@vibesdotdev/secrets 0.0.1 → 1.0.0-rc.3

package/dist/schemas/discovery/import.schema.js

@@ -0,0 +1,55 @@
+/**
+ * Secrets Import Manifest Schema
+ *
+ * Catalogs the secrets the platform expects to receive from local root env
+ * files at bootstrap time. Carries no values — only key identity, source
+ * preference, and intent. The manifest is the contract a `vibes secrets
+ * import` command (phase 5) reads against.
+ */
+import * as z from 'zod/v4';
+/**
+ * Where a secret value is expected to originate from when running
+ * `vibes secrets import`. Sources with a `path` are repo-relative .env-shaped
+ * files; they are read-only inputs and never committed. Sources without a
+ * `path` (e.g. the canonical `manual` source) describe entries that are not
+ * importable from disk and must be set through other means
+ * (`vibes secrets set`, generated tokens, Cloudflare dashboard, etc.).
+ */
+export const SecretSourceSchema = z.object({
+    /** Repo-relative path to the .env file. Omit for non-importable sources. */
+    path: z.string().min(1).optional(),
+    /** Why this source owns this category of secrets (Vibes internals, providers, etc.) */
+    purpose: z.string().min(1)
+});
+export const SecretCategorySchema = z.enum([
+    'vibes-internal',
+    'vibes-auth',
+    'cloudflare',
+    'provider-llm',
+    'provider-voice',
+    'provider-search',
+    'provider-billing',
+    'provider-other'
+]);
+export const SecretManifestEntrySchema = z.object({
+    /** Canonical key in Cloudflare Secrets Store. Matches env var name unless renamed. */
+    key: z.string().regex(/^[_A-Z0-9]+$/),
+    /** Category this secret belongs to (drives source-file routing) */
+    category: SecretCategorySchema,
+    /** Preferred source file id (must exist in `sources`) */
+    source: z.string().min(1),
+    /** Alternate names this secret may appear under in the source file */
+    aliases: z.array(z.string().regex(/^[_A-Z0-9]+$/)).default([]),
+    /** Whether the secret is required for a production push */
+    required: z.boolean().default(true),
+    /** Human-readable description of what this secret unlocks */
+    description: z.string().min(1)
+});
+export const SecretsImportManifestSchema = z.object({
+    version: z.literal(1),
+    /** Map of source id → file path + purpose */
+    sources: z.record(z.string().min(1), SecretSourceSchema),
+    /** Catalog of expected secrets, keyed by canonical name */
+    secrets: z.array(SecretManifestEntrySchema)
+});
+//# sourceMappingURL=import.schema.js.map

package/dist/schemas/discovery/import.schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"import.schema.js","sourceRoot":"","sources":["../../../src/schemas/discovery/import.schema.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAE5B;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C,4EAA4E;IAC5E,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAClC,uFAAuF;IACvF,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CAC1B,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,IAAI,CAAC;IAC1C,gBAAgB;IAChB,YAAY;IACZ,YAAY;IACZ,cAAc;IACd,gBAAgB;IAChB,iBAAiB;IACjB,kBAAkB;IAClB,gBAAgB;CAChB,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IACjD,sFAAsF;IACtF,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,cAAc,CAAC;IACrC,mEAAmE;IACnE,QAAQ,EAAE,oBAAoB;IAC9B,yDAAyD;IACzD,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACzB,sEAAsE;IACtE,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAC9D,2DAA2D;IAC3D,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IACnC,6DAA6D;IAC7D,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CAC9B,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,CAAC,MAAM,CAAC;IACnD,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IACrB,6CAA6C;IAC7C,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,kBAAkB,CAAC;IACxD,2DAA2D;IAC3D,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,yBAAyB,CAAC;CAC3C,CAAC,CAAC"}

package/dist/schemas/discovery/requirements.schema.d.ts

@@ -0,0 +1,235 @@
+import * as z from 'zod/v4';
+export declare const requirementEnvEntrySchema: z.ZodObject<{
+    name: z.ZodString;
+    storeKey: z.ZodOptional<z.ZodString>;
+    secret: z.ZodOptional<z.ZodBoolean>;
+    required: z.ZodOptional<z.ZodBoolean>;
+    description: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+/** An `infra/web-app` or `infra/worker` descriptor as discovery reads it. */
+export declare const requirementInfraDescriptorSchema: z.ZodObject<{
+    id: z.ZodString;
+    env: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        name: z.ZodString;
+        storeKey: z.ZodOptional<z.ZodString>;
+        secret: z.ZodOptional<z.ZodBoolean>;
+        required: z.ZodOptional<z.ZodBoolean>;
+        description: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>>;
+}, z.core.$strip>;
+export declare const deploymentConfigSchema: z.ZodObject<{
+    appId: z.ZodOptional<z.ZodString>;
+    env: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        name: z.ZodString;
+        storeKey: z.ZodOptional<z.ZodString>;
+        secret: z.ZodOptional<z.ZodBoolean>;
+        required: z.ZodOptional<z.ZodBoolean>;
+        description: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>>;
+}, z.core.$loose>;
+export declare const deploymentWrapperSchema: z.ZodObject<{
+    deployment: z.ZodObject<{
+        appId: z.ZodOptional<z.ZodString>;
+        env: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            name: z.ZodString;
+            storeKey: z.ZodOptional<z.ZodString>;
+            secret: z.ZodOptional<z.ZodBoolean>;
+            required: z.ZodOptional<z.ZodBoolean>;
+            description: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>>>;
+    }, z.core.$loose>;
+}, z.core.$loose>;
+export declare const deploymentExportSchema: z.ZodUnion<readonly [z.ZodPipe<z.ZodObject<{
+    deployment: z.ZodObject<{
+        appId: z.ZodOptional<z.ZodString>;
+        env: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            name: z.ZodString;
+            storeKey: z.ZodOptional<z.ZodString>;
+            secret: z.ZodOptional<z.ZodBoolean>;
+            required: z.ZodOptional<z.ZodBoolean>;
+            description: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>>>;
+    }, z.core.$loose>;
+}, z.core.$loose>, z.ZodTransform<{
+    [x: string]: unknown;
+    appId?: string | undefined;
+    env?: {
+        name: string;
+        storeKey?: string | undefined;
+        secret?: boolean | undefined;
+        required?: boolean | undefined;
+        description?: string | undefined;
+    }[] | undefined;
+}, {
+    [x: string]: unknown;
+    deployment: {
+        [x: string]: unknown;
+        appId?: string | undefined;
+        env?: {
+            name: string;
+            storeKey?: string | undefined;
+            secret?: boolean | undefined;
+            required?: boolean | undefined;
+            description?: string | undefined;
+        }[] | undefined;
+    };
+}>>, z.ZodObject<{
+    appId: z.ZodOptional<z.ZodString>;
+    env: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        name: z.ZodString;
+        storeKey: z.ZodOptional<z.ZodString>;
+        secret: z.ZodOptional<z.ZodBoolean>;
+        required: z.ZodOptional<z.ZodBoolean>;
+        description: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>>;
+}, z.core.$loose>]>;
+export declare const deploymentModuleSchema: z.ZodUnion<readonly [z.ZodPipe<z.ZodObject<{
+    default: z.ZodUnion<readonly [z.ZodPipe<z.ZodObject<{
+        deployment: z.ZodObject<{
+            appId: z.ZodOptional<z.ZodString>;
+            env: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                name: z.ZodString;
+                storeKey: z.ZodOptional<z.ZodString>;
+                secret: z.ZodOptional<z.ZodBoolean>;
+                required: z.ZodOptional<z.ZodBoolean>;
+                description: z.ZodOptional<z.ZodString>;
+            }, z.core.$strip>>>;
+        }, z.core.$loose>;
+    }, z.core.$loose>, z.ZodTransform<{
+        [x: string]: unknown;
+        appId?: string | undefined;
+        env?: {
+            name: string;
+            storeKey?: string | undefined;
+            secret?: boolean | undefined;
+            required?: boolean | undefined;
+            description?: string | undefined;
+        }[] | undefined;
+    }, {
+        [x: string]: unknown;
+        deployment: {
+            [x: string]: unknown;
+            appId?: string | undefined;
+            env?: {
+                name: string;
+                storeKey?: string | undefined;
+                secret?: boolean | undefined;
+                required?: boolean | undefined;
+                description?: string | undefined;
+            }[] | undefined;
+        };
+    }>>, z.ZodObject<{
+        appId: z.ZodOptional<z.ZodString>;
+        env: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            name: z.ZodString;
+            storeKey: z.ZodOptional<z.ZodString>;
+            secret: z.ZodOptional<z.ZodBoolean>;
+            required: z.ZodOptional<z.ZodBoolean>;
+            description: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>>>;
+    }, z.core.$loose>]>;
+}, z.core.$loose>, z.ZodTransform<{
+    [x: string]: unknown;
+    appId?: string | undefined;
+    env?: {
+        name: string;
+        storeKey?: string | undefined;
+        secret?: boolean | undefined;
+        required?: boolean | undefined;
+        description?: string | undefined;
+    }[] | undefined;
+}, {
+    [x: string]: unknown;
+    default: {
+        [x: string]: unknown;
+        appId?: string | undefined;
+        env?: {
+            name: string;
+            storeKey?: string | undefined;
+            secret?: boolean | undefined;
+            required?: boolean | undefined;
+            description?: string | undefined;
+        }[] | undefined;
+    };
+}>>, z.ZodPipe<z.ZodObject<{
+    deployment: z.ZodObject<{
+        appId: z.ZodOptional<z.ZodString>;
+        env: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            name: z.ZodString;
+            storeKey: z.ZodOptional<z.ZodString>;
+            secret: z.ZodOptional<z.ZodBoolean>;
+            required: z.ZodOptional<z.ZodBoolean>;
+            description: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>>>;
+    }, z.core.$loose>;
+}, z.core.$loose>, z.ZodTransform<{
+    [x: string]: unknown;
+    appId?: string | undefined;
+    env?: {
+        name: string;
+        storeKey?: string | undefined;
+        secret?: boolean | undefined;
+        required?: boolean | undefined;
+        description?: string | undefined;
+    }[] | undefined;
+}, {
+    [x: string]: unknown;
+    deployment: {
+        [x: string]: unknown;
+        appId?: string | undefined;
+        env?: {
+            name: string;
+            storeKey?: string | undefined;
+            secret?: boolean | undefined;
+            required?: boolean | undefined;
+            description?: string | undefined;
+        }[] | undefined;
+    };
+}>>, z.ZodObject<{
+    appId: z.ZodOptional<z.ZodString>;
+    env: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        name: z.ZodString;
+        storeKey: z.ZodOptional<z.ZodString>;
+        secret: z.ZodOptional<z.ZodBoolean>;
+        required: z.ZodOptional<z.ZodBoolean>;
+        description: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>>;
+}, z.core.$loose>]>;
+export declare const serviceReleaseBindingSchema: z.ZodObject<{
+    source: z.ZodOptional<z.ZodObject<{
+        kind: z.ZodOptional<z.ZodString>;
+        key: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>;
+    target: z.ZodOptional<z.ZodObject<{
+        name: z.ZodOptional<z.ZodString>;
+        key: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>;
+    description: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export declare const serviceReleaseOperatorRequirementSchema: z.ZodObject<{
+    key: z.ZodString;
+    required: z.ZodOptional<z.ZodBoolean>;
+    description: z.ZodOptional<z.ZodString>;
+    capabilities: z.ZodOptional<z.ZodArray<z.ZodString>>;
+}, z.core.$strip>;
+export declare const serviceReleaseModuleSchema: z.ZodObject<{
+    serviceReleaseId: z.ZodOptional<z.ZodString>;
+    serviceReleaseSecretBindings: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        source: z.ZodOptional<z.ZodObject<{
+            kind: z.ZodOptional<z.ZodString>;
+            key: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>>;
+        target: z.ZodOptional<z.ZodObject<{
+            name: z.ZodOptional<z.ZodString>;
+            key: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>>;
+        description: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>>;
+    serviceReleaseOperatorSecretRequirements: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        key: z.ZodString;
+        required: z.ZodOptional<z.ZodBoolean>;
+        description: z.ZodOptional<z.ZodString>;
+        capabilities: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    }, z.core.$strip>>>;
+}, z.core.$loose>;
+//# sourceMappingURL=requirements.schema.d.ts.map

package/dist/schemas/discovery/requirements.schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"requirements.schema.d.ts","sourceRoot":"","sources":["../../../src/schemas/discovery/requirements.schema.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAE5B,eAAO,MAAM,yBAAyB;;;;;;iBAMpC,CAAC;AAEH,6EAA6E;AAC7E,eAAO,MAAM,gCAAgC;;;;;;;;;iBAG3C,CAAC;AAEH,eAAO,MAAM,sBAAsB;;;;;;;;;iBAGnB,CAAC;AAEjB,eAAO,MAAM,uBAAuB;;;;;;;;;;;iBAEpB,CAAC;AAEjB,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;mBAGjC,CAAC;AAEH,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;mBAMjC,CAAC;AAEH,eAAO,MAAM,2BAA2B;;;;;;;;;;iBAUtC,CAAC;AAEH,eAAO,MAAM,uCAAuC;;;;;iBAKlD,CAAC;AAEH,eAAO,MAAM,0BAA0B;;;;;;;;;;;;;;;;;;;iBAIvB,CAAC"}

package/dist/schemas/discovery/requirements.schema.js

@@ -0,0 +1,54 @@
+import * as z from 'zod/v4';
+export const requirementEnvEntrySchema = z.object({
+    name: z.string(),
+    storeKey: z.string().optional(),
+    secret: z.boolean().optional(),
+    required: z.boolean().optional(),
+    description: z.string().optional()
+});
+/** An `infra/web-app` or `infra/worker` descriptor as discovery reads it. */
+export const requirementInfraDescriptorSchema = z.object({
+    id: z.string().min(1),
+    env: z.array(requirementEnvEntrySchema).optional()
+});
+export const deploymentConfigSchema = z.object({
+    appId: z.string().optional(),
+    env: z.array(requirementEnvEntrySchema).optional()
+}).passthrough();
+export const deploymentWrapperSchema = z.object({
+    deployment: deploymentConfigSchema
+}).passthrough();
+export const deploymentExportSchema = z.union([
+    deploymentWrapperSchema.transform((val) => val.deployment),
+    deploymentConfigSchema
+]);
+export const deploymentModuleSchema = z.union([
+    z.object({
+        default: deploymentExportSchema
+    }).passthrough().transform((val) => val.default),
+    deploymentWrapperSchema.transform((val) => val.deployment),
+    deploymentConfigSchema
+]);
+export const serviceReleaseBindingSchema = z.object({
+    source: z.object({
+        kind: z.string().optional(),
+        key: z.string().optional()
+    }).optional(),
+    target: z.object({
+        name: z.string().optional(),
+        key: z.string().optional()
+    }).optional(),
+    description: z.string().optional()
+});
+export const serviceReleaseOperatorRequirementSchema = z.object({
+    key: z.string(),
+    required: z.boolean().optional(),
+    description: z.string().optional(),
+    capabilities: z.array(z.string()).optional()
+});
+export const serviceReleaseModuleSchema = z.object({
+    serviceReleaseId: z.string().optional(),
+    serviceReleaseSecretBindings: z.array(serviceReleaseBindingSchema).optional(),
+    serviceReleaseOperatorSecretRequirements: z.array(serviceReleaseOperatorRequirementSchema).optional()
+}).passthrough();
+//# sourceMappingURL=requirements.schema.js.map

package/dist/schemas/discovery/requirements.schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"requirements.schema.js","sourceRoot":"","sources":["../../../src/schemas/discovery/requirements.schema.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAE5B,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IACjD,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC/B,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAC9B,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAChC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAClC,CAAC,CAAC;AAEH,6EAA6E;AAC7E,MAAM,CAAC,MAAM,gCAAgC,GAAG,CAAC,CAAC,MAAM,CAAC;IACxD,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACrB,GAAG,EAAE,CAAC,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAC,QAAQ,EAAE;CAClD,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9C,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,GAAG,EAAE,CAAC,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAC,QAAQ,EAAE;CAClD,CAAC,CAAC,WAAW,EAAE,CAAC;AAEjB,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/C,UAAU,EAAE,sBAAsB;CAClC,CAAC,CAAC,WAAW,EAAE,CAAC;AAEjB,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC;IAC7C,uBAAuB,CAAC,SAAS,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC;IAC1D,sBAAsB;CACtB,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC;IAC7C,CAAC,CAAC,MAAM,CAAC;QACR,OAAO,EAAE,sBAAsB;KAC/B,CAAC,CAAC,WAAW,EAAE,CAAC,SAAS,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC;IAChD,uBAAuB,CAAC,SAAS,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC;IAC1D,sBAAsB;CACtB,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,CAAC,MAAM,CAAC;IACnD,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QAChB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC3B,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KAC1B,CAAC,CAAC,QAAQ,EAAE;IACb,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QAChB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC3B,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KAC1B,CAAC,CAAC,QAAQ,EAAE;IACb,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAClC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,uCAAuC,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/D,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE;IACf,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAChC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;CAC5C,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC;IAClD,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACvC,4BAA4B,EAAE,CAAC,CAAC,KAAK,CAAC,2BAA2B,CAAC,CAAC,QAAQ,EAAE;IAC7E,wCAAwC,EAAE,CAAC,CAAC,KAAK,CAAC,uCAAuC,CAAC,CAAC,QAAQ,EAAE;CACrG,CAAC,CAAC,WAAW,EAAE,CAAC"}

package/dist/schemas/discovery/runtime.schema.d.ts

@@ -0,0 +1,83 @@
+import type { RuntimeLoaderImplementation, RuntimeRef } from '@vibesdotdev/kernel';
+import * as z from 'zod/v4';
+import { requirementEnvEntrySchema, requirementInfraDescriptorSchema } from './requirements.schema.ts';
+export declare const SecretRequirementSchema: z.ZodPipe<z.ZodObject<{
+    key: z.ZodString;
+    binding: z.ZodOptional<z.ZodString>;
+    appId: z.ZodString;
+    required: z.ZodBoolean;
+    description: z.ZodOptional<z.ZodString>;
+    capabilities: z.ZodOptional<z.ZodArray<z.ZodString>>;
+}, z.core.$strip>, z.ZodTransform<{
+    description: string | undefined;
+    key: string;
+    appId: string;
+    required: boolean;
+    binding?: string | undefined;
+    capabilities?: string[] | undefined;
+}, {
+    key: string;
+    appId: string;
+    required: boolean;
+    binding?: string | undefined;
+    description?: string | undefined;
+    capabilities?: string[] | undefined;
+}>>;
+export type SecretRequirement = z.infer<typeof SecretRequirementSchema>;
+export type RequirementEnvEntry = z.infer<typeof requirementEnvEntrySchema>;
+export type RequirementInfraDescriptor = z.infer<typeof requirementInfraDescriptorSchema>;
+export type SecretRequirementsRuntime = Pick<RuntimeRef, 'query' | 'hasKind'> & {
+    assets(kind: string): {
+        descriptors(): unknown[];
+    };
+};
+/** Preserve the host loader's callables and their receiver rather than redeclaring them. */
+export type WalkLoader = {
+    readonly loader: RuntimeLoaderImplementation;
+} & Required<Pick<RuntimeLoaderImplementation, 'listDirectory' | 'stat' | 'joinPath'>>;
+export type ConfigModule = Awaited<ReturnType<RuntimeLoaderImplementation['importModule']>>;
+export declare const WalkedSchema: z.ZodObject<{
+    configs: z.ZodArray<z.ZodString>;
+    failures: z.ZodArray<z.ZodObject<{
+        path: z.ZodString;
+        message: z.ZodString;
+        cause: z.ZodOptional<z.ZodInstanceOf<import("@vibesdotdev/kernel").CapabilityError>>;
+        reason: z.ZodUnion<readonly [z.ZodLiteral<"requirements-loader-unavailable">, z.ZodLiteral<"requirements-config-load-failed">, z.ZodLiteral<"requirements-config-invalid">, z.ZodLiteral<"requirements-appid-missing">, z.ZodLiteral<"requirements-descriptor-invalid">, z.ZodLiteral<"requirements-walk-capped">, z.ZodLiteral<"requirements-walk-unreadable">]>;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export type Walked = z.infer<typeof WalkedSchema>;
+export declare const ConfigOutcomeSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
+    ok: z.ZodLiteral<true>;
+    requirements: z.ZodArray<z.ZodPipe<z.ZodObject<{
+        key: z.ZodString;
+        binding: z.ZodOptional<z.ZodString>;
+        appId: z.ZodString;
+        required: z.ZodBoolean;
+        description: z.ZodOptional<z.ZodString>;
+        capabilities: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    }, z.core.$strip>, z.ZodTransform<{
+        description: string | undefined;
+        key: string;
+        appId: string;
+        required: boolean;
+        binding?: string | undefined;
+        capabilities?: string[] | undefined;
+    }, {
+        key: string;
+        appId: string;
+        required: boolean;
+        binding?: string | undefined;
+        description?: string | undefined;
+        capabilities?: string[] | undefined;
+    }>>>;
+}, z.core.$strip>, z.ZodObject<{
+    ok: z.ZodLiteral<false>;
+    failure: z.ZodObject<{
+        path: z.ZodString;
+        message: z.ZodString;
+        cause: z.ZodOptional<z.ZodInstanceOf<import("@vibesdotdev/kernel").CapabilityError>>;
+        reason: z.ZodUnion<readonly [z.ZodLiteral<"requirements-loader-unavailable">, z.ZodLiteral<"requirements-config-load-failed">, z.ZodLiteral<"requirements-config-invalid">, z.ZodLiteral<"requirements-appid-missing">, z.ZodLiteral<"requirements-descriptor-invalid">, z.ZodLiteral<"requirements-walk-capped">, z.ZodLiteral<"requirements-walk-unreadable">]>;
+    }, z.core.$strip>;
+}, z.core.$strip>], "ok">;
+export type ConfigOutcome = z.infer<typeof ConfigOutcomeSchema>;
+//# sourceMappingURL=runtime.schema.d.ts.map

package/dist/schemas/discovery/runtime.schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime.schema.d.ts","sourceRoot":"","sources":["../../../src/schemas/discovery/runtime.schema.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,2BAA2B,EAAC,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAClF,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAE5B,OAAO,EAAE,yBAAyB,EAAC,gCAAgC,EAAE,MAAM,0BAA0B,CAAC;AAEtG,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;GAOgD,CAAC;AACrF,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AACxE,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAC5E,MAAM,MAAM,0BAA0B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gCAAgC,CAAC,CAAC;AAE1F,MAAM,MAAM,yBAAyB,GAAG,IAAI,CAAC,UAAU,EAAE,OAAO,GAAG,SAAS,CAAC,GAAG;IAC/E,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG;QAAE,WAAW,IAAI,OAAO,EAAE,CAAA;KAAE,CAAC;CACnD,CAAC;AAEF,4FAA4F;AAC5F,MAAM,MAAM,UAAU,GAAG;IACxB,QAAQ,CAAC,MAAM,EAAE,2BAA2B,CAAC;CAC7C,GAAG,QAAQ,CAAC,IAAI,CAAC,2BAA2B,EAAE,eAAe,GAAG,MAAM,GAAG,UAAU,CAAC,CAAC,CAAC;AACvF,MAAM,MAAM,YAAY,GAAG,OAAO,CAAC,UAAU,CAAC,2BAA2B,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC;AAE5F,eAAO,MAAM,YAAY;;;;;;;;iBAGvB,CAAC;AACH,MAAM,MAAM,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC;AAElD,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;yBAG9B,CAAC;AACH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC"}

package/dist/schemas/discovery/runtime.schema.js

@@ -0,0 +1,20 @@
+import * as z from 'zod/v4';
+import { RequirementDiscoveryFailureSchema } from "./diagnostics.schema.js";
+import { requirementEnvEntrySchema, requirementInfraDescriptorSchema } from "./requirements.schema.js";
+export const SecretRequirementSchema = z.object({
+    key: z.string(),
+    binding: z.string().optional(),
+    appId: z.string(),
+    required: z.boolean(),
+    description: z.string().optional(),
+    capabilities: z.array(z.string()).optional()
+}).transform(({ description, ...requirement }) => ({ ...requirement, description }));
+export const WalkedSchema = z.object({
+    configs: z.array(z.string()),
+    failures: z.array(RequirementDiscoveryFailureSchema)
+});
+export const ConfigOutcomeSchema = z.discriminatedUnion('ok', [
+    z.object({ ok: z.literal(true), requirements: z.array(SecretRequirementSchema) }),
+    z.object({ ok: z.literal(false), failure: RequirementDiscoveryFailureSchema })
+]);
+//# sourceMappingURL=runtime.schema.js.map

package/dist/schemas/discovery/runtime.schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime.schema.js","sourceRoot":"","sources":["../../../src/schemas/discovery/runtime.schema.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,iCAAiC,EAAE,MAAM,yBAAyB,CAAC;AAC5E,OAAO,EAAE,yBAAyB,EAAC,gCAAgC,EAAE,MAAM,0BAA0B,CAAC;AAEtG,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/C,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE;IACf,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC9B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE;IACrB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;CAC5C,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,WAAW,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,WAAW,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC;AAerF,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC;IACpC,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IAC5B,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,iCAAiC,CAAC;CACpD,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,kBAAkB,CAAC,IAAI,EAAE;IAC7D,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,uBAAuB,CAAC,EAAE,CAAC;IACjF,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,iCAAiC,EAAE,CAAC;CAC9E,CAAC,CAAC"}

package/dist/schemas/discovery/scan.schema.d.ts

@@ -0,0 +1,13 @@
+import * as z from 'zod/v4';
+export declare const PreCommitScanReportSchema: z.ZodObject<{
+    exitCode: z.ZodNumber;
+    scannedFiles: z.ZodNumber;
+    findings: z.ZodArray<z.ZodObject<{
+        file: z.ZodString;
+        name: z.ZodString;
+        lineNumber: z.ZodNumber;
+        matchLength: z.ZodNumber;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export type PreCommitScanReport = z.infer<typeof PreCommitScanReportSchema>;
+//# sourceMappingURL=scan.schema.d.ts.map

package/dist/schemas/discovery/scan.schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scan.schema.d.ts","sourceRoot":"","sources":["../../../src/schemas/discovery/scan.schema.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAE5B,eAAO,MAAM,yBAAyB;;;;;;;;;iBAIpC,CAAC;AACH,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC"}

package/dist/schemas/discovery/scan.schema.js

@@ -0,0 +1,8 @@
+import * as z from 'zod/v4';
+import { SecretFindingSchema } from "./signatures.schema.js";
+export const PreCommitScanReportSchema = z.object({
+    exitCode: z.number(),
+    scannedFiles: z.number(),
+    findings: z.array(SecretFindingSchema),
+});
+//# sourceMappingURL=scan.schema.js.map

package/dist/schemas/discovery/scan.schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scan.schema.js","sourceRoot":"","sources":["../../../src/schemas/discovery/scan.schema.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAC7D,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IACjD,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;IACpB,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE;IACxB,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,mBAAmB,CAAC;CACtC,CAAC,CAAC"}

package/dist/schemas/discovery/signatures.schema.d.ts

@@ -0,0 +1,14 @@
+import * as z from 'zod/v4';
+export declare const SecretPatternSchema: z.ZodObject<{
+    pattern: z.ZodInstanceOf<RegExp>;
+    name: z.ZodString;
+}, z.core.$strip>;
+export type SecretPattern = z.infer<typeof SecretPatternSchema>;
+export declare const SecretFindingSchema: z.ZodObject<{
+    file: z.ZodString;
+    name: z.ZodString;
+    lineNumber: z.ZodNumber;
+    matchLength: z.ZodNumber;
+}, z.core.$strip>;
+export type SecretFinding = z.infer<typeof SecretFindingSchema>;
+//# sourceMappingURL=signatures.schema.d.ts.map

package/dist/schemas/discovery/signatures.schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"signatures.schema.d.ts","sourceRoot":"","sources":["../../../src/schemas/discovery/signatures.schema.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAE5B,eAAO,MAAM,mBAAmB;;;iBAG9B,CAAC;AACH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAEhE,eAAO,MAAM,mBAAmB;;;;;iBAK9B,CAAC;AACH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC"}

package/dist/schemas/discovery/signatures.schema.js

@@ -0,0 +1,12 @@
+import * as z from 'zod/v4';
+export const SecretPatternSchema = z.object({
+    pattern: z.instanceof(RegExp),
+    name: z.string(),
+});
+export const SecretFindingSchema = z.object({
+    file: z.string(),
+    name: z.string(),
+    lineNumber: z.number(),
+    matchLength: z.number(),
+});
+//# sourceMappingURL=signatures.schema.js.map

package/dist/schemas/discovery/signatures.schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"signatures.schema.js","sourceRoot":"","sources":["../../../src/schemas/discovery/signatures.schema.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAE5B,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,OAAO,EAAE,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC;IAC7B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;CAChB,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;IACtB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;CACvB,CAAC,CAAC"}

package/dist/schemas/domain/attestation/attestation.schema.d.ts

@@ -0,0 +1,30 @@
+import * as z from 'zod/v4';
+export declare const createAttestationOptionsSchema: z.ZodObject<{
+    claimPath: z.ZodString;
+}, z.core.$strip>;
+export type CreateAttestationOptions = z.infer<typeof createAttestationOptionsSchema>;
+export declare const SecretsAttestationDescriptorSchema: z.ZodObject<{
+    name: z.ZodOptional<z.ZodString>;
+    description: z.ZodOptional<z.ZodString>;
+    tags: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    hardware: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    enabled: z.ZodOptional<z.ZodBoolean>;
+    capabilityId: z.ZodOptional<z.ZodString>;
+    requiredContext: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    optionalContext: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    config: z.ZodOptional<z.ZodUnknown>;
+    retention: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
+        maxAgeDays: z.ZodOptional<z.ZodNumber>;
+        maxEntries: z.ZodOptional<z.ZodNumber>;
+        maxBytes: z.ZodOptional<z.ZodNumber>;
+        cascadeFrom: z.ZodOptional<z.ZodString>;
+        ageField: z.ZodOptional<z.ZodString>;
+        reason: z.ZodString;
+        enforcedBy: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>]>>;
+    kind: z.ZodLiteral<"secrets/attestation">;
+    id: z.ZodString;
+    priority: z.ZodDefault<z.ZodNumber>;
+}, z.core.$strip>;
+export type SecretsAttestationDescriptor = z.infer<typeof SecretsAttestationDescriptorSchema>;
+//# sourceMappingURL=attestation.schema.d.ts.map

package/dist/schemas/domain/attestation/attestation.schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"attestation.schema.d.ts","sourceRoot":"","sources":["../../../../src/schemas/domain/attestation/attestation.schema.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAE5B,eAAO,MAAM,8BAA8B;;iBAKzC,CAAC;AAEH,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,8BAA8B,CAAC,CAAC;AAEtF,eAAO,MAAM,kCAAkC;;;;;;;;;;;;;;;;;;;;;;iBAI7C,CAAC;AAEH,MAAM,MAAM,4BAA4B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kCAAkC,CAAC,CAAC"}

package/dist/schemas/domain/attestation/attestation.schema.js

@@ -0,0 +1,14 @@
+import { RuntimeDescriptorSchema } from '@vibesdotdev/kernel/schemas';
+import * as z from 'zod/v4';
+export const createAttestationOptionsSchema = z.object({
+    claimPath: z
+        .string()
+        .min(1)
+        .refine((path) => !path.includes('\0'), 'A claim path holds no NUL character')
+});
+export const SecretsAttestationDescriptorSchema = RuntimeDescriptorSchema.extend({
+    kind: z.literal('secrets/attestation'),
+    id: z.string(),
+    priority: z.number().default(50)
+});
+//# sourceMappingURL=attestation.schema.js.map

package/dist/schemas/domain/attestation/attestation.schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"attestation.schema.js","sourceRoot":"","sources":["../../../../src/schemas/domain/attestation/attestation.schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,MAAM,6BAA6B,CAAC;AACtE,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAE5B,MAAM,CAAC,MAAM,8BAA8B,GAAG,CAAC,CAAC,MAAM,CAAC;IACtD,SAAS,EAAE,CAAC;SACV,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,qCAAqC,CAAC;CAC/E,CAAC,CAAC;AAIH,MAAM,CAAC,MAAM,kCAAkC,GAAG,uBAAuB,CAAC,MAAM,CAAC;IAChF,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,qBAAqB,CAAC;IACtC,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IACd,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;CAChC,CAAC,CAAC"}

package/dist/schemas/domain/attestation/provider.schema.d.ts

@@ -0,0 +1,29 @@
+import { LocalAttestationToken } from '@vibesdotdev/kernel';
+import * as z from 'zod/v4';
+/** Function schemas check callability without wrapping functions or changing their receivers. */
+export declare const localAttestationHandleSchema: z.ZodObject<{
+    claimPath: z.ZodString;
+    verify: z.ZodFunction<z.ZodTuple<readonly [z.ZodOptional<z.ZodString>], null>, z.ZodBoolean>;
+    dispose: z.ZodFunction<z.ZodTuple<readonly [], null>, z.ZodPromise<z.ZodVoid>>;
+}, z.core.$strip>;
+export type LocalAttestationHandle = z.infer<typeof localAttestationHandleSchema>;
+export declare const secretsAttestationProviderSchema: z.ZodObject<{
+    createAttestation: z.ZodFunction<z.ZodTuple<readonly [z.ZodObject<{
+        claimPath: z.ZodString;
+    }, z.core.$strip>], null>, z.ZodPromise<z.ZodObject<{
+        claimPath: z.ZodString;
+        verify: z.ZodFunction<z.ZodTuple<readonly [z.ZodOptional<z.ZodString>], null>, z.ZodBoolean>;
+        dispose: z.ZodFunction<z.ZodTuple<readonly [], null>, z.ZodPromise<z.ZodVoid>>;
+    }, z.core.$strip>>>;
+    readAttestation: z.ZodFunction<z.ZodTuple<readonly [z.ZodString], null>, z.ZodPromise<z.ZodInstanceOf<LocalAttestationToken>>>;
+    createLocalAttestation: z.ZodFunction<z.ZodTuple<readonly [z.ZodObject<{
+        claimPath: z.ZodString;
+    }, z.core.$strip>], null>, z.ZodPromise<z.ZodObject<{
+        claimPath: z.ZodString;
+        verify: z.ZodFunction<z.ZodTuple<readonly [z.ZodOptional<z.ZodString>], null>, z.ZodBoolean>;
+        dispose: z.ZodFunction<z.ZodTuple<readonly [], null>, z.ZodPromise<z.ZodVoid>>;
+    }, z.core.$strip>>>;
+    readLocalAttestation: z.ZodFunction<z.ZodTuple<readonly [z.ZodString], null>, z.ZodPromise<z.ZodInstanceOf<LocalAttestationToken>>>;
+}, z.core.$strip>;
+export type SecretsAttestationProvider = z.infer<typeof secretsAttestationProviderSchema>;
+//# sourceMappingURL=provider.schema.d.ts.map

package/dist/schemas/domain/attestation/provider.schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider.schema.d.ts","sourceRoot":"","sources":["../../../../src/schemas/domain/attestation/provider.schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAC5D,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAG5B,iGAAiG;AACjG,eAAO,MAAM,4BAA4B;;;;iBAIvC,CAAC;AACH,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC;AAKlF,eAAO,MAAM,gCAAgC;;;;;;;;;;;;;;;;;iBAK3C,CAAC;AACH,MAAM,MAAM,0BAA0B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gCAAgC,CAAC,CAAC"}