@vibesdotdev/platform 0.0.0-stage → 1.0.0-rc.1

package/dist/schemas/queue-action.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"queue-action.d.ts","sourceRoot":"","sources":["../../src/schemas/queue-action.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAatD,eAAO,MAAM,qBAAqB,aAAa,CAAC;AAEhD,eAAO,MAAM,wBAAwB;;iBAA+C,CAAC;AACrF,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAkE1E,eAAO,MAAM,0BAA0B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;KAIrC,CAAC;AACH,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAE1E,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,MAAM,mBAKhD;AAED,wBAAsB,eAAe,CAAC,KAAK,EAAE,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAKnD"}

package/dist/schemas/queue-action.js

@@ -0,0 +1,88 @@
+import * as z from 'zod/v4';
+import { CapabilityError } from '@vibesdotdev/kernel';
+import { JsonValueSchema } from '@vibesdotdev/kernel/schemas/json';
+import { BuildJobDescriptorSchema } from '@vibesdotdev/infra-core/kinds';
+import { FleetBuildJobDescriptorSchema, buildJobDescriptorToHostActionForm } from "../fleets/build-job-action.js";
+import { createHostActionRunFormSchema, hostActionRequirementsSchema, hostActionMountSchema } from "./hosts/actions.js";
+export const QueueActionTextSchema = z.string();
+export const QueueActionOptionsSchema = z.object({ file: z.string().trim().min(1) });
+const FleetPlacementSchema = z.object({
+    requirements: hostActionRequirementsSchema.optional(),
+    mounts: z.array(hostActionMountSchema).optional()
+});
+const BuildHandoffSchema = BuildJobDescriptorSchema.extend({
+    actionKind: z.never().optional(),
+    target: BuildJobDescriptorSchema.shape.target.default({ os: 'linux', arch: 'x64' }),
+    config: FleetBuildJobDescriptorSchema.shape.config.default({ adapter: 'fleet-build-job' }),
+    fleet: FleetPlacementSchema.optional()
+}).transform(data => ({
+    ...data,
+    name: data.name ?? data.id,
+    requirements: data.fleet?.requirements ?? data.requirements,
+    mounts: data.fleet?.mounts ?? data.mounts
+}));
+// The historical build handoff without steps is an explicit compatibility form.
+// Supplied steps, source, target or publish must still satisfy their owner schemas.
+const LegacyBuildHandoffSchema = BuildJobDescriptorSchema.extend({
+    actionKind: z.never().optional(),
+    steps: z.never().optional(),
+    source: BuildJobDescriptorSchema.shape.source.optional(),
+    target: BuildJobDescriptorSchema.shape.target.optional(),
+    fleet: FleetPlacementSchema.optional()
+});
+const LegacyActionHandoffSchema = z.object({
+    actionKind: z.never().optional(),
+    id: z.string().min(1),
+    name: z.string().min(1).max(160).optional(),
+    kind: z.string().min(1).refine(kind => kind !== 'infra/build-job'),
+    source: JsonValueSchema.optional(),
+    steps: JsonValueSchema.optional(),
+    artifacts: JsonValueSchema.optional(),
+    publish: JsonValueSchema.optional(),
+    fleet: FleetPlacementSchema.optional()
+});
+const LegacyHandoffSchema = z.union([LegacyBuildHandoffSchema, LegacyActionHandoffSchema])
+    .transform((data, ctx) => {
+    const form = createHostActionRunFormSchema.safeParse({
+        actionKind: data.kind,
+        actionId: data.id,
+        name: data.name ?? data.id,
+        requirements: data.fleet?.requirements,
+        mounts: data.fleet?.mounts ?? [],
+        payload: {
+            descriptor: {
+                id: data.id,
+                name: data.name,
+                kind: data.kind,
+                source: data.source,
+                steps: data.steps,
+                artifacts: data.artifacts,
+                publish: data.publish
+            }
+        }
+    });
+    if (form.success)
+        return form.data;
+    ctx.addIssue({ code: 'custom', message: 'Invalid legacy action.' });
+    return z.NEVER;
+});
+export const QueueActionAdmissionSchema = z.union([
+    createHostActionRunFormSchema.transform(action => ({ kind: 'action', action })),
+    BuildHandoffSchema.transform(descriptor => ({ kind: 'build', descriptor })),
+    LegacyHandoffSchema.transform(action => ({ kind: 'action', action }))
+]);
+export function queueActionInvalid(reason) {
+    return new CapabilityError('Invalid queue action input.', 'INVALID_INPUT', {
+        reason, retryable: false,
+        recoveryHint: 'Provide --file with a JSON host action or supported handoff.'
+    });
+}
+export async function normalizeAction(input) {
+    const admission = QueueActionAdmissionSchema.safeParse(input);
+    if (!admission.success)
+        throw queueActionInvalid('queue-action-invalid');
+    if (admission.data.kind === 'action')
+        return admission.data.action;
+    return buildJobDescriptorToHostActionForm(admission.data.descriptor);
+}
+//# sourceMappingURL=queue-action.js.map

package/dist/schemas/queue-action.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"queue-action.js","sourceRoot":"","sources":["../../src/schemas/queue-action.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AACtD,OAAO,EAAE,eAAe,EAAE,MAAM,kCAAkC,CAAC;AACnE,OAAO,EAAE,wBAAwB,EAAE,MAAM,+BAA+B,CAAC;AACzE,OAAO,EACN,6BAA6B,EAC7B,kCAAkC,EAClC,MAAM,+BAA+B,CAAC;AACvC,OAAO,EACN,6BAA6B,EAC7B,4BAA4B,EAC5B,qBAAqB,EACrB,MAAM,oBAAoB,CAAC;AAE5B,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC;AAEhD,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;AAGrF,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IACrC,YAAY,EAAE,4BAA4B,CAAC,QAAQ,EAAE;IACrD,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC,QAAQ,EAAE;CACjD,CAAC,CAAC;AAEH,MAAM,kBAAkB,GAAG,wBAAwB,CAAC,MAAM,CAAC;IAC1D,UAAU,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE;IAChC,MAAM,EAAE,wBAAwB,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;IACnF,MAAM,EAAE,6BAA6B,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,iBAAiB,EAAE,CAAC;IAC1F,KAAK,EAAE,oBAAoB,CAAC,QAAQ,EAAE;CACtC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACrB,GAAG,IAAI;IACP,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,EAAE;IAC1B,YAAY,EAAE,IAAI,CAAC,KAAK,EAAE,YAAY,IAAI,IAAI,CAAC,YAAY;IAC3D,MAAM,EAAE,IAAI,CAAC,KAAK,EAAE,MAAM,IAAI,IAAI,CAAC,MAAM;CACzC,CAAC,CAAC,CAAC;AAEJ,gFAAgF;AAChF,oFAAoF;AACpF,MAAM,wBAAwB,GAAG,wBAAwB,CAAC,MAAM,CAAC;IAChE,UAAU,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE;IAChC,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE;IAC3B,MAAM,EAAE,wBAAwB,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,EAAE;IACxD,MAAM,EAAE,wBAAwB,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,EAAE;IACxD,KAAK,EAAE,oBAAoB,CAAC,QAAQ,EAAE;CACtC,CAAC,CAAC;AAEH,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C,UAAU,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE;IAChC,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACrB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IAC3C,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,KAAK,iBAAiB,CAAC;IAClE,MAAM,EAAE,eAAe,CAAC,QAAQ,EAAE;IAClC,KAAK,EAAE,eAAe,CAAC,QAAQ,EAAE;IACjC,SAAS,EAAE,eAAe,CAAC,QAAQ,EAAE;IACrC,OAAO,EAAE,eAAe,CAAC,QAAQ,EAAE;IACnC,KAAK,EAAE,oBAAoB,CAAC,QAAQ,EAAE;CACtC,CAAC,CAAC;AAEH,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,wBAAwB,EAAE,yBAAyB,CAAC,CAAC;KACxF,SAAS,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;IACxB,MAAM,IAAI,GAAG,6BAA6B,CAAC,SAAS,CAAC;QACpD,UAAU,EAAE,IAAI,CAAC,IAAI;QACrB,QAAQ,EAAE,IAAI,CAAC,EAAE;QACjB,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,EAAE;QAC1B,YAAY,EAAE,IAAI,CAAC,KAAK,EAAE,YAAY;QACtC,MAAM,EAAE,IAAI,CAAC,KAAK,EAAE,MAAM,IAAI,EAAE;QAChC,OAAO,EAAE;YACR,UAAU,EAAE;gBACX,EAAE,EAAE,IAAI,CAAC,EAAE;gBACX,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,OAAO,EAAE,IAAI,CAAC,OAAO;aACrB;SACD;KACD,CAAC,CAAC;IACH,IAAI,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC,IAAI,CAAC;IACnC,GAAG,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,wBAAwB,EAAE,CAAC,CAAC;IACpE,OAAO,CAAC,CAAC,KAAK,CAAC;AAChB,CAAC,CAAC,CAAC;AAEJ,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC,KAAK,CAAC;IACjD,6BAA6B,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,QAAiB,EAAE,MAAM,EAAE,CAAC,CAAC;IACxF,kBAAkB,CAAC,SAAS,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,OAAgB,EAAE,UAAU,EAAE,CAAC,CAAC;IACpF,mBAAmB,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,QAAiB,EAAE,MAAM,EAAE,CAAC,CAAC;CAC9E,CAAC,CAAC;AAGH,MAAM,UAAU,kBAAkB,CAAC,MAAc;IAChD,OAAO,IAAI,eAAe,CAAC,6BAA6B,EAAE,eAAe,EAAE;QAC1E,MAAM,EAAE,SAAS,EAAE,KAAK;QACxB,YAAY,EAAE,8DAA8D;KAC5E,CAAC,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,KAAc;IACnD,MAAM,SAAS,GAAG,0BAA0B,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC9D,IAAI,CAAC,SAAS,CAAC,OAAO;QAAE,MAAM,kBAAkB,CAAC,sBAAsB,CAAC,CAAC;IACzE,IAAI,SAAS,CAAC,IAAI,CAAC,IAAI,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC;IACnE,OAAO,kCAAkC,CAAC,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;AACtE,CAAC"}

package/dist/schemas/secrets/api.d.ts

@@ -0,0 +1,228 @@
+import * as z from 'zod/v4';
+export declare const listSecretsQuerySchema: z.ZodObject<{
+    providerType: z.ZodOptional<z.ZodString>;
+    scope: z.ZodOptional<z.ZodEnum<{
+        user: "user";
+        project: "project";
+        platform: "platform";
+        org: "org";
+    }>>;
+    scopeId: z.ZodOptional<z.ZodString>;
+    limit: z.ZodDefault<z.ZodNumber>;
+    offset: z.ZodDefault<z.ZodNumber>;
+}, z.core.$strip>;
+export declare const createSecretBodySchema: z.ZodObject<{
+    name: z.ZodString;
+    scope: z.ZodEnum<{
+        user: "user";
+        project: "project";
+        platform: "platform";
+        org: "org";
+    }>;
+    scopeId: z.ZodString;
+    providerType: z.ZodString;
+    value: z.ZodString;
+    metadata: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodType<import("./metadata.ts").SecretMetadataValue, unknown, z.core.$ZodTypeInternals<import("./metadata.ts").SecretMetadataValue, unknown>>>>;
+}, z.core.$strip>;
+export declare const updateSecretBodySchema: z.ZodObject<{
+    name: z.ZodOptional<z.ZodString>;
+    value: z.ZodOptional<z.ZodString>;
+    metadata: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodType<import("./metadata.ts").SecretMetadataValue, unknown, z.core.$ZodTypeInternals<import("./metadata.ts").SecretMetadataValue, unknown>>>>;
+}, z.core.$strip>;
+export declare const testSecretBodySchema: z.ZodObject<{
+    providerType: z.ZodString;
+}, z.core.$strip>;
+export declare const secretResponseSchema: z.ZodObject<{
+    id: z.ZodUUID;
+    name: z.ZodString;
+    scope: z.ZodEnum<{
+        user: "user";
+        project: "project";
+        platform: "platform";
+        org: "org";
+    }>;
+    scopeId: z.ZodString;
+    providerType: z.ZodString;
+    createdAt: z.ZodISODateTime;
+    updatedAt: z.ZodISODateTime;
+    lastUsedAt: z.ZodNullable<z.ZodISODateTime>;
+    lastRotatedAt: z.ZodOptional<z.ZodNullable<z.ZodISODateTime>>;
+    rotationPolicy: z.ZodOptional<z.ZodEnum<{
+        never: "never";
+        manual: "manual";
+        monthly: "monthly";
+        quarterly: "quarterly";
+        yearly: "yearly";
+    }>>;
+    metadata: z.ZodNullable<z.ZodRecord<z.ZodString, z.ZodType<import("./metadata.ts").SecretMetadataValue, unknown, z.core.$ZodTypeInternals<import("./metadata.ts").SecretMetadataValue, unknown>>>>;
+}, z.core.$strip>;
+export declare const secretListResponseSchema: z.ZodObject<{
+    secrets: z.ZodArray<z.ZodObject<{
+        id: z.ZodUUID;
+        name: z.ZodString;
+        scope: z.ZodEnum<{
+            user: "user";
+            project: "project";
+            platform: "platform";
+            org: "org";
+        }>;
+        scopeId: z.ZodString;
+        providerType: z.ZodString;
+        createdAt: z.ZodISODateTime;
+        updatedAt: z.ZodISODateTime;
+        lastUsedAt: z.ZodNullable<z.ZodISODateTime>;
+        lastRotatedAt: z.ZodOptional<z.ZodNullable<z.ZodISODateTime>>;
+        rotationPolicy: z.ZodOptional<z.ZodEnum<{
+            never: "never";
+            manual: "manual";
+            monthly: "monthly";
+            quarterly: "quarterly";
+            yearly: "yearly";
+        }>>;
+        metadata: z.ZodNullable<z.ZodRecord<z.ZodString, z.ZodType<import("./metadata.ts").SecretMetadataValue, unknown, z.core.$ZodTypeInternals<import("./metadata.ts").SecretMetadataValue, unknown>>>>;
+    }, z.core.$strip>>;
+    results: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        id: z.ZodUUID;
+        name: z.ZodString;
+        scope: z.ZodEnum<{
+            user: "user";
+            project: "project";
+            platform: "platform";
+            org: "org";
+        }>;
+        scopeId: z.ZodString;
+        providerType: z.ZodString;
+        createdAt: z.ZodISODateTime;
+        updatedAt: z.ZodISODateTime;
+        lastUsedAt: z.ZodNullable<z.ZodISODateTime>;
+        lastRotatedAt: z.ZodOptional<z.ZodNullable<z.ZodISODateTime>>;
+        rotationPolicy: z.ZodOptional<z.ZodEnum<{
+            never: "never";
+            manual: "manual";
+            monthly: "monthly";
+            quarterly: "quarterly";
+            yearly: "yearly";
+        }>>;
+        metadata: z.ZodNullable<z.ZodRecord<z.ZodString, z.ZodType<import("./metadata.ts").SecretMetadataValue, unknown, z.core.$ZodTypeInternals<import("./metadata.ts").SecretMetadataValue, unknown>>>>;
+    }, z.core.$strip>>>;
+    total: z.ZodOptional<z.ZodNumber>;
+    limit: z.ZodNumber;
+    offset: z.ZodNumber;
+}, z.core.$strip>;
+export declare const createSecretResponseSchema: z.ZodObject<{
+    success: z.ZodBoolean;
+    secret: z.ZodObject<{
+        id: z.ZodUUID;
+        name: z.ZodString;
+        scope: z.ZodEnum<{
+            user: "user";
+            project: "project";
+            platform: "platform";
+            org: "org";
+        }>;
+        scopeId: z.ZodString;
+        providerType: z.ZodString;
+        createdAt: z.ZodISODateTime;
+        updatedAt: z.ZodISODateTime;
+        lastUsedAt: z.ZodNullable<z.ZodISODateTime>;
+        lastRotatedAt: z.ZodOptional<z.ZodNullable<z.ZodISODateTime>>;
+        rotationPolicy: z.ZodOptional<z.ZodEnum<{
+            never: "never";
+            manual: "manual";
+            monthly: "monthly";
+            quarterly: "quarterly";
+            yearly: "yearly";
+        }>>;
+        metadata: z.ZodNullable<z.ZodRecord<z.ZodString, z.ZodType<import("./metadata.ts").SecretMetadataValue, unknown, z.core.$ZodTypeInternals<import("./metadata.ts").SecretMetadataValue, unknown>>>>;
+    }, z.core.$strip>;
+    result: z.ZodOptional<z.ZodObject<{
+        id: z.ZodUUID;
+        name: z.ZodString;
+        scope: z.ZodEnum<{
+            user: "user";
+            project: "project";
+            platform: "platform";
+            org: "org";
+        }>;
+        scopeId: z.ZodString;
+        providerType: z.ZodString;
+        createdAt: z.ZodISODateTime;
+        updatedAt: z.ZodISODateTime;
+        lastUsedAt: z.ZodNullable<z.ZodISODateTime>;
+        lastRotatedAt: z.ZodOptional<z.ZodNullable<z.ZodISODateTime>>;
+        rotationPolicy: z.ZodOptional<z.ZodEnum<{
+            never: "never";
+            manual: "manual";
+            monthly: "monthly";
+            quarterly: "quarterly";
+            yearly: "yearly";
+        }>>;
+        metadata: z.ZodNullable<z.ZodRecord<z.ZodString, z.ZodType<import("./metadata.ts").SecretMetadataValue, unknown, z.core.$ZodTypeInternals<import("./metadata.ts").SecretMetadataValue, unknown>>>>;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export declare const updateSecretResponseSchema: z.ZodObject<{
+    success: z.ZodBoolean;
+    secret: z.ZodObject<{
+        id: z.ZodUUID;
+        name: z.ZodString;
+        scope: z.ZodEnum<{
+            user: "user";
+            project: "project";
+            platform: "platform";
+            org: "org";
+        }>;
+        scopeId: z.ZodString;
+        providerType: z.ZodString;
+        createdAt: z.ZodISODateTime;
+        updatedAt: z.ZodISODateTime;
+        lastUsedAt: z.ZodNullable<z.ZodISODateTime>;
+        lastRotatedAt: z.ZodOptional<z.ZodNullable<z.ZodISODateTime>>;
+        rotationPolicy: z.ZodOptional<z.ZodEnum<{
+            never: "never";
+            manual: "manual";
+            monthly: "monthly";
+            quarterly: "quarterly";
+            yearly: "yearly";
+        }>>;
+        metadata: z.ZodNullable<z.ZodRecord<z.ZodString, z.ZodType<import("./metadata.ts").SecretMetadataValue, unknown, z.core.$ZodTypeInternals<import("./metadata.ts").SecretMetadataValue, unknown>>>>;
+    }, z.core.$strip>;
+    result: z.ZodOptional<z.ZodObject<{
+        id: z.ZodUUID;
+        name: z.ZodString;
+        scope: z.ZodEnum<{
+            user: "user";
+            project: "project";
+            platform: "platform";
+            org: "org";
+        }>;
+        scopeId: z.ZodString;
+        providerType: z.ZodString;
+        createdAt: z.ZodISODateTime;
+        updatedAt: z.ZodISODateTime;
+        lastUsedAt: z.ZodNullable<z.ZodISODateTime>;
+        lastRotatedAt: z.ZodOptional<z.ZodNullable<z.ZodISODateTime>>;
+        rotationPolicy: z.ZodOptional<z.ZodEnum<{
+            never: "never";
+            manual: "manual";
+            monthly: "monthly";
+            quarterly: "quarterly";
+            yearly: "yearly";
+        }>>;
+        metadata: z.ZodNullable<z.ZodRecord<z.ZodString, z.ZodType<import("./metadata.ts").SecretMetadataValue, unknown, z.core.$ZodTypeInternals<import("./metadata.ts").SecretMetadataValue, unknown>>>>;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export declare const deleteSecretResponseSchema: z.ZodObject<{
+    success: z.ZodBoolean;
+}, z.core.$strip>;
+export declare const testSecretResponseSchema: z.ZodObject<{
+    success: z.ZodBoolean;
+    message: z.ZodOptional<z.ZodString>;
+    error: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export type ListSecretsQuery = z.infer<typeof listSecretsQuerySchema>;
+export type CreateSecretBody = z.infer<typeof createSecretBodySchema>;
+export type UpdateSecretBody = z.infer<typeof updateSecretBodySchema>;
+export type TestSecretBody = z.infer<typeof testSecretBodySchema>;
+export type SecretResponse = z.infer<typeof secretResponseSchema>;
+export type SecretListResponse = z.infer<typeof secretListResponseSchema>;
+//# sourceMappingURL=api.d.ts.map

package/dist/schemas/secrets/api.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"api.d.ts","sourceRoot":"","sources":["../../../src/schemas/secrets/api.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAI5B,eAAO,MAAM,sBAAsB;;;;;;;;;;;iBAMjC,CAAC;AAEH,eAAO,MAAM,sBAAsB;;;;;;;;;;;;iBAOjC,CAAC;AAEH,eAAO,MAAM,sBAAsB;;;;iBAIjC,CAAC;AAEH,eAAO,MAAM,oBAAoB;;iBAE/B,CAAC;AAGH,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;iBAY/B,CAAC;AAEH,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAOnC,CAAC;AAEH,eAAO,MAAM,0BAA0B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAIrC,CAAC;AAEH,eAAO,MAAM,0BAA0B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAIrC,CAAC;AAEH,eAAO,MAAM,0BAA0B;;iBAErC,CAAC;AAEH,eAAO,MAAM,wBAAwB;;;;iBAInC,CAAC;AAGH,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AACtE,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AACtE,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AACtE,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAClE,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAClE,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC"}

package/dist/schemas/secrets/api.js

@@ -0,0 +1,67 @@
+import * as z from 'zod/v4';
+import { secretMetadataSchema } from "./metadata.js";
+// Request schemas
+export const listSecretsQuerySchema = z.object({
+    providerType: z.string().optional(),
+    scope: z.enum(['user', 'org', 'project', 'platform']).optional(),
+    scopeId: z.string().optional(),
+    limit: z.number().int().min(1).max(100).default(50),
+    offset: z.number().int().min(0).default(0)
+});
+export const createSecretBodySchema = z.object({
+    name: z.string().min(1).max(100),
+    scope: z.enum(['user', 'org', 'project', 'platform']),
+    scopeId: z.string(),
+    providerType: z.string(),
+    value: z.string().min(1), // Plain text value to be encrypted
+    metadata: secretMetadataSchema.optional()
+});
+export const updateSecretBodySchema = z.object({
+    name: z.string().min(1).max(100).optional(),
+    value: z.string().min(1).optional(), // New value to encrypt
+    metadata: secretMetadataSchema.optional()
+});
+export const testSecretBodySchema = z.object({
+    providerType: z.string()
+});
+// Response schemas
+export const secretResponseSchema = z.object({
+    id: z.uuid(),
+    name: z.string(),
+    scope: z.enum(['user', 'org', 'project', 'platform']),
+    scopeId: z.string(),
+    providerType: z.string(),
+    createdAt: z.iso.datetime(),
+    updatedAt: z.iso.datetime(),
+    lastUsedAt: z.iso.datetime().nullable(),
+    lastRotatedAt: z.iso.datetime().nullable().optional(),
+    rotationPolicy: z.enum(['manual', 'monthly', 'quarterly', 'yearly', 'never']).optional(),
+    metadata: secretMetadataSchema.nullable()
+});
+export const secretListResponseSchema = z.object({
+    secrets: z.array(secretResponseSchema),
+    // vibesCrud dual envelope (storage.cloud-api consumers)
+    results: z.array(secretResponseSchema).optional(),
+    total: z.number().int().min(0).optional(),
+    limit: z.number().int().min(1).max(1000),
+    offset: z.number().int().min(0)
+});
+export const createSecretResponseSchema = z.object({
+    success: z.boolean(),
+    secret: secretResponseSchema,
+    result: secretResponseSchema.optional()
+});
+export const updateSecretResponseSchema = z.object({
+    success: z.boolean(),
+    secret: secretResponseSchema,
+    result: secretResponseSchema.optional()
+});
+export const deleteSecretResponseSchema = z.object({
+    success: z.boolean()
+});
+export const testSecretResponseSchema = z.object({
+    success: z.boolean(),
+    message: z.string().optional(),
+    error: z.string().optional()
+});
+//# sourceMappingURL=api.js.map

package/dist/schemas/secrets/api.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"api.js","sourceRoot":"","sources":["../../../src/schemas/secrets/api.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAC;AAErD,kBAAkB;AAClB,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9C,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACnC,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC,CAAC,QAAQ,EAAE;IAChE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC9B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACnD,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;CAC1C,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9C,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IAChC,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;IACrD,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE;IACxB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,mCAAmC;IAC7D,QAAQ,EAAE,oBAAoB,CAAC,QAAQ,EAAE;CACzC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9C,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IAC3C,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,EAAE,uBAAuB;IAC5D,QAAQ,EAAE,oBAAoB,CAAC,QAAQ,EAAE;CACzC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE;CACxB,CAAC,CAAC;AAEH,mBAAmB;AACnB,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE;IACZ,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;IACrD,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE;IACxB,SAAS,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE;IAC3B,SAAS,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE;IAC3B,UAAU,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACvC,aAAa,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACrD,cAAc,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,SAAS,EAAE,WAAW,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,QAAQ,EAAE;IACxF,QAAQ,EAAE,oBAAoB,CAAC,QAAQ,EAAE;CACzC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChD,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,oBAAoB,CAAC;IACtC,wDAAwD;IACxD,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,QAAQ,EAAE;IACjD,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACzC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC;IACxC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CAC/B,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC;IAClD,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;IACpB,MAAM,EAAE,oBAAoB;IAC5B,MAAM,EAAE,oBAAoB,CAAC,QAAQ,EAAE;CACvC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC;IAClD,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;IACpB,MAAM,EAAE,oBAAoB;IAC5B,MAAM,EAAE,oBAAoB,CAAC,QAAQ,EAAE;CACvC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC;IAClD,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;CACpB,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChD,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;IACpB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC9B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC5B,CAAC,CAAC"}

package/dist/schemas/secrets/common.d.ts

@@ -0,0 +1,62 @@
+/**
+ * Client-safe canonical secret types
+ *
+ * These shapes are shared by both the server-side service (which extends them
+ * via DB row types) and the browser-safe component layer (which cannot import
+ * Drizzle ORM modules). Keeping them in `schemas/` makes them the single
+ * source of truth and keeps both consumers aligned.
+ */
+import type { SecretMetadata } from './metadata.ts';
+export type SecretScope = 'user' | 'org' | 'project' | 'platform';
+/**
+ * Public secret information (without encrypted value)
+ *
+ * Returned to client code; never includes the encrypted blob or audit-only
+ * fields like `createdBy`.
+ */
+export interface PublicSecret {
+    id: string;
+    name: string;
+    scope: SecretScope;
+    scopeId: string;
+    providerType: string;
+    createdAt: Date;
+    updatedAt: Date;
+    lastUsedAt: Date | null;
+    lastRotatedAt?: Date | null;
+    rotationPolicy?: 'manual' | 'monthly' | 'quarterly' | 'yearly' | 'never';
+    metadata: SecretMetadata | null;
+}
+/**
+ * Secret creation input
+ *
+ * Shared between client form submissions and server service calls. The
+ * server applies additional validation via `createSecretBodySchema`.
+ */
+export interface CreateSecretInput {
+    name: string;
+    scope: SecretScope;
+    scopeId: string;
+    providerType: string;
+    value: string;
+    metadata?: SecretMetadata;
+}
+/**
+ * Secret update input
+ *
+ * All fields optional — only specified fields are updated.
+ */
+export interface UpdateSecretInput {
+    name?: string;
+    value?: string;
+    metadata?: SecretMetadata;
+}
+/**
+ * Test result returned from a credential test endpoint
+ */
+export interface SecretTestResult {
+    success: boolean;
+    error?: string;
+    message?: string;
+}
+//# sourceMappingURL=common.d.ts.map

package/dist/schemas/secrets/common.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"common.d.ts","sourceRoot":"","sources":["../../../src/schemas/secrets/common.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAEpD,MAAM,MAAM,WAAW,GAAG,MAAM,GAAG,KAAK,GAAG,SAAS,GAAG,UAAU,CAAC;AAElE;;;;;GAKG;AACH,MAAM,WAAW,YAAY;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,WAAW,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,IAAI,CAAC;IAChB,SAAS,EAAE,IAAI,CAAC;IAChB,UAAU,EAAE,IAAI,GAAG,IAAI,CAAC;IACxB,aAAa,CAAC,EAAE,IAAI,GAAG,IAAI,CAAC;IAC5B,cAAc,CAAC,EAAE,QAAQ,GAAG,SAAS,GAAG,WAAW,GAAG,QAAQ,GAAG,OAAO,CAAC;IACzE,QAAQ,EAAE,cAAc,GAAG,IAAI,CAAC;CAChC;AAED;;;;;GAKG;AACH,MAAM,WAAW,iBAAiB;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,WAAW,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,cAAc,CAAC;CAC1B;AAED;;;;GAIG;AACH,MAAM,WAAW,iBAAiB;IACjC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,cAAc,CAAC;CAC1B;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAChC,OAAO,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;CACjB"}

package/dist/schemas/secrets/common.js

@@ -0,0 +1,10 @@
+/**
+ * Client-safe canonical secret types
+ *
+ * These shapes are shared by both the server-side service (which extends them
+ * via DB row types) and the browser-safe component layer (which cannot import
+ * Drizzle ORM modules). Keeping them in `schemas/` makes them the single
+ * source of truth and keeps both consumers aligned.
+ */
+export {};
+//# sourceMappingURL=common.js.map

package/dist/schemas/secrets/common.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"common.js","sourceRoot":"","sources":["../../../src/schemas/secrets/common.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG"}

package/dist/schemas/secrets/index.d.ts

@@ -0,0 +1,8 @@
+export type { SecretScope, PublicSecret, CreateSecretInput, UpdateSecretInput, SecretTestResult } from './common.ts';
+export { secretMetadataValueSchema, secretMetadataSchema } from './metadata.ts';
+export type { SecretMetadataValue, SecretMetadata } from './metadata.ts';
+export { listSecretsQuerySchema, createSecretBodySchema, updateSecretBodySchema, testSecretBodySchema, secretResponseSchema, secretListResponseSchema, createSecretResponseSchema, updateSecretResponseSchema, deleteSecretResponseSchema, testSecretResponseSchema } from './api.ts';
+export type { ListSecretsQuery, CreateSecretBody, UpdateSecretBody, TestSecretBody, SecretResponse, SecretListResponse } from './api.ts';
+export { RESOURCE_TYPES } from './resource-secrets.ts';
+export type { ResourceType } from './resource-secrets.ts';
+//# sourceMappingURL=index.d.ts.map

package/dist/schemas/secrets/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/schemas/secrets/index.ts"],"names":[],"mappings":"AAAA,YAAY,EAAE,WAAW,EAAE,YAAY,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AACrH,OAAO,EACN,yBAAyB,EACzB,oBAAoB,EACpB,MAAM,eAAe,CAAC;AACvB,YAAY,EAAE,mBAAmB,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AACzE,OAAO,EACN,sBAAsB,EACtB,sBAAsB,EACtB,sBAAsB,EACtB,oBAAoB,EACpB,oBAAoB,EACpB,wBAAwB,EACxB,0BAA0B,EAC1B,0BAA0B,EAC1B,0BAA0B,EAC1B,wBAAwB,EACxB,MAAM,UAAU,CAAC;AAClB,YAAY,EACX,gBAAgB,EAChB,gBAAgB,EAChB,gBAAgB,EAChB,cAAc,EACd,cAAc,EACd,kBAAkB,EAClB,MAAM,UAAU,CAAC;AAClB,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,YAAY,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC"}

package/dist/schemas/secrets/index.js

@@ -0,0 +1,4 @@
+export { secretMetadataValueSchema, secretMetadataSchema } from "./metadata.js";
+export { listSecretsQuerySchema, createSecretBodySchema, updateSecretBodySchema, testSecretBodySchema, secretResponseSchema, secretListResponseSchema, createSecretResponseSchema, updateSecretResponseSchema, deleteSecretResponseSchema, testSecretResponseSchema } from "./api.js";
+export { RESOURCE_TYPES } from "./resource-secrets.js";
+//# sourceMappingURL=index.js.map

package/dist/schemas/secrets/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/schemas/secrets/index.ts"],"names":[],"mappings":"AACA,OAAO,EACN,yBAAyB,EACzB,oBAAoB,EACpB,MAAM,eAAe,CAAC;AAEvB,OAAO,EACN,sBAAsB,EACtB,sBAAsB,EACtB,sBAAsB,EACtB,oBAAoB,EACpB,oBAAoB,EACpB,wBAAwB,EACxB,0BAA0B,EAC1B,0BAA0B,EAC1B,0BAA0B,EAC1B,wBAAwB,EACxB,MAAM,UAAU,CAAC;AASlB,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC"}

package/dist/schemas/secrets/metadata.d.ts

@@ -0,0 +1,8 @@
+import * as z from 'zod/v4';
+export type SecretMetadataValue = string | number | boolean | null | SecretMetadataValue[] | {
+    [key: string]: SecretMetadataValue;
+};
+export declare const secretMetadataValueSchema: z.ZodType<SecretMetadataValue>;
+export declare const secretMetadataSchema: z.ZodRecord<z.ZodString, z.ZodType<SecretMetadataValue, unknown, z.core.$ZodTypeInternals<SecretMetadataValue, unknown>>>;
+export type SecretMetadata = z.infer<typeof secretMetadataSchema>;
+//# sourceMappingURL=metadata.d.ts.map

package/dist/schemas/secrets/metadata.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"metadata.d.ts","sourceRoot":"","sources":["../../../src/schemas/secrets/metadata.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAE5B,MAAM,MAAM,mBAAmB,GAC5B,MAAM,GACN,MAAM,GACN,OAAO,GACP,IAAI,GACJ,mBAAmB,EAAE,GACrB;IAAE,CAAC,GAAG,EAAE,MAAM,GAAG,mBAAmB,CAAA;CAAE,CAAC;AAE1C,eAAO,MAAM,yBAAyB,EAAE,CAAC,CAAC,OAAO,CAAC,mBAAmB,CASpE,CAAC;AAEF,eAAO,MAAM,oBAAoB,2HAAkD,CAAC;AAEpF,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC"}

package/dist/schemas/secrets/metadata.js

@@ -0,0 +1,11 @@
+import * as z from 'zod/v4';
+export const secretMetadataValueSchema = z.lazy(() => z.union([
+    z.string(),
+    z.number(),
+    z.boolean(),
+    z.null(),
+    z.array(secretMetadataValueSchema),
+    z.record(z.string(), secretMetadataValueSchema)
+]));
+export const secretMetadataSchema = z.record(z.string(), secretMetadataValueSchema);
+//# sourceMappingURL=metadata.js.map

package/dist/schemas/secrets/metadata.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"metadata.js","sourceRoot":"","sources":["../../../src/schemas/secrets/metadata.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAU5B,MAAM,CAAC,MAAM,yBAAyB,GAAmC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CACpF,CAAC,CAAC,KAAK,CAAC;IACP,CAAC,CAAC,MAAM,EAAE;IACV,CAAC,CAAC,MAAM,EAAE;IACV,CAAC,CAAC,OAAO,EAAE;IACX,CAAC,CAAC,IAAI,EAAE;IACR,CAAC,CAAC,KAAK,CAAC,yBAAyB,CAAC;IAClC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,yBAAyB,CAAC;CAC/C,CAAC,CACF,CAAC;AAEF,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,yBAAyB,CAAC,CAAC"}

package/dist/schemas/secrets/resource-secrets.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Public schema for the platform `resource_secrets` association.
+ *
+ * The Drizzle table itself stays app-local (apps/platform-web/src/lib/
+ * secrets/db/tables/resource-secrets.ts) per the package-split playbook
+ * §0 — this module owns only the cross-app contract: which resource
+ * kinds may have secrets attached.
+ */
+export declare const RESOURCE_TYPES: readonly ["host", "host_pool", "process", "daemon", "database_connection", "storage_provider", "component", "media", "integration", "workflow", "app", "org", "user"];
+export type ResourceType = (typeof RESOURCE_TYPES)[number];
+//# sourceMappingURL=resource-secrets.d.ts.map

package/dist/schemas/secrets/resource-secrets.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resource-secrets.d.ts","sourceRoot":"","sources":["../../../src/schemas/secrets/resource-secrets.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,eAAO,MAAM,cAAc,uKAcjB,CAAC;AAEX,MAAM,MAAM,YAAY,GAAG,CAAC,OAAO,cAAc,CAAC,CAAC,MAAM,CAAC,CAAC"}

package/dist/schemas/secrets/resource-secrets.js

@@ -0,0 +1,24 @@
+/**
+ * Public schema for the platform `resource_secrets` association.
+ *
+ * The Drizzle table itself stays app-local (apps/platform-web/src/lib/
+ * secrets/db/tables/resource-secrets.ts) per the package-split playbook
+ * §0 — this module owns only the cross-app contract: which resource
+ * kinds may have secrets attached.
+ */
+export const RESOURCE_TYPES = [
+    'host',
+    'host_pool',
+    'process',
+    'daemon',
+    'database_connection',
+    'storage_provider',
+    'component',
+    'media',
+    'integration',
+    'workflow',
+    'app',
+    'org',
+    'user'
+];
+//# sourceMappingURL=resource-secrets.js.map

package/dist/schemas/secrets/resource-secrets.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resource-secrets.js","sourceRoot":"","sources":["../../../src/schemas/secrets/resource-secrets.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,MAAM,CAAC,MAAM,cAAc,GAAG;IAC7B,MAAM;IACN,WAAW;IACX,SAAS;IACT,QAAQ;IACR,qBAAqB;IACrB,kBAAkB;IAClB,WAAW;IACX,OAAO;IACP,aAAa;IACb,UAAU;IACV,KAAK;IACL,KAAK;IACL,MAAM;CACG,CAAC"}

package/dist/schemas/tool-presentation.d.ts

@@ -0,0 +1,47 @@
+/** Admission for partial tool payloads displayed while a tool is streaming.
+ * Unknown extension values stay intact; only fields used for presentation are narrowed.
+ */
+import * as z from 'zod/v4';
+export declare const ToolPresentationValueSchema: z.ZodUnknown;
+export type ToolPresentationInput = z.input<typeof ToolPresentationValueSchema>;
+export declare const ToolRecordSchema: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+export type ToolRecord = z.infer<typeof ToolRecordSchema>;
+export declare const ToolTextSchema: z.ZodString;
+export declare const ToolPrimitiveSchema: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodBigInt, z.ZodSymbol, z.ZodFunction<z.core.$ZodFunctionArgs, z.core.$ZodFunctionOut>]>;
+export declare const ToolNumberSchema: z.ZodNumber;
+export declare const ComponentCardRowSchema: z.ZodObject<{
+    id: z.ZodString;
+    slug: z.ZodString;
+    name: z.ZodString;
+    description: z.ZodString;
+    visibility: z.ZodString;
+    publishedVersion: z.ZodString;
+    editorUrl: z.ZodString;
+}, z.core.$strip>;
+export type ComponentCardRow = z.infer<typeof ComponentCardRowSchema>;
+export declare const VersionCardRowSchema: z.ZodObject<{
+    version: z.ZodString;
+    publishedAt: z.ZodString;
+    bundleHash: z.ZodString;
+    warningCount: z.ZodNumber;
+}, z.core.$strip>;
+export type VersionCardRow = z.infer<typeof VersionCardRowSchema>;
+export declare const ManifestCardRowSchema: z.ZodObject<{
+    id: z.ZodString;
+    name: z.ZodString;
+    description: z.ZodString;
+    dataType: z.ZodString;
+    scope: z.ZodString;
+    namespace: z.ZodString;
+}, z.core.$strip>;
+export type ManifestCardRow = z.infer<typeof ManifestCardRowSchema>;
+export declare const InspectedQueryDataSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
+    kind: z.ZodLiteral<"rows">;
+    rows: z.ZodArray<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    total: z.ZodNumber;
+}, z.core.$strip>, z.ZodObject<{
+    kind: z.ZodLiteral<"value">;
+    value: z.ZodOptional<z.ZodUnknown>;
+}, z.core.$strip>], "kind">;
+export type InspectedQueryData = z.infer<typeof InspectedQueryDataSchema>;
+//# sourceMappingURL=tool-presentation.d.ts.map

package/dist/schemas/tool-presentation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-presentation.d.ts","sourceRoot":"","sources":["../../src/schemas/tool-presentation.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAE5B,eAAO,MAAM,2BAA2B,cAAY,CAAC;AACrD,MAAM,MAAM,qBAAqB,GAAC,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAE9E,eAAO,MAAM,gBAAgB,wCAAiC,CAAC;AAC/D,MAAM,MAAM,UAAU,GAAC,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AACxD,eAAO,MAAM,cAAc,aAAkB,CAAC;AAC9C,eAAO,MAAM,mBAAmB,yJAAgF,CAAC;AACjH,eAAO,MAAM,gBAAgB,aAAW,CAAC;AAEzC,eAAO,MAAM,sBAAsB;;;;;;;;iBAGjC,CAAC;AACH,MAAM,MAAM,gBAAgB,GAAC,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AACpE,eAAO,MAAM,oBAAoB;;;;;iBAE/B,CAAC;AACH,MAAM,MAAM,cAAc,GAAC,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAChE,eAAO,MAAM,qBAAqB;;;;;;;iBAGhC,CAAC;AACH,MAAM,MAAM,eAAe,GAAC,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAClE,eAAO,MAAM,wBAAwB;;;;;;;2BAGnC,CAAC;AACH,MAAM,MAAM,kBAAkB,GAAC,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC"}