@venturekit/core 0.0.0-dev.20260701100017 → 0.0.0-dev.20260704225856

package/README.md

@@ -14,9 +14,9 @@ npm install @venturekit/core@dev
 
 `@venturekit/core` is the foundation of the VentureKit framework. It provides:
 
-- **Type definitions** for all configuration layers (base, security, environment)
+- **Type definitions** for all configuration layers (base, environment)
 - **Presets** for quick environment sizing (`nano`, `micro`, `medium`, `large`)
-- **Configuration resolution** that merges base + security + environment into a single resolved config
+- **Configuration resolution** that merges base + environment into a single resolved config
 - **Validation** utilities for all configuration types
 - **Infrastructure intent types** for declarative resource provisioning
 
@@ -29,9 +29,13 @@ VentureKit uses a layered configuration system:
 | Layer | Purpose | Changes per environment? |
 |-------|---------|--------------------------|
 | `BaseConfig` | Project identity (name, region) | No |
-| `SecurityConfig` | OAuth scopes, app clients | No |
 | `EnvConfigInput` | Resource sizing, scaling | Yes |
 
+Authentication pools and app clients are declared as `auth` intents in
+`vk.config.ts` (see Infrastructure Intents below). Authorization scopes
+are enforced server-side by `@venturekit/runtime`'s scope gate — they
+are application policy, not project configuration.
+
 ### Base Config
 
 ```typescript
@@ -44,26 +48,6 @@ const base: BaseConfig = {
 };
 ```
 
-### Security Config
-
-```typescript
-import type { SecurityConfig } from '@venturekit/core';
-
-const security: SecurityConfig = {
-  scopes: [
-    { name: 'api.read', description: 'Read API data' },
-    { name: 'api.write', description: 'Write API data' },
-  ],
-  appClients: [
-    {
-      name: 'web-app',
-      allowedScopes: ['api.read', 'api.write'],
-      supportsRefreshTokens: true,
-    },
-  ],
-};
-```
-
 ### Environment Config
 
 ```typescript
@@ -96,14 +80,14 @@ const preset = getPreset('nano'); // Returns full PresetConfig
 ```typescript
 import { resolveConfig } from '@venturekit/core';
 
-const resolved = resolveConfig(base, security, 'dev', devEnvInput);
+const resolved = resolveConfig(base, 'dev', devEnvInput);
 // Returns a fully resolved ResolvedConfig with no undefined values
 ```
 
 ## Validation
 
 ```typescript
-import { validateBaseConfig, validateSecurityConfig, assertValid } from '@venturekit/core';
+import { validateBaseConfig, assertValid } from '@venturekit/core';
 
 const result = validateBaseConfig(base);
 assertValid(result); // Throws if invalid

package/dist/auth-attributes.d.ts

@@ -0,0 +1,48 @@
+/**
+ * Feature-implied Cognito custom attributes.
+ *
+ * Several VentureKit features read or write `custom:*` attributes at
+ * runtime and therefore need them DECLARED on the user pool schema —
+ * an undeclared custom attribute makes real Cognito reject the write
+ * with `InvalidParameterException` (cognito-local is permissive, so
+ * the mismatch only surfaces in production). Consumers shouldn't have
+ * to know that contract; declaring the feature implies the schema.
+ *
+ * Rules (all additive, deduplicated, user-declared names first):
+ *
+ *   - single-tenant pools      → `role`
+ *       The conventional single-valued role claim every non-tenant
+ *       consumer ends up declaring.
+ *   - `federated: [<p>, …]`    → `federated_provider` + `<p>Sub` per provider
+ *       `signInAsFederatedUser` unconditionally records
+ *       `custom:federated_provider` on first creation, and apps store
+ *       the provider's stable subject (`profile.externalId`) in
+ *       `custom:<provider>Sub` (e.g. `linkedinSub`) via
+ *       `initialCustomAttributes`.
+ *   - `tenancy: true`          → `tenantId` + `tenantRoles`, REPLACING `role`
+ *       In a multi-tenant pool roles are per tenant — the packed
+ *       `custom:tenantRoles` map (read by `@venturekit-pro/tenancy`'s
+ *       tenant-user-scopes middleware) subsumes the single-valued
+ *       claim, and a lone `custom:role` is a cross-tenant confusion
+ *       hazard. Multi-tenant apps that still want it can declare
+ *       `role` explicitly in `customAttributes`.
+ *
+ * Applied once, inside `defineVenture()`'s `_resolveInfrastructure`,
+ * so every consumer of the resolved intent — the CDK identity stack,
+ * `vk dev`'s cognito-local provisioning, the dev Cognito UI — sees
+ * the same effective schema. Cognito custom attributes can be ADDED
+ * to an existing pool but never removed or altered, so widening the
+ * list is always a safe, non-replacing update.
+ */
+import type { AuthIntent } from './types/intents.js';
+/**
+ * Compute the effective `customAttributes` for an auth intent:
+ * the user-declared list plus every feature-implied attribute,
+ * order-stable and deduplicated. Redeclaring an implied name (or
+ * duplicating one within `customAttributes`) is never an error —
+ * first occurrence wins, the rest are ignored, so a Cognito schema
+ * never sees the same attribute twice. Pure — the input intent is
+ * not mutated.
+ */
+export declare function resolveAuthCustomAttributes(intent: AuthIntent): string[];
+//# sourceMappingURL=auth-attributes.d.ts.map

package/dist/auth-attributes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-attributes.d.ts","sourceRoot":"","sources":["../src/auth-attributes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAErD;;;;;;;;GAQG;AACH,wBAAgB,2BAA2B,CAAC,MAAM,EAAE,UAAU,GAAG,MAAM,EAAE,CAmBxE"}

package/dist/auth-attributes.js

@@ -0,0 +1,67 @@
+/**
+ * Feature-implied Cognito custom attributes.
+ *
+ * Several VentureKit features read or write `custom:*` attributes at
+ * runtime and therefore need them DECLARED on the user pool schema —
+ * an undeclared custom attribute makes real Cognito reject the write
+ * with `InvalidParameterException` (cognito-local is permissive, so
+ * the mismatch only surfaces in production). Consumers shouldn't have
+ * to know that contract; declaring the feature implies the schema.
+ *
+ * Rules (all additive, deduplicated, user-declared names first):
+ *
+ *   - single-tenant pools      → `role`
+ *       The conventional single-valued role claim every non-tenant
+ *       consumer ends up declaring.
+ *   - `federated: [<p>, …]`    → `federated_provider` + `<p>Sub` per provider
+ *       `signInAsFederatedUser` unconditionally records
+ *       `custom:federated_provider` on first creation, and apps store
+ *       the provider's stable subject (`profile.externalId`) in
+ *       `custom:<provider>Sub` (e.g. `linkedinSub`) via
+ *       `initialCustomAttributes`.
+ *   - `tenancy: true`          → `tenantId` + `tenantRoles`, REPLACING `role`
+ *       In a multi-tenant pool roles are per tenant — the packed
+ *       `custom:tenantRoles` map (read by `@venturekit-pro/tenancy`'s
+ *       tenant-user-scopes middleware) subsumes the single-valued
+ *       claim, and a lone `custom:role` is a cross-tenant confusion
+ *       hazard. Multi-tenant apps that still want it can declare
+ *       `role` explicitly in `customAttributes`.
+ *
+ * Applied once, inside `defineVenture()`'s `_resolveInfrastructure`,
+ * so every consumer of the resolved intent — the CDK identity stack,
+ * `vk dev`'s cognito-local provisioning, the dev Cognito UI — sees
+ * the same effective schema. Cognito custom attributes can be ADDED
+ * to an existing pool but never removed or altered, so widening the
+ * list is always a safe, non-replacing update.
+ */
+/**
+ * Compute the effective `customAttributes` for an auth intent:
+ * the user-declared list plus every feature-implied attribute,
+ * order-stable and deduplicated. Redeclaring an implied name (or
+ * duplicating one within `customAttributes`) is never an error —
+ * first occurrence wins, the rest are ignored, so a Cognito schema
+ * never sees the same attribute twice. Pure — the input intent is
+ * not mutated.
+ */
+export function resolveAuthCustomAttributes(intent) {
+    const out = [];
+    const add = (name) => {
+        if (!out.includes(name))
+            out.push(name);
+    };
+    for (const name of intent.customAttributes ?? [])
+        add(name);
+    if (!intent.tenancy)
+        add('role');
+    const federated = intent.federated ?? [];
+    if (federated.length > 0)
+        add('federated_provider');
+    for (const provider of federated)
+        add(`${provider}Sub`);
+    if (intent.tenancy) {
+        add('tenantId');
+        add('tenantRoles');
+    }
+    return out;
+}
+//# sourceMappingURL=auth-attributes.js.map

package/dist/auth-attributes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-attributes.js","sourceRoot":"","sources":["../src/auth-attributes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AAIH;;;;;;;;GAQG;AACH,MAAM,UAAU,2BAA2B,CAAC,MAAkB;IAC5D,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,MAAM,GAAG,GAAG,CAAC,IAAY,EAAQ,EAAE;QACjC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC;YAAE,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1C,CAAC,CAAC;IACF,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,gBAAgB,IAAI,EAAE;QAAE,GAAG,CAAC,IAAI,CAAC,CAAC;IAE5D,IAAI,CAAC,MAAM,CAAC,OAAO;QAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAEjC,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,IAAI,EAAE,CAAC;IACzC,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC;QAAE,GAAG,CAAC,oBAAoB,CAAC,CAAC;IACpD,KAAK,MAAM,QAAQ,IAAI,SAAS;QAAE,GAAG,CAAC,GAAG,QAAQ,KAAK,CAAC,CAAC;IAExD,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACnB,GAAG,CAAC,UAAU,CAAC,CAAC;QAChB,GAAG,CAAC,aAAa,CAAC,CAAC;IACrB,CAAC;IAED,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/index.d.ts

@@ -7,6 +7,7 @@ export * from './types/index.js';
 export { PRESET_FREE, PRESET_NANO, PRESET_MICRO, PRESET_MEDIUM, PRESET_LARGE, getPreset, DEFAULT_DATA_SAFETY, DATA_SAFETY_CONFIG, } from './presets.js';
 export type { PresetConfig } from './presets.js';
 export { resolveConfig, resolveEnvConfig } from './resolve.js';
-export { validateBaseConfig, validateSecurityConfig, validateEnvConfigInput, assertValid, ValidationError, } from './validate.js';
+export { resolveAuthCustomAttributes } from './auth-attributes.js';
+export { validateBaseConfig, validateEnvConfigInput, assertValid, ValidationError, } from './validate.js';
 export type { ValidationResult } from './validate.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,cAAc,kBAAkB,CAAC;AAGjC,OAAO,EACL,WAAW,EACX,WAAW,EACX,YAAY,EACZ,aAAa,EACb,YAAY,EACZ,SAAS,EACT,mBAAmB,EACnB,kBAAkB,GACnB,MAAM,cAAc,CAAC;AACtB,YAAY,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAGjD,OAAO,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAG/D,OAAO,EACL,kBAAkB,EAClB,sBAAsB,EACtB,sBAAsB,EACtB,WAAW,EACX,eAAe,GAChB,MAAM,eAAe,CAAC;AACvB,YAAY,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,cAAc,kBAAkB,CAAC;AAGjC,OAAO,EACL,WAAW,EACX,WAAW,EACX,YAAY,EACZ,aAAa,EACb,YAAY,EACZ,SAAS,EACT,mBAAmB,EACnB,kBAAkB,GACnB,MAAM,cAAc,CAAC;AACtB,YAAY,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAGjD,OAAO,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAC/D,OAAO,EAAE,2BAA2B,EAAE,MAAM,sBAAsB,CAAC;AAGnE,OAAO,EACL,kBAAkB,EAClB,sBAAsB,EACtB,WAAW,EACX,eAAe,GAChB,MAAM,eAAe,CAAC;AACvB,YAAY,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC"}

package/dist/index.js

@@ -9,6 +9,7 @@ export * from './types/index.js';
 export { PRESET_FREE, PRESET_NANO, PRESET_MICRO, PRESET_MEDIUM, PRESET_LARGE, getPreset, DEFAULT_DATA_SAFETY, DATA_SAFETY_CONFIG, } from './presets.js';
 // Resolution
 export { resolveConfig, resolveEnvConfig } from './resolve.js';
+export { resolveAuthCustomAttributes } from './auth-attributes.js';
 // Validation
-export { validateBaseConfig, validateSecurityConfig, validateEnvConfigInput, assertValid, ValidationError, } from './validate.js';
+export { validateBaseConfig, validateEnvConfigInput, assertValid, ValidationError, } from './validate.js';
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,QAAQ;AACR,cAAc,kBAAkB,CAAC;AAEjC,UAAU;AACV,OAAO,EACL,WAAW,EACX,WAAW,EACX,YAAY,EACZ,aAAa,EACb,YAAY,EACZ,SAAS,EACT,mBAAmB,EACnB,kBAAkB,GACnB,MAAM,cAAc,CAAC;AAGtB,aAAa;AACb,OAAO,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAE/D,aAAa;AACb,OAAO,EACL,kBAAkB,EAClB,sBAAsB,EACtB,sBAAsB,EACtB,WAAW,EACX,eAAe,GAChB,MAAM,eAAe,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,QAAQ;AACR,cAAc,kBAAkB,CAAC;AAEjC,UAAU;AACV,OAAO,EACL,WAAW,EACX,WAAW,EACX,YAAY,EACZ,aAAa,EACb,YAAY,EACZ,SAAS,EACT,mBAAmB,EACnB,kBAAkB,GACnB,MAAM,cAAc,CAAC;AAGtB,aAAa;AACb,OAAO,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAC/D,OAAO,EAAE,2BAA2B,EAAE,MAAM,sBAAsB,CAAC;AAEnE,aAAa;AACb,OAAO,EACL,kBAAkB,EAClB,sBAAsB,EACtB,WAAW,EACX,eAAe,GAChB,MAAM,eAAe,CAAC"}

package/dist/resolve.d.ts

@@ -11,7 +11,6 @@
  * - Final config has no undefined values (except where explicitly typed)
  */
 import { BaseConfig } from './types/base.js';
-import { SecurityConfig } from './types/security.js';
 import { EnvConfig, EnvConfigInput, Environment } from './types/env.js';
 import { ResolvedConfig } from './types/resolved.js';
 /**
@@ -30,7 +29,7 @@ export declare function resolveEnvConfig(env: Environment, input: EnvConfigInput
 /**
  * Resolve full configuration
  *
- * Merges base config + security config + env config into a complete ResolvedConfig.
+ * Merges base config + env config into a complete ResolvedConfig.
  */
-export declare function resolveConfig(base: BaseConfig, security: SecurityConfig, env: Environment, envInput: EnvConfigInput): ResolvedConfig;
+export declare function resolveConfig(base: BaseConfig, env: Environment, envInput: EnvConfigInput): ResolvedConfig;
 //# sourceMappingURL=resolve.d.ts.map

package/dist/resolve.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"resolve.d.ts","sourceRoot":"","sources":["../src/resolve.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAC7C,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AACrD,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,WAAW,EAAc,MAAM,gBAAgB,CAAC;AAMpF,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAuJrD;;;;;;;;;;;GAWG;AACH,wBAAgB,gBAAgB,CAC9B,GAAG,EAAE,WAAW,EAChB,KAAK,EAAE,cAAc,GACpB,SAAS,CAsBX;AAED;;;;GAIG;AACH,wBAAgB,aAAa,CAC3B,IAAI,EAAE,UAAU,EAChB,QAAQ,EAAE,cAAc,EACxB,GAAG,EAAE,WAAW,EAChB,QAAQ,EAAE,cAAc,GACvB,cAAc,CA6BhB"}
+{"version":3,"file":"resolve.d.ts","sourceRoot":"","sources":["../src/resolve.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAC7C,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,WAAW,EAAc,MAAM,gBAAgB,CAAC;AAMpF,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAuJrD;;;;;;;;;;;GAWG;AACH,wBAAgB,gBAAgB,CAC9B,GAAG,EAAE,WAAW,EAChB,KAAK,EAAE,cAAc,GACpB,SAAS,CAsBX;AAED;;;;GAIG;AACH,wBAAgB,aAAa,CAC3B,IAAI,EAAE,UAAU,EAChB,GAAG,EAAE,WAAW,EAChB,QAAQ,EAAE,cAAc,GACvB,cAAc,CAyBhB"}

package/dist/resolve.js

@@ -165,18 +165,15 @@ export function resolveEnvConfig(env, input) {
 /**
  * Resolve full configuration
  *
- * Merges base config + security config + env config into a complete ResolvedConfig.
+ * Merges base config + env config into a complete ResolvedConfig.
  */
-export function resolveConfig(base, security, env, envInput) {
+export function resolveConfig(base, env, envInput) {
     const envConfig = resolveEnvConfig(env, envInput);
     return {
         // From base
         name: base.name,
         displayName: base.displayName,
         region: base.region,
-        // From security
-        scopes: security.scopes,
-        appClients: security.appClients,
         // From env
         env: envConfig.env,
         dataSafety: envConfig.dataSafety,

package/dist/resolve.js.map

@@ -1 +1 @@
-{"version":3,"file":"resolve.js","sourceRoot":"","sources":["../src/resolve.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAWH,OAAO,EAAE,SAAS,EAAE,mBAAmB,EAAgB,MAAM,cAAc,CAAC;AAE5E;;GAEG;AACH,SAAS,aAAa,CACpB,MAAoB,EACpB,KAA+B;IAE/B,IAAI,CAAC,KAAK;QAAE,OAAO,MAAM,CAAC,MAAM,CAAC;IAEjC,MAAM,EAAE,GAAG,EAAE,GAAG,IAAI,EAAE,GAAG,KAAK,CAAC;IAE/B,OAAO;QACL,GAAG,MAAM,CAAC,MAAM;QAChB,GAAG,IAAI;QACP,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;YACT,iBAAiB,EAAE,GAAG,CAAC,iBAAiB,IAAI,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,iBAAiB;YAC/E,gBAAgB,EAAE,GAAG,CAAC,gBAAgB,IAAI,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,gBAAgB;SAC7E,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG;KACtB,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,SAAS,UAAU,CACjB,MAAoB,EACpB,KAA4B;IAE5B,MAAM,IAAI,GAAiB;QACzB,GAAG,MAAM,CAAC,GAAG;QACb,IAAI,EAAE,SAAS;QACf,YAAY,EAAE,SAAS;KACxB,CAAC;IAEF,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IAExB,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,GAAG,IAAI,EAAE,GAAG,KAAK,CAAC;IAE9C,MAAM,MAAM,GAAiB,EAAE,GAAG,IAAI,EAAE,GAAG,IAAI,EAAE,CAAC;IAElD,yCAAyC;IACzC,IAAI,IAAI,EAAE,CAAC;QACT,MAAM,WAAW,GAAe;YAC9B,YAAY,EAAE,CAAC,GAAG,CAAC;YACnB,YAAY,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,CAAC;YAClE,YAAY,EAAE,CAAC,cAAc,EAAE,eAAe,CAAC;YAC/C,gBAAgB,EAAE,KAAK;YACvB,SAAS,EAAE,KAAK;SACjB,CAAC;QACF,MAAM,CAAC,IAAI,GAAG,EAAE,GAAG,WAAW,EAAE,GAAG,IAAI,EAAE,CAAC;IAC5C,CAAC;IAED,kCAAkC;IAClC,IAAI,YAAY,EAAE,CAAC;QACjB,MAAM,CAAC,YAAY,GAAG,YAAY,CAAC;IACrC,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;GAEG;AACH,SAAS,UAAU,CACjB,MAAoB,EACpB,KAA4B;IAE5B,IAAI,CAAC,KAAK;QAAE,OAAO,MAAM,CAAC,GAAG,CAAC;IAE9B,MAAM,EAAE,aAAa,EAAE,cAAc,EAAE,eAAe,EAAE,GAAG,IAAI,EAAE,GAAG,KAAK,CAAC;IAE1E,MAAM,MAAM,GAAiB,EAAE,GAAG,MAAM,CAAC,GAAG,EAAE,GAAG,IAAI,EAAE,CAAC;IAExD,IAAI,aAAa,EAAE,CAAC;QAClB,MAAM,CAAC,aAAa,GAAG,EAAE,GAAG,MAAM,CAAC,GAAG,CAAC,aAAa,EAAE,GAAG,aAAa,EAAE,CAAC;IAC3E,CAAC;IACD,IAAI,cAAc,EAAE,CAAC;QACnB,MAAM,CAAC,cAAc,GAAG,EAAE,GAAG,MAAM,CAAC,GAAG,CAAC,cAAc,EAAE,GAAG,cAAc,EAAE,CAAC;IAC9E,CAAC;IACD,IAAI,eAAe,KAAK,SAAS,EAAE,CAAC;QAClC,IAAI,eAAe,IAAI,MAAM,CAAC,GAAG,CAAC,eAAe,EAAE,CAAC;YAClD,MAAM,CAAC,eAAe,GAAG,EAAE,GAAG,MAAM,CAAC,GAAG,CAAC,eAAe,EAAE,GAAG,eAAe,EAAE,CAAC;QACjF,CAAC;aAAM,IAAI,eAAe,EAAE,CAAC;YAC3B,MAAM,CAAC,eAAe,GAAG,EAAE,QAAQ,EAAE,eAAe,CAAC,QAAQ,IAAI,EAAE,EAAE,CAAC;QACxE,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,eAAe,GAAG,SAAS,CAAC;QACrC,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;GAEG;AACH,SAAS,oBAAoB,CAC3B,MAAoB,EACpB,KAAsC;IAEtC,IAAI,CAAC,KAAK;QAAE,OAAO,MAAM,CAAC,aAAa,CAAC;IAExC,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,UAAU,EAAE,GAAG,KAAK,CAAC;IAEhE,oBAAoB;IACpB,MAAM,MAAM,GAAG,EAAE,GAAG,MAAM,CAAC,aAAa,EAAE,CAAC;IAE3C,uBAAuB;IACvB,IAAI,IAAI,EAAE,CAAC;QACT,MAAM,CAAC,IAAI,GAAG,EAAE,GAAG,MAAM,CAAC,IAAI,EAAE,GAAG,IAAI,EAAE,CAAC;IAC5C,CAAC;IACD,IAAI,OAAO,EAAE,CAAC;QACZ,MAAM,CAAC,OAAO,GAAG,EAAE,GAAG,MAAM,CAAC,OAAO,EAAE,GAAG,OAAO,EAAE,CAAC;IACrD,CAAC;IACD,IAAI,MAAM,EAAE,CAAC;QACX,MAAM,CAAC,MAAM,GAAG,EAAE,GAAG,MAAM,CAAC,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC;IAClD,CAAC;IACD,IAAI,OAAO,EAAE,CAAC;QACZ,MAAM,CAAC,OAAO,GAAG,EAAE,GAAG,MAAM,CAAC,OAAO,EAAE,GAAG,OAAO,EAAE,CAAC;IACrD,CAAC;IAED,mBAAmB;IACnB,IAAI,UAAU,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;QAC3C,MAAM,CAAC,MAAM,CAAC,OAAO,GAAG,UAAU,CAAC,aAAa,CAAC;IACnD,CAAC;IACD,IAAI,UAAU,CAAC,cAAc,KAAK,SAAS,EAAE,CAAC;QAC5C,MAAM,CAAC,OAAO,CAAC,OAAO,GAAG,UAAU,CAAC,cAAc,CAAC;IACrD,CAAC;IACD,IAAI,UAAU,CAAC,gBAAgB,KAAK,SAAS,EAAE,CAAC;QAC9C,MAAM,CAAC,IAAI,CAAC,aAAa,GAAG,UAAU,CAAC,gBAAgB,CAAC;IAC1D,CAAC;IACD,IAAI,UAAU,CAAC,sBAAsB,KAAK,SAAS,EAAE,CAAC;QACpD,MAAM,CAAC,OAAO,CAAC,sBAAsB,GAAG,UAAU,CAAC,sBAAsB,CAAC;IAC5E,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;GAEG;AACH,SAAS,gBAAgB,CACvB,MAAoB,EACpB,KAAkC;IAElC,IAAI,CAAC,KAAK;QAAE,OAAO,MAAM,CAAC,SAAS,CAAC;IACpC,OAAO,EAAE,GAAG,MAAM,CAAC,SAAS,EAAE,GAAG,KAAK,EAAE,CAAC;AAC3C,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,gBAAgB,CAC9B,GAAgB,EAChB,KAAqB;IAErB,yDAAyD;IACzD,MAAM,UAAU,GAAG,KAAK,CAAC,MAAM,IAAI,OAAO,CAAC;IAC3C,MAAM,MAAM,GAAG,SAAS,CAAC,UAAU,CAAC,CAAC;IAErC,yBAAyB;IACzB,oEAAoE;IACpE,8CAA8C;IAC9C,0DAA0D;IAC1D,MAAM,UAAU,GAAG,KAAK,CAAC,UAAU;WAC9B,mBAAmB,CAAC,GAAG,CAAC;WACxB,UAAU,CAAC;IAEhB,OAAO;QACL,GAAG;QACH,UAAU;QACV,MAAM,EAAE,aAAa,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC;QAC3C,GAAG,EAAE,UAAU,CAAC,MAAM,EAAE,KAAK,CAAC,GAAG,CAAC;QAClC,GAAG,EAAE,UAAU,CAAC,MAAM,EAAE,KAAK,CAAC,GAAG,CAAC;QAClC,aAAa,EAAE,oBAAoB,CAAC,MAAM,EAAE,KAAK,CAAC,aAAa,CAAC;QAChE,SAAS,EAAE,gBAAgB,CAAC,MAAM,EAAE,KAAK,CAAC,SAAS,CAAC;KACrD,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAC3B,IAAgB,EAChB,QAAwB,EACxB,GAAgB,EAChB,QAAwB;IAExB,MAAM,SAAS,GAAG,gBAAgB,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IAElD,OAAO;QACL,YAAY;QACZ,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,MAAM,EAAE,IAAI,CAAC,MAAM;QAEnB,gBAAgB;QAChB,MAAM,EAAE,QAAQ,CAAC,MAAM;QACvB,UAAU,EAAE,QAAQ,CAAC,UAAU;QAE/B,WAAW;QACX,GAAG,EAAE,SAAS,CAAC,GAAG;QAClB,UAAU,EAAE,SAAS,CAAC,UAAU;QAChC,MAAM,EAAE,SAAS,CAAC,MAAM;QACxB,GAAG,EAAE,SAAS,CAAC,GAAG;QAClB,GAAG,EAAE,SAAS,CAAC,GAAG;QAClB,aAAa,EAAE,SAAS,CAAC,aAAa;QACtC,SAAS,EAAE,SAAS,CAAC,SAAS;QAE9B,iBAAiB;QACjB,IAAI,EAAE;YACJ,OAAO,EAAE,IAAI,CAAC,IAAI;YAClB,WAAW,EAAE,GAAG;YAChB,SAAS,EAAE,YAAY;SACxB;KACF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"resolve.js","sourceRoot":"","sources":["../src/resolve.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAUH,OAAO,EAAE,SAAS,EAAE,mBAAmB,EAAgB,MAAM,cAAc,CAAC;AAE5E;;GAEG;AACH,SAAS,aAAa,CACpB,MAAoB,EACpB,KAA+B;IAE/B,IAAI,CAAC,KAAK;QAAE,OAAO,MAAM,CAAC,MAAM,CAAC;IAEjC,MAAM,EAAE,GAAG,EAAE,GAAG,IAAI,EAAE,GAAG,KAAK,CAAC;IAE/B,OAAO;QACL,GAAG,MAAM,CAAC,MAAM;QAChB,GAAG,IAAI;QACP,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;YACT,iBAAiB,EAAE,GAAG,CAAC,iBAAiB,IAAI,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,iBAAiB;YAC/E,gBAAgB,EAAE,GAAG,CAAC,gBAAgB,IAAI,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,gBAAgB;SAC7E,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG;KACtB,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,SAAS,UAAU,CACjB,MAAoB,EACpB,KAA4B;IAE5B,MAAM,IAAI,GAAiB;QACzB,GAAG,MAAM,CAAC,GAAG;QACb,IAAI,EAAE,SAAS;QACf,YAAY,EAAE,SAAS;KACxB,CAAC;IAEF,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IAExB,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,GAAG,IAAI,EAAE,GAAG,KAAK,CAAC;IAE9C,MAAM,MAAM,GAAiB,EAAE,GAAG,IAAI,EAAE,GAAG,IAAI,EAAE,CAAC;IAElD,yCAAyC;IACzC,IAAI,IAAI,EAAE,CAAC;QACT,MAAM,WAAW,GAAe;YAC9B,YAAY,EAAE,CAAC,GAAG,CAAC;YACnB,YAAY,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,CAAC;YAClE,YAAY,EAAE,CAAC,cAAc,EAAE,eAAe,CAAC;YAC/C,gBAAgB,EAAE,KAAK;YACvB,SAAS,EAAE,KAAK;SACjB,CAAC;QACF,MAAM,CAAC,IAAI,GAAG,EAAE,GAAG,WAAW,EAAE,GAAG,IAAI,EAAE,CAAC;IAC5C,CAAC;IAED,kCAAkC;IAClC,IAAI,YAAY,EAAE,CAAC;QACjB,MAAM,CAAC,YAAY,GAAG,YAAY,CAAC;IACrC,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;GAEG;AACH,SAAS,UAAU,CACjB,MAAoB,EACpB,KAA4B;IAE5B,IAAI,CAAC,KAAK;QAAE,OAAO,MAAM,CAAC,GAAG,CAAC;IAE9B,MAAM,EAAE,aAAa,EAAE,cAAc,EAAE,eAAe,EAAE,GAAG,IAAI,EAAE,GAAG,KAAK,CAAC;IAE1E,MAAM,MAAM,GAAiB,EAAE,GAAG,MAAM,CAAC,GAAG,EAAE,GAAG,IAAI,EAAE,CAAC;IAExD,IAAI,aAAa,EAAE,CAAC;QAClB,MAAM,CAAC,aAAa,GAAG,EAAE,GAAG,MAAM,CAAC,GAAG,CAAC,aAAa,EAAE,GAAG,aAAa,EAAE,CAAC;IAC3E,CAAC;IACD,IAAI,cAAc,EAAE,CAAC;QACnB,MAAM,CAAC,cAAc,GAAG,EAAE,GAAG,MAAM,CAAC,GAAG,CAAC,cAAc,EAAE,GAAG,cAAc,EAAE,CAAC;IAC9E,CAAC;IACD,IAAI,eAAe,KAAK,SAAS,EAAE,CAAC;QAClC,IAAI,eAAe,IAAI,MAAM,CAAC,GAAG,CAAC,eAAe,EAAE,CAAC;YAClD,MAAM,CAAC,eAAe,GAAG,EAAE,GAAG,MAAM,CAAC,GAAG,CAAC,eAAe,EAAE,GAAG,eAAe,EAAE,CAAC;QACjF,CAAC;aAAM,IAAI,eAAe,EAAE,CAAC;YAC3B,MAAM,CAAC,eAAe,GAAG,EAAE,QAAQ,EAAE,eAAe,CAAC,QAAQ,IAAI,EAAE,EAAE,CAAC;QACxE,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,eAAe,GAAG,SAAS,CAAC;QACrC,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;GAEG;AACH,SAAS,oBAAoB,CAC3B,MAAoB,EACpB,KAAsC;IAEtC,IAAI,CAAC,KAAK;QAAE,OAAO,MAAM,CAAC,aAAa,CAAC;IAExC,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,UAAU,EAAE,GAAG,KAAK,CAAC;IAEhE,oBAAoB;IACpB,MAAM,MAAM,GAAG,EAAE,GAAG,MAAM,CAAC,aAAa,EAAE,CAAC;IAE3C,uBAAuB;IACvB,IAAI,IAAI,EAAE,CAAC;QACT,MAAM,CAAC,IAAI,GAAG,EAAE,GAAG,MAAM,CAAC,IAAI,EAAE,GAAG,IAAI,EAAE,CAAC;IAC5C,CAAC;IACD,IAAI,OAAO,EAAE,CAAC;QACZ,MAAM,CAAC,OAAO,GAAG,EAAE,GAAG,MAAM,CAAC,OAAO,EAAE,GAAG,OAAO,EAAE,CAAC;IACrD,CAAC;IACD,IAAI,MAAM,EAAE,CAAC;QACX,MAAM,CAAC,MAAM,GAAG,EAAE,GAAG,MAAM,CAAC,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC;IAClD,CAAC;IACD,IAAI,OAAO,EAAE,CAAC;QACZ,MAAM,CAAC,OAAO,GAAG,EAAE,GAAG,MAAM,CAAC,OAAO,EAAE,GAAG,OAAO,EAAE,CAAC;IACrD,CAAC;IAED,mBAAmB;IACnB,IAAI,UAAU,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;QAC3C,MAAM,CAAC,MAAM,CAAC,OAAO,GAAG,UAAU,CAAC,aAAa,CAAC;IACnD,CAAC;IACD,IAAI,UAAU,CAAC,cAAc,KAAK,SAAS,EAAE,CAAC;QAC5C,MAAM,CAAC,OAAO,CAAC,OAAO,GAAG,UAAU,CAAC,cAAc,CAAC;IACrD,CAAC;IACD,IAAI,UAAU,CAAC,gBAAgB,KAAK,SAAS,EAAE,CAAC;QAC9C,MAAM,CAAC,IAAI,CAAC,aAAa,GAAG,UAAU,CAAC,gBAAgB,CAAC;IAC1D,CAAC;IACD,IAAI,UAAU,CAAC,sBAAsB,KAAK,SAAS,EAAE,CAAC;QACpD,MAAM,CAAC,OAAO,CAAC,sBAAsB,GAAG,UAAU,CAAC,sBAAsB,CAAC;IAC5E,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;GAEG;AACH,SAAS,gBAAgB,CACvB,MAAoB,EACpB,KAAkC;IAElC,IAAI,CAAC,KAAK;QAAE,OAAO,MAAM,CAAC,SAAS,CAAC;IACpC,OAAO,EAAE,GAAG,MAAM,CAAC,SAAS,EAAE,GAAG,KAAK,EAAE,CAAC;AAC3C,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,gBAAgB,CAC9B,GAAgB,EAChB,KAAqB;IAErB,yDAAyD;IACzD,MAAM,UAAU,GAAG,KAAK,CAAC,MAAM,IAAI,OAAO,CAAC;IAC3C,MAAM,MAAM,GAAG,SAAS,CAAC,UAAU,CAAC,CAAC;IAErC,yBAAyB;IACzB,oEAAoE;IACpE,8CAA8C;IAC9C,0DAA0D;IAC1D,MAAM,UAAU,GAAG,KAAK,CAAC,UAAU;WAC9B,mBAAmB,CAAC,GAAG,CAAC;WACxB,UAAU,CAAC;IAEhB,OAAO;QACL,GAAG;QACH,UAAU;QACV,MAAM,EAAE,aAAa,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC;QAC3C,GAAG,EAAE,UAAU,CAAC,MAAM,EAAE,KAAK,CAAC,GAAG,CAAC;QAClC,GAAG,EAAE,UAAU,CAAC,MAAM,EAAE,KAAK,CAAC,GAAG,CAAC;QAClC,aAAa,EAAE,oBAAoB,CAAC,MAAM,EAAE,KAAK,CAAC,aAAa,CAAC;QAChE,SAAS,EAAE,gBAAgB,CAAC,MAAM,EAAE,KAAK,CAAC,SAAS,CAAC;KACrD,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAC3B,IAAgB,EAChB,GAAgB,EAChB,QAAwB;IAExB,MAAM,SAAS,GAAG,gBAAgB,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IAElD,OAAO;QACL,YAAY;QACZ,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,MAAM,EAAE,IAAI,CAAC,MAAM;QAEnB,WAAW;QACX,GAAG,EAAE,SAAS,CAAC,GAAG;QAClB,UAAU,EAAE,SAAS,CAAC,UAAU;QAChC,MAAM,EAAE,SAAS,CAAC,MAAM;QACxB,GAAG,EAAE,SAAS,CAAC,GAAG;QAClB,GAAG,EAAE,SAAS,CAAC,GAAG;QAClB,aAAa,EAAE,SAAS,CAAC,aAAa;QACtC,SAAS,EAAE,SAAS,CAAC,SAAS;QAE9B,iBAAiB;QACjB,IAAI,EAAE;YACJ,OAAO,EAAE,IAAI,CAAC,IAAI;YAClB,WAAW,EAAE,GAAG;YAChB,SAAS,EAAE,YAAY;SACxB;KACF,CAAC;AACJ,CAAC"}

package/dist/types/api.d.ts

@@ -44,6 +44,22 @@ export interface ApiEnvConfig {
     cors: CorsConfig | undefined;
     /** Custom domain (undefined = use default API Gateway domain) */
     customDomain: CustomDomainConfig | undefined;
+    /**
+     * Disable the default `*.execute-api.<region>.amazonaws.com` endpoint.
+     *
+     * When `undefined` (the default), VentureKit disables it automatically
+     * once a custom domain with a resolvable certificate is configured, so
+     * clients can only reach the API through the domain-scoped path (and
+     * any controls bound to it). Set explicitly to override:
+     *   - `false` — keep the raw execute-api URL reachable (e.g. during a
+     *     custom-domain DNS/cert rollout, or when no domain is used).
+     *   - `true` — always disable it (only safe with a working custom
+     *     domain, otherwise the API becomes unreachable).
+     *
+     * Optional so presets don't declare it and existing configs stay
+     * valid; resolve.ts preserves it through `...rest` when supplied.
+     */
+    disableExecuteApiEndpoint?: boolean;
 }
 /**
  * API configuration input (for user overrides)

package/dist/types/api.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"api.d.ts","sourceRoot":"","sources":["../../src/types/api.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH;;GAEG;AACH,MAAM,WAAW,UAAU;IACzB,0DAA0D;IAC1D,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,2BAA2B;IAC3B,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,sBAAsB;IACtB,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,wBAAwB;IACxB,gBAAgB,EAAE,OAAO,CAAC;IAC1B,6CAA6C;IAC7C,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,4CAA4C;IAC5C,UAAU,EAAE,MAAM,CAAC;IACnB,0BAA0B;IAC1B,cAAc,EAAE,MAAM,CAAC;CACxB;AAED;;;;GAIG;AACH,MAAM,WAAW,YAAY;IAC3B,4DAA4D;IAC5D,iBAAiB,EAAE,MAAM,CAAC;IAE1B,2CAA2C;IAC3C,kBAAkB,EAAE,MAAM,CAAC;IAE3B,yCAAyC;IACzC,sBAAsB,EAAE,OAAO,CAAC;IAEhC,+CAA+C;IAC/C,IAAI,EAAE,UAAU,GAAG,SAAS,CAAC;IAE7B,iEAAiE;IACjE,YAAY,EAAE,kBAAkB,GAAG,SAAS,CAAC;CAC9C;AAED;;GAEG;AACH,MAAM,MAAM,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC,YAAY,EAAE,MAAM,GAAG,cAAc,CAAC,CAAC,GAAG;IACrF,IAAI,CAAC,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;IAC3B,YAAY,CAAC,EAAE,kBAAkB,CAAC;CACnC,CAAC"}
+{"version":3,"file":"api.d.ts","sourceRoot":"","sources":["../../src/types/api.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH;;GAEG;AACH,MAAM,WAAW,UAAU;IACzB,0DAA0D;IAC1D,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,2BAA2B;IAC3B,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,sBAAsB;IACtB,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,wBAAwB;IACxB,gBAAgB,EAAE,OAAO,CAAC;IAC1B,6CAA6C;IAC7C,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,4CAA4C;IAC5C,UAAU,EAAE,MAAM,CAAC;IACnB,0BAA0B;IAC1B,cAAc,EAAE,MAAM,CAAC;CACxB;AAED;;;;GAIG;AACH,MAAM,WAAW,YAAY;IAC3B,4DAA4D;IAC5D,iBAAiB,EAAE,MAAM,CAAC;IAE1B,2CAA2C;IAC3C,kBAAkB,EAAE,MAAM,CAAC;IAE3B,yCAAyC;IACzC,sBAAsB,EAAE,OAAO,CAAC;IAEhC,+CAA+C;IAC/C,IAAI,EAAE,UAAU,GAAG,SAAS,CAAC;IAE7B,iEAAiE;IACjE,YAAY,EAAE,kBAAkB,GAAG,SAAS,CAAC;IAE7C;;;;;;;;;;;;;;OAcG;IACH,yBAAyB,CAAC,EAAE,OAAO,CAAC;CACrC;AAED;;GAEG;AACH,MAAM,MAAM,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC,YAAY,EAAE,MAAM,GAAG,cAAc,CAAC,CAAC,GAAG;IACrF,IAAI,CAAC,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;IAC3B,YAAY,CAAC,EAAE,kBAAkB,CAAC;CACnC,CAAC"}

package/dist/types/base.d.ts

@@ -2,14 +2,14 @@
  * VentureKit Base Configuration Types
  *
  * Project identity that NEVER changes between environments.
- * Keep this minimal - security config is in security.ts.
+ * Keep this minimal.
  */
 /**
  * Base configuration - project identity constant across all environments
  *
  * This configuration is defined ONCE and shared across dev/stage/prod.
  * Environment-specific settings (capacity, scaling) go in EnvConfig.
- * Security settings (scopes, clients) go in SecurityConfig.
+ * Auth pools / app clients are declared as `auth` intents in vk.config.ts.
  */
 export interface BaseConfig {
     /** Project name (lowercase, no spaces, used in resource naming) */

package/dist/types/base.js

@@ -2,7 +2,7 @@
  * VentureKit Base Configuration Types
  *
  * Project identity that NEVER changes between environments.
- * Keep this minimal - security config is in security.ts.
+ * Keep this minimal.
  */
 export {};
 //# sourceMappingURL=base.js.map

package/dist/types/env.d.ts

@@ -14,7 +14,7 @@ import { ApiEnvConfig, ApiEnvConfigInput } from './api.js';
 import { VpcEnvConfig, VpcEnvConfigInput } from './vpc.js';
 import { ObservabilityEnvConfig, ObservabilityEnvConfigInput } from './observability.js';
 import { WebSocketEnvConfig, WebSocketEnvConfigInput } from './websocket.js';
-import type { DatabaseOverride, StorageOverride, AuthOverride, QueueOverride, CacheOverride, ScheduleOverride, FunctionOverride, MonitoringOverride, SecretsOverride, EnvVarIntent, DomainOverride, NotifyOverride } from './intents.js';
+import type { DatabaseOverride, StorageOverride, AuthOverride, QueueOverride, CacheOverride, ScheduleOverride, FunctionOverride, MonitoringOverride, SecretsOverride, EnvVarIntent, DomainOverride, NotifyOverride, EventsOverride } from './intents.js';
 /**
  * Well-known environment names. These are the values VentureKit ships
  * sensible defaults for (data safety level, preset selection, etc).
@@ -122,5 +122,11 @@ export interface EnvConfigInput {
      * here without copying the whole {@link NotifyIntent}.
      */
     notify?: NotifyOverride[];
+    /**
+     * Events overrides (matched by id). Per-stage tweaks like a different
+     * `external.busName` or an extra subscription go here without copying
+     * the whole {@link EventsIntent}.
+     */
+    events?: EventsOverride[];
 }
 //# sourceMappingURL=env.d.ts.map

package/dist/types/env.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"env.d.ts","sourceRoot":"","sources":["../../src/types/env.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,eAAe,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AACpE,OAAO,EAAE,YAAY,EAAE,iBAAiB,EAAE,MAAM,UAAU,CAAC;AAC3D,OAAO,EAAE,YAAY,EAAE,iBAAiB,EAAE,MAAM,UAAU,CAAC;AAC3D,OAAO,EAAE,sBAAsB,EAAE,2BAA2B,EAAE,MAAM,oBAAoB,CAAC;AACzF,OAAO,EAAE,kBAAkB,EAAE,uBAAuB,EAAE,MAAM,gBAAgB,CAAC;AAC7E,OAAO,KAAK,EACV,gBAAgB,EAChB,eAAe,EACf,YAAY,EACZ,aAAa,EACb,aAAa,EACb,gBAAgB,EAChB,gBAAgB,EAChB,kBAAkB,EAClB,eAAe,EACf,YAAY,EACZ,cAAc,EACd,cAAc,EACf,MAAM,cAAc,CAAC;AAEtB;;;;GAIG;AACH,MAAM,MAAM,gBAAgB,GAAG,KAAK,GAAG,OAAO,GAAG,MAAM,CAAC;AAExD;;;;;;;;;;;;GAYG;AACH,MAAM,MAAM,WAAW,GAAG,gBAAgB,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;AAE3D;;;;;;;;GAQG;AACH,MAAM,MAAM,MAAM,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,QAAQ,GAAG,OAAO,CAAC;AAEpE;;GAEG;AACH,MAAM,MAAM,UAAU,GAAG,QAAQ,GAAG,UAAU,GAAG,SAAS,CAAC;AAE3D;;;;;GAKG;AACH,MAAM,WAAW,SAAS;IACxB,uBAAuB;IACvB,GAAG,EAAE,WAAW,CAAC;IAEjB,wBAAwB;IACxB,UAAU,EAAE,UAAU,CAAC;IAEvB,2BAA2B;IAC3B,MAAM,EAAE,eAAe,CAAC;IAExB,gCAAgC;IAChC,GAAG,EAAE,YAAY,CAAC;IAElB,wBAAwB;IACxB,GAAG,EAAE,YAAY,CAAC;IAElB,kCAAkC;IAClC,aAAa,EAAE,sBAAsB,CAAC;IAEtC,8BAA8B;IAC9B,SAAS,EAAE,kBAAkB,CAAC;CAC/B;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,cAAc;IAC7B,+DAA+D;IAC/D,MAAM,CAAC,EAAE,MAAM,CAAC;IAEhB,yEAAyE;IACzE,UAAU,CAAC,EAAE,UAAU,CAAC;IAExB,uBAAuB;IACvB,MAAM,CAAC,EAAE,oBAAoB,CAAC;IAE9B,4BAA4B;IAC5B,GAAG,CAAC,EAAE,iBAAiB,CAAC;IAExB,oBAAoB;IACpB,GAAG,CAAC,EAAE,iBAAiB,CAAC;IAExB,8BAA8B;IAC9B,aAAa,CAAC,EAAE,2BAA2B,CAAC;IAE5C,0BAA0B;IAC1B,SAAS,CAAC,EAAE,uBAAuB,CAAC;IAMpC,yCAAyC;IACzC,SAAS,CAAC,EAAE,gBAAgB,EAAE,CAAC;IAE/B,wCAAwC;IACxC,OAAO,CAAC,EAAE,eAAe,EAAE,CAAC;IAE5B,qCAAqC;IACrC,IAAI,CAAC,EAAE,YAAY,EAAE,CAAC;IAEtB,sCAAsC;IACtC,MAAM,CAAC,EAAE,aAAa,EAAE,CAAC;IAEzB,sCAAsC;IACtC,MAAM,CAAC,EAAE,aAAa,EAAE,CAAC;IAEzB,yCAAyC;IACzC,SAAS,CAAC,EAAE,gBAAgB,EAAE,CAAC;IAE/B,yCAAyC;IACzC,SAAS,CAAC,EAAE,gBAAgB,EAAE,CAAC;IAE/B,2CAA2C;IAC3C,UAAU,CAAC,EAAE,kBAAkB,EAAE,CAAC;IAElC,uCAAuC;IACvC,OAAO,CAAC,EAAE,eAAe,EAAE,CAAC;IAE5B,qDAAqD;IACrD,OAAO,CAAC,EAAE,YAAY,EAAE,CAAC;IAEzB,uCAAuC;IACvC,OAAO,CAAC,EAAE,cAAc,EAAE,CAAC;IAE3B;;;;OAIG;IACH,MAAM,CAAC,EAAE,cAAc,EAAE,CAAC;CAC3B"}
+{"version":3,"file":"env.d.ts","sourceRoot":"","sources":["../../src/types/env.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,eAAe,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AACpE,OAAO,EAAE,YAAY,EAAE,iBAAiB,EAAE,MAAM,UAAU,CAAC;AAC3D,OAAO,EAAE,YAAY,EAAE,iBAAiB,EAAE,MAAM,UAAU,CAAC;AAC3D,OAAO,EAAE,sBAAsB,EAAE,2BAA2B,EAAE,MAAM,oBAAoB,CAAC;AACzF,OAAO,EAAE,kBAAkB,EAAE,uBAAuB,EAAE,MAAM,gBAAgB,CAAC;AAC7E,OAAO,KAAK,EACV,gBAAgB,EAChB,eAAe,EACf,YAAY,EACZ,aAAa,EACb,aAAa,EACb,gBAAgB,EAChB,gBAAgB,EAChB,kBAAkB,EAClB,eAAe,EACf,YAAY,EACZ,cAAc,EACd,cAAc,EACd,cAAc,EACf,MAAM,cAAc,CAAC;AAEtB;;;;GAIG;AACH,MAAM,MAAM,gBAAgB,GAAG,KAAK,GAAG,OAAO,GAAG,MAAM,CAAC;AAExD;;;;;;;;;;;;GAYG;AACH,MAAM,MAAM,WAAW,GAAG,gBAAgB,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;AAE3D;;;;;;;;GAQG;AACH,MAAM,MAAM,MAAM,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,QAAQ,GAAG,OAAO,CAAC;AAEpE;;GAEG;AACH,MAAM,MAAM,UAAU,GAAG,QAAQ,GAAG,UAAU,GAAG,SAAS,CAAC;AAE3D;;;;;GAKG;AACH,MAAM,WAAW,SAAS;IACxB,uBAAuB;IACvB,GAAG,EAAE,WAAW,CAAC;IAEjB,wBAAwB;IACxB,UAAU,EAAE,UAAU,CAAC;IAEvB,2BAA2B;IAC3B,MAAM,EAAE,eAAe,CAAC;IAExB,gCAAgC;IAChC,GAAG,EAAE,YAAY,CAAC;IAElB,wBAAwB;IACxB,GAAG,EAAE,YAAY,CAAC;IAElB,kCAAkC;IAClC,aAAa,EAAE,sBAAsB,CAAC;IAEtC,8BAA8B;IAC9B,SAAS,EAAE,kBAAkB,CAAC;CAC/B;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,cAAc;IAC7B,+DAA+D;IAC/D,MAAM,CAAC,EAAE,MAAM,CAAC;IAEhB,yEAAyE;IACzE,UAAU,CAAC,EAAE,UAAU,CAAC;IAExB,uBAAuB;IACvB,MAAM,CAAC,EAAE,oBAAoB,CAAC;IAE9B,4BAA4B;IAC5B,GAAG,CAAC,EAAE,iBAAiB,CAAC;IAExB,oBAAoB;IACpB,GAAG,CAAC,EAAE,iBAAiB,CAAC;IAExB,8BAA8B;IAC9B,aAAa,CAAC,EAAE,2BAA2B,CAAC;IAE5C,0BAA0B;IAC1B,SAAS,CAAC,EAAE,uBAAuB,CAAC;IAMpC,yCAAyC;IACzC,SAAS,CAAC,EAAE,gBAAgB,EAAE,CAAC;IAE/B,wCAAwC;IACxC,OAAO,CAAC,EAAE,eAAe,EAAE,CAAC;IAE5B,qCAAqC;IACrC,IAAI,CAAC,EAAE,YAAY,EAAE,CAAC;IAEtB,sCAAsC;IACtC,MAAM,CAAC,EAAE,aAAa,EAAE,CAAC;IAEzB,sCAAsC;IACtC,MAAM,CAAC,EAAE,aAAa,EAAE,CAAC;IAEzB,yCAAyC;IACzC,SAAS,CAAC,EAAE,gBAAgB,EAAE,CAAC;IAE/B,yCAAyC;IACzC,SAAS,CAAC,EAAE,gBAAgB,EAAE,CAAC;IAE/B,2CAA2C;IAC3C,UAAU,CAAC,EAAE,kBAAkB,EAAE,CAAC;IAElC,uCAAuC;IACvC,OAAO,CAAC,EAAE,eAAe,EAAE,CAAC;IAE5B,qDAAqD;IACrD,OAAO,CAAC,EAAE,YAAY,EAAE,CAAC;IAEzB,uCAAuC;IACvC,OAAO,CAAC,EAAE,cAAc,EAAE,CAAC;IAE3B;;;;OAIG;IACH,MAAM,CAAC,EAAE,cAAc,EAAE,CAAC;IAE1B;;;;OAIG;IACH,MAAM,CAAC,EAAE,cAAc,EAAE,CAAC;CAC3B"}

package/dist/types/index.d.ts

@@ -4,7 +4,6 @@
  * Re-exports all configuration types.
  */
 export type { BaseConfig } from './base.js';
-export type { SecurityConfig, OAuthScope, AppClient } from './security.js';
 export type { EnvConfig, EnvConfigInput, Environment, Preset, DataSafety } from './env.js';
 export type { LambdaEnvConfig, LambdaEnvConfigInput, LambdaRuntime, LambdaArchitecture, LambdaIamConfig, IamPolicyStatement, } from './lambda.js';
 export type { ApiEnvConfig, ApiEnvConfigInput, CorsConfig, CustomDomainConfig } from './api.js';
@@ -12,5 +11,5 @@ export type { VpcEnvConfig, VpcEnvConfigInput, SubnetConfig, SecurityGroupRule,
 export type { ObservabilityEnvConfig, ObservabilityEnvConfigInput, LogGroupConfig, MetricsConfig, AlarmConfig, TracingConfig, } from './observability.js';
 export type { WebSocketEnvConfig, WebSocketEnvConfigInput } from './websocket.js';
 export type { ResolvedConfig } from './resolved.js';
-export type { ResourceSize, DatabaseIntent, StorageIntent, AuthIntent, QueueIntent, CacheIntent, ScheduleIntent, FunctionIntent, MonitoringIntent, AlarmIntent, SecretsIntent, EnvVarIntent, DomainIntent, NotifyIntent, NotifyChannel, VentureIntent, IntentOutputs, DatabaseOverride, StorageOverride, AuthOverride, QueueOverride, CacheOverride, ScheduleOverride, FunctionOverride, MonitoringOverride, SecretsOverride, DomainOverride, NotifyOverride, } from './intents.js';
+export type { ResourceSize, DatabaseIntent, StorageIntent, AuthIntent, QueueIntent, CacheIntent, ScheduleIntent, FunctionIntent, MonitoringIntent, AlarmIntent, SecretsIntent, EnvVarIntent, DomainIntent, NotifyIntent, NotifyChannel, EventsIntent, EventSubscriptionIntent, VentureIntent, IntentOutputs, DatabaseOverride, StorageOverride, AuthOverride, QueueOverride, CacheOverride, ScheduleOverride, FunctionOverride, MonitoringOverride, SecretsOverride, DomainOverride, NotifyOverride, EventsOverride, } from './intents.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/types/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/types/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,YAAY,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAG5C,YAAY,EAAE,cAAc,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAG3E,YAAY,EAAE,SAAS,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC;AAG3F,YAAY,EACV,eAAe,EACf,oBAAoB,EACpB,aAAa,EACb,kBAAkB,EAClB,eAAe,EACf,kBAAkB,GACnB,MAAM,aAAa,CAAC;AAGrB,YAAY,EAAE,YAAY,EAAE,iBAAiB,EAAE,UAAU,EAAE,kBAAkB,EAAE,MAAM,UAAU,CAAC;AAGhG,YAAY,EACV,YAAY,EACZ,iBAAiB,EACjB,YAAY,EACZ,iBAAiB,EACjB,OAAO,GACR,MAAM,UAAU,CAAC;AAGlB,YAAY,EACV,sBAAsB,EACtB,2BAA2B,EAC3B,cAAc,EACd,aAAa,EACb,WAAW,EACX,aAAa,GACd,MAAM,oBAAoB,CAAC;AAG5B,YAAY,EAAE,kBAAkB,EAAE,uBAAuB,EAAE,MAAM,gBAAgB,CAAC;AAGlF,YAAY,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAGpD,YAAY,EACV,YAAY,EACZ,cAAc,EACd,aAAa,EACb,UAAU,EACV,WAAW,EACX,WAAW,EACX,cAAc,EACd,cAAc,EACd,gBAAgB,EAChB,WAAW,EACX,aAAa,EACb,YAAY,EACZ,YAAY,EACZ,YAAY,EACZ,aAAa,EACb,aAAa,EACb,aAAa,EAEb,gBAAgB,EAChB,eAAe,EACf,YAAY,EACZ,aAAa,EACb,aAAa,EACb,gBAAgB,EAChB,gBAAgB,EAChB,kBAAkB,EAClB,eAAe,EACf,cAAc,EACd,cAAc,GACf,MAAM,cAAc,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/types/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,YAAY,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAG5C,YAAY,EAAE,SAAS,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC;AAG3F,YAAY,EACV,eAAe,EACf,oBAAoB,EACpB,aAAa,EACb,kBAAkB,EAClB,eAAe,EACf,kBAAkB,GACnB,MAAM,aAAa,CAAC;AAGrB,YAAY,EAAE,YAAY,EAAE,iBAAiB,EAAE,UAAU,EAAE,kBAAkB,EAAE,MAAM,UAAU,CAAC;AAGhG,YAAY,EACV,YAAY,EACZ,iBAAiB,EACjB,YAAY,EACZ,iBAAiB,EACjB,OAAO,GACR,MAAM,UAAU,CAAC;AAGlB,YAAY,EACV,sBAAsB,EACtB,2BAA2B,EAC3B,cAAc,EACd,aAAa,EACb,WAAW,EACX,aAAa,GACd,MAAM,oBAAoB,CAAC;AAG5B,YAAY,EAAE,kBAAkB,EAAE,uBAAuB,EAAE,MAAM,gBAAgB,CAAC;AAGlF,YAAY,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAGpD,YAAY,EACV,YAAY,EACZ,cAAc,EACd,aAAa,EACb,UAAU,EACV,WAAW,EACX,WAAW,EACX,cAAc,EACd,cAAc,EACd,gBAAgB,EAChB,WAAW,EACX,aAAa,EACb,YAAY,EACZ,YAAY,EACZ,YAAY,EACZ,aAAa,EACb,YAAY,EACZ,uBAAuB,EACvB,aAAa,EACb,aAAa,EAEb,gBAAgB,EAChB,eAAe,EACf,YAAY,EACZ,aAAa,EACb,aAAa,EACb,gBAAgB,EAChB,gBAAgB,EAChB,kBAAkB,EAClB,eAAe,EACf,cAAc,EACd,cAAc,EACd,cAAc,GACf,MAAM,cAAc,CAAC"}

package/dist/types/intents.d.ts

@@ -90,6 +90,22 @@ export interface StorageIntent {
      *  distribution will be deployed at its auto-generated
      *  `*.cloudfront.net` hostname until the ARN is filled in. */
     cdnCertificateArn?: string;
+    /**
+     * CloudFront price class for the CDN distribution — the cost vs.
+     * global-latency tradeoff of which edge locations serve content:
+     *   - `'100'` (default) — North America + Europe. Cheapest.
+     *   - `'200'` — adds Asia, the Middle East, and Africa.
+     *   - `'all'` — every edge, including South America + Oceania.
+     * Accepts the bare value or the full `PRICE_CLASS_*` name.
+     */
+    cdnPriceClass?: '100' | '200' | 'all' | 'PRICE_CLASS_100' | 'PRICE_CLASS_200' | 'PRICE_CLASS_ALL';
+    /**
+     * Enable CloudFront standard access logging for this distribution.
+     * Default `false`. When `true`, VentureKit provisions a private,
+     * encrypted, lifecycle-expired S3 log bucket (retention follows the
+     * env log-retention window) and points the distribution's logs at it.
+     */
+    cdnAccessLogs?: boolean;
     /** Allowed origins for CORS (empty = no CORS) */
     corsOrigins?: string[];
 }
@@ -110,21 +126,35 @@ export interface AuthIntent {
     mfa?: 'off' | 'optional' | 'required';
     /** Password strength */
     passwordStrength?: 'standard' | 'strong';
-    /** OAuth scopes to define */
-    scopes?: Array<{
-        name: string;
-        description: string;
-    }>;
-    /** App clients to create */
+    /**
+     * App clients to create. One Cognito User Pool client per entry;
+     * defaults to a single client named 'default' when omitted.
+     *
+     * Authorization scopes are NOT declared here: VentureKit's model is
+     * server-side scope enforcement (the runtime scope gate + per-request
+     * scope-granting middleware), not Cognito OAuth resource servers —
+     * cookie'd ID tokens never carry OAuth scope claims.
+     */
     clients?: Array<{
         name: string;
-        scopes: string[];
     }>;
     /**
      * Cognito custom user attributes to declare on the pool, listed
      * WITHOUT the mandatory `custom:` prefix (Cognito itself prepends it
      * at issue-time so JWT claims appear as `custom:tenantId` etc.).
      *
+     * Feature-implied attributes are declared AUTOMATICALLY — list only
+     * the attributes your own application code invents (see
+     * `resolveAuthCustomAttributes` in `@venturekit/core`):
+     *
+     *   - `role` — the conventional single-valued role claim, unless
+     *     {@link AuthIntent.tenancy} is `true` (roles are per tenant
+     *     there — see below)
+     *   - `federated_provider` + `<provider>Sub` per entry in
+     *     {@link AuthIntent.federated} (e.g. `linkedinSub`)
+     *   - `tenantId` + `tenantRoles` when {@link AuthIntent.tenancy}
+     *     is `true`
+     *
      * All attributes are created as mutable strings (length 1..2048),
      * which covers the overwhelmingly common case of small textual claims
      * (`tenantId`, `role`, …). Pools that need numeric / immutable / wider
@@ -136,6 +166,28 @@ export interface AuthIntent {
      * claims your application code reads in production.
      */
     customAttributes?: string[];
+    /**
+     * Declare that this pool serves a MULTI-TENANT application — users
+     * belong to one or more tenants (communities, workspaces,
+     * organizations, …) and hold a role per tenant.
+     *
+     * Effect: auto-declares the `tenantId` and `tenantRoles` custom
+     * attributes on the pool schema, REPLACING the default `role`
+     * attribute — in a multi-tenant pool roles live per tenant in the
+     * packed map, and a single-valued `custom:role` is a cross-tenant
+     * confusion hazard. Declare `role` explicitly in
+     * {@link AuthIntent.customAttributes} if your app still wants it.
+     *
+     *   - `custom:tenantId` — the conventional login-tenant claim,
+     *     written by the app at sign-in.
+     *   - `custom:tenantRoles` — the packed per-tenant role map
+     *     (`"<tenantId>:<role>|…"`) that `@venturekit-pro/tenancy`'s
+     *     `createTenantUserScopesMiddleware` reads to grant scopes
+     *     without a store query. The app writes it on every tenant-user
+     *     mutation — see `tenant-roles-claim.ts` in that package for
+     *     the write-path contract.
+     */
+    tenancy?: boolean;
     /**
      * Third-party identity providers to enable for federated sign-in.
      *
@@ -171,6 +223,14 @@ export interface AuthIntent {
      * as Google: scopes default to `openid profile email`, the `id_token`
      * returned at the token endpoint carries a verified `email` claim, and
      * `sub` is the stable LinkedIn member ID.
+     *
+     * Each declared provider also auto-declares custom attributes on
+     * the pool schema: `federated_provider` (written unconditionally by
+     * `signInAsFederatedUser` on first creation — real Cognito rejects
+     * writes to undeclared attributes) and `<provider>Sub` (the
+     * conventional slot for the provider's stable subject, passed by
+     * the app via `initialCustomAttributes`, e.g.
+     * `{ linkedinSub: profile.externalId }`).
      */
     federated?: Array<'google' | 'facebook' | 'apple' | 'linkedin'>;
 }
@@ -507,6 +567,108 @@ export interface FunctionIntent {
     /** Description */
     description?: string;
 }
+/**
+ * Events Intent
+ *
+ * Declares a generic domain-event bus (EventBridge custom bus) plus the
+ * rules that route matched events to in-venture targets. This is
+ * VentureKit's pub/sub primitive, complementing `queues` (point-to-point
+ * work) and `schedules` (time-driven): one published event can fan out
+ * to many subscribers, including subscribers in OTHER ventures.
+ *
+ * Two roles, often combined on one intent:
+ *
+ *   - OWNER — a venture that declares `{ id }` (optionally `source` /
+ *     `busName`) gets an `AWS::Events::EventBus` created in the
+ *     messaging tier. The app tier grants the shared Lambda role
+ *     `events:PutEvents` on it and injects `VENTURE_EVENT_BUS_NAME`
+ *     (primary) + `EVENT_BUS_<ID>_NAME` so handlers publish via
+ *     `@venturekit/runtime`'s `publishEvent()`.
+ *
+ *   - SUBSCRIBER — `subscriptions[]` each become an EventBridge `Rule`
+ *     on the bus, targeting exactly one in-venture queue or function.
+ *     To attach rules to a bus owned by a DIFFERENT venture (same
+ *     account + region), set `external: { busName }`: the rule
+ *     references the bus by name, so deploy the owner venture first.
+ *
+ * Cross-venture routing is the headline use case — a control-plane
+ * venture publishes `tenant.created`; a vertical venture subscribes its
+ * `tenant-events` queue to that bus. Neither venture calls the other
+ * directly; the bus is the only coupling.
+ *
+ * Convention:
+ * - `events: [{ id: 'domain' }]` → bus `{project}-{stage}-domain`.
+ */
+export interface EventsIntent {
+    /** Unique identifier; the physical bus name defaults to `{project}-{stage}-{id}`. */
+    id: string;
+    /**
+     * Override the physical EventBus name. Rarely needed — set it only to
+     * pin a name an external system already targets.
+     */
+    busName?: string;
+    /**
+     * Attach rules to a bus owned by ANOTHER venture instead of creating
+     * one here. Same-account + same-region only: the rule references the
+     * bus by name (`events.EventBus.fromEventBusName`). When set, this
+     * venture does NOT create the bus and is NOT granted `PutEvents` —
+     * it is a pure subscriber. Deploy the owner venture first so the bus
+     * exists when the rule is created.
+     */
+    external?: {
+        /** Physical name of the existing bus (the owner's `{project}-{stage}-{id}`). */
+        busName: string;
+    };
+    /**
+     * Default `source` stamped on published events and matched by rules
+     * that don't override it. Defaults to the publishing project name.
+     */
+    source?: string;
+    /** Event subscriptions — each becomes one EventBridge rule → target. */
+    subscriptions?: EventSubscriptionIntent[];
+    /** Description. */
+    description?: string;
+}
+/**
+ * One EventBridge rule on an {@link EventsIntent} bus, routing matched
+ * events to a single in-venture target.
+ */
+export interface EventSubscriptionIntent {
+    /** Unique id within the venture (used as the rule-name component). */
+    id: string;
+    /**
+     * `detail-type` values to match — the domain-event names, e.g.
+     * `['tenant.created', 'tenant.suspended']`. Omit to match any
+     * detail-type (and filter by `sources` / `pattern` instead).
+     */
+    detailTypes?: string[];
+    /**
+     * `source` values to match. Defaults to the bus `source`. Set
+     * explicitly when subscribing to events published by a venture whose
+     * source differs from this venture's.
+     */
+    sources?: string[];
+    /**
+     * Raw EventBridge event-pattern escape hatch, shallow-merged OVER the
+     * `detailTypes` / `sources` shorthands. Use for content-based
+     * filtering on `detail` fields (e.g. `{ detail: { vertical: ['school'] } }`).
+     */
+    pattern?: Record<string, unknown>;
+    /**
+     * Delivery target — exactly one of:
+     *   - `{ queue }`    — a `queues[]` intent id in THIS venture. The
+     *                      event is delivered as an SQS message, so the
+     *                      queue's `queueBatchHandler` consumer receives
+     *                      it like any other message (at-least-once).
+     *   - `{ function }` — a `functions[]` (or `src/functions/`-discovered)
+     *                      Lambda id in THIS venture, invoked asynchronously.
+     */
+    target: {
+        queue: string;
+    } | {
+        function: string;
+    };
+}
 /**
  * Complete VentureKit Infrastructure Intent
  *
@@ -543,6 +705,14 @@ export interface VentureIntent {
      * `@venturekit/notify`. Most projects need exactly one (`id: 'main'`).
      */
     notify?: NotifyIntent[];
+    /**
+     * Domain-event buses (EventBridge) + their subscriptions — see
+     * {@link EventsIntent}. Owners get a custom bus + `events:PutEvents`
+     * grant; subscribers get one rule per `subscriptions[]` entry routing
+     * matched events to an in-venture queue / function. The pub/sub
+     * complement to point-to-point `queues`.
+     */
+    events?: EventsIntent[];
 }
 /** Per-env override for DatabaseIntent — matched by id */
 export type DatabaseOverride = Pick<DatabaseIntent, 'id'> & Partial<Omit<DatabaseIntent, 'id'>>;
@@ -566,6 +736,8 @@ export type SecretsOverride = Pick<SecretsIntent, 'id'> & Partial<Omit<SecretsIn
 export type DomainOverride = Pick<DomainIntent, 'id'> & Partial<Omit<DomainIntent, 'id'>>;
 /** Per-env override for NotifyIntent — matched by id */
 export type NotifyOverride = Pick<NotifyIntent, 'id'> & Partial<Omit<NotifyIntent, 'id'>>;
+/** Per-env override for EventsIntent — matched by id */
+export type EventsOverride = Pick<EventsIntent, 'id'> & Partial<Omit<EventsIntent, 'id'>>;
 /**
  * Intent output references
  *
@@ -605,6 +777,10 @@ export interface IntentOutputs {
         arn: string;
         name: string;
     }>;
+    eventBuses: Record<string, {
+        busName: string;
+        busArn: string;
+    }>;
     notify: Record<string, {
         /** From address used when no per-call override is provided. */
         defaultFrom?: string;

package/dist/types/intents.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"intents.d.ts","sourceRoot":"","sources":["../../src/types/intents.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH;;;GAGG;AACH,MAAM,MAAM,YAAY,GAAG,OAAO,GAAG,QAAQ,GAAG,OAAO,GAAG,QAAQ,CAAC;AAEnE;;;;;GAKG;AACH,MAAM,WAAW,cAAc;IAC7B,0CAA0C;IAC1C,EAAE,EAAE,MAAM,CAAC;IAEX,sBAAsB;IACtB,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC;IAE3B,yGAAyG;IACzG,IAAI,CAAC,EAAE,YAAY,CAAC;IAEpB,oBAAoB;IACpB,IAAI,EAAE,MAAM,CAAC;IAEb,0CAA0C;IAC1C,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAE3B,+BAA+B;IAC/B,OAAO,CAAC,EAAE,OAAO,CAAC;IAElB,4CAA4C;IAC5C,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAE7B,gCAAgC;IAChC,SAAS,CAAC,EAAE,OAAO,CAAC;IAEpB,kCAAkC;IAClC,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAE9B;;;;;;;;;;;;;;;;;;;;;;OAsBG;IACH,mBAAmB,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED;;;;;GAKG;AACH,MAAM,WAAW,aAAa;IAC5B,gDAAgD;IAChD,EAAE,EAAE,MAAM,CAAC;IAEX,gDAAgD;IAChD,OAAO,EAAE,SAAS,GAAG,QAAQ,GAAG,SAAS,GAAG,MAAM,CAAC;IAEnD,wBAAwB;IACxB,SAAS,CAAC,EAAE,OAAO,CAAC;IAEpB,mCAAmC;IACnC,GAAG,CAAC,EAAE,OAAO,CAAC;IAEd;;;;qDAIiD;IACjD,SAAS,CAAC,EAAE,MAAM,CAAC;IAEnB;;;kEAG8D;IAC9D,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAE3B,iDAAiD;IACjD,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;CACxB;AAED;;;;;GAKG;AACH,MAAM,WAAW,UAAU;IACzB,2CAA2C;IAC3C,EAAE,EAAE,MAAM,CAAC;IAEX,sBAAsB;IACtB,UAAU,EAAE,KAAK,CAAC,OAAO,GAAG,OAAO,GAAG,UAAU,CAAC,CAAC;IAElD,8BAA8B;IAC9B,WAAW,CAAC,EAAE,OAAO,CAAC;IAEtB,kBAAkB;IAClB,GAAG,CAAC,EAAE,KAAK,GAAG,UAAU,GAAG,UAAU,CAAC;IAEtC,wBAAwB;IACxB,gBAAgB,CAAC,EAAE,UAAU,GAAG,QAAQ,CAAC;IAEzC,6BAA6B;IAC7B,MAAM,CAAC,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAEtD,4BAA4B;IAC5B,OAAO,CAAC,EAAE,KAAK,CAAC;QACd,IAAI,EAAE,MAAM,CAAC;QACb,MAAM,EAAE,MAAM,EAAE,CAAC;KAClB,CAAC,CAAC;IAEH;;;;;;;;;;;;;;OAcG;IACH,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;IAE5B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAmCG;IACH,SAAS,CAAC,EAAE,KAAK,CAAC,QAAQ,GAAG,UAAU,GAAG,OAAO,GAAG,UAAU,CAAC,CAAC;CACjE;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,WAAW,WAAW;IAC1B,6EAA6E;IAC7E,EAAE,EAAE,MAAM,CAAC;IAEX,iBAAiB;IACjB,IAAI,CAAC,EAAE,UAAU,GAAG,MAAM,CAAC;IAE3B,+BAA+B;IAC/B,eAAe,CAAC,EAAE,OAAO,CAAC;IAE1B,6CAA6C;IAC7C,aAAa,CAAC,EAAE,MAAM,CAAC;IAEvB,wEAAwE;IACxE,wBAAwB,CAAC,EAAE,MAAM,CAAC;IAElC,sEAAsE;IACtE,OAAO,CAAC,EAAE,MAAM,CAAC;IAEjB,+DAA+D;IAC/D,UAAU,CAAC,EAAE,MAAM,CAAC;IAEpB,+DAA+D;IAC/D,OAAO,CAAC,EAAE,MAAM,CAAC;IAEjB,mEAAmE;IACnE,SAAS,CAAC,EAAE,MAAM,CAAC;IAEnB,kBAAkB;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED;;;;;GAKG;AACH,MAAM,WAAW,WAAW;IAC1B,uCAAuC;IACvC,EAAE,EAAE,MAAM,CAAC;IAEX,mBAAmB;IACnB,IAAI,EAAE,OAAO,GAAG,WAAW,CAAC;IAE5B,kBAAkB;IAClB,IAAI,EAAE,YAAY,CAAC;IAEnB,uCAAuC;IACvC,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,WAAW,cAAc;IAC7B,+EAA+E;IAC/E,EAAE,EAAE,MAAM,CAAC;IAEX,yEAAyE;IACzE,OAAO,CAAC,EAAE,MAAM,CAAC;IAEjB,0BAA0B;IAC1B,QAAQ,EACJ;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,GAChB;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IAErB,kDAAkD;IAClD,OAAO,CAAC,EAAE,OAAO,CAAC;IAElB,8DAA8D;IAC9D,UAAU,CAAC,EAAE,MAAM,CAAC;IAEpB,8DAA8D;IAC9D,OAAO,CAAC,EAAE,MAAM,CAAC;IAEjB,kBAAkB;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED;;;;;GAKG;AACH,MAAM,WAAW,gBAAgB;IAC/B,mDAAmD;IACnD,EAAE,EAAE,MAAM,CAAC;IAEX,uBAAuB;IACvB,MAAM,CAAC,EAAE,WAAW,EAAE,CAAC;IAEvB,oCAAoC;IACpC,SAAS,CAAC,EAAE,OAAO,CAAC;IAEpB,4CAA4C;IAC5C,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED;;;;GAIG;AACH,MAAM,WAAW,WAAW;IAC1B,uDAAuD;IACvD,IAAI,EAAE,MAAM,CAAC;IAEb,iCAAiC;IACjC,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB,wBAAwB;IACxB,MAAM,EAAE,MAAM,CAAC;IAEf,6CAA6C;IAC7C,SAAS,CAAC,EAAE,MAAM,CAAC;IAEnB,sBAAsB;IACtB,SAAS,EAAE,MAAM,CAAC;IAElB,0BAA0B;IAC1B,UAAU,EAAE,IAAI,GAAG,KAAK,GAAG,IAAI,GAAG,KAAK,CAAC;IAExC,sCAAsC;IACtC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAE3B,uCAAuC;IACvC,aAAa,CAAC,EAAE,MAAM,CAAC;IAEvB,4BAA4B;IAC5B,SAAS,CAAC,EAAE,SAAS,GAAG,KAAK,GAAG,SAAS,GAAG,SAAS,GAAG,aAAa,CAAC;IAEtE,sCAAsC;IACtC,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACrC;AAED;;;;;GAKG;AACH,MAAM,WAAW,aAAa;IAC5B,wCAAwC;IACxC,EAAE,EAAE,MAAM,CAAC;IAEX,gCAAgC;IAChC,KAAK,EAAE,KAAK,GAAG,gBAAgB,CAAC;IAEhC,gCAAgC;IAChC,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB,4DAA4D;IAC5D,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB;AAED;;;;;GAKG;AACH,MAAM,WAAW,YAAY;IAC3B,wCAAwC;IACxC,IAAI,EAAE,MAAM,CAAC;IAEb,2DAA2D;IAC3D,KAAK,CAAC,EAAE,MAAM,CAAC;IAEf,kEAAkE;IAClE,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,MAAM,aAAa,GAAG,OAAO,GAAG,UAAU,GAAG,KAAK,GAAG,MAAM,CAAC;AAElE;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,WAAW,YAAY;IAC3B,uEAAuE;IACvE,EAAE,EAAE,MAAM,CAAC;IAEX;;;;;OAKG;IACH,QAAQ,EAAE,aAAa,EAAE,CAAC;IAE1B;;;;;;;OAOG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB;;;;;;;;OAQG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAEhB;;;;;OAKG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IAEtB;;;;;;;;;OASG;IACH,QAAQ,CAAC,EAAE,UAAU,GAAG,MAAM,CAAC;IAE/B;;;;;OAKG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IAEpB;;;;;;OAMG;IACH,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAE7B;;;;;OAKG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IAEtB;;;;;OAKG;IACH,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAE3B;;;;;OAKG;IACH,QAAQ,CAAC,EAAE;QACT;;;WAGG;QACH,aAAa,EAAE,MAAM,CAAC;QACtB;;;;WAIG;QACH,UAAU,CAAC,EAAE,MAAM,CAAC;KACrB,CAAC;CACH;AAED;;;;;GAKG;AACH,MAAM,WAAW,YAAY;IAC3B,wCAAwC;IACxC,EAAE,EAAE,MAAM,CAAC;IAEX,yCAAyC;IACzC,MAAM,EAAE,MAAM,CAAC;IAEf,wDAAwD;IACxD,YAAY,CAAC,EAAE,MAAM,CAAC;IAEtB,oCAAoC;IACpC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAElB,gFAAgF;IAChF,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,WAAW,cAAc;IAC7B,qEAAqE;IACrE,EAAE,EAAE,MAAM,CAAC;IAEX,yEAAyE;IACzE,OAAO,CAAC,EAAE,MAAM,CAAC;IAEjB,uCAAuC;IACvC,UAAU,CAAC,EAAE,MAAM,CAAC;IAEpB,uCAAuC;IACvC,OAAO,CAAC,EAAE,MAAM,CAAC;IAEjB,kBAAkB;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED;;;;;GAKG;AACH,MAAM,WAAW,aAAa;IAC5B,uBAAuB;IACvB,SAAS,CAAC,EAAE,cAAc,EAAE,CAAC;IAE7B,6BAA6B;IAC7B,OAAO,CAAC,EAAE,aAAa,EAAE,CAAC;IAE1B,kCAAkC;IAClC,IAAI,CAAC,EAAE,UAAU,EAAE,CAAC;IAEpB,4BAA4B;IAC5B,MAAM,CAAC,EAAE,WAAW,EAAE,CAAC;IAEvB,oBAAoB;IACpB,MAAM,CAAC,EAAE,WAAW,EAAE,CAAC;IAEvB,mEAAmE;IACnE,SAAS,CAAC,EAAE,cAAc,EAAE,CAAC;IAE7B,8DAA8D;IAC9D,SAAS,CAAC,EAAE,cAAc,EAAE,CAAC;IAE7B,8BAA8B;IAC9B,UAAU,CAAC,EAAE,gBAAgB,EAAE,CAAC;IAEhC,+BAA+B;IAC/B,OAAO,CAAC,EAAE,aAAa,EAAE,CAAC;IAE1B,qDAAqD;IACrD,OAAO,CAAC,EAAE,YAAY,EAAE,CAAC;IAEzB,qCAAqC;IACrC,OAAO,CAAC,EAAE,YAAY,EAAE,CAAC;IAEzB;;;;;OAKG;IACH,MAAM,CAAC,EAAE,YAAY,EAAE,CAAC;CACzB;AAMD,0DAA0D;AAC1D,MAAM,MAAM,gBAAgB,GAAG,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,CAAC,CAAC;AAEhG,yDAAyD;AACzD,MAAM,MAAM,eAAe,GAAG,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC,CAAC;AAE7F,wDAAwD;AACxD,MAAM,MAAM,YAAY,GAAG,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC,CAAC;AAEpF,uDAAuD;AACvD,MAAM,MAAM,aAAa,GAAG,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC,CAAC;AAEvF,uDAAuD;AACvD,MAAM,MAAM,aAAa,GAAG,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC,CAAC;AAEvF,0DAA0D;AAC1D,MAAM,MAAM,gBAAgB,GAAG,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,CAAC,CAAC;AAEhG,0DAA0D;AAC1D,MAAM,MAAM,gBAAgB,GAAG,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,CAAC,CAAC;AAEhG,4DAA4D;AAC5D,MAAM,MAAM,kBAAkB,GAAG,IAAI,CAAC,gBAAgB,EAAE,IAAI,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,gBAAgB,EAAE,IAAI,CAAC,CAAC,CAAC;AAEtG,yDAAyD;AACzD,MAAM,MAAM,eAAe,GAAG,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC,CAAC;AAE7F,wDAAwD;AACxD,MAAM,MAAM,cAAc,GAAG,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC,CAAC;AAE1F,wDAAwD;AACxD,MAAM,MAAM,cAAc,GAAG,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC,CAAC;AAE1F;;;;;GAKG;AACH,MAAM,WAAW,aAAa;IAC5B,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE;QACxB,QAAQ,EAAE,MAAM,CAAC;QACjB,IAAI,EAAE,MAAM,CAAC;QACb,SAAS,EAAE,MAAM,CAAC;KACnB,CAAC,CAAC;IAEH,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE;QACtB,UAAU,EAAE,MAAM,CAAC;QACnB,MAAM,CAAC,EAAE,MAAM,CAAC;KACjB,CAAC,CAAC;IAEH,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE;QACnB,UAAU,EAAE,MAAM,CAAC;QACnB,QAAQ,EAAE,MAAM,CAAC;KAClB,CAAC,CAAC;IAEH,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE;QACrB,QAAQ,EAAE,MAAM,CAAC;KAClB,CAAC,CAAC;IAEH,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE;QACrB,QAAQ,EAAE,MAAM,CAAC;QACjB,IAAI,EAAE,MAAM,CAAC;KACd,CAAC,CAAC;IAEH,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE;QACxB,YAAY,EAAE,MAAM,CAAC;QACrB,WAAW,EAAE,MAAM,CAAC;KACrB,CAAC,CAAC;IAEH,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE;QACzB,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,SAAS,EAAE,MAAM,EAAE,CAAC;KACrB,CAAC,CAAC;IAEH,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE;QACtB,GAAG,EAAE,MAAM,CAAC;QACZ,IAAI,EAAE,MAAM,CAAC;KACd,CAAC,CAAC;IAEH,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE;QACrB,+DAA+D;QAC/D,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,sEAAsE;QACtE,cAAc,CAAC,EAAE,MAAM,CAAC;QACxB,kCAAkC;QAClC,oBAAoB,EAAE,MAAM,CAAC;QAC7B,6DAA6D;QAC7D,cAAc,EAAE,MAAM,CAAC;QACvB,8DAA8D;QAC9D,sBAAsB,CAAC,EAAE,MAAM,CAAC;KACjC,CAAC,CAAC;CACJ"}
+{"version":3,"file":"intents.d.ts","sourceRoot":"","sources":["../../src/types/intents.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH;;;GAGG;AACH,MAAM,MAAM,YAAY,GAAG,OAAO,GAAG,QAAQ,GAAG,OAAO,GAAG,QAAQ,CAAC;AAEnE;;;;;GAKG;AACH,MAAM,WAAW,cAAc;IAC7B,0CAA0C;IAC1C,EAAE,EAAE,MAAM,CAAC;IAEX,sBAAsB;IACtB,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC;IAE3B,yGAAyG;IACzG,IAAI,CAAC,EAAE,YAAY,CAAC;IAEpB,oBAAoB;IACpB,IAAI,EAAE,MAAM,CAAC;IAEb,0CAA0C;IAC1C,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAE3B,+BAA+B;IAC/B,OAAO,CAAC,EAAE,OAAO,CAAC;IAElB,4CAA4C;IAC5C,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAE7B,gCAAgC;IAChC,SAAS,CAAC,EAAE,OAAO,CAAC;IAEpB,kCAAkC;IAClC,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAE9B;;;;;;;;;;;;;;;;;;;;;;OAsBG;IACH,mBAAmB,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED;;;;;GAKG;AACH,MAAM,WAAW,aAAa;IAC5B,gDAAgD;IAChD,EAAE,EAAE,MAAM,CAAC;IAEX,gDAAgD;IAChD,OAAO,EAAE,SAAS,GAAG,QAAQ,GAAG,SAAS,GAAG,MAAM,CAAC;IAEnD,wBAAwB;IACxB,SAAS,CAAC,EAAE,OAAO,CAAC;IAEpB,mCAAmC;IACnC,GAAG,CAAC,EAAE,OAAO,CAAC;IAEd;;;;qDAIiD;IACjD,SAAS,CAAC,EAAE,MAAM,CAAC;IAEnB;;;kEAG8D;IAC9D,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAE3B;;;;;;;OAOG;IACH,aAAa,CAAC,EACV,KAAK,GACL,KAAK,GACL,KAAK,GACL,iBAAiB,GACjB,iBAAiB,GACjB,iBAAiB,CAAC;IAEtB;;;;;OAKG;IACH,aAAa,CAAC,EAAE,OAAO,CAAC;IAExB,iDAAiD;IACjD,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;CACxB;AAED;;;;;GAKG;AACH,MAAM,WAAW,UAAU;IACzB,2CAA2C;IAC3C,EAAE,EAAE,MAAM,CAAC;IAEX,sBAAsB;IACtB,UAAU,EAAE,KAAK,CAAC,OAAO,GAAG,OAAO,GAAG,UAAU,CAAC,CAAC;IAElD,8BAA8B;IAC9B,WAAW,CAAC,EAAE,OAAO,CAAC;IAEtB,kBAAkB;IAClB,GAAG,CAAC,EAAE,KAAK,GAAG,UAAU,GAAG,UAAU,CAAC;IAEtC,wBAAwB;IACxB,gBAAgB,CAAC,EAAE,UAAU,GAAG,QAAQ,CAAC;IAEzC;;;;;;;;OAQG;IACH,OAAO,CAAC,EAAE,KAAK,CAAC;QACd,IAAI,EAAE,MAAM,CAAC;KACd,CAAC,CAAC;IAEH;;;;;;;;;;;;;;;;;;;;;;;;;;OA0BG;IACH,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;IAE5B;;;;;;;;;;;;;;;;;;;;OAoBG;IACH,OAAO,CAAC,EAAE,OAAO,CAAC;IAElB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA2CG;IACH,SAAS,CAAC,EAAE,KAAK,CAAC,QAAQ,GAAG,UAAU,GAAG,OAAO,GAAG,UAAU,CAAC,CAAC;CACjE;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,WAAW,WAAW;IAC1B,6EAA6E;IAC7E,EAAE,EAAE,MAAM,CAAC;IAEX,iBAAiB;IACjB,IAAI,CAAC,EAAE,UAAU,GAAG,MAAM,CAAC;IAE3B,+BAA+B;IAC/B,eAAe,CAAC,EAAE,OAAO,CAAC;IAE1B,6CAA6C;IAC7C,aAAa,CAAC,EAAE,MAAM,CAAC;IAEvB,wEAAwE;IACxE,wBAAwB,CAAC,EAAE,MAAM,CAAC;IAElC,sEAAsE;IACtE,OAAO,CAAC,EAAE,MAAM,CAAC;IAEjB,+DAA+D;IAC/D,UAAU,CAAC,EAAE,MAAM,CAAC;IAEpB,+DAA+D;IAC/D,OAAO,CAAC,EAAE,MAAM,CAAC;IAEjB,mEAAmE;IACnE,SAAS,CAAC,EAAE,MAAM,CAAC;IAEnB,kBAAkB;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED;;;;;GAKG;AACH,MAAM,WAAW,WAAW;IAC1B,uCAAuC;IACvC,EAAE,EAAE,MAAM,CAAC;IAEX,mBAAmB;IACnB,IAAI,EAAE,OAAO,GAAG,WAAW,CAAC;IAE5B,kBAAkB;IAClB,IAAI,EAAE,YAAY,CAAC;IAEnB,uCAAuC;IACvC,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,WAAW,cAAc;IAC7B,+EAA+E;IAC/E,EAAE,EAAE,MAAM,CAAC;IAEX,yEAAyE;IACzE,OAAO,CAAC,EAAE,MAAM,CAAC;IAEjB,0BAA0B;IAC1B,QAAQ,EACJ;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,GAChB;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IAErB,kDAAkD;IAClD,OAAO,CAAC,EAAE,OAAO,CAAC;IAElB,8DAA8D;IAC9D,UAAU,CAAC,EAAE,MAAM,CAAC;IAEpB,8DAA8D;IAC9D,OAAO,CAAC,EAAE,MAAM,CAAC;IAEjB,kBAAkB;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED;;;;;GAKG;AACH,MAAM,WAAW,gBAAgB;IAC/B,mDAAmD;IACnD,EAAE,EAAE,MAAM,CAAC;IAEX,uBAAuB;IACvB,MAAM,CAAC,EAAE,WAAW,EAAE,CAAC;IAEvB,oCAAoC;IACpC,SAAS,CAAC,EAAE,OAAO,CAAC;IAEpB,4CAA4C;IAC5C,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED;;;;GAIG;AACH,MAAM,WAAW,WAAW;IAC1B,uDAAuD;IACvD,IAAI,EAAE,MAAM,CAAC;IAEb,iCAAiC;IACjC,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB,wBAAwB;IACxB,MAAM,EAAE,MAAM,CAAC;IAEf,6CAA6C;IAC7C,SAAS,CAAC,EAAE,MAAM,CAAC;IAEnB,sBAAsB;IACtB,SAAS,EAAE,MAAM,CAAC;IAElB,0BAA0B;IAC1B,UAAU,EAAE,IAAI,GAAG,KAAK,GAAG,IAAI,GAAG,KAAK,CAAC;IAExC,sCAAsC;IACtC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAE3B,uCAAuC;IACvC,aAAa,CAAC,EAAE,MAAM,CAAC;IAEvB,4BAA4B;IAC5B,SAAS,CAAC,EAAE,SAAS,GAAG,KAAK,GAAG,SAAS,GAAG,SAAS,GAAG,aAAa,CAAC;IAEtE,sCAAsC;IACtC,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACrC;AAED;;;;;GAKG;AACH,MAAM,WAAW,aAAa;IAC5B,wCAAwC;IACxC,EAAE,EAAE,MAAM,CAAC;IAEX,gCAAgC;IAChC,KAAK,EAAE,KAAK,GAAG,gBAAgB,CAAC;IAEhC,gCAAgC;IAChC,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB,4DAA4D;IAC5D,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB;AAED;;;;;GAKG;AACH,MAAM,WAAW,YAAY;IAC3B,wCAAwC;IACxC,IAAI,EAAE,MAAM,CAAC;IAEb,2DAA2D;IAC3D,KAAK,CAAC,EAAE,MAAM,CAAC;IAEf,kEAAkE;IAClE,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,MAAM,aAAa,GAAG,OAAO,GAAG,UAAU,GAAG,KAAK,GAAG,MAAM,CAAC;AAElE;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,WAAW,YAAY;IAC3B,uEAAuE;IACvE,EAAE,EAAE,MAAM,CAAC;IAEX;;;;;OAKG;IACH,QAAQ,EAAE,aAAa,EAAE,CAAC;IAE1B;;;;;;;OAOG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB;;;;;;;;OAQG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAEhB;;;;;OAKG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IAEtB;;;;;;;;;OASG;IACH,QAAQ,CAAC,EAAE,UAAU,GAAG,MAAM,CAAC;IAE/B;;;;;OAKG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IAEpB;;;;;;OAMG;IACH,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAE7B;;;;;OAKG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IAEtB;;;;;OAKG;IACH,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAE3B;;;;;OAKG;IACH,QAAQ,CAAC,EAAE;QACT;;;WAGG;QACH,aAAa,EAAE,MAAM,CAAC;QACtB;;;;WAIG;QACH,UAAU,CAAC,EAAE,MAAM,CAAC;KACrB,CAAC;CACH;AAED;;;;;GAKG;AACH,MAAM,WAAW,YAAY;IAC3B,wCAAwC;IACxC,EAAE,EAAE,MAAM,CAAC;IAEX,yCAAyC;IACzC,MAAM,EAAE,MAAM,CAAC;IAEf,wDAAwD;IACxD,YAAY,CAAC,EAAE,MAAM,CAAC;IAEtB,oCAAoC;IACpC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAElB,gFAAgF;IAChF,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,WAAW,cAAc;IAC7B,qEAAqE;IACrE,EAAE,EAAE,MAAM,CAAC;IAEX,yEAAyE;IACzE,OAAO,CAAC,EAAE,MAAM,CAAC;IAEjB,uCAAuC;IACvC,UAAU,CAAC,EAAE,MAAM,CAAC;IAEpB,uCAAuC;IACvC,OAAO,CAAC,EAAE,MAAM,CAAC;IAEjB,kBAAkB;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,MAAM,WAAW,YAAY;IAC3B,qFAAqF;IACrF,EAAE,EAAE,MAAM,CAAC;IAEX;;;OAGG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IAEjB;;;;;;;OAOG;IACH,QAAQ,CAAC,EAAE;QACT,gFAAgF;QAChF,OAAO,EAAE,MAAM,CAAC;KACjB,CAAC;IAEF;;;OAGG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAEhB,wEAAwE;IACxE,aAAa,CAAC,EAAE,uBAAuB,EAAE,CAAC;IAE1C,mBAAmB;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED;;;GAGG;AACH,MAAM,WAAW,uBAAuB;IACtC,sEAAsE;IACtE,EAAE,EAAE,MAAM,CAAC;IAEX;;;;OAIG;IACH,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IAEvB;;;;OAIG;IACH,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IAEnB;;;;OAIG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAElC;;;;;;;;OAQG;IACH,MAAM,EAAE;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,GAAG;QAAE,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC;CAClD;AAED;;;;;GAKG;AACH,MAAM,WAAW,aAAa;IAC5B,uBAAuB;IACvB,SAAS,CAAC,EAAE,cAAc,EAAE,CAAC;IAE7B,6BAA6B;IAC7B,OAAO,CAAC,EAAE,aAAa,EAAE,CAAC;IAE1B,kCAAkC;IAClC,IAAI,CAAC,EAAE,UAAU,EAAE,CAAC;IAEpB,4BAA4B;IAC5B,MAAM,CAAC,EAAE,WAAW,EAAE,CAAC;IAEvB,oBAAoB;IACpB,MAAM,CAAC,EAAE,WAAW,EAAE,CAAC;IAEvB,mEAAmE;IACnE,SAAS,CAAC,EAAE,cAAc,EAAE,CAAC;IAE7B,8DAA8D;IAC9D,SAAS,CAAC,EAAE,cAAc,EAAE,CAAC;IAE7B,8BAA8B;IAC9B,UAAU,CAAC,EAAE,gBAAgB,EAAE,CAAC;IAEhC,+BAA+B;IAC/B,OAAO,CAAC,EAAE,aAAa,EAAE,CAAC;IAE1B,qDAAqD;IACrD,OAAO,CAAC,EAAE,YAAY,EAAE,CAAC;IAEzB,qCAAqC;IACrC,OAAO,CAAC,EAAE,YAAY,EAAE,CAAC;IAEzB;;;;;OAKG;IACH,MAAM,CAAC,EAAE,YAAY,EAAE,CAAC;IAExB;;;;;;OAMG;IACH,MAAM,CAAC,EAAE,YAAY,EAAE,CAAC;CACzB;AAMD,0DAA0D;AAC1D,MAAM,MAAM,gBAAgB,GAAG,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,CAAC,CAAC;AAEhG,yDAAyD;AACzD,MAAM,MAAM,eAAe,GAAG,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC,CAAC;AAE7F,wDAAwD;AACxD,MAAM,MAAM,YAAY,GAAG,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC,CAAC;AAEpF,uDAAuD;AACvD,MAAM,MAAM,aAAa,GAAG,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC,CAAC;AAEvF,uDAAuD;AACvD,MAAM,MAAM,aAAa,GAAG,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC,CAAC;AAEvF,0DAA0D;AAC1D,MAAM,MAAM,gBAAgB,GAAG,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,CAAC,CAAC;AAEhG,0DAA0D;AAC1D,MAAM,MAAM,gBAAgB,GAAG,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,CAAC,CAAC;AAEhG,4DAA4D;AAC5D,MAAM,MAAM,kBAAkB,GAAG,IAAI,CAAC,gBAAgB,EAAE,IAAI,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,gBAAgB,EAAE,IAAI,CAAC,CAAC,CAAC;AAEtG,yDAAyD;AACzD,MAAM,MAAM,eAAe,GAAG,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC,CAAC;AAE7F,wDAAwD;AACxD,MAAM,MAAM,cAAc,GAAG,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC,CAAC;AAE1F,wDAAwD;AACxD,MAAM,MAAM,cAAc,GAAG,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC,CAAC;AAE1F,wDAAwD;AACxD,MAAM,MAAM,cAAc,GAAG,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC,CAAC;AAE1F;;;;;GAKG;AACH,MAAM,WAAW,aAAa;IAC5B,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE;QACxB,QAAQ,EAAE,MAAM,CAAC;QACjB,IAAI,EAAE,MAAM,CAAC;QACb,SAAS,EAAE,MAAM,CAAC;KACnB,CAAC,CAAC;IAEH,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE;QACtB,UAAU,EAAE,MAAM,CAAC;QACnB,MAAM,CAAC,EAAE,MAAM,CAAC;KACjB,CAAC,CAAC;IAEH,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE;QACnB,UAAU,EAAE,MAAM,CAAC;QACnB,QAAQ,EAAE,MAAM,CAAC;KAClB,CAAC,CAAC;IAEH,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE;QACrB,QAAQ,EAAE,MAAM,CAAC;KAClB,CAAC,CAAC;IAEH,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE;QACrB,QAAQ,EAAE,MAAM,CAAC;QACjB,IAAI,EAAE,MAAM,CAAC;KACd,CAAC,CAAC;IAEH,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE;QACxB,YAAY,EAAE,MAAM,CAAC;QACrB,WAAW,EAAE,MAAM,CAAC;KACrB,CAAC,CAAC;IAEH,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE;QACzB,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,SAAS,EAAE,MAAM,EAAE,CAAC;KACrB,CAAC,CAAC;IAEH,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE;QACtB,GAAG,EAAE,MAAM,CAAC;QACZ,IAAI,EAAE,MAAM,CAAC;KACd,CAAC,CAAC;IAEH,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE;QACzB,OAAO,EAAE,MAAM,CAAC;QAChB,MAAM,EAAE,MAAM,CAAC;KAChB,CAAC,CAAC;IAEH,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE;QACrB,+DAA+D;QAC/D,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,sEAAsE;QACtE,cAAc,CAAC,EAAE,MAAM,CAAC;QACxB,kCAAkC;QAClC,oBAAoB,EAAE,MAAM,CAAC;QAC7B,6DAA6D;QAC7D,cAAc,EAAE,MAAM,CAAC;QACvB,8DAA8D;QAC9D,sBAAsB,CAAC,EAAE,MAAM,CAAC;KACjC,CAAC,CAAC;CACJ"}

package/dist/types/resolved.d.ts

@@ -1,10 +1,9 @@
 /**
  * Resolved VentureKit Configuration
  *
- * Complete configuration after merging base + security + environment.
+ * Complete configuration after merging base + environment.
  * This is what infra constructs receive and consume.
  */
-import { OAuthScope, AppClient } from './security.js';
 import { Environment, DataSafety } from './env.js';
 import { LambdaEnvConfig } from './lambda.js';
 import { ApiEnvConfig } from './api.js';
@@ -30,10 +29,6 @@ export interface ResolvedConfig {
     tags: Record<string, string>;
     /** Data safety level (from env config) */
     dataSafety: DataSafety;
-    /** All OAuth scopes (from security) */
-    scopes: OAuthScope[];
-    /** App clients (from security) */
-    appClients: AppClient[];
     /** Lambda configuration (resolved) */
     lambda: LambdaEnvConfig;
     /** API Gateway configuration (resolved) */

package/dist/types/resolved.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"resolved.d.ts","sourceRoot":"","sources":["../../src/types/resolved.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AACtD,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC;AACnD,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AACxC,OAAO,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AACxC,OAAO,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAC;AAC5D,OAAO,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AAEpD;;;;;GAKG;AACH,MAAM,WAAW,cAAc;IAC7B,+BAA+B;IAC/B,IAAI,EAAE,MAAM,CAAC;IAEb,+BAA+B;IAC/B,WAAW,EAAE,MAAM,CAAC;IAEpB,oCAAoC;IACpC,GAAG,EAAE,WAAW,CAAC;IAEjB,6BAA6B;IAC7B,MAAM,EAAE,MAAM,CAAC;IAEf,qCAAqC;IACrC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAE7B,0CAA0C;IAC1C,UAAU,EAAE,UAAU,CAAC;IAEvB,uCAAuC;IACvC,MAAM,EAAE,UAAU,EAAE,CAAC;IAErB,kCAAkC;IAClC,UAAU,EAAE,SAAS,EAAE,CAAC;IAExB,sCAAsC;IACtC,MAAM,EAAE,eAAe,CAAC;IAExB,2CAA2C;IAC3C,GAAG,EAAE,YAAY,CAAC;IAElB,mCAAmC;IACnC,GAAG,EAAE,YAAY,CAAC;IAElB,6CAA6C;IAC7C,aAAa,EAAE,sBAAsB,CAAC;IAEtC,yCAAyC;IACzC,SAAS,EAAE,kBAAkB,CAAC;CAC/B"}
+{"version":3,"file":"resolved.d.ts","sourceRoot":"","sources":["../../src/types/resolved.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC;AACnD,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AACxC,OAAO,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AACxC,OAAO,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAC;AAC5D,OAAO,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AAEpD;;;;;GAKG;AACH,MAAM,WAAW,cAAc;IAC7B,+BAA+B;IAC/B,IAAI,EAAE,MAAM,CAAC;IAEb,+BAA+B;IAC/B,WAAW,EAAE,MAAM,CAAC;IAEpB,oCAAoC;IACpC,GAAG,EAAE,WAAW,CAAC;IAEjB,6BAA6B;IAC7B,MAAM,EAAE,MAAM,CAAC;IAEf,qCAAqC;IACrC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAE7B,0CAA0C;IAC1C,UAAU,EAAE,UAAU,CAAC;IAEvB,sCAAsC;IACtC,MAAM,EAAE,eAAe,CAAC;IAExB,2CAA2C;IAC3C,GAAG,EAAE,YAAY,CAAC;IAElB,mCAAmC;IACnC,GAAG,EAAE,YAAY,CAAC;IAElB,6CAA6C;IAC7C,aAAa,EAAE,sBAAsB,CAAC;IAEtC,yCAAyC;IACzC,SAAS,EAAE,kBAAkB,CAAC;CAC/B"}

package/dist/types/resolved.js

@@ -1,7 +1,7 @@
 /**
  * Resolved VentureKit Configuration
  *
- * Complete configuration after merging base + security + environment.
+ * Complete configuration after merging base + environment.
  * This is what infra constructs receive and consume.
  */
 export {};

package/dist/validate.d.ts

@@ -5,7 +5,6 @@
  * Catches errors early with clear, actionable messages.
  */
 import type { BaseConfig } from './types/base.js';
-import type { SecurityConfig } from './types/security.js';
 import type { EnvConfigInput, Environment } from './types/env.js';
 /**
  * Validation error
@@ -27,10 +26,6 @@ export interface ValidationResult {
  * Validate base configuration
  */
 export declare function validateBaseConfig(config: BaseConfig): ValidationResult;
-/**
- * Validate security configuration
- */
-export declare function validateSecurityConfig(config: SecurityConfig): ValidationResult;
 /**
  * Validate environment configuration input
  */

package/dist/validate.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"validate.d.ts","sourceRoot":"","sources":["../src/validate.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAClD,OAAO,KAAK,EAAE,cAAc,EAAyB,MAAM,qBAAqB,CAAC;AACjF,OAAO,KAAK,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAElE;;GAEG;AACH,qBAAa,eAAgB,SAAQ,KAAK;aAEtB,KAAK,EAAE,MAAM;aACb,OAAO,EAAE,MAAM;aACf,KAAK,CAAC,EAAE,OAAO;gBAFf,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,MAAM,EACf,KAAK,CAAC,EAAE,OAAO,YAAA;CAKlC;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,OAAO,CAAC;IACf,MAAM,EAAE,eAAe,EAAE,CAAC;CAC3B;AAwBD;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,UAAU,GAAG,gBAAgB,CAqCvE;AAED;;GAEG;AACH,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,cAAc,GAAG,gBAAgB,CA4C/E;AAED;;GAEG;AACH,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,WAAW,EAAE,MAAM,EAAE,cAAc,GAAG,gBAAgB,CAwIjG;AAED;;GAEG;AACH,wBAAgB,WAAW,CAAC,MAAM,EAAE,gBAAgB,GAAG,IAAI,CAK1D"}
+{"version":3,"file":"validate.d.ts","sourceRoot":"","sources":["../src/validate.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAClD,OAAO,KAAK,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAElE;;GAEG;AACH,qBAAa,eAAgB,SAAQ,KAAK;aAEtB,KAAK,EAAE,MAAM;aACb,OAAO,EAAE,MAAM;aACf,KAAK,CAAC,EAAE,OAAO;gBAFf,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,MAAM,EACf,KAAK,CAAC,EAAE,OAAO,YAAA;CAKlC;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,OAAO,CAAC;IACf,MAAM,EAAE,eAAe,EAAE,CAAC;CAC3B;AAwBD;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,UAAU,GAAG,gBAAgB,CAqCvE;AAED;;GAEG;AACH,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,WAAW,EAAE,MAAM,EAAE,cAAc,GAAG,gBAAgB,CAwIjG;AAED;;GAEG;AACH,wBAAgB,WAAW,CAAC,MAAM,EAAE,gBAAgB,GAAG,IAAI,CAK1D"}

package/dist/validate.js

@@ -66,44 +66,6 @@ export function validateBaseConfig(config) {
     }
     return errors.length > 0 ? fail(errors) : ok();
 }
-/**
- * Validate security configuration
- */
-export function validateSecurityConfig(config) {
-    const errors = [];
-    // Scopes validation
-    if (!config.scopes || config.scopes.length === 0) {
-        errors.push(new ValidationError('scopes', 'At least one OAuth scope is required'));
-    }
-    else {
-        config.scopes.forEach((scope, i) => {
-            if (!scope.name) {
-                errors.push(new ValidationError(`scopes[${i}].name`, 'Scope name is required'));
-            }
-            else if (!/^[a-z][a-z0-9.]*$/.test(scope.name)) {
-                errors.push(new ValidationError(`scopes[${i}].name`, 'Scope name must be lowercase with dots (e.g., projects.read)', scope.name));
-            }
-        });
-    }
-    // App clients validation
-    if (!config.appClients || config.appClients.length === 0) {
-        errors.push(new ValidationError('appClients', 'At least one app client is required'));
-    }
-    else {
-        const scopeNames = new Set(config.scopes?.map(s => s.name) || []);
-        config.appClients.forEach((client, i) => {
-            if (!client.name) {
-                errors.push(new ValidationError(`appClients[${i}].name`, 'Client name is required'));
-            }
-            client.allowedScopes.forEach((scope, j) => {
-                if (!scopeNames.has(scope)) {
-                    errors.push(new ValidationError(`appClients[${i}].allowedScopes[${j}]`, `Scope "${scope}" is not defined in scopes`, scope));
-                }
-            });
-        });
-    }
-    return errors.length > 0 ? fail(errors) : ok();
-}
 /**
  * Validate environment configuration input
  */

package/dist/validate.js.map

@@ -1 +1 @@
-{"version":3,"file":"validate.js","sourceRoot":"","sources":["../src/validate.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAMH;;GAEG;AACH,MAAM,OAAO,eAAgB,SAAQ,KAAK;IAEtB;IACA;IACA;IAHlB,YACkB,KAAa,EACb,OAAe,EACf,KAAe;QAE/B,KAAK,CAAC,GAAG,KAAK,KAAK,OAAO,EAAE,CAAC,CAAC;QAJd,UAAK,GAAL,KAAK,CAAQ;QACb,YAAO,GAAP,OAAO,CAAQ;QACf,UAAK,GAAL,KAAK,CAAU;QAG/B,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAC;IAChC,CAAC;CACF;AAUD;;GAEG;AACH,SAAS,EAAE;IACT,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;AACrC,CAAC;AAED;;GAEG;AACH,SAAS,IAAI,CAAC,MAAyB;IACrC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;AAClC,CAAC;AAED;;GAEG;AACH,SAAS,KAAK,CAAC,GAAG,OAA2B;IAC3C,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IAC9C,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;AAChD,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAAC,MAAkB;IACnD,MAAM,MAAM,GAAsB,EAAE,CAAC;IAErC,kBAAkB;IAClB,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QACjB,MAAM,CAAC,IAAI,CAAC,IAAI,eAAe,CAAC,MAAM,EAAE,0BAA0B,CAAC,CAAC,CAAC;IACvE,CAAC;SAAM,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;QAClD,MAAM,CAAC,IAAI,CAAC,IAAI,eAAe,CAC7B,MAAM,EACN,wGAAwG,EACxG,MAAM,CAAC,IAAI,CACZ,CAAC,CAAC;IACL,CAAC;SAAM,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;QACnC,MAAM,CAAC,IAAI,CAAC,IAAI,eAAe,CAC7B,MAAM,EACN,4CAA4C,EAC5C,MAAM,CAAC,IAAI,CACZ,CAAC,CAAC;IACL,CAAC;IAED,eAAe;IACf,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;QACxB,MAAM,CAAC,IAAI,CAAC,IAAI,eAAe,CAAC,aAAa,EAAE,0BAA0B,CAAC,CAAC,CAAC;IAC9E,CAAC;IAED,oBAAoB;IACpB,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;QACnB,MAAM,CAAC,IAAI,CAAC,IAAI,eAAe,CAAC,QAAQ,EAAE,wBAAwB,CAAC,CAAC,CAAC;IACvE,CAAC;SAAM,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;QACvD,MAAM,CAAC,IAAI,CAAC,IAAI,eAAe,CAC7B,QAAQ,EACR,6CAA6C,EAC7C,MAAM,CAAC,MAAM,CACd,CAAC,CAAC;IACL,CAAC;IAED,OAAO,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;AACjD,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,sBAAsB,CAAC,MAAsB;IAC3D,MAAM,MAAM,GAAsB,EAAE,CAAC;IAErC,oBAAoB;IACpB,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACjD,MAAM,CAAC,IAAI,CAAC,IAAI,eAAe,CAAC,QAAQ,EAAE,sCAAsC,CAAC,CAAC,CAAC;IACrF,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE;YACjC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;gBAChB,MAAM,CAAC,IAAI,CAAC,IAAI,eAAe,CAAC,UAAU,CAAC,QAAQ,EAAE,wBAAwB,CAAC,CAAC,CAAC;YAClF,CAAC;iBAAM,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;gBACjD,MAAM,CAAC,IAAI,CAAC,IAAI,eAAe,CAC7B,UAAU,CAAC,QAAQ,EACnB,8DAA8D,EAC9D,KAAK,CAAC,IAAI,CACX,CAAC,CAAC;YACL,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IAED,yBAAyB;IACzB,IAAI,CAAC,MAAM,CAAC,UAAU,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzD,MAAM,CAAC,IAAI,CAAC,IAAI,eAAe,CAAC,YAAY,EAAE,qCAAqC,CAAC,CAAC,CAAC;IACxF,CAAC;SAAM,CAAC;QACN,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QAElE,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE;YACtC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;gBACjB,MAAM,CAAC,IAAI,CAAC,IAAI,eAAe,CAAC,cAAc,CAAC,QAAQ,EAAE,yBAAyB,CAAC,CAAC,CAAC;YACvF,CAAC;YAED,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE;gBACxC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;oBAC3B,MAAM,CAAC,IAAI,CAAC,IAAI,eAAe,CAC7B,cAAc,CAAC,mBAAmB,CAAC,GAAG,EACtC,UAAU,KAAK,4BAA4B,EAC3C,KAAK,CACN,CAAC,CAAC;gBACL,CAAC;YACH,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IAED,OAAO,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;AACjD,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,sBAAsB,CAAC,GAAgB,EAAE,MAAsB;IAC7E,MAAM,MAAM,GAAsB,EAAE,CAAC;IAErC,oBAAoB;IACpB,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;QAClB,IAAI,MAAM,CAAC,MAAM,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;YACzC,IAAI,MAAM,CAAC,MAAM,CAAC,QAAQ,GAAG,GAAG,IAAI,MAAM,CAAC,MAAM,CAAC,QAAQ,GAAG,KAAK,EAAE,CAAC;gBACnE,MAAM,CAAC,IAAI,CAAC,IAAI,eAAe,CAC7B,GAAG,GAAG,kBAAkB,EACxB,gDAAgD,EAChD,MAAM,CAAC,MAAM,CAAC,QAAQ,CACvB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,IAAI,MAAM,CAAC,MAAM,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;YAC3C,IAAI,MAAM,CAAC,MAAM,CAAC,UAAU,GAAG,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,UAAU,GAAG,GAAG,EAAE,CAAC;gBACnE,MAAM,CAAC,IAAI,CAAC,IAAI,eAAe,CAC7B,GAAG,GAAG,oBAAoB,EAC1B,kDAAkD,EAClD,MAAM,CAAC,MAAM,CAAC,UAAU,CACzB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,iBAAiB;IACjB,IAAI,MAAM,CAAC,GAAG,EAAE,CAAC;QACf,IAAI,MAAM,CAAC,GAAG,CAAC,iBAAiB,KAAK,SAAS,IAAI,MAAM,CAAC,GAAG,CAAC,iBAAiB,GAAG,CAAC,EAAE,CAAC;YACnF,MAAM,CAAC,IAAI,CAAC,IAAI,eAAe,CAC7B,GAAG,GAAG,wBAAwB,EAC9B,mCAAmC,EACnC,MAAM,CAAC,GAAG,CAAC,iBAAiB,CAC7B,CAAC,CAAC;QACL,CAAC;QAED,IAAI,MAAM,CAAC,GAAG,CAAC,kBAAkB,KAAK,SAAS,IAAI,MAAM,CAAC,GAAG,CAAC,kBAAkB,GAAG,CAAC,EAAE,CAAC;YACrF,MAAM,CAAC,IAAI,CAAC,IAAI,eAAe,CAC7B,GAAG,GAAG,yBAAyB,EAC/B,oCAAoC,EACpC,MAAM,CAAC,GAAG,CAAC,kBAAkB,CAC9B,CAAC,CAAC;QACL,CAAC;QAED,8DAA8D;QAC9D,uCAAuC;QACvC,sDAAsD;QACtD,0BAA0B;QAC1B,sDAAsD;QACtD,IAAI,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;YACpB,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC;YAC7B,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC;YAClC,MAAM,WAAW,GAAG,IAAI,CAAC,gBAAgB,IAAI,KAAK,CAAC;YAEnD,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;gBAC1B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBACpD,MAAM,CAAC,IAAI,CAAC,IAAI,eAAe,CAC7B,GAAG,GAAG,wBAAwB,EAC9B,4FAA4F,EAC5F,OAAO,CACR,CAAC,CAAC;gBACL,CAAC;qBAAM,CAAC;oBACN,MAAM,WAAW,GAAG,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;oBAC1C,IAAI,WAAW,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;wBACtC,MAAM,CAAC,IAAI,CAAC,IAAI,eAAe,CAC7B,GAAG,GAAG,wBAAwB,EAC9B,+FAA+F,EAC/F,OAAO,CACR,CAAC,CAAC;oBACL,CAAC;oBACD,IAAI,WAAW,IAAI,WAAW,EAAE,CAAC;wBAC/B,MAAM,CAAC,IAAI,CAAC,IAAI,eAAe,CAC7B,GAAG,GAAG,wBAAwB,EAC9B,uJAAuJ,EACvJ,OAAO,CACR,CAAC,CAAC;oBACL,CAAC;oBACD,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE;wBAC5B,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;4BACtD,MAAM,CAAC,IAAI,CAAC,IAAI,eAAe,CAC7B,GAAG,GAAG,0BAA0B,CAAC,GAAG,EACpC,mCAAmC,EACnC,MAAM,CACP,CAAC,CAAC;4BACH,OAAO;wBACT,CAAC;wBACD,IAAI,MAAM,KAAK,GAAG;4BAAE,OAAO;wBAC3B,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;4BACzC,MAAM,CAAC,IAAI,CAAC,IAAI,eAAe,CAC7B,GAAG,GAAG,0BAA0B,CAAC,GAAG,EACpC,gGAAgG,EAChG,MAAM,CACP,CAAC,CAAC;wBACL,CAAC;oBACH,CAAC,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YAED,IAAI,IAAI,CAAC,YAAY,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC;gBAC3D,MAAM,CAAC,IAAI,CAAC,IAAI,eAAe,CAC7B,GAAG,GAAG,wBAAwB,EAC9B,+BAA+B,EAC/B,IAAI,CAAC,YAAY,CAClB,CAAC,CAAC;YACL,CAAC;YAED,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,SAAS,GAAG,CAAC,IAAI,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC,EAAE,CAAC;gBACnF,MAAM,CAAC,IAAI,CAAC,IAAI,eAAe,CAC7B,GAAG,GAAG,qBAAqB,EAC3B,4DAA4D,EAC5D,IAAI,CAAC,SAAS,CACf,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,iBAAiB;IACjB,IAAI,MAAM,CAAC,GAAG,EAAE,CAAC;QACf,IAAI,MAAM,CAAC,GAAG,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,MAAM,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,EAAE,CAAC;YACxF,MAAM,CAAC,IAAI,CAAC,IAAI,eAAe,CAC7B,GAAG,GAAG,aAAa,EACnB,sCAAsC,EACtC,MAAM,CAAC,GAAG,CAAC,MAAM,CAClB,CAAC,CAAC;QACL,CAAC;QAED,IAAI,MAAM,CAAC,GAAG,CAAC,WAAW,KAAK,SAAS,IAAI,MAAM,CAAC,GAAG,CAAC,WAAW,GAAG,CAAC,EAAE,CAAC;YACvE,MAAM,CAAC,IAAI,CAAC,IAAI,eAAe,CAC7B,GAAG,GAAG,kBAAkB,EACxB,iCAAiC,EACjC,MAAM,CAAC,GAAG,CAAC,WAAW,CACvB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;AACjD,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,WAAW,CAAC,MAAwB;IAClD,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QAClB,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACnF,MAAM,IAAI,KAAK,CAAC,qCAAqC,QAAQ,EAAE,CAAC,CAAC;IACnE,CAAC;AACH,CAAC"}
+{"version":3,"file":"validate.js","sourceRoot":"","sources":["../src/validate.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAKH;;GAEG;AACH,MAAM,OAAO,eAAgB,SAAQ,KAAK;IAEtB;IACA;IACA;IAHlB,YACkB,KAAa,EACb,OAAe,EACf,KAAe;QAE/B,KAAK,CAAC,GAAG,KAAK,KAAK,OAAO,EAAE,CAAC,CAAC;QAJd,UAAK,GAAL,KAAK,CAAQ;QACb,YAAO,GAAP,OAAO,CAAQ;QACf,UAAK,GAAL,KAAK,CAAU;QAG/B,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAC;IAChC,CAAC;CACF;AAUD;;GAEG;AACH,SAAS,EAAE;IACT,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;AACrC,CAAC;AAED;;GAEG;AACH,SAAS,IAAI,CAAC,MAAyB;IACrC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;AAClC,CAAC;AAED;;GAEG;AACH,SAAS,KAAK,CAAC,GAAG,OAA2B;IAC3C,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IAC9C,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;AAChD,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAAC,MAAkB;IACnD,MAAM,MAAM,GAAsB,EAAE,CAAC;IAErC,kBAAkB;IAClB,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QACjB,MAAM,CAAC,IAAI,CAAC,IAAI,eAAe,CAAC,MAAM,EAAE,0BAA0B,CAAC,CAAC,CAAC;IACvE,CAAC;SAAM,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;QAClD,MAAM,CAAC,IAAI,CAAC,IAAI,eAAe,CAC7B,MAAM,EACN,wGAAwG,EACxG,MAAM,CAAC,IAAI,CACZ,CAAC,CAAC;IACL,CAAC;SAAM,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;QACnC,MAAM,CAAC,IAAI,CAAC,IAAI,eAAe,CAC7B,MAAM,EACN,4CAA4C,EAC5C,MAAM,CAAC,IAAI,CACZ,CAAC,CAAC;IACL,CAAC;IAED,eAAe;IACf,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;QACxB,MAAM,CAAC,IAAI,CAAC,IAAI,eAAe,CAAC,aAAa,EAAE,0BAA0B,CAAC,CAAC,CAAC;IAC9E,CAAC;IAED,oBAAoB;IACpB,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;QACnB,MAAM,CAAC,IAAI,CAAC,IAAI,eAAe,CAAC,QAAQ,EAAE,wBAAwB,CAAC,CAAC,CAAC;IACvE,CAAC;SAAM,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;QACvD,MAAM,CAAC,IAAI,CAAC,IAAI,eAAe,CAC7B,QAAQ,EACR,6CAA6C,EAC7C,MAAM,CAAC,MAAM,CACd,CAAC,CAAC;IACL,CAAC;IAED,OAAO,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;AACjD,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,sBAAsB,CAAC,GAAgB,EAAE,MAAsB;IAC7E,MAAM,MAAM,GAAsB,EAAE,CAAC;IAErC,oBAAoB;IACpB,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;QAClB,IAAI,MAAM,CAAC,MAAM,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;YACzC,IAAI,MAAM,CAAC,MAAM,CAAC,QAAQ,GAAG,GAAG,IAAI,MAAM,CAAC,MAAM,CAAC,QAAQ,GAAG,KAAK,EAAE,CAAC;gBACnE,MAAM,CAAC,IAAI,CAAC,IAAI,eAAe,CAC7B,GAAG,GAAG,kBAAkB,EACxB,gDAAgD,EAChD,MAAM,CAAC,MAAM,CAAC,QAAQ,CACvB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,IAAI,MAAM,CAAC,MAAM,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;YAC3C,IAAI,MAAM,CAAC,MAAM,CAAC,UAAU,GAAG,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,UAAU,GAAG,GAAG,EAAE,CAAC;gBACnE,MAAM,CAAC,IAAI,CAAC,IAAI,eAAe,CAC7B,GAAG,GAAG,oBAAoB,EAC1B,kDAAkD,EAClD,MAAM,CAAC,MAAM,CAAC,UAAU,CACzB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,iBAAiB;IACjB,IAAI,MAAM,CAAC,GAAG,EAAE,CAAC;QACf,IAAI,MAAM,CAAC,GAAG,CAAC,iBAAiB,KAAK,SAAS,IAAI,MAAM,CAAC,GAAG,CAAC,iBAAiB,GAAG,CAAC,EAAE,CAAC;YACnF,MAAM,CAAC,IAAI,CAAC,IAAI,eAAe,CAC7B,GAAG,GAAG,wBAAwB,EAC9B,mCAAmC,EACnC,MAAM,CAAC,GAAG,CAAC,iBAAiB,CAC7B,CAAC,CAAC;QACL,CAAC;QAED,IAAI,MAAM,CAAC,GAAG,CAAC,kBAAkB,KAAK,SAAS,IAAI,MAAM,CAAC,GAAG,CAAC,kBAAkB,GAAG,CAAC,EAAE,CAAC;YACrF,MAAM,CAAC,IAAI,CAAC,IAAI,eAAe,CAC7B,GAAG,GAAG,yBAAyB,EAC/B,oCAAoC,EACpC,MAAM,CAAC,GAAG,CAAC,kBAAkB,CAC9B,CAAC,CAAC;QACL,CAAC;QAED,8DAA8D;QAC9D,uCAAuC;QACvC,sDAAsD;QACtD,0BAA0B;QAC1B,sDAAsD;QACtD,IAAI,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;YACpB,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC;YAC7B,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC;YAClC,MAAM,WAAW,GAAG,IAAI,CAAC,gBAAgB,IAAI,KAAK,CAAC;YAEnD,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;gBAC1B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBACpD,MAAM,CAAC,IAAI,CAAC,IAAI,eAAe,CAC7B,GAAG,GAAG,wBAAwB,EAC9B,4FAA4F,EAC5F,OAAO,CACR,CAAC,CAAC;gBACL,CAAC;qBAAM,CAAC;oBACN,MAAM,WAAW,GAAG,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;oBAC1C,IAAI,WAAW,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;wBACtC,MAAM,CAAC,IAAI,CAAC,IAAI,eAAe,CAC7B,GAAG,GAAG,wBAAwB,EAC9B,+FAA+F,EAC/F,OAAO,CACR,CAAC,CAAC;oBACL,CAAC;oBACD,IAAI,WAAW,IAAI,WAAW,EAAE,CAAC;wBAC/B,MAAM,CAAC,IAAI,CAAC,IAAI,eAAe,CAC7B,GAAG,GAAG,wBAAwB,EAC9B,uJAAuJ,EACvJ,OAAO,CACR,CAAC,CAAC;oBACL,CAAC;oBACD,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE;wBAC5B,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;4BACtD,MAAM,CAAC,IAAI,CAAC,IAAI,eAAe,CAC7B,GAAG,GAAG,0BAA0B,CAAC,GAAG,EACpC,mCAAmC,EACnC,MAAM,CACP,CAAC,CAAC;4BACH,OAAO;wBACT,CAAC;wBACD,IAAI,MAAM,KAAK,GAAG;4BAAE,OAAO;wBAC3B,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;4BACzC,MAAM,CAAC,IAAI,CAAC,IAAI,eAAe,CAC7B,GAAG,GAAG,0BAA0B,CAAC,GAAG,EACpC,gGAAgG,EAChG,MAAM,CACP,CAAC,CAAC;wBACL,CAAC;oBACH,CAAC,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YAED,IAAI,IAAI,CAAC,YAAY,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC;gBAC3D,MAAM,CAAC,IAAI,CAAC,IAAI,eAAe,CAC7B,GAAG,GAAG,wBAAwB,EAC9B,+BAA+B,EAC/B,IAAI,CAAC,YAAY,CAClB,CAAC,CAAC;YACL,CAAC;YAED,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,SAAS,GAAG,CAAC,IAAI,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC,EAAE,CAAC;gBACnF,MAAM,CAAC,IAAI,CAAC,IAAI,eAAe,CAC7B,GAAG,GAAG,qBAAqB,EAC3B,4DAA4D,EAC5D,IAAI,CAAC,SAAS,CACf,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,iBAAiB;IACjB,IAAI,MAAM,CAAC,GAAG,EAAE,CAAC;QACf,IAAI,MAAM,CAAC,GAAG,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,MAAM,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,EAAE,CAAC;YACxF,MAAM,CAAC,IAAI,CAAC,IAAI,eAAe,CAC7B,GAAG,GAAG,aAAa,EACnB,sCAAsC,EACtC,MAAM,CAAC,GAAG,CAAC,MAAM,CAClB,CAAC,CAAC;QACL,CAAC;QAED,IAAI,MAAM,CAAC,GAAG,CAAC,WAAW,KAAK,SAAS,IAAI,MAAM,CAAC,GAAG,CAAC,WAAW,GAAG,CAAC,EAAE,CAAC;YACvE,MAAM,CAAC,IAAI,CAAC,IAAI,eAAe,CAC7B,GAAG,GAAG,kBAAkB,EACxB,iCAAiC,EACjC,MAAM,CAAC,GAAG,CAAC,WAAW,CACvB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;AACjD,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,WAAW,CAAC,MAAwB;IAClD,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QAClB,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACnF,MAAM,IAAI,KAAK,CAAC,qCAAqC,QAAQ,EAAE,CAAC,CAAC;IACnE,CAAC;AACH,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@venturekit/core",
-  "version": "0.0.0-dev.20260701100017",
+  "version": "0.0.0-dev.20260704225856",
   "description": "VentureKit core types, presets, and configuration resolution.",
   "type": "module",
   "main": "dist/index.js",
@@ -16,9 +16,13 @@
   ],
   "repository": {
     "type": "git",
-    "url": "https://github.com/venturekit-dev/venturekit.private.git",
+    "url": "https://github.com/venturekit-dev/venturekit.git",
     "directory": "packages/core"
   },
+  "homepage": "https://venturekit.dev",
+  "bugs": {
+    "url": "https://github.com/venturekit-dev/venturekit/issues"
+  },
   "publishConfig": {
     "registry": "https://registry.npmjs.org",
     "access": "public"

package/dist/types/security.d.ts

@@ -1,55 +0,0 @@
-/**
- * VentureKit Security Configuration Types
- *
- * OAuth scopes, app clients, and authentication settings.
- * Separated from base.ts to keep config files manageable.
- */
-/**
- * OAuth scope definition
- */
-export interface OAuthScope {
-    /** Scope name (e.g., 'projects.read', 'users.write') */
-    name: string;
-    /** Scope description */
-    description: string;
-}
-/**
- * App client configuration
- */
-export interface AppClient {
-    /** Client name (e.g., 'web-app', 'mobile-app', 'admin-dashboard') */
-    name: string;
-    /** Allowed OAuth scopes for this client */
-    allowedScopes: string[];
-    /** Whether this client supports refresh tokens */
-    supportsRefreshTokens: boolean;
-    /** Generate client secret (true for server-side, false for SPA/mobile) */
-    generateSecret?: boolean;
-    /** Access token validity in hours (default: 1) */
-    accessTokenValidityHours?: number;
-    /** Refresh token validity in days (default: 30) */
-    refreshTokenValidityDays?: number;
-}
-/**
- * Security configuration - authentication and authorization settings
- *
- * Defined ONCE and shared across all environments.
- * Keep separate from base.ts to avoid config file bloat.
- */
-export interface SecurityConfig {
-    /** All available OAuth scopes for this project */
-    scopes: OAuthScope[];
-    /** App clients and their allowed scopes */
-    appClients: AppClient[];
-    /** MFA setting (default: 'optional') */
-    mfa?: 'off' | 'optional' | 'required';
-    /** Password policy */
-    passwordPolicy?: {
-        minLength?: number;
-        requireUppercase?: boolean;
-        requireLowercase?: boolean;
-        requireNumbers?: boolean;
-        requireSymbols?: boolean;
-    };
-}
-//# sourceMappingURL=security.d.ts.map

package/dist/types/security.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"security.d.ts","sourceRoot":"","sources":["../../src/types/security.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH;;GAEG;AACH,MAAM,WAAW,UAAU;IACzB,wDAAwD;IACxD,IAAI,EAAE,MAAM,CAAC;IACb,wBAAwB;IACxB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED;;GAEG;AACH,MAAM,WAAW,SAAS;IACxB,qEAAqE;IACrE,IAAI,EAAE,MAAM,CAAC;IACb,2CAA2C;IAC3C,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,kDAAkD;IAClD,qBAAqB,EAAE,OAAO,CAAC;IAC/B,0EAA0E;IAC1E,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,kDAAkD;IAClD,wBAAwB,CAAC,EAAE,MAAM,CAAC;IAClC,mDAAmD;IACnD,wBAAwB,CAAC,EAAE,MAAM,CAAC;CACnC;AAED;;;;;GAKG;AACH,MAAM,WAAW,cAAc;IAC7B,kDAAkD;IAClD,MAAM,EAAE,UAAU,EAAE,CAAC;IAErB,2CAA2C;IAC3C,UAAU,EAAE,SAAS,EAAE,CAAC;IAExB,wCAAwC;IACxC,GAAG,CAAC,EAAE,KAAK,GAAG,UAAU,GAAG,UAAU,CAAC;IAEtC,sBAAsB;IACtB,cAAc,CAAC,EAAE;QACf,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,gBAAgB,CAAC,EAAE,OAAO,CAAC;QAC3B,gBAAgB,CAAC,EAAE,OAAO,CAAC;QAC3B,cAAc,CAAC,EAAE,OAAO,CAAC;QACzB,cAAc,CAAC,EAAE,OAAO,CAAC;KAC1B,CAAC;CACH"}

package/dist/types/security.js

@@ -1,8 +0,0 @@
-/**
- * VentureKit Security Configuration Types
- *
- * OAuth scopes, app clients, and authentication settings.
- * Separated from base.ts to keep config files manageable.
- */
-export {};
-//# sourceMappingURL=security.js.map

package/dist/types/security.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"security.js","sourceRoot":"","sources":["../../src/types/security.ts"],"names":[],"mappings":"AAAA;;;;;GAKG"}