@sema-agent/settings-schema 6.1.0 → 6.3.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (39) hide show
  1. package/CHANGELOG.md +265 -0
  2. package/README.md +40 -9
  3. package/conformance/VERSION +1 -1
  4. package/conformance/cases/c41-s792-encoded-pem-identity/expected.json +166 -0
  5. package/conformance/cases/c41-s792-encoded-pem-identity/input.json +62 -0
  6. package/conformance/cases/c41-s792-encoded-pem-identity/meta.json +12 -0
  7. package/conformance/cases/c42-s792-unknown-key-secret-redacted/expected.json +120 -0
  8. package/conformance/cases/c42-s792-unknown-key-secret-redacted/input.json +25 -0
  9. package/conformance/cases/c42-s792-unknown-key-secret-redacted/meta.json +11 -0
  10. package/conformance/cases/c43-s792-form-and-deep-encoded-pem/expected.json +137 -0
  11. package/conformance/cases/c43-s792-form-and-deep-encoded-pem/input.json +44 -0
  12. package/conformance/cases/c43-s792-form-and-deep-encoded-pem/meta.json +12 -0
  13. package/conformance/cases/c44-s792-utf8-escape-glued-token/expected.json +115 -0
  14. package/conformance/cases/c44-s792-utf8-escape-glued-token/input.json +30 -0
  15. package/conformance/cases/c44-s792-utf8-escape-glued-token/meta.json +10 -0
  16. package/conformance/cases/c45-s792-identity-bounds-and-decode-depth/expected.json +185 -0
  17. package/conformance/cases/c45-s792-identity-bounds-and-decode-depth/input.json +78 -0
  18. package/conformance/cases/c45-s792-identity-bounds-and-decode-depth/meta.json +11 -0
  19. package/conformance/cases/c46-s811-host-name-url-userinfo-characterization/expected.json +88 -0
  20. package/conformance/cases/c46-s811-host-name-url-userinfo-characterization/input.json +18 -0
  21. package/conformance/cases/c46-s811-host-name-url-userinfo-characterization/meta.json +6 -0
  22. package/conformance/cases/c47-s811-roles-key-url-userinfo-characterization/expected.json +98 -0
  23. package/conformance/cases/c47-s811-roles-key-url-userinfo-characterization/input.json +26 -0
  24. package/conformance/cases/c47-s811-roles-key-url-userinfo-characterization/meta.json +6 -0
  25. package/conformance/cases/cli01-model-name-nfc-vs-nfd/expected.json +0 -8
  26. package/conformance/cases/cli01-model-name-nfc-vs-nfd/meta.json +2 -1
  27. package/conformance/cases/cli02-control-and-zero-width-chars/expected.json +0 -8
  28. package/conformance/cases/cli02-control-and-zero-width-chars/meta.json +2 -1
  29. package/dist/config-fns.d.ts +62 -14
  30. package/dist/config-fns.js +105 -30
  31. package/dist/cross-session.d.ts +8 -5
  32. package/dist/cross-session.js +8 -5
  33. package/dist/fleet.d.ts +163 -0
  34. package/dist/fleet.js +126 -5
  35. package/dist/secret-scan.d.ts +39 -0
  36. package/dist/secret-scan.js +110 -0
  37. package/dist/types.d.ts +79 -72
  38. package/dist/types.js +17 -31
  39. package/package.json +2 -2
package/dist/types.d.ts CHANGED
@@ -18,9 +18,10 @@
18
18
  import { z } from "zod";
19
19
  /** A private-key PEM header (`-----BEGIN [RSA |EC |OPENSSH |ENCRYPTED ]PRIVATE KEY`), unanchored — the ONE definition
20
20
  * of that shape: {@link SECRET_LITERAL_RE} is composed from it (anchored, as one of its branches), and
21
- * `redactSecrets` (config-fns) tests it ANYWHERE in a string. It carries spaces, so the token-splitting detector
22
- * {@link containsSecretToken} only sees it at the very start of a string; a PEM behind a newline or a `key: ` prefix
23
- * slipped past (S-712 codex review [high]). Public keys / certificates never match (see above). */
21
+ * `redactSecrets` (config-fns) tests it ANYWHERE in a string, on every display-side normalized form. It carries spaces,
22
+ * so the token-splitting detector {@link containsSecretToken} only sees it at the very start of a string; a PEM behind
23
+ * a newline or a `key: ` prefix slipped past (S-712 codex review [high]), and a `key=`-prefixed percent-encoded one
24
+ * hid it behind `%20` on the raw form, a form-urlencoded one behind `+` (6.3.0). Public keys / certificates never match. */
24
25
  export declare const PRIVATE_KEY_PEM_HEADER: RegExp;
25
26
  export declare const SECRET_LITERAL_RE: RegExp;
26
27
  export declare const ENV_NAME: z.ZodEffects<z.ZodString, string, string>;
@@ -29,9 +30,15 @@ export declare const ENV_NAME: z.ZodEffects<z.ZodString, string, string>;
29
30
  * fs path — so the worker dies at exec/boot, not at config edit. A NUL is never legitimate in a command / path
30
31
  * / host / image, so reject it on every exec-bound string field (mcp stdio + the whole remoteExec contract). R20. */
31
32
  export declare const hasNul: (s: string) => boolean;
32
- /** Does `s` contain a secret-shaped token? Scans the raw string AND a percent-decoded form (a secret can hide
33
- * as `%73%6B-…`) — so mcp args / dockerHost / URL components all get uniform percent-decode coverage. Tokenized
34
- * + JWT-aware (see scanForSecret). Shared by NON_SECRET_URL + dockerHost + mcp stdio. Round-4/5/11. */
33
+ /** Does `s` contain a secret-shaped token? Scans every percent layer of it — the raw string AND up to three tolerant
34
+ * percent-decoded layers (a secret can hide as `%73%6B-…`; the ONE definition of those layers is `percentLayers` in the
35
+ * package-private `./secret-scan`) — so mcp args / dockerHost / URL components all get uniform percent-decode coverage.
36
+ * Tokenized + JWT-aware (see scanForSecret). Shared by NON_SECRET_URL + dockerHost + mcp stdio. Round-4/5/11. (6.3.0 moved
37
+ * the decode loop out, unchanged in result — same layers, same bound, same verdict — and made it exception-free; the
38
+ * display-side readings the redactor also judges are not this detector's.) We do NOT fail-closed on a bare `%` — that
39
+ * would false-reject legit values like `100%` / `%s`. A secret glued to a malformed escape (`%ZZsk-`) is an accepted
40
+ * coarse-heuristic gap (no consumer reconstructs it; the real guarantee is the env-NAME boundary on structured fields).
41
+ * R11/R13/R14. */
35
42
  export declare function containsSecretToken(s: string): boolean;
36
43
  /** Scan a URL's PATH + query + fragment (KEYS and values, decoded, tokenized) for a secret-shaped literal.
37
44
  * Userinfo is handled separately (NON_SECRET_URL bans it; dockerHost scans the ssh user). Round-4/5. */
@@ -422,14 +429,14 @@ export declare const TierBindings: z.ZodObject<{
422
429
  flash: z.ZodOptional<z.ZodString>;
423
430
  lite: z.ZodOptional<z.ZodString>;
424
431
  }, "strip", z.ZodTypeAny, {
425
- ultra?: string | undefined;
426
432
  max?: string | undefined;
433
+ ultra?: string | undefined;
427
434
  pro?: string | undefined;
428
435
  flash?: string | undefined;
429
436
  lite?: string | undefined;
430
437
  }, {
431
- ultra?: string | undefined;
432
438
  max?: string | undefined;
439
+ ultra?: string | undefined;
433
440
  pro?: string | undefined;
434
441
  flash?: string | undefined;
435
442
  lite?: string | undefined;
@@ -446,14 +453,14 @@ export declare const TierGroup: z.ZodObject<{
446
453
  flash: z.ZodOptional<z.ZodString>;
447
454
  lite: z.ZodOptional<z.ZodString>;
448
455
  }, "strip", z.ZodTypeAny, {
449
- ultra?: string | undefined;
450
456
  max?: string | undefined;
457
+ ultra?: string | undefined;
451
458
  pro?: string | undefined;
452
459
  flash?: string | undefined;
453
460
  lite?: string | undefined;
454
461
  }, {
455
- ultra?: string | undefined;
456
462
  max?: string | undefined;
463
+ ultra?: string | undefined;
457
464
  pro?: string | undefined;
458
465
  flash?: string | undefined;
459
466
  lite?: string | undefined;
@@ -462,8 +469,8 @@ export declare const TierGroup: z.ZodObject<{
462
469
  }, "strip", z.ZodTypeAny, {
463
470
  name: string;
464
471
  tiers: {
465
- ultra?: string | undefined;
466
472
  max?: string | undefined;
473
+ ultra?: string | undefined;
467
474
  pro?: string | undefined;
468
475
  flash?: string | undefined;
469
476
  lite?: string | undefined;
@@ -473,8 +480,8 @@ export declare const TierGroup: z.ZodObject<{
473
480
  name: string;
474
481
  notes?: string | undefined;
475
482
  tiers?: {
476
- ultra?: string | undefined;
477
483
  max?: string | undefined;
484
+ ultra?: string | undefined;
478
485
  pro?: string | undefined;
479
486
  flash?: string | undefined;
480
487
  lite?: string | undefined;
@@ -764,14 +771,14 @@ export declare const ModelsConfig: z.ZodEffects<z.ZodObject<{
764
771
  flash: z.ZodOptional<z.ZodString>;
765
772
  lite: z.ZodOptional<z.ZodString>;
766
773
  }, "strip", z.ZodTypeAny, {
767
- ultra?: string | undefined;
768
774
  max?: string | undefined;
775
+ ultra?: string | undefined;
769
776
  pro?: string | undefined;
770
777
  flash?: string | undefined;
771
778
  lite?: string | undefined;
772
779
  }, {
773
- ultra?: string | undefined;
774
780
  max?: string | undefined;
781
+ ultra?: string | undefined;
775
782
  pro?: string | undefined;
776
783
  flash?: string | undefined;
777
784
  lite?: string | undefined;
@@ -780,8 +787,8 @@ export declare const ModelsConfig: z.ZodEffects<z.ZodObject<{
780
787
  }, "strip", z.ZodTypeAny, {
781
788
  name: string;
782
789
  tiers: {
783
- ultra?: string | undefined;
784
790
  max?: string | undefined;
791
+ ultra?: string | undefined;
785
792
  pro?: string | undefined;
786
793
  flash?: string | undefined;
787
794
  lite?: string | undefined;
@@ -791,8 +798,8 @@ export declare const ModelsConfig: z.ZodEffects<z.ZodObject<{
791
798
  name: string;
792
799
  notes?: string | undefined;
793
800
  tiers?: {
794
- ultra?: string | undefined;
795
801
  max?: string | undefined;
802
+ ultra?: string | undefined;
796
803
  pro?: string | undefined;
797
804
  flash?: string | undefined;
798
805
  lite?: string | undefined;
@@ -846,8 +853,8 @@ export declare const ModelsConfig: z.ZodEffects<z.ZodObject<{
846
853
  tierGroups: {
847
854
  name: string;
848
855
  tiers: {
849
- ultra?: string | undefined;
850
856
  max?: string | undefined;
857
+ ultra?: string | undefined;
851
858
  pro?: string | undefined;
852
859
  flash?: string | undefined;
853
860
  lite?: string | undefined;
@@ -906,8 +913,8 @@ export declare const ModelsConfig: z.ZodEffects<z.ZodObject<{
906
913
  name: string;
907
914
  notes?: string | undefined;
908
915
  tiers?: {
909
- ultra?: string | undefined;
910
916
  max?: string | undefined;
917
+ ultra?: string | undefined;
911
918
  pro?: string | undefined;
912
919
  flash?: string | undefined;
913
920
  lite?: string | undefined;
@@ -960,8 +967,8 @@ export declare const ModelsConfig: z.ZodEffects<z.ZodObject<{
960
967
  tierGroups: {
961
968
  name: string;
962
969
  tiers: {
963
- ultra?: string | undefined;
964
970
  max?: string | undefined;
971
+ ultra?: string | undefined;
965
972
  pro?: string | undefined;
966
973
  flash?: string | undefined;
967
974
  lite?: string | undefined;
@@ -1020,8 +1027,8 @@ export declare const ModelsConfig: z.ZodEffects<z.ZodObject<{
1020
1027
  name: string;
1021
1028
  notes?: string | undefined;
1022
1029
  tiers?: {
1023
- ultra?: string | undefined;
1024
1030
  max?: string | undefined;
1031
+ ultra?: string | undefined;
1025
1032
  pro?: string | undefined;
1026
1033
  flash?: string | undefined;
1027
1034
  lite?: string | undefined;
@@ -7318,13 +7325,13 @@ export declare const McpTransport: z.ZodDiscriminatedUnion<"kind", [z.ZodObject<
7318
7325
  * env-NAME ref (no secret). Empty → the worker forwards no principal (server sees an anonymous call). */
7319
7326
  principalHeader: z.ZodOptional<z.ZodEffects<z.ZodString, string, string>>;
7320
7327
  }, "strip", z.ZodTypeAny, {
7321
- kind: "http";
7322
7328
  url: string;
7329
+ kind: "http";
7323
7330
  headerRefs?: Record<string, string> | undefined;
7324
7331
  principalHeader?: string | undefined;
7325
7332
  }, {
7326
- kind: "http";
7327
7333
  url: string;
7334
+ kind: "http";
7328
7335
  headerRefs?: Record<string, string> | undefined;
7329
7336
  principalHeader?: string | undefined;
7330
7337
  }>]>;
@@ -7367,13 +7374,13 @@ export declare const McpServerSpec: z.ZodObject<{
7367
7374
  * env-NAME ref (no secret). Empty → the worker forwards no principal (server sees an anonymous call). */
7368
7375
  principalHeader: z.ZodOptional<z.ZodEffects<z.ZodString, string, string>>;
7369
7376
  }, "strip", z.ZodTypeAny, {
7370
- kind: "http";
7371
7377
  url: string;
7378
+ kind: "http";
7372
7379
  headerRefs?: Record<string, string> | undefined;
7373
7380
  principalHeader?: string | undefined;
7374
7381
  }, {
7375
- kind: "http";
7376
7382
  url: string;
7383
+ kind: "http";
7377
7384
  headerRefs?: Record<string, string> | undefined;
7378
7385
  principalHeader?: string | undefined;
7379
7386
  }>]>;
@@ -7437,8 +7444,8 @@ export declare const McpServerSpec: z.ZodObject<{
7437
7444
  args?: string[] | undefined;
7438
7445
  envRefs?: Record<string, string> | undefined;
7439
7446
  } | {
7440
- kind: "http";
7441
7447
  url: string;
7448
+ kind: "http";
7442
7449
  headerRefs?: Record<string, string> | undefined;
7443
7450
  principalHeader?: string | undefined;
7444
7451
  };
@@ -7456,8 +7463,8 @@ export declare const McpServerSpec: z.ZodObject<{
7456
7463
  args?: string[] | undefined;
7457
7464
  envRefs?: Record<string, string> | undefined;
7458
7465
  } | {
7459
- kind: "http";
7460
7466
  url: string;
7467
+ kind: "http";
7461
7468
  headerRefs?: Record<string, string> | undefined;
7462
7469
  principalHeader?: string | undefined;
7463
7470
  };
@@ -7502,13 +7509,13 @@ export declare const McpConfig: z.ZodEffects<z.ZodObject<{
7502
7509
  * env-NAME ref (no secret). Empty → the worker forwards no principal (server sees an anonymous call). */
7503
7510
  principalHeader: z.ZodOptional<z.ZodEffects<z.ZodString, string, string>>;
7504
7511
  }, "strip", z.ZodTypeAny, {
7505
- kind: "http";
7506
7512
  url: string;
7513
+ kind: "http";
7507
7514
  headerRefs?: Record<string, string> | undefined;
7508
7515
  principalHeader?: string | undefined;
7509
7516
  }, {
7510
- kind: "http";
7511
7517
  url: string;
7518
+ kind: "http";
7512
7519
  headerRefs?: Record<string, string> | undefined;
7513
7520
  principalHeader?: string | undefined;
7514
7521
  }>]>;
@@ -7572,8 +7579,8 @@ export declare const McpConfig: z.ZodEffects<z.ZodObject<{
7572
7579
  args?: string[] | undefined;
7573
7580
  envRefs?: Record<string, string> | undefined;
7574
7581
  } | {
7575
- kind: "http";
7576
7582
  url: string;
7583
+ kind: "http";
7577
7584
  headerRefs?: Record<string, string> | undefined;
7578
7585
  principalHeader?: string | undefined;
7579
7586
  };
@@ -7591,8 +7598,8 @@ export declare const McpConfig: z.ZodEffects<z.ZodObject<{
7591
7598
  args?: string[] | undefined;
7592
7599
  envRefs?: Record<string, string> | undefined;
7593
7600
  } | {
7594
- kind: "http";
7595
7601
  url: string;
7602
+ kind: "http";
7596
7603
  headerRefs?: Record<string, string> | undefined;
7597
7604
  principalHeader?: string | undefined;
7598
7605
  };
@@ -7618,8 +7625,8 @@ export declare const McpConfig: z.ZodEffects<z.ZodObject<{
7618
7625
  args?: string[] | undefined;
7619
7626
  envRefs?: Record<string, string> | undefined;
7620
7627
  } | {
7621
- kind: "http";
7622
7628
  url: string;
7629
+ kind: "http";
7623
7630
  headerRefs?: Record<string, string> | undefined;
7624
7631
  principalHeader?: string | undefined;
7625
7632
  };
@@ -7639,8 +7646,8 @@ export declare const McpConfig: z.ZodEffects<z.ZodObject<{
7639
7646
  args?: string[] | undefined;
7640
7647
  envRefs?: Record<string, string> | undefined;
7641
7648
  } | {
7642
- kind: "http";
7643
7649
  url: string;
7650
+ kind: "http";
7644
7651
  headerRefs?: Record<string, string> | undefined;
7645
7652
  principalHeader?: string | undefined;
7646
7653
  };
@@ -7666,8 +7673,8 @@ export declare const McpConfig: z.ZodEffects<z.ZodObject<{
7666
7673
  args?: string[] | undefined;
7667
7674
  envRefs?: Record<string, string> | undefined;
7668
7675
  } | {
7669
- kind: "http";
7670
7676
  url: string;
7677
+ kind: "http";
7671
7678
  headerRefs?: Record<string, string> | undefined;
7672
7679
  principalHeader?: string | undefined;
7673
7680
  };
@@ -7687,8 +7694,8 @@ export declare const McpConfig: z.ZodEffects<z.ZodObject<{
7687
7694
  args?: string[] | undefined;
7688
7695
  envRefs?: Record<string, string> | undefined;
7689
7696
  } | {
7690
- kind: "http";
7691
7697
  url: string;
7698
+ kind: "http";
7692
7699
  headerRefs?: Record<string, string> | undefined;
7693
7700
  principalHeader?: string | undefined;
7694
7701
  };
@@ -7726,11 +7733,11 @@ export declare const PluginSource: z.ZodDiscriminatedUnion<"kind", [z.ZodObject<
7726
7733
  kind: z.ZodLiteral<"git">;
7727
7734
  url: z.ZodEffects<z.ZodEffects<z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, string, string>, string, string>, string, string>;
7728
7735
  }, "strip", z.ZodTypeAny, {
7729
- kind: "git";
7730
7736
  url: string;
7731
- }, {
7732
7737
  kind: "git";
7738
+ }, {
7733
7739
  url: string;
7740
+ kind: "git";
7734
7741
  }>, z.ZodObject<{
7735
7742
  kind: z.ZodLiteral<"marketplace">;
7736
7743
  marketplace: z.ZodString;
@@ -7752,11 +7759,11 @@ export declare const PluginSpec: z.ZodObject<{
7752
7759
  kind: z.ZodLiteral<"git">;
7753
7760
  url: z.ZodEffects<z.ZodEffects<z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, string, string>, string, string>, string, string>;
7754
7761
  }, "strip", z.ZodTypeAny, {
7755
- kind: "git";
7756
7762
  url: string;
7757
- }, {
7758
7763
  kind: "git";
7764
+ }, {
7759
7765
  url: string;
7766
+ kind: "git";
7760
7767
  }>, z.ZodObject<{
7761
7768
  kind: z.ZodLiteral<"marketplace">;
7762
7769
  marketplace: z.ZodString;
@@ -7781,8 +7788,8 @@ export declare const PluginSpec: z.ZodObject<{
7781
7788
  name: string;
7782
7789
  enabled: boolean;
7783
7790
  source: {
7784
- kind: "git";
7785
7791
  url: string;
7792
+ kind: "git";
7786
7793
  } | {
7787
7794
  kind: "marketplace";
7788
7795
  marketplace: string;
@@ -7794,8 +7801,8 @@ export declare const PluginSpec: z.ZodObject<{
7794
7801
  }, {
7795
7802
  name: string;
7796
7803
  source: {
7797
- kind: "git";
7798
7804
  url: string;
7805
+ kind: "git";
7799
7806
  } | {
7800
7807
  kind: "marketplace";
7801
7808
  marketplace: string;
@@ -7815,11 +7822,11 @@ export declare const PluginsConfig: z.ZodEffects<z.ZodObject<{
7815
7822
  kind: z.ZodLiteral<"git">;
7816
7823
  url: z.ZodEffects<z.ZodEffects<z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, string, string>, string, string>, string, string>;
7817
7824
  }, "strip", z.ZodTypeAny, {
7818
- kind: "git";
7819
7825
  url: string;
7820
- }, {
7821
7826
  kind: "git";
7827
+ }, {
7822
7828
  url: string;
7829
+ kind: "git";
7823
7830
  }>, z.ZodObject<{
7824
7831
  kind: z.ZodLiteral<"marketplace">;
7825
7832
  marketplace: z.ZodString;
@@ -7844,8 +7851,8 @@ export declare const PluginsConfig: z.ZodEffects<z.ZodObject<{
7844
7851
  name: string;
7845
7852
  enabled: boolean;
7846
7853
  source: {
7847
- kind: "git";
7848
7854
  url: string;
7855
+ kind: "git";
7849
7856
  } | {
7850
7857
  kind: "marketplace";
7851
7858
  marketplace: string;
@@ -7857,8 +7864,8 @@ export declare const PluginsConfig: z.ZodEffects<z.ZodObject<{
7857
7864
  }, {
7858
7865
  name: string;
7859
7866
  source: {
7860
- kind: "git";
7861
7867
  url: string;
7868
+ kind: "git";
7862
7869
  } | {
7863
7870
  kind: "marketplace";
7864
7871
  marketplace: string;
@@ -7874,8 +7881,8 @@ export declare const PluginsConfig: z.ZodEffects<z.ZodObject<{
7874
7881
  name: string;
7875
7882
  enabled: boolean;
7876
7883
  source: {
7877
- kind: "git";
7878
7884
  url: string;
7885
+ kind: "git";
7879
7886
  } | {
7880
7887
  kind: "marketplace";
7881
7888
  marketplace: string;
@@ -7889,8 +7896,8 @@ export declare const PluginsConfig: z.ZodEffects<z.ZodObject<{
7889
7896
  plugins?: {
7890
7897
  name: string;
7891
7898
  source: {
7892
- kind: "git";
7893
7899
  url: string;
7900
+ kind: "git";
7894
7901
  } | {
7895
7902
  kind: "marketplace";
7896
7903
  marketplace: string;
@@ -7906,8 +7913,8 @@ export declare const PluginsConfig: z.ZodEffects<z.ZodObject<{
7906
7913
  name: string;
7907
7914
  enabled: boolean;
7908
7915
  source: {
7909
- kind: "git";
7910
7916
  url: string;
7917
+ kind: "git";
7911
7918
  } | {
7912
7919
  kind: "marketplace";
7913
7920
  marketplace: string;
@@ -7921,8 +7928,8 @@ export declare const PluginsConfig: z.ZodEffects<z.ZodObject<{
7921
7928
  plugins?: {
7922
7929
  name: string;
7923
7930
  source: {
7924
- kind: "git";
7925
7931
  url: string;
7932
+ kind: "git";
7926
7933
  } | {
7927
7934
  kind: "marketplace";
7928
7935
  marketplace: string;
@@ -9680,14 +9687,14 @@ export declare const DOMAIN_SCHEMAS: {
9680
9687
  flash: z.ZodOptional<z.ZodString>;
9681
9688
  lite: z.ZodOptional<z.ZodString>;
9682
9689
  }, "strip", z.ZodTypeAny, {
9683
- ultra?: string | undefined;
9684
9690
  max?: string | undefined;
9691
+ ultra?: string | undefined;
9685
9692
  pro?: string | undefined;
9686
9693
  flash?: string | undefined;
9687
9694
  lite?: string | undefined;
9688
9695
  }, {
9689
- ultra?: string | undefined;
9690
9696
  max?: string | undefined;
9697
+ ultra?: string | undefined;
9691
9698
  pro?: string | undefined;
9692
9699
  flash?: string | undefined;
9693
9700
  lite?: string | undefined;
@@ -9696,8 +9703,8 @@ export declare const DOMAIN_SCHEMAS: {
9696
9703
  }, "strip", z.ZodTypeAny, {
9697
9704
  name: string;
9698
9705
  tiers: {
9699
- ultra?: string | undefined;
9700
9706
  max?: string | undefined;
9707
+ ultra?: string | undefined;
9701
9708
  pro?: string | undefined;
9702
9709
  flash?: string | undefined;
9703
9710
  lite?: string | undefined;
@@ -9707,8 +9714,8 @@ export declare const DOMAIN_SCHEMAS: {
9707
9714
  name: string;
9708
9715
  notes?: string | undefined;
9709
9716
  tiers?: {
9710
- ultra?: string | undefined;
9711
9717
  max?: string | undefined;
9718
+ ultra?: string | undefined;
9712
9719
  pro?: string | undefined;
9713
9720
  flash?: string | undefined;
9714
9721
  lite?: string | undefined;
@@ -9762,8 +9769,8 @@ export declare const DOMAIN_SCHEMAS: {
9762
9769
  tierGroups: {
9763
9770
  name: string;
9764
9771
  tiers: {
9765
- ultra?: string | undefined;
9766
9772
  max?: string | undefined;
9773
+ ultra?: string | undefined;
9767
9774
  pro?: string | undefined;
9768
9775
  flash?: string | undefined;
9769
9776
  lite?: string | undefined;
@@ -9822,8 +9829,8 @@ export declare const DOMAIN_SCHEMAS: {
9822
9829
  name: string;
9823
9830
  notes?: string | undefined;
9824
9831
  tiers?: {
9825
- ultra?: string | undefined;
9826
9832
  max?: string | undefined;
9833
+ ultra?: string | undefined;
9827
9834
  pro?: string | undefined;
9828
9835
  flash?: string | undefined;
9829
9836
  lite?: string | undefined;
@@ -9876,8 +9883,8 @@ export declare const DOMAIN_SCHEMAS: {
9876
9883
  tierGroups: {
9877
9884
  name: string;
9878
9885
  tiers: {
9879
- ultra?: string | undefined;
9880
9886
  max?: string | undefined;
9887
+ ultra?: string | undefined;
9881
9888
  pro?: string | undefined;
9882
9889
  flash?: string | undefined;
9883
9890
  lite?: string | undefined;
@@ -9936,8 +9943,8 @@ export declare const DOMAIN_SCHEMAS: {
9936
9943
  name: string;
9937
9944
  notes?: string | undefined;
9938
9945
  tiers?: {
9939
- ultra?: string | undefined;
9940
9946
  max?: string | undefined;
9947
+ ultra?: string | undefined;
9941
9948
  pro?: string | undefined;
9942
9949
  flash?: string | undefined;
9943
9950
  lite?: string | undefined;
@@ -10205,13 +10212,13 @@ export declare const DOMAIN_SCHEMAS: {
10205
10212
  * env-NAME ref (no secret). Empty → the worker forwards no principal (server sees an anonymous call). */
10206
10213
  principalHeader: z.ZodOptional<z.ZodEffects<z.ZodString, string, string>>;
10207
10214
  }, "strip", z.ZodTypeAny, {
10208
- kind: "http";
10209
10215
  url: string;
10216
+ kind: "http";
10210
10217
  headerRefs?: Record<string, string> | undefined;
10211
10218
  principalHeader?: string | undefined;
10212
10219
  }, {
10213
- kind: "http";
10214
10220
  url: string;
10221
+ kind: "http";
10215
10222
  headerRefs?: Record<string, string> | undefined;
10216
10223
  principalHeader?: string | undefined;
10217
10224
  }>]>;
@@ -10275,8 +10282,8 @@ export declare const DOMAIN_SCHEMAS: {
10275
10282
  args?: string[] | undefined;
10276
10283
  envRefs?: Record<string, string> | undefined;
10277
10284
  } | {
10278
- kind: "http";
10279
10285
  url: string;
10286
+ kind: "http";
10280
10287
  headerRefs?: Record<string, string> | undefined;
10281
10288
  principalHeader?: string | undefined;
10282
10289
  };
@@ -10294,8 +10301,8 @@ export declare const DOMAIN_SCHEMAS: {
10294
10301
  args?: string[] | undefined;
10295
10302
  envRefs?: Record<string, string> | undefined;
10296
10303
  } | {
10297
- kind: "http";
10298
10304
  url: string;
10305
+ kind: "http";
10299
10306
  headerRefs?: Record<string, string> | undefined;
10300
10307
  principalHeader?: string | undefined;
10301
10308
  };
@@ -10321,8 +10328,8 @@ export declare const DOMAIN_SCHEMAS: {
10321
10328
  args?: string[] | undefined;
10322
10329
  envRefs?: Record<string, string> | undefined;
10323
10330
  } | {
10324
- kind: "http";
10325
10331
  url: string;
10332
+ kind: "http";
10326
10333
  headerRefs?: Record<string, string> | undefined;
10327
10334
  principalHeader?: string | undefined;
10328
10335
  };
@@ -10342,8 +10349,8 @@ export declare const DOMAIN_SCHEMAS: {
10342
10349
  args?: string[] | undefined;
10343
10350
  envRefs?: Record<string, string> | undefined;
10344
10351
  } | {
10345
- kind: "http";
10346
10352
  url: string;
10353
+ kind: "http";
10347
10354
  headerRefs?: Record<string, string> | undefined;
10348
10355
  principalHeader?: string | undefined;
10349
10356
  };
@@ -10369,8 +10376,8 @@ export declare const DOMAIN_SCHEMAS: {
10369
10376
  args?: string[] | undefined;
10370
10377
  envRefs?: Record<string, string> | undefined;
10371
10378
  } | {
10372
- kind: "http";
10373
10379
  url: string;
10380
+ kind: "http";
10374
10381
  headerRefs?: Record<string, string> | undefined;
10375
10382
  principalHeader?: string | undefined;
10376
10383
  };
@@ -10390,8 +10397,8 @@ export declare const DOMAIN_SCHEMAS: {
10390
10397
  args?: string[] | undefined;
10391
10398
  envRefs?: Record<string, string> | undefined;
10392
10399
  } | {
10393
- kind: "http";
10394
10400
  url: string;
10401
+ kind: "http";
10395
10402
  headerRefs?: Record<string, string> | undefined;
10396
10403
  principalHeader?: string | undefined;
10397
10404
  };
@@ -10414,11 +10421,11 @@ export declare const DOMAIN_SCHEMAS: {
10414
10421
  kind: z.ZodLiteral<"git">;
10415
10422
  url: z.ZodEffects<z.ZodEffects<z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, string, string>, string, string>, string, string>;
10416
10423
  }, "strip", z.ZodTypeAny, {
10417
- kind: "git";
10418
10424
  url: string;
10419
- }, {
10420
10425
  kind: "git";
10426
+ }, {
10421
10427
  url: string;
10428
+ kind: "git";
10422
10429
  }>, z.ZodObject<{
10423
10430
  kind: z.ZodLiteral<"marketplace">;
10424
10431
  marketplace: z.ZodString;
@@ -10443,8 +10450,8 @@ export declare const DOMAIN_SCHEMAS: {
10443
10450
  name: string;
10444
10451
  enabled: boolean;
10445
10452
  source: {
10446
- kind: "git";
10447
10453
  url: string;
10454
+ kind: "git";
10448
10455
  } | {
10449
10456
  kind: "marketplace";
10450
10457
  marketplace: string;
@@ -10456,8 +10463,8 @@ export declare const DOMAIN_SCHEMAS: {
10456
10463
  }, {
10457
10464
  name: string;
10458
10465
  source: {
10459
- kind: "git";
10460
10466
  url: string;
10467
+ kind: "git";
10461
10468
  } | {
10462
10469
  kind: "marketplace";
10463
10470
  marketplace: string;
@@ -10473,8 +10480,8 @@ export declare const DOMAIN_SCHEMAS: {
10473
10480
  name: string;
10474
10481
  enabled: boolean;
10475
10482
  source: {
10476
- kind: "git";
10477
10483
  url: string;
10484
+ kind: "git";
10478
10485
  } | {
10479
10486
  kind: "marketplace";
10480
10487
  marketplace: string;
@@ -10488,8 +10495,8 @@ export declare const DOMAIN_SCHEMAS: {
10488
10495
  plugins?: {
10489
10496
  name: string;
10490
10497
  source: {
10491
- kind: "git";
10492
10498
  url: string;
10499
+ kind: "git";
10493
10500
  } | {
10494
10501
  kind: "marketplace";
10495
10502
  marketplace: string;
@@ -10505,8 +10512,8 @@ export declare const DOMAIN_SCHEMAS: {
10505
10512
  name: string;
10506
10513
  enabled: boolean;
10507
10514
  source: {
10508
- kind: "git";
10509
10515
  url: string;
10516
+ kind: "git";
10510
10517
  } | {
10511
10518
  kind: "marketplace";
10512
10519
  marketplace: string;
@@ -10520,8 +10527,8 @@ export declare const DOMAIN_SCHEMAS: {
10520
10527
  plugins?: {
10521
10528
  name: string;
10522
10529
  source: {
10523
- kind: "git";
10524
10530
  url: string;
10531
+ kind: "git";
10525
10532
  } | {
10526
10533
  kind: "marketplace";
10527
10534
  marketplace: string;