStatusAtom: import("effect/unstable/reactivity/Atom").Atom<import("effect/unstable/reactivity/AsyncResult").AsyncResult<{
+    readonly connected: boolean;
+    readonly error?: string | undefined;
+    readonly vaultName?: string | undefined;
+}, import("@rafads/sdk").InternalError | import("../promise").OnePasswordError>>;
+export declare const onepasswordVaultsAtom: (authKind: "desktop-app" | "service-account", account: string) => import("effect/unstable/reactivity/Atom").Atom<import("effect/unstable/reactivity/AsyncResult").AsyncResult<{
+    readonly vaults: readonly {
+        readonly id: string;
+        readonly name: string;
+    }[];
+}, import("@rafads/sdk").InternalError | import("../promise").OnePasswordError>>;
+export declare const configureOnePassword: import("effect/unstable/reactivity/Atom").AtomResultFn<{
+    readonly payload: {
+        readonly name: string;
+        readonly auth: {
+            readonly kind: "desktop-app";
+            readonly accountName: string;
+        } | {
+            readonly kind: "service-account";
+            readonly token: string;
+        };
+        readonly vaultId: string;
+    };
+    readonly responseMode?: "decoded-only" | undefined;
+    readonly reactivityKeys?: readonly unknown[] | import("effect/Record").ReadonlyRecord<string, readonly unknown[]> | undefined;
+}, void, import("@rafads/sdk").InternalError | import("../promise").OnePasswordError>;
+export declare const removeOnePasswordConfig: import("effect/unstable/reactivity/Atom").AtomResultFn<{
+    readonly reactivityKeys?: readonly unknown[] | import("effect/Record").ReadonlyRecord<string, readonly unknown[]> | undefined;
+} | {
+    readonly responseMode?: "decoded-only" | undefined;
+    readonly reactivityKeys?: readonly unknown[] | import("effect/Record").ReadonlyRecord<string, readonly unknown[]> | undefined;
+}, void, import("@rafads/sdk").InternalError | import("../promise").OnePasswordError>;

package/dist/react/client.d.ts

@@ -0,0 +1,32 @@
+export declare const OnePasswordClient: import("effect/unstable/reactivity/AtomHttpApi").AtomHttpApiClient<"Plugin_onepasswordClient", `Plugin_${string}Client`, import("effect/unstable/httpapi/HttpApiGroup").HttpApiGroup<"onepassword", import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"getConfig", "GET", "/onepassword/config", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").NullOr<import("effect/Schema").Struct<{
+    readonly auth: import("effect/Schema").Union<readonly [import("effect/Schema").Struct<{
+        readonly kind: import("effect/Schema").Literal<"desktop-app">;
+        readonly accountName: import("effect/Schema").String;
+    }>, import("effect/Schema").Struct<{
+        readonly kind: import("effect/Schema").Literal<"service-account">;
+    }>]>;
+    readonly vaultId: import("effect/Schema").String;
+    readonly name: import("effect/Schema").String;
+}>>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("@rafads/sdk").InternalError | typeof import("../promise").OnePasswordError>, never, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"configure", "PUT", "/onepassword/config", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
+    readonly auth: import("effect/Schema").Union<readonly [import("effect/Schema").Struct<{
+        readonly kind: import("effect/Schema").Literal<"desktop-app">;
+        readonly accountName: import("effect/Schema").String;
+    }>, import("effect/Schema").Struct<{
+        readonly kind: import("effect/Schema").Literal<"service-account">;
+        readonly token: import("effect/Schema").String;
+    }>]>;
+    readonly vaultId: import("effect/Schema").String;
+    readonly name: import("effect/Schema").String;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Void>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("@rafads/sdk").InternalError | typeof import("../promise").OnePasswordError>, never, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"removeConfig", "DELETE", "/onepassword/config", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Void>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("@rafads/sdk").InternalError | typeof import("../promise").OnePasswordError>, never, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"status", "GET", "/onepassword/status", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
+    readonly connected: import("effect/Schema").Boolean;
+    readonly vaultName: import("effect/Schema").optional<import("effect/Schema").String>;
+    readonly error: import("effect/Schema").optional<import("effect/Schema").String>;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("@rafads/sdk").InternalError | typeof import("../promise").OnePasswordError>, never, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"listVaults", "GET", "/onepassword/vaults", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
+    readonly authKind: import("effect/Schema").Literals<readonly ["desktop-app", "service-account"]>;
+    readonly account: import("effect/Schema").String;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
+    readonly vaults: import("effect/Schema").$Array<import("effect/Schema").Struct<{
+        readonly id: import("effect/Schema").String;
+        readonly name: import("effect/Schema").String;
+    }>>;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("@rafads/sdk").InternalError | typeof import("../promise").OnePasswordError>, never, never>, false>>;

package/dist/react/index.d.ts

@@ -0,0 +1,2 @@
+export { default as OnePasswordSettings } from "./OnePasswordSettings";
+export { onePasswordSecretProviderPlugin } from "./secret-provider-plugin";

package/dist/react/plugin-client.d.ts

@@ -0,0 +1,2 @@
+declare const _default: import("@rafads/sdk/client").ClientPluginSpec<"onepassword">;
+export default _default;

package/dist/react/secret-provider-plugin.d.ts

@@ -0,0 +1,2 @@
+import type { SecretProviderPlugin } from "@rafads/sdk/client";
+export declare const onePasswordSecretProviderPlugin: SecretProviderPlugin;

package/dist/sdk/errors.d.ts

@@ -0,0 +1,8 @@
+import { Schema } from "effect";
+declare const OnePasswordError_base: Schema.Class<OnePasswordError, Schema.TaggedStruct<"OnePasswordError", {
+    readonly operation: Schema.String;
+    readonly message: Schema.String;
+}>, import("effect/Cause").YieldableError>;
+export declare class OnePasswordError extends OnePasswordError_base {
+}
+export {};

package/dist/sdk/index.d.ts

@@ -0,0 +1,4 @@
+export { onepasswordPlugin, makeOnePasswordStore, type OnePasswordExtension, type OnePasswordPluginOptions, type OnePasswordStore, } from "./plugin";
+export { OnePasswordConfig, RedactedOnePasswordConfig, RedactedOnePasswordAuth, redactConfig, Vault, ConnectionStatus, OnePasswordAuth, DesktopAppAuth, ServiceAccountAuth, } from "./types";
+export { OnePasswordError } from "./errors";
+export { makeOnePasswordService, makeNativeSdkService, makeCliService, OnePasswordServiceTag, type OnePasswordService, type ResolvedAuth, } from "./service";

package/dist/sdk/onepassword-sdk.d.ts

@@ -0,0 +1,3 @@
+import * as sdk from "@1password/sdk";
+export type OnePasswordSdkModule = typeof sdk;
+export declare const onePasswordSdk: OnePasswordSdkModule;

package/dist/sdk/plugin.d.ts

@@ -0,0 +1,49 @@
+import { Effect } from "effect";
+import { StorageError, type Owner, type PluginCtx, type PluginBlobStore, type StorageFailure } from "@rafads/sdk/core";
+import { OnePasswordAuth, OnePasswordConfig, RedactedOnePasswordConfig } from "./types";
+import { OnePasswordError } from "./errors";
+export type OnePasswordExtensionFailure = OnePasswordError | StorageFailure;
+export interface OnePasswordStore {
+    readonly getConfig: () => Effect.Effect<OnePasswordConfig | null, StorageError | OnePasswordError>;
+    readonly saveConfig: (config: OnePasswordConfig, owner: Owner) => Effect.Effect<void, StorageError>;
+    readonly deleteConfig: (owner: Owner) => Effect.Effect<void, StorageError>;
+}
+export declare const makeOnePasswordStore: (blobs: PluginBlobStore) => OnePasswordStore;
+declare const makeOnePasswordExtension: (ctx: PluginCtx<OnePasswordStore>, timeoutMs: number, preferSdk: boolean | undefined) => {
+    configure: (config: OnePasswordConfig) => Effect.Effect<void, StorageError, never>;
+    getConfig: () => Effect.Effect<RedactedOnePasswordConfig | null, StorageError | OnePasswordError>;
+    removeConfig: () => Effect.Effect<void, StorageError, never>;
+    status: () => Effect.Effect<{
+        readonly connected: boolean;
+        readonly error?: string | undefined;
+        readonly vaultName?: string | undefined;
+    }, StorageError | OnePasswordError, never>;
+    listVaults: (auth: OnePasswordAuth) => Effect.Effect<{
+        readonly id: string;
+        readonly name: string;
+    }[], OnePasswordError, never>;
+    resolve: (uri: string) => Effect.Effect<string, StorageError | OnePasswordError, never>;
+};
+export type OnePasswordExtension = ReturnType<typeof makeOnePasswordExtension>;
+export interface OnePasswordPluginOptions {
+    /** Request timeout in ms (default: 15000) */
+    readonly timeoutMs?: number;
+    /** Force use of the native SDK instead of the CLI (default: false) */
+    readonly preferSdk?: boolean;
+}
+export declare const onepasswordPlugin: import("@rafads/sdk/core").ConfiguredPlugin<"onepassword", {
+    configure: (config: OnePasswordConfig) => Effect.Effect<void, StorageError, never>;
+    getConfig: () => Effect.Effect<RedactedOnePasswordConfig | null, StorageError | OnePasswordError>;
+    removeConfig: () => Effect.Effect<void, StorageError, never>;
+    status: () => Effect.Effect<{
+        readonly connected: boolean;
+        readonly error?: string | undefined;
+        readonly vaultName?: string | undefined;
+    }, StorageError | OnePasswordError, never>;
+    listVaults: (auth: OnePasswordAuth) => Effect.Effect<{
+        readonly id: string;
+        readonly name: string;
+    }[], OnePasswordError, never>;
+    resolve: (uri: string) => Effect.Effect<string, StorageError | OnePasswordError, never>;
+}, OnePasswordStore, OnePasswordPluginOptions, undefined, import("effect/Layer").Layer<unknown, never, never>, import("effect/unstable/httpapi/HttpApiGroup").Any>;
+export {};

package/dist/sdk/plugin.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/sdk/service.d.ts

@@ -0,0 +1,35 @@
+import { Context, Effect } from "effect";
+import { OnePasswordError } from "./errors";
+export interface OnePasswordVault {
+    readonly id: string;
+    readonly title: string;
+}
+export interface OnePasswordItem {
+    readonly id: string;
+    readonly title: string;
+}
+export interface OnePasswordService {
+    /** Resolve a secret by op:// URI */
+    readonly resolveSecret: (uri: string) => Effect.Effect<string, OnePasswordError>;
+    /** List accessible vaults */
+    readonly listVaults: () => Effect.Effect<ReadonlyArray<OnePasswordVault>, OnePasswordError>;
+    /** List items in a vault */
+    readonly listItems: (vaultId: string) => Effect.Effect<ReadonlyArray<OnePasswordItem>, OnePasswordError>;
+}
+declare const OnePasswordServiceTag_base: Context.ServiceClass<OnePasswordServiceTag, "@rafads/plugin-onepassword/OnePasswordService", OnePasswordService>;
+export declare class OnePasswordServiceTag extends OnePasswordServiceTag_base {
+}
+export type ResolvedAuth = {
+    readonly kind: "desktop-app";
+    readonly accountName: string;
+} | {
+    readonly kind: "service-account";
+    readonly token: string;
+};
+export declare const makeNativeSdkService: (auth: ResolvedAuth, timeoutMs?: number) => Effect.Effect<OnePasswordService, OnePasswordError>;
+export declare const makeCliService: (auth: ResolvedAuth) => Effect.Effect<OnePasswordService, OnePasswordError>;
+export declare const makeOnePasswordService: (auth: ResolvedAuth, options?: {
+    readonly preferSdk?: boolean;
+    readonly timeoutMs?: number;
+}) => Effect.Effect<OnePasswordService, OnePasswordError>;
+export {};

package/dist/sdk/service.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/sdk/types.d.ts

@@ -0,0 +1,88 @@
+import { Schema } from "effect";
+export declare const DesktopAppAuth: Schema.Struct<{
+    readonly kind: Schema.Literal<"desktop-app">;
+    /** 1Password account domain, e.g. "my.1password.com" */
+    readonly accountName: Schema.String;
+}>;
+export type DesktopAppAuth = typeof DesktopAppAuth.Type;
+export declare const ServiceAccountAuth: Schema.Struct<{
+    readonly kind: Schema.Literal<"service-account">;
+    /** The service account token. Persisted in the plugin's owner-partitioned
+     *  config blob — never surfaced to agents (`getConfig` redacts it). v1 stored
+     *  this behind a separate secret id; v2 has no secrets table, so the
+     *  plugin-owned config row carries it directly. */
+    readonly token: Schema.String;
+}>;
+export type ServiceAccountAuth = typeof ServiceAccountAuth.Type;
+export declare const OnePasswordAuth: Schema.Union<readonly [Schema.Struct<{
+    readonly kind: Schema.Literal<"desktop-app">;
+    /** 1Password account domain, e.g. "my.1password.com" */
+    readonly accountName: Schema.String;
+}>, Schema.Struct<{
+    readonly kind: Schema.Literal<"service-account">;
+    /** The service account token. Persisted in the plugin's owner-partitioned
+     *  config blob — never surfaced to agents (`getConfig` redacts it). v1 stored
+     *  this behind a separate secret id; v2 has no secrets table, so the
+     *  plugin-owned config row carries it directly. */
+    readonly token: Schema.String;
+}>]>;
+export type OnePasswordAuth = typeof OnePasswordAuth.Type;
+export declare const OnePasswordConfig: Schema.Struct<{
+    readonly auth: Schema.Union<readonly [Schema.Struct<{
+        readonly kind: Schema.Literal<"desktop-app">;
+        /** 1Password account domain, e.g. "my.1password.com" */
+        readonly accountName: Schema.String;
+    }>, Schema.Struct<{
+        readonly kind: Schema.Literal<"service-account">;
+        /** The service account token. Persisted in the plugin's owner-partitioned
+         *  config blob — never surfaced to agents (`getConfig` redacts it). v1 stored
+         *  this behind a separate secret id; v2 has no secrets table, so the
+         *  plugin-owned config row carries it directly. */
+        readonly token: Schema.String;
+    }>]>;
+    /** Vault to scope operations to */
+    readonly vaultId: Schema.String;
+    /** Human label */
+    readonly name: Schema.String;
+}>;
+export type OnePasswordConfig = typeof OnePasswordConfig.Type;
+export declare const RedactedDesktopAppAuth: Schema.Struct<{
+    readonly kind: Schema.Literal<"desktop-app">;
+    /** 1Password account domain, e.g. "my.1password.com" */
+    readonly accountName: Schema.String;
+}>;
+export declare const RedactedServiceAccountAuth: Schema.Struct<{
+    readonly kind: Schema.Literal<"service-account">;
+}>;
+export declare const RedactedOnePasswordAuth: Schema.Union<readonly [Schema.Struct<{
+    readonly kind: Schema.Literal<"desktop-app">;
+    /** 1Password account domain, e.g. "my.1password.com" */
+    readonly accountName: Schema.String;
+}>, Schema.Struct<{
+    readonly kind: Schema.Literal<"service-account">;
+}>]>;
+export declare const RedactedOnePasswordConfig: Schema.Struct<{
+    readonly auth: Schema.Union<readonly [Schema.Struct<{
+        readonly kind: Schema.Literal<"desktop-app">;
+        /** 1Password account domain, e.g. "my.1password.com" */
+        readonly accountName: Schema.String;
+    }>, Schema.Struct<{
+        readonly kind: Schema.Literal<"service-account">;
+    }>]>;
+    readonly vaultId: Schema.String;
+    readonly name: Schema.String;
+}>;
+export type RedactedOnePasswordConfig = typeof RedactedOnePasswordConfig.Type;
+/** Strip the service-account token from a stored config for external exposure. */
+export declare const redactConfig: (config: OnePasswordConfig) => RedactedOnePasswordConfig;
+export declare const Vault: Schema.Struct<{
+    readonly id: Schema.String;
+    readonly name: Schema.String;
+}>;
+export type Vault = typeof Vault.Type;
+export declare const ConnectionStatus: Schema.Struct<{
+    readonly connected: Schema.Boolean;
+    readonly vaultName: Schema.optional<Schema.String>;
+    readonly error: Schema.optional<Schema.String>;
+}>;
+export type ConnectionStatus = typeof ConnectionStatus.Type;

package/package.json

@@ -0,0 +1,77 @@
+{
+  "name": "@rafads/plugin-onepassword",
+  "version": "1.5.38",
+  "homepage": "https://github.com/UsefulSoftwareCo/executor/tree/main/packages/plugins/onepassword",
+  "bugs": {
+    "url": "https://github.com/UsefulSoftwareCo/executor/issues"
+  },
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/UsefulSoftwareCo/executor.git",
+    "directory": "packages/plugins/onepassword"
+  },
+  "files": [
+    "dist"
+  ],
+  "type": "module",
+  "exports": {
+    ".": {
+      "import": {
+        "types": "./dist/promise.d.ts",
+        "default": "./dist/index.js"
+      }
+    },
+    "./core": {
+      "import": {
+        "types": "./dist/sdk/index.d.ts",
+        "default": "./dist/core.js"
+      }
+    },
+    "./client": {
+      "import": {
+        "types": "./dist/react/plugin-client.d.ts",
+        "default": "./dist/client.js"
+      }
+    }
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "scripts": {
+    "build": "tsup && tsc --declaration --emitDeclarationOnly --outDir dist --rootDir src",
+    "typecheck": "tsgo --noEmit",
+    "test": "vitest run",
+    "test:watch": "vitest",
+    "typecheck:slow": "bunx tsc --noEmit -p tsconfig.json"
+  },
+  "dependencies": {
+    "@1password/op-js": "^0.1.13",
+    "@1password/sdk": "^0.4.1-beta.1",
+    "@effect/atom-react": "4.0.0-beta.59",
+    "@rafads/sdk": "1.5.38"
+  },
+  "devDependencies": {
+    "@effect/vitest": "4.0.0-beta.59",
+    "@types/node": "^24.3.1",
+    "@types/react": "^19.1.0",
+    "bun-types": "^1.2.22",
+    "effect": "4.0.0-beta.59",
+    "react": "^19.1.0",
+    "tsup": "^8.5.0",
+    "vitest": "^4.1.5"
+  },
+  "peerDependencies": {
+    "@effect/atom-react": "4.0.0-beta.59",
+    "effect": "4.0.0-beta.59",
+    "react": ">=18"
+  },
+  "peerDependenciesMeta": {
+    "react": {
+      "optional": true
+    },
+    "@effect/atom-react": {
+      "optional": true
+    }
+  }
+}