@sylphx/contract 0.2.0

package/dist/schemas/env-var.d.ts

@@ -0,0 +1,68 @@
+/**
+ * EnvVar — plain environment-variable key/value injected at runtime.
+ * Distinct from `Secret`: envVars are surface-level config; secrets are
+ * versioned, audited, AES-256-GCM encrypted blobs.
+ *
+ * Production (GET /projects/:id/env-vars) returns KEY-ONLY rows — decrypted
+ * values never leave the server. Callers pass values on write only.
+ */
+import { Schema } from 'effect';
+export declare const EnvVar: Schema.Struct<{
+    key: typeof Schema.String;
+    value: Schema.optional<typeof Schema.String>;
+    isSecret: Schema.optional<typeof Schema.Boolean>;
+    secret: Schema.optional<typeof Schema.Boolean>;
+}>;
+export type EnvVar = typeof EnvVar.Type;
+export declare const EnvVarInput: Schema.Struct<{
+    key: typeof Schema.String;
+    value: typeof Schema.String;
+    secret: Schema.optional<typeof Schema.Boolean>;
+}>;
+export type EnvVarInput = typeof EnvVarInput.Type;
+export declare const SetEnvVarsInput: Schema.Struct<{
+    envType: Schema.optional<typeof Schema.String>;
+    envId: Schema.optional<typeof Schema.String>;
+    /** When set, secrets are scoped to an environment_service (esvc_xxx). */
+    serviceId: Schema.optional<typeof Schema.String>;
+    vars: Schema.Array$<Schema.Struct<{
+        key: typeof Schema.String;
+        value: typeof Schema.String;
+        secret: Schema.optional<typeof Schema.Boolean>;
+    }>>;
+}>;
+export type SetEnvVarsInput = typeof SetEnvVarsInput.Type;
+export declare const EnvVarListResult: Schema.Struct<{
+    object: Schema.Literal<["list"]>;
+    envId: typeof Schema.String;
+    envType: typeof Schema.String;
+    scope: Schema.Literal<["environment", "service"]>;
+    serviceId: Schema.optional<typeof Schema.String>;
+    data: Schema.Array$<Schema.Struct<{
+        key: typeof Schema.String;
+        value: Schema.optional<typeof Schema.String>;
+        isSecret: Schema.optional<typeof Schema.Boolean>;
+        secret: Schema.optional<typeof Schema.Boolean>;
+    }>>;
+}>;
+export type EnvVarListResult = typeof EnvVarListResult.Type;
+export declare const SetEnvVarsResult: Schema.Struct<{
+    envId: typeof Schema.String;
+    envType: typeof Schema.String;
+    scope: Schema.Literal<["environment", "service"]>;
+    serviceId: Schema.NullOr<typeof Schema.String>;
+    succeeded: typeof Schema.Number;
+    failed: typeof Schema.Number;
+    queued: typeof Schema.Boolean;
+    generation: Schema.optional<Schema.NullOr<typeof Schema.Number>>;
+    errors: Schema.optional<Schema.Array$<typeof Schema.String>>;
+}>;
+export type SetEnvVarsResult = typeof SetEnvVarsResult.Type;
+export declare const DeleteEnvVarResult: Schema.Struct<{
+    deleted: typeof Schema.Boolean;
+    key: typeof Schema.String;
+    scope: Schema.Literal<["environment", "service"]>;
+    serviceId: Schema.NullOr<typeof Schema.String>;
+}>;
+export type DeleteEnvVarResult = typeof DeleteEnvVarResult.Type;
+//# sourceMappingURL=env-var.d.ts.map

package/dist/schemas/env-var.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"env-var.d.ts","sourceRoot":"","sources":["../../src/schemas/env-var.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAA;AAE/B,eAAO,MAAM,MAAM;;;;;EAKjB,CAAA;AACF,MAAM,MAAM,MAAM,GAAG,OAAO,MAAM,CAAC,IAAI,CAAA;AAEvC,eAAO,MAAM,WAAW;;;;EAItB,CAAA;AACF,MAAM,MAAM,WAAW,GAAG,OAAO,WAAW,CAAC,IAAI,CAAA;AAEjD,eAAO,MAAM,eAAe;;;IAG3B,yEAAyE;;;;;;;EAGxE,CAAA;AACF,MAAM,MAAM,eAAe,GAAG,OAAO,eAAe,CAAC,IAAI,CAAA;AAEzD,eAAO,MAAM,gBAAgB;;;;;;;;;;;;EAO3B,CAAA;AACF,MAAM,MAAM,gBAAgB,GAAG,OAAO,gBAAgB,CAAC,IAAI,CAAA;AAE3D,eAAO,MAAM,gBAAgB;;;;;;;;;;EAU3B,CAAA;AACF,MAAM,MAAM,gBAAgB,GAAG,OAAO,gBAAgB,CAAC,IAAI,CAAA;AAE3D,eAAO,MAAM,kBAAkB;;;;;EAK7B,CAAA;AACF,MAAM,MAAM,kBAAkB,GAAG,OAAO,kBAAkB,CAAC,IAAI,CAAA"}

package/dist/schemas/env-var.js

@@ -0,0 +1,52 @@
+/**
+ * EnvVar — plain environment-variable key/value injected at runtime.
+ * Distinct from `Secret`: envVars are surface-level config; secrets are
+ * versioned, audited, AES-256-GCM encrypted blobs.
+ *
+ * Production (GET /projects/:id/env-vars) returns KEY-ONLY rows — decrypted
+ * values never leave the server. Callers pass values on write only.
+ */
+import { Schema } from 'effect';
+export const EnvVar = Schema.Struct({
+    key: Schema.String,
+    value: Schema.optional(Schema.String),
+    isSecret: Schema.optional(Schema.Boolean),
+    secret: Schema.optional(Schema.Boolean),
+});
+export const EnvVarInput = Schema.Struct({
+    key: Schema.String,
+    value: Schema.String,
+    secret: Schema.optional(Schema.Boolean),
+});
+export const SetEnvVarsInput = Schema.Struct({
+    envType: Schema.optional(Schema.String),
+    envId: Schema.optional(Schema.String),
+    /** When set, secrets are scoped to an environment_service (esvc_xxx). */
+    serviceId: Schema.optional(Schema.String),
+    vars: Schema.Array(EnvVarInput),
+});
+export const EnvVarListResult = Schema.Struct({
+    object: Schema.Literal('list'),
+    envId: Schema.String,
+    envType: Schema.String,
+    scope: Schema.Literal('environment', 'service'),
+    serviceId: Schema.optional(Schema.String),
+    data: Schema.Array(EnvVar),
+});
+export const SetEnvVarsResult = Schema.Struct({
+    envId: Schema.String,
+    envType: Schema.String,
+    scope: Schema.Literal('environment', 'service'),
+    serviceId: Schema.NullOr(Schema.String),
+    succeeded: Schema.Number,
+    failed: Schema.Number,
+    queued: Schema.Boolean,
+    generation: Schema.optional(Schema.NullOr(Schema.Number)),
+    errors: Schema.optional(Schema.Array(Schema.String)),
+});
+export const DeleteEnvVarResult = Schema.Struct({
+    deleted: Schema.Boolean,
+    key: Schema.String,
+    scope: Schema.Literal('environment', 'service'),
+    serviceId: Schema.NullOr(Schema.String),
+});

package/dist/schemas/environment.d.ts

@@ -0,0 +1,392 @@
+/**
+ * Environment — a named deploy target within a project (production, staging,
+ * or an ephemeral preview). Carries lifecycle, DNS, and promotion config.
+ */
+import { Schema } from 'effect';
+export declare const Environment: Schema.Struct<{
+    id: Schema.brand<Schema.filter<typeof Schema.String>, "EnvironmentId">;
+    projectId: Schema.optional<typeof Schema.String>;
+    projectName: Schema.optional<typeof Schema.String>;
+    projectSlug: Schema.optional<typeof Schema.String>;
+    name: typeof Schema.String;
+    envType: typeof Schema.String;
+    isActive: typeof Schema.Boolean;
+    publicKey: Schema.optional<Schema.NullOr<typeof Schema.String>>;
+    secretKeyPrefix: Schema.optional<Schema.NullOr<typeof Schema.String>>;
+    secretKeyLastUsedAt: Schema.optional<Schema.NullOr<typeof Schema.String>>;
+    secretKeyRotatedAt: Schema.optional<Schema.NullOr<typeof Schema.String>>;
+    hasSecretKey: Schema.optional<typeof Schema.Boolean>;
+    hasPublicKey: Schema.optional<typeof Schema.Boolean>;
+    hasWebhookSecret: Schema.optional<typeof Schema.Boolean>;
+    hasDatabaseBranch: Schema.optional<typeof Schema.Boolean>;
+    allowedOrigins: Schema.optional<Schema.NullOr<Schema.Array$<typeof Schema.String>>>;
+    webhookUrl: Schema.optional<Schema.NullOr<typeof Schema.String>>;
+    settings: Schema.optional<Schema.NullOr<Schema.Record$<typeof Schema.String, typeof Schema.Unknown>>>;
+    url: Schema.optional<typeof Schema.String>;
+    deployAppId: Schema.optional<Schema.NullOr<typeof Schema.String>>;
+    namespace: Schema.optional<Schema.NullOr<typeof Schema.String>>;
+    createdAt: Schema.optional<typeof Schema.String>;
+    updatedAt: Schema.optional<typeof Schema.String>;
+    /** Embedded live deploy status (GET /environments/:envId only). */
+    status: Schema.optional<Schema.NullOr<Schema.Struct<{
+        status: typeof Schema.String;
+        url: Schema.optional<Schema.NullOr<typeof Schema.String>>;
+        lastDeployedAt: Schema.optional<Schema.NullOr<typeof Schema.String>>;
+    }>>>;
+}>;
+export type Environment = typeof Environment.Type;
+/** Reveal-secret returns a tombstone (prefix only — raw key never stored). */
+export declare const RevealSecretKeyResult: Schema.Struct<{
+    id: Schema.brand<Schema.filter<typeof Schema.String>, "EnvironmentId">;
+    envType: typeof Schema.String;
+    secretKeyPrefix: Schema.NullOr<typeof Schema.String>;
+}>;
+export type RevealSecretKeyResult = typeof RevealSecretKeyResult.Type;
+export declare const RegenerateWebhookSecretResult: Schema.Struct<{
+    environmentId: typeof Schema.String;
+    webhookSecret: typeof Schema.String;
+}>;
+export type RegenerateWebhookSecretResult = typeof RegenerateWebhookSecretResult.Type;
+export declare const EnvironmentKeys: Schema.Struct<{
+    id: Schema.brand<Schema.filter<typeof Schema.String>, "EnvironmentId">;
+    envType: typeof Schema.String;
+    secretKeyPrefix: Schema.NullOr<typeof Schema.String>;
+    publicKey: Schema.NullOr<typeof Schema.String>;
+    webhookSecretPrefix: Schema.NullOr<typeof Schema.String>;
+}>;
+export type EnvironmentKeys = typeof EnvironmentKeys.Type;
+export declare const ProvisionEnvironmentResult: Schema.Struct<{
+    envId: Schema.brand<Schema.filter<typeof Schema.String>, "EnvironmentId">;
+    namespace: typeof Schema.String;
+    status: typeof Schema.String;
+    message: Schema.optional<typeof Schema.String>;
+}>;
+export type ProvisionEnvironmentResult = typeof ProvisionEnvironmentResult.Type;
+export declare const CreateEnvironmentInput: Schema.Struct<{
+    name: typeof Schema.String;
+    envType: Schema.optional<typeof Schema.String>;
+    branchPattern: Schema.optional<typeof Schema.String>;
+    autoDeploy: Schema.optional<typeof Schema.Boolean>;
+    approvalRequired: Schema.optional<typeof Schema.Boolean>;
+    ephemeral: Schema.optional<typeof Schema.Boolean>;
+    ttl: Schema.optional<typeof Schema.String>;
+}>;
+export type CreateEnvironmentInput = typeof CreateEnvironmentInput.Type;
+export declare const CreateEnvironmentResult: Schema.Struct<{
+    id: Schema.brand<Schema.filter<typeof Schema.String>, "EnvironmentId">;
+    name: typeof Schema.String;
+    envType: Schema.optional<typeof Schema.String>;
+    publicKey: typeof Schema.String;
+    secretKey: typeof Schema.String;
+}>;
+export type CreateEnvironmentResult = typeof CreateEnvironmentResult.Type;
+export declare const UpdateEnvironmentInput: Schema.Struct<{
+    name: Schema.optional<typeof Schema.String>;
+    branchPattern: Schema.optional<typeof Schema.String>;
+    autoDeploy: Schema.optional<typeof Schema.Boolean>;
+    approvalRequired: Schema.optional<typeof Schema.Boolean>;
+    ephemeral: Schema.optional<typeof Schema.Boolean>;
+    ttl: Schema.optional<typeof Schema.String>;
+    allowedOrigins: Schema.optional<Schema.Array$<typeof Schema.String>>;
+    webhookUrl: Schema.optional<Schema.NullOr<typeof Schema.String>>;
+    webhookSecret: Schema.optional<Schema.NullOr<typeof Schema.String>>;
+    isActive: Schema.optional<typeof Schema.Boolean>;
+    githubRepo: Schema.optional<Schema.NullOr<typeof Schema.String>>;
+    githubBranch: Schema.optional<Schema.NullOr<typeof Schema.String>>;
+    useCustomRunner: Schema.optional<typeof Schema.Boolean>;
+    defaultFromEmail: Schema.optional<Schema.NullOr<typeof Schema.String>>;
+    defaultFromName: Schema.optional<Schema.NullOr<typeof Schema.String>>;
+    publicNetworking: Schema.optional<typeof Schema.Boolean>;
+    protection: Schema.optional<Schema.Literal<["open", "login-required"]>>;
+    runtimeClassName: Schema.optional<Schema.NullOr<typeof Schema.String>>;
+    defaultSandboxImage: Schema.optional<Schema.NullOr<typeof Schema.String>>;
+    defaultSecurityContext: Schema.optional<Schema.Struct<{
+        runAsNonRoot: Schema.optional<typeof Schema.Boolean>;
+        allowPrivilegeEscalation: Schema.optional<typeof Schema.Boolean>;
+        privileged: Schema.optional<typeof Schema.Boolean>;
+    }>>;
+    settings: Schema.optional<Schema.Record$<typeof Schema.String, typeof Schema.Unknown>>;
+}>;
+export type UpdateEnvironmentInput = typeof UpdateEnvironmentInput.Type;
+export declare const PromoteEnvironmentInput: Schema.Struct<{
+    sourceEnvId: Schema.brand<Schema.filter<typeof Schema.String>, "EnvironmentId">;
+}>;
+export type PromoteEnvironmentInput = typeof PromoteEnvironmentInput.Type;
+export declare const PromoteResult: Schema.Struct<{
+    promoted: typeof Schema.Number;
+    services: Schema.Array$<Schema.Struct<{
+        serviceId: Schema.brand<Schema.filter<typeof Schema.String>, "ServiceId">;
+        image: typeof Schema.String;
+    }>>;
+    sourceEnvironment: typeof Schema.String;
+    targetEnvironment: typeof Schema.String;
+}>;
+export type PromoteResult = typeof PromoteResult.Type;
+/**
+ * `GET /environments/projects/:id` — Console-only list-by-project-slug shape.
+ * Surfaces masked key prefixes alongside project metadata so the settings UI
+ * can render env chips without a second round-trip. Added in Wave 2d
+ * (ADR-084) to retire the last `@hono/zod-openapi` route in environments.ts.
+ */
+export declare const ListEnvironmentsByProjectSlugResult: Schema.Struct<{
+    app: Schema.Struct<{
+        id: typeof Schema.String;
+        name: typeof Schema.String;
+        slug: typeof Schema.String;
+    }>;
+    environments: Schema.Array$<Schema.Struct<{
+        id: Schema.brand<Schema.filter<typeof Schema.String>, "EnvironmentId">;
+        envType: typeof Schema.String;
+        name: typeof Schema.String;
+        publicKey: Schema.NullOr<typeof Schema.String>;
+        secretKeyPrefix: Schema.NullOr<typeof Schema.String>;
+        secretKeyLastUsedAt: Schema.NullOr<typeof Schema.String>;
+        secretKeyRotatedAt: typeof Schema.String;
+        isActive: typeof Schema.Boolean;
+    }>>;
+}>;
+export type ListEnvironmentsByProjectSlugResult = typeof ListEnvironmentsByProjectSlugResult.Type;
+/**
+ * OAuth provider configuration (BYOK) — per-environment OAuth app credentials.
+ * ADR-084 Wave 3E: contract coverage for the env-scoped BYOK endpoints that
+ * drive `apps/api/src/server/platform/routes/environments/oauth-providers.ts`.
+ * The client secret is never returned to callers — only the `clientId` prefix
+ * plus enable flag + timestamps surface through the API.
+ */
+export declare const OAuthProviderConfigView: Schema.Struct<{
+    provider: typeof Schema.String;
+    clientId: typeof Schema.String;
+    enabled: typeof Schema.Boolean;
+    createdAt: typeof Schema.String;
+    updatedAt: typeof Schema.String;
+}>;
+export type OAuthProviderConfigView = typeof OAuthProviderConfigView.Type;
+export declare const ListOAuthProvidersResult: Schema.Struct<{
+    providers: Schema.Array$<Schema.Struct<{
+        provider: typeof Schema.String;
+        clientId: typeof Schema.String;
+        enabled: typeof Schema.Boolean;
+        createdAt: typeof Schema.String;
+        updatedAt: typeof Schema.String;
+    }>>;
+}>;
+export type ListOAuthProvidersResult = typeof ListOAuthProvidersResult.Type;
+export declare const UpsertOAuthProviderInput: Schema.Struct<{
+    clientId: typeof Schema.String;
+    clientSecret: typeof Schema.String;
+    enabled: Schema.optional<typeof Schema.Boolean>;
+}>;
+export type UpsertOAuthProviderInput = typeof UpsertOAuthProviderInput.Type;
+export declare const UpsertOAuthProviderResult: Schema.Struct<{
+    provider: typeof Schema.String;
+    clientId: typeof Schema.String;
+    enabled: typeof Schema.Boolean;
+    createdAt: typeof Schema.String;
+    updatedAt: typeof Schema.String;
+}>;
+export type UpsertOAuthProviderResult = typeof UpsertOAuthProviderResult.Type;
+export declare const DeleteOAuthProviderResult: Schema.Struct<{
+    deleted: typeof Schema.Boolean;
+}>;
+export type DeleteOAuthProviderResult = typeof DeleteOAuthProviderResult.Type;
+/**
+ * Console-plane environment with exposed secret prefixes + key lifecycle
+ * timestamps. Superset of the BaaS `Environment` shape, kept as a separate
+ * type so internal operator views get tighter inference.
+ */
+export declare const EnvironmentWithKeys: Schema.Struct<{
+    id: Schema.brand<Schema.filter<typeof Schema.String>, "EnvironmentId">;
+    projectId: Schema.optional<typeof Schema.String>;
+    projectName: Schema.optional<typeof Schema.String>;
+    projectSlug: Schema.optional<typeof Schema.String>;
+    name: typeof Schema.String;
+    envType: typeof Schema.String;
+    isActive: typeof Schema.Boolean;
+    publicKey: Schema.optional<Schema.NullOr<typeof Schema.String>>;
+    secretKeyPrefix: Schema.optional<Schema.NullOr<typeof Schema.String>>;
+    secretKeyLastUsedAt: Schema.optional<Schema.NullOr<typeof Schema.String>>;
+    secretKeyRotatedAt: Schema.optional<Schema.NullOr<typeof Schema.String>>;
+    hasSecretKey: Schema.optional<typeof Schema.Boolean>;
+    hasPublicKey: Schema.optional<typeof Schema.Boolean>;
+    hasWebhookSecret: Schema.optional<typeof Schema.Boolean>;
+    hasDatabaseBranch: Schema.optional<typeof Schema.Boolean>;
+    allowedOrigins: Schema.optional<Schema.NullOr<Schema.Array$<typeof Schema.String>>>;
+    webhookUrl: Schema.optional<Schema.NullOr<typeof Schema.String>>;
+    settings: Schema.optional<Schema.NullOr<Schema.Record$<typeof Schema.String, typeof Schema.Unknown>>>;
+    url: Schema.optional<typeof Schema.String>;
+    deployAppId: Schema.optional<Schema.NullOr<typeof Schema.String>>;
+    namespace: Schema.optional<Schema.NullOr<typeof Schema.String>>;
+    createdAt: Schema.optional<typeof Schema.String>;
+    updatedAt: Schema.optional<typeof Schema.String>;
+    /** Embedded live deploy status (GET /environments/:envId only). */
+    status: Schema.optional<Schema.NullOr<Schema.Struct<{
+        status: typeof Schema.String;
+        url: Schema.optional<Schema.NullOr<typeof Schema.String>>;
+        lastDeployedAt: Schema.optional<Schema.NullOr<typeof Schema.String>>;
+    }>>>;
+}>;
+export type EnvironmentWithKeys = typeof Environment.Type;
+/** Environment type enum. */
+export declare const EnvType: Schema.Literal<["development", "staging", "production"]>;
+export type EnvType = typeof EnvType.Type;
+/** Environment settings envelope. */
+export declare const EnvSettings: Schema.Struct<{
+    rateLimits: Schema.optional<Schema.Struct<{
+        requestsPerMinute: Schema.optional<typeof Schema.Number>;
+        requestsPerDay: Schema.optional<typeof Schema.Number>;
+    }>>;
+    loggingLevel: Schema.optional<Schema.Literal<["debug", "info", "warn", "error"]>>;
+    testMode: Schema.optional<typeof Schema.Boolean>;
+    skipEmailVerification: Schema.optional<typeof Schema.Boolean>;
+}>;
+export type EnvSettings = typeof EnvSettings.Type;
+/** `GET /environments` — list all environments. */
+export declare const ListEnvironmentsResult: Schema.Struct<{
+    environments: Schema.Array$<Schema.Struct<{
+        id: Schema.brand<Schema.filter<typeof Schema.String>, "EnvironmentId">;
+        projectId: Schema.optional<typeof Schema.String>;
+        projectName: Schema.optional<typeof Schema.String>;
+        projectSlug: Schema.optional<typeof Schema.String>;
+        name: typeof Schema.String;
+        envType: typeof Schema.String;
+        isActive: typeof Schema.Boolean;
+        publicKey: Schema.optional<Schema.NullOr<typeof Schema.String>>;
+        secretKeyPrefix: Schema.optional<Schema.NullOr<typeof Schema.String>>;
+        secretKeyLastUsedAt: Schema.optional<Schema.NullOr<typeof Schema.String>>;
+        secretKeyRotatedAt: Schema.optional<Schema.NullOr<typeof Schema.String>>;
+        hasSecretKey: Schema.optional<typeof Schema.Boolean>;
+        hasPublicKey: Schema.optional<typeof Schema.Boolean>;
+        hasWebhookSecret: Schema.optional<typeof Schema.Boolean>;
+        hasDatabaseBranch: Schema.optional<typeof Schema.Boolean>;
+        allowedOrigins: Schema.optional<Schema.NullOr<Schema.Array$<typeof Schema.String>>>;
+        webhookUrl: Schema.optional<Schema.NullOr<typeof Schema.String>>;
+        settings: Schema.optional<Schema.NullOr<Schema.Record$<typeof Schema.String, typeof Schema.Unknown>>>;
+        url: Schema.optional<typeof Schema.String>;
+        deployAppId: Schema.optional<Schema.NullOr<typeof Schema.String>>;
+        namespace: Schema.optional<Schema.NullOr<typeof Schema.String>>;
+        createdAt: Schema.optional<typeof Schema.String>;
+        updatedAt: Schema.optional<typeof Schema.String>;
+        /** Embedded live deploy status (GET /environments/:envId only). */
+        status: Schema.optional<Schema.NullOr<Schema.Struct<{
+            status: typeof Schema.String;
+            url: Schema.optional<Schema.NullOr<typeof Schema.String>>;
+            lastDeployedAt: Schema.optional<Schema.NullOr<typeof Schema.String>>;
+        }>>>;
+    }>>;
+}>;
+export type ListEnvironmentsResult = typeof ListEnvironmentsResult.Type;
+/** `GET /environments/projects/:id` — aliased for hook ergonomics. */
+export declare const ListEnvironmentsBySlugResult: Schema.Struct<{
+    app: Schema.Struct<{
+        id: typeof Schema.String;
+        name: typeof Schema.String;
+        slug: typeof Schema.String;
+    }>;
+    environments: Schema.Array$<Schema.Struct<{
+        id: Schema.brand<Schema.filter<typeof Schema.String>, "EnvironmentId">;
+        envType: typeof Schema.String;
+        name: typeof Schema.String;
+        publicKey: Schema.NullOr<typeof Schema.String>;
+        secretKeyPrefix: Schema.NullOr<typeof Schema.String>;
+        secretKeyLastUsedAt: Schema.NullOr<typeof Schema.String>;
+        secretKeyRotatedAt: typeof Schema.String;
+        isActive: typeof Schema.Boolean;
+    }>>;
+}>;
+export type ListEnvironmentsBySlugResult = ListEnvironmentsByProjectSlugResult;
+/** `GET /environments/:envId` — single environment detail. */
+export declare const GetEnvironmentResult: Schema.Struct<{
+    id: Schema.brand<Schema.filter<typeof Schema.String>, "EnvironmentId">;
+    projectId: Schema.optional<typeof Schema.String>;
+    projectName: Schema.optional<typeof Schema.String>;
+    projectSlug: Schema.optional<typeof Schema.String>;
+    name: typeof Schema.String;
+    envType: typeof Schema.String;
+    isActive: typeof Schema.Boolean;
+    publicKey: Schema.optional<Schema.NullOr<typeof Schema.String>>;
+    secretKeyPrefix: Schema.optional<Schema.NullOr<typeof Schema.String>>;
+    secretKeyLastUsedAt: Schema.optional<Schema.NullOr<typeof Schema.String>>;
+    secretKeyRotatedAt: Schema.optional<Schema.NullOr<typeof Schema.String>>;
+    hasSecretKey: Schema.optional<typeof Schema.Boolean>;
+    hasPublicKey: Schema.optional<typeof Schema.Boolean>;
+    hasWebhookSecret: Schema.optional<typeof Schema.Boolean>;
+    hasDatabaseBranch: Schema.optional<typeof Schema.Boolean>;
+    allowedOrigins: Schema.optional<Schema.NullOr<Schema.Array$<typeof Schema.String>>>;
+    webhookUrl: Schema.optional<Schema.NullOr<typeof Schema.String>>;
+    settings: Schema.optional<Schema.NullOr<Schema.Record$<typeof Schema.String, typeof Schema.Unknown>>>;
+    url: Schema.optional<typeof Schema.String>;
+    deployAppId: Schema.optional<Schema.NullOr<typeof Schema.String>>;
+    namespace: Schema.optional<Schema.NullOr<typeof Schema.String>>;
+    createdAt: Schema.optional<typeof Schema.String>;
+    updatedAt: Schema.optional<typeof Schema.String>;
+    /** Embedded live deploy status (GET /environments/:envId only). */
+    status: Schema.optional<Schema.NullOr<Schema.Struct<{
+        status: typeof Schema.String;
+        url: Schema.optional<Schema.NullOr<typeof Schema.String>>;
+        lastDeployedAt: Schema.optional<Schema.NullOr<typeof Schema.String>>;
+    }>>>;
+}>;
+export type GetEnvironmentResult = typeof Environment.Type;
+/** `PATCH /environments/:envId` — returns the updated environment. */
+export declare const UpdateEnvironmentResult: Schema.Struct<{
+    id: Schema.brand<Schema.filter<typeof Schema.String>, "EnvironmentId">;
+    projectId: Schema.optional<typeof Schema.String>;
+    projectName: Schema.optional<typeof Schema.String>;
+    projectSlug: Schema.optional<typeof Schema.String>;
+    name: typeof Schema.String;
+    envType: typeof Schema.String;
+    isActive: typeof Schema.Boolean;
+    publicKey: Schema.optional<Schema.NullOr<typeof Schema.String>>;
+    secretKeyPrefix: Schema.optional<Schema.NullOr<typeof Schema.String>>;
+    secretKeyLastUsedAt: Schema.optional<Schema.NullOr<typeof Schema.String>>;
+    secretKeyRotatedAt: Schema.optional<Schema.NullOr<typeof Schema.String>>;
+    hasSecretKey: Schema.optional<typeof Schema.Boolean>;
+    hasPublicKey: Schema.optional<typeof Schema.Boolean>;
+    hasWebhookSecret: Schema.optional<typeof Schema.Boolean>;
+    hasDatabaseBranch: Schema.optional<typeof Schema.Boolean>;
+    allowedOrigins: Schema.optional<Schema.NullOr<Schema.Array$<typeof Schema.String>>>;
+    webhookUrl: Schema.optional<Schema.NullOr<typeof Schema.String>>;
+    settings: Schema.optional<Schema.NullOr<Schema.Record$<typeof Schema.String, typeof Schema.Unknown>>>;
+    url: Schema.optional<typeof Schema.String>;
+    deployAppId: Schema.optional<Schema.NullOr<typeof Schema.String>>;
+    namespace: Schema.optional<Schema.NullOr<typeof Schema.String>>;
+    createdAt: Schema.optional<typeof Schema.String>;
+    updatedAt: Schema.optional<typeof Schema.String>;
+    /** Embedded live deploy status (GET /environments/:envId only). */
+    status: Schema.optional<Schema.NullOr<Schema.Struct<{
+        status: typeof Schema.String;
+        url: Schema.optional<Schema.NullOr<typeof Schema.String>>;
+        lastDeployedAt: Schema.optional<Schema.NullOr<typeof Schema.String>>;
+    }>>>;
+}>;
+export type UpdateEnvironmentResult = typeof Environment.Type;
+/** `DELETE /environments/:envId` — standard success envelope. */
+export declare const DeleteEnvironmentResult: Schema.Struct<{
+    success: typeof Schema.Boolean;
+    deletedEnvironmentId: typeof Schema.String;
+}>;
+export type DeleteEnvironmentResult = typeof DeleteEnvironmentResult.Type;
+/** `GET /environments/logs` — env-scoped log stream (SSE). */
+export declare const EnvironmentLogEntry: Schema.Struct<{
+    timestamp: typeof Schema.String;
+    level: Schema.optional<Schema.NullOr<typeof Schema.String>>;
+    message: typeof Schema.String;
+    podName: Schema.optional<Schema.NullOr<typeof Schema.String>>;
+    containerName: Schema.optional<Schema.NullOr<typeof Schema.String>>;
+    source: Schema.optional<Schema.NullOr<typeof Schema.String>>;
+}>;
+export type EnvironmentLogEntry = typeof EnvironmentLogEntry.Type;
+export declare const EnvironmentLogsResult: Schema.Struct<{
+    envId: Schema.brand<Schema.filter<typeof Schema.String>, "EnvironmentId">;
+    logs: Schema.Array$<Schema.Struct<{
+        timestamp: typeof Schema.String;
+        level: Schema.optional<Schema.NullOr<typeof Schema.String>>;
+        message: typeof Schema.String;
+        podName: Schema.optional<Schema.NullOr<typeof Schema.String>>;
+        containerName: Schema.optional<Schema.NullOr<typeof Schema.String>>;
+        source: Schema.optional<Schema.NullOr<typeof Schema.String>>;
+    }>>;
+    nextCursor: Schema.optional<Schema.NullOr<typeof Schema.String>>;
+}>;
+export type EnvironmentLogsResult = typeof EnvironmentLogsResult.Type;
+//# sourceMappingURL=environment.d.ts.map

package/dist/schemas/environment.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"environment.d.ts","sourceRoot":"","sources":["../../src/schemas/environment.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAA;AAG/B,eAAO,MAAM,WAAW;;;;;;;;;;;;;;;;;;;;;;;;IA0BvB,mEAAmE;;;;;;EAUlE,CAAA;AACF,MAAM,MAAM,WAAW,GAAG,OAAO,WAAW,CAAC,IAAI,CAAA;AAEjD,8EAA8E;AAC9E,eAAO,MAAM,qBAAqB;;;;EAIhC,CAAA;AACF,MAAM,MAAM,qBAAqB,GAAG,OAAO,qBAAqB,CAAC,IAAI,CAAA;AAErE,eAAO,MAAM,6BAA6B;;;EAGxC,CAAA;AACF,MAAM,MAAM,6BAA6B,GAAG,OAAO,6BAA6B,CAAC,IAAI,CAAA;AAErF,eAAO,MAAM,eAAe;;;;;;EAM1B,CAAA;AACF,MAAM,MAAM,eAAe,GAAG,OAAO,eAAe,CAAC,IAAI,CAAA;AAEzD,eAAO,MAAM,0BAA0B;;;;;EAKrC,CAAA;AACF,MAAM,MAAM,0BAA0B,GAAG,OAAO,0BAA0B,CAAC,IAAI,CAAA;AAE/E,eAAO,MAAM,sBAAsB;;;;;;;;EAQjC,CAAA;AACF,MAAM,MAAM,sBAAsB,GAAG,OAAO,sBAAsB,CAAC,IAAI,CAAA;AAEvE,eAAO,MAAM,uBAAuB;;;;;;EAMlC,CAAA;AACF,MAAM,MAAM,uBAAuB,GAAG,OAAO,uBAAuB,CAAC,IAAI,CAAA;AAEzE,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;;;;;;;;;EA4BjC,CAAA;AACF,MAAM,MAAM,sBAAsB,GAAG,OAAO,sBAAsB,CAAC,IAAI,CAAA;AAEvE,eAAO,MAAM,uBAAuB;;EAElC,CAAA;AACF,MAAM,MAAM,uBAAuB,GAAG,OAAO,uBAAuB,CAAC,IAAI,CAAA;AAEzE,eAAO,MAAM,aAAa;;;;;;;;EAUxB,CAAA;AACF,MAAM,MAAM,aAAa,GAAG,OAAO,aAAa,CAAC,IAAI,CAAA;AAErD;;;;;GAKG;AACH,eAAO,MAAM,mCAAmC;;;;;;;;;;;;;;;;EAkB9C,CAAA;AACF,MAAM,MAAM,mCAAmC,GAAG,OAAO,mCAAmC,CAAC,IAAI,CAAA;AAEjG;;;;;;GAMG;AACH,eAAO,MAAM,uBAAuB;;;;;;EAMlC,CAAA;AACF,MAAM,MAAM,uBAAuB,GAAG,OAAO,uBAAuB,CAAC,IAAI,CAAA;AAEzE,eAAO,MAAM,wBAAwB;;;;;;;;EAEnC,CAAA;AACF,MAAM,MAAM,wBAAwB,GAAG,OAAO,wBAAwB,CAAC,IAAI,CAAA;AAE3E,eAAO,MAAM,wBAAwB;;;;EAInC,CAAA;AACF,MAAM,MAAM,wBAAwB,GAAG,OAAO,wBAAwB,CAAC,IAAI,CAAA;AAE3E,eAAO,MAAM,yBAAyB;;;;;;EAA0B,CAAA;AAChE,MAAM,MAAM,yBAAyB,GAAG,OAAO,yBAAyB,CAAC,IAAI,CAAA;AAE7E,eAAO,MAAM,yBAAyB;;EAEpC,CAAA;AACF,MAAM,MAAM,yBAAyB,GAAG,OAAO,yBAAyB,CAAC,IAAI,CAAA;AAE7E;;;;GAIG;AACH,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;IArL/B,mEAAmE;;;;;;EAqLtB,CAAA;AAC9C,MAAM,MAAM,mBAAmB,GAAG,OAAO,WAAW,CAAC,IAAI,CAAA;AAEzD,6BAA6B;AAC7B,eAAO,MAAM,OAAO,0DAAyD,CAAA;AAC7E,MAAM,MAAM,OAAO,GAAG,OAAO,OAAO,CAAC,IAAI,CAAA;AAEzC,qCAAqC;AACrC,eAAO,MAAM,WAAW;;;;;;;;EAUtB,CAAA;AACF,MAAM,MAAM,WAAW,GAAG,OAAO,WAAW,CAAC,IAAI,CAAA;AAEjD,mDAAmD;AACnD,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;;;;;;;;QA3MlC,mEAAmE;;;;;;;EA6MlE,CAAA;AACF,MAAM,MAAM,sBAAsB,GAAG,OAAO,sBAAsB,CAAC,IAAI,CAAA;AAEvE,sEAAsE;AACtE,eAAO,MAAM,4BAA4B;;;;;;;;;;;;;;;;EAAsC,CAAA;AAC/E,MAAM,MAAM,4BAA4B,GAAG,mCAAmC,CAAA;AAE9E,8DAA8D;AAC9D,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;IArNhC,mEAAmE;;;;;;EAqNrB,CAAA;AAC/C,MAAM,MAAM,oBAAoB,GAAG,OAAO,WAAW,CAAC,IAAI,CAAA;AAE1D,sEAAsE;AACtE,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;;;;IAzNnC,mEAAmE;;;;;;EAyNlB,CAAA;AAClD,MAAM,MAAM,uBAAuB,GAAG,OAAO,WAAW,CAAC,IAAI,CAAA;AAE7D,iEAAiE;AACjE,eAAO,MAAM,uBAAuB;;;EAGlC,CAAA;AACF,MAAM,MAAM,uBAAuB,GAAG,OAAO,uBAAuB,CAAC,IAAI,CAAA;AAEzE,8DAA8D;AAC9D,eAAO,MAAM,mBAAmB;;;;;;;EAO9B,CAAA;AACF,MAAM,MAAM,mBAAmB,GAAG,OAAO,mBAAmB,CAAC,IAAI,CAAA;AAEjE,eAAO,MAAM,qBAAqB;;;;;;;;;;;EAIhC,CAAA;AACF,MAAM,MAAM,qBAAqB,GAAG,OAAO,qBAAqB,CAAC,IAAI,CAAA"}