@vibesdotdev/secrets 0.0.2 → 1.0.0-rc.3

package/dist/schemas/discovery/backfill.schema.d.ts

@@ -0,0 +1,30 @@
+import * as z from 'zod/v4';
+export declare const StoreCandidateSchema: z.ZodObject<{
+    id: z.ZodString;
+    list: z.ZodFunction<z.ZodTuple<readonly [z.ZodString], null>, z.ZodPromise<z.ZodArray<z.ZodObject<{
+        key: z.ZodString;
+        hasValue: z.ZodBoolean;
+    }, z.core.$strip>>>>;
+    get: z.ZodFunction<z.ZodTuple<readonly [z.ZodString, z.ZodString], null>, z.ZodPromise<z.ZodUnion<readonly [z.ZodString, z.ZodUndefined]>>>;
+}, z.core.$strip>;
+export type StoreCandidate = z.infer<typeof StoreCandidateSchema>;
+export declare const ListOutcomeSchema: z.ZodUnion<readonly [z.ZodObject<{
+    ok: z.ZodLiteral<true>;
+    entries: z.ZodArray<z.ZodObject<{
+        key: z.ZodString;
+        hasValue: z.ZodBoolean;
+    }, z.core.$strip>>;
+}, z.core.$strip>, z.ZodObject<{
+    ok: z.ZodLiteral<false>;
+    error: z.ZodOptional<z.ZodUnknown>;
+}, z.core.$strip>]>;
+export type ListOutcome = z.infer<typeof ListOutcomeSchema>;
+export declare const GetOutcomeSchema: z.ZodUnion<readonly [z.ZodObject<{
+    ok: z.ZodLiteral<true>;
+    value: z.ZodUnion<readonly [z.ZodString, z.ZodUndefined]>;
+}, z.core.$strip>, z.ZodObject<{
+    ok: z.ZodLiteral<false>;
+    error: z.ZodPipe<z.ZodUnknown, z.ZodTransform<Error | import("@vibesdotdev/kernel").ThrownNonError, unknown>>;
+}, z.core.$strip>]>;
+export type GetOutcome = z.infer<typeof GetOutcomeSchema>;
+//# sourceMappingURL=backfill.schema.d.ts.map

package/dist/schemas/discovery/backfill.schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"backfill.schema.d.ts","sourceRoot":"","sources":["../../../src/schemas/discovery/backfill.schema.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAE5B,eAAO,MAAM,oBAAoB;;;;;;;iBAI/B,CAAC;AACH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAElE,eAAO,MAAM,iBAAiB;;;;;;;;;mBAM1B,CAAC;AACL,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAE5D,eAAO,MAAM,gBAAgB;;;;;;mBAMzB,CAAC;AACL,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC"}

package/dist/schemas/discovery/backfill.schema.js

@@ -0,0 +1,23 @@
+import { CaughtFailureSchema } from '@vibesdotdev/kernel';
+import * as z from 'zod/v4';
+import { SecretEntrySchema } from "../domain/store/store.types.js";
+export const StoreCandidateSchema = z.object({
+    id: z.string(),
+    list: z.function({ input: [z.string()], output: z.promise(z.array(SecretEntrySchema.pick({ key: true, hasValue: true }))) }),
+    get: z.function({ input: [z.string(), z.string()], output: z.promise(z.union([z.string(), z.undefined()])) }),
+});
+export const ListOutcomeSchema = z.union([z.object({
+        ok: z.literal(true),
+        entries: z.array(SecretEntrySchema.pick({ key: true, hasValue: true })),
+    }), z.object({
+        ok: z.literal(false),
+        error: z.unknown().optional(),
+    })]);
+export const GetOutcomeSchema = z.union([z.object({
+        ok: z.literal(true),
+        value: z.union([z.string(), z.undefined()]),
+    }), z.object({
+        ok: z.literal(false),
+        error: z.unknown().transform((value) => CaughtFailureSchema.parse(value)),
+    })]);
+//# sourceMappingURL=backfill.schema.js.map

package/dist/schemas/discovery/backfill.schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"backfill.schema.js","sourceRoot":"","sources":["../../../src/schemas/discovery/backfill.schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAC1D,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,iBAAiB,EAAE,MAAM,gCAAgC,CAAC;AACnE,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IACd,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAC5H,GAAG,EAAE,CAAC,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;CAC7G,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;QAClD,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;QACnB,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;KACvE,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC;QACZ,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC;QACpB,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;KAC7B,CAAC,CAAC,CAAC,CAAC;AAGL,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;QACjD,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;QACnB,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC;KAC3C,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC;QACZ,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC;QACpB,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,SAAS,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,mBAAmB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;KACzE,CAAC,CAAC,CAAC,CAAC"}

package/dist/schemas/discovery/check-report.schema.d.ts

@@ -0,0 +1,19 @@
+import * as z from 'zod/v4';
+export declare const ManifestCheckSchema: z.ZodObject<{
+    key: z.ZodString;
+    required: z.ZodBoolean;
+    source: z.ZodUnion<readonly [z.ZodString, z.ZodUndefined]>;
+    status: z.ZodUnion<readonly [z.ZodLiteral<"ok">, z.ZodLiteral<"missing">, z.ZodLiteral<"warn">, z.ZodLiteral<"unknown">]>;
+    storedIn: z.ZodUnion<readonly [z.ZodString, z.ZodUndefined]>;
+}, z.core.$strip>;
+export type ManifestCheck = z.infer<typeof ManifestCheckSchema>;
+export declare const StoreDiagnosticSchema: z.ZodObject<{
+    storeId: z.ZodString;
+    storeName: z.ZodString;
+    backend: z.ZodString;
+    environment: z.ZodString;
+    error: z.ZodString;
+    action: z.ZodString;
+}, z.core.$strip>;
+export type StoreDiagnostic = z.infer<typeof StoreDiagnosticSchema>;
+//# sourceMappingURL=check-report.schema.d.ts.map

package/dist/schemas/discovery/check-report.schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"check-report.schema.d.ts","sourceRoot":"","sources":["../../../src/schemas/discovery/check-report.schema.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,eAAO,MAAM,mBAAmB;;;;;;iBAM9B,CAAC;AACH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAEhE,eAAO,MAAM,qBAAqB;;;;;;;iBAOhC,CAAC;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC"}

package/dist/schemas/discovery/check-report.schema.js

@@ -0,0 +1,17 @@
+import * as z from 'zod/v4';
+export const ManifestCheckSchema = z.object({
+    key: z.string(),
+    required: z.boolean(),
+    source: z.union([z.string(), z.undefined()]),
+    status: z.union([z.literal('ok'), z.literal('missing'), z.literal('warn'), z.literal('unknown')]),
+    storedIn: z.union([z.string(), z.undefined()]),
+});
+export const StoreDiagnosticSchema = z.object({
+    storeId: z.string(),
+    storeName: z.string(),
+    backend: z.string(),
+    environment: z.string(),
+    error: z.string(),
+    action: z.string(),
+});
+//# sourceMappingURL=check-report.schema.js.map

package/dist/schemas/discovery/check-report.schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"check-report.schema.js","sourceRoot":"","sources":["../../../src/schemas/discovery/check-report.schema.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE;IACf,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE;IACrB,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC;IAC5C,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC;IACjG,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC;CAC9C,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7C,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;IACvB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;CAClB,CAAC,CAAC"}

package/dist/schemas/discovery/diagnostics.schema.d.ts

@@ -0,0 +1,29 @@
+import { CapabilityError } from '@vibesdotdev/kernel';
+import * as z from 'zod/v4';
+export declare const RequirementDiscoveryFailureSchema: z.ZodObject<{
+    path: z.ZodString;
+    message: z.ZodString;
+    cause: z.ZodOptional<z.ZodInstanceOf<CapabilityError>>;
+    reason: z.ZodUnion<readonly [z.ZodLiteral<"requirements-loader-unavailable">, z.ZodLiteral<"requirements-config-load-failed">, z.ZodLiteral<"requirements-config-invalid">, z.ZodLiteral<"requirements-appid-missing">, z.ZodLiteral<"requirements-descriptor-invalid">, z.ZodLiteral<"requirements-walk-capped">, z.ZodLiteral<"requirements-walk-unreadable">]>;
+}, z.core.$strip>;
+export type RequirementDiscoveryFailure = z.infer<typeof RequirementDiscoveryFailureSchema>;
+export declare const RequirementDiscoveryDiagnosticsSchema: z.ZodObject<{
+    configsDiscovered: z.ZodNumber;
+    configsLoaded: z.ZodNumber;
+    failures: z.ZodArray<z.ZodObject<{
+        path: z.ZodString;
+        message: z.ZodString;
+        cause: z.ZodOptional<z.ZodInstanceOf<CapabilityError>>;
+        reason: z.ZodUnion<readonly [z.ZodLiteral<"requirements-loader-unavailable">, z.ZodLiteral<"requirements-config-load-failed">, z.ZodLiteral<"requirements-config-invalid">, z.ZodLiteral<"requirements-appid-missing">, z.ZodLiteral<"requirements-descriptor-invalid">, z.ZodLiteral<"requirements-walk-capped">, z.ZodLiteral<"requirements-walk-unreadable">]>;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export type RequirementDiscoveryDiagnostics = z.infer<typeof RequirementDiscoveryDiagnosticsSchema>;
+export declare const SecretRequirementOptionsSchema: z.ZodUnion<readonly [z.ZodObject<{
+    deploymentConfigRoot: z.ZodString;
+    includeDeploymentConfigs: z.ZodOptional<z.ZodLiteral<true>>;
+}, z.core.$strip>, z.ZodObject<{
+    includeDeploymentConfigs: z.ZodLiteral<false>;
+    deploymentConfigRoot: z.ZodOptional<z.ZodUndefined>;
+}, z.core.$strip>]>;
+export type SecretRequirementOptions = z.infer<typeof SecretRequirementOptionsSchema>;
+//# sourceMappingURL=diagnostics.schema.d.ts.map

package/dist/schemas/discovery/diagnostics.schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"diagnostics.schema.d.ts","sourceRoot":"","sources":["../../../src/schemas/discovery/diagnostics.schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AACtD,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,eAAO,MAAM,iCAAiC;;;;;iBAK5C,CAAC;AACH,MAAM,MAAM,2BAA2B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iCAAiC,CAAC,CAAC;AAE5F,eAAO,MAAM,qCAAqC;;;;;;;;;iBAIhD,CAAC;AACH,MAAM,MAAM,+BAA+B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qCAAqC,CAAC,CAAC;AAEpG,eAAO,MAAM,8BAA8B;;;;;;mBAMvC,CAAC;AACL,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,8BAA8B,CAAC,CAAC"}

package/dist/schemas/discovery/diagnostics.schema.js

@@ -0,0 +1,21 @@
+import { CapabilityError } from '@vibesdotdev/kernel';
+import * as z from 'zod/v4';
+export const RequirementDiscoveryFailureSchema = z.object({
+    path: z.string(),
+    message: z.string(),
+    cause: z.instanceof(CapabilityError).optional(),
+    reason: z.union([z.literal('requirements-loader-unavailable'), z.literal('requirements-config-load-failed'), z.literal('requirements-config-invalid'), z.literal('requirements-appid-missing'), z.literal('requirements-descriptor-invalid'), z.literal('requirements-walk-capped'), z.literal('requirements-walk-unreadable')]),
+});
+export const RequirementDiscoveryDiagnosticsSchema = z.object({
+    configsDiscovered: z.number(),
+    configsLoaded: z.number(),
+    failures: z.array(RequirementDiscoveryFailureSchema),
+});
+export const SecretRequirementOptionsSchema = z.union([z.object({
+        deploymentConfigRoot: z.string(),
+        includeDeploymentConfigs: z.literal(true).optional(),
+    }), z.object({
+        includeDeploymentConfigs: z.literal(false),
+        deploymentConfigRoot: z.undefined().optional(),
+    })]);
+//# sourceMappingURL=diagnostics.schema.js.map

package/dist/schemas/discovery/diagnostics.schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"diagnostics.schema.js","sourceRoot":"","sources":["../../../src/schemas/discovery/diagnostics.schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AACtD,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,MAAM,CAAC,MAAM,iCAAiC,GAAG,CAAC,CAAC,MAAM,CAAC;IACzD,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,KAAK,EAAE,CAAC,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC,QAAQ,EAAE;IAC/C,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,iCAAiC,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,iCAAiC,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,6BAA6B,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,4BAA4B,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,iCAAiC,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,0BAA0B,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,8BAA8B,CAAC,CAAC,CAAC;CAChU,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,qCAAqC,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7D,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE;IAC7B,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE;IACzB,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,iCAAiC,CAAC;CACpD,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,8BAA8B,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;QAC/D,oBAAoB,EAAE,CAAC,CAAC,MAAM,EAAE;QAChC,wBAAwB,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE;KACpD,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC;QACZ,wBAAwB,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC;QAC1C,oBAAoB,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC,QAAQ,EAAE;KAC9C,CAAC,CAAC,CAAC,CAAC"}

package/dist/schemas/discovery/dotenv.schema.d.ts

@@ -0,0 +1,12 @@
+import * as z from 'zod/v4';
+export declare const DotenvLineSchema: z.ZodUnion<readonly [z.ZodObject<{
+    type: z.ZodUnion<readonly [z.ZodLiteral<"blank">, z.ZodLiteral<"comment">]>;
+    raw: z.ZodString;
+}, z.core.$strip>, z.ZodObject<{
+    type: z.ZodLiteral<"entry">;
+    raw: z.ZodString;
+    key: z.ZodString;
+    value: z.ZodString;
+}, z.core.$strip>]>;
+export type DotenvLine = z.infer<typeof DotenvLineSchema>;
+//# sourceMappingURL=dotenv.schema.d.ts.map

package/dist/schemas/discovery/dotenv.schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dotenv.schema.d.ts","sourceRoot":"","sources":["../../../src/schemas/discovery/dotenv.schema.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,eAAO,MAAM,gBAAgB;;;;;;;;mBAQzB,CAAC;AACL,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC"}

package/dist/schemas/discovery/dotenv.schema.js

@@ -0,0 +1,11 @@
+import * as z from 'zod/v4';
+export const DotenvLineSchema = z.union([z.object({
+        type: z.union([z.literal('blank'), z.literal('comment')]),
+        raw: z.string(),
+    }), z.object({
+        type: z.literal('entry'),
+        raw: z.string(),
+        key: z.string(),
+        value: z.string(),
+    })]);
+//# sourceMappingURL=dotenv.schema.js.map

package/dist/schemas/discovery/dotenv.schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dotenv.schema.js","sourceRoot":"","sources":["../../../src/schemas/discovery/dotenv.schema.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;QACjD,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC;QACzD,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE;KACf,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC;QACZ,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;QACxB,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE;QACf,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE;QACf,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;KACjB,CAAC,CAAC,CAAC,CAAC"}

package/dist/schemas/discovery/drift.schema.d.ts

@@ -0,0 +1,262 @@
+import * as z from 'zod/v4';
+export declare const DRIFT_INDEX_VERSION = 1;
+export declare const driftFingerprintRecordSchema: z.ZodObject<{
+    hmac: z.ZodString;
+    recordedAt: z.ZodString;
+}, z.core.$strip>;
+export declare const driftIndexSchema: z.ZodObject<{
+    version: z.ZodLiteral<1>;
+    fingerprints: z.ZodRecord<z.ZodString, z.ZodRecord<z.ZodString, z.ZodRecord<z.ZodString, z.ZodObject<{
+        hmac: z.ZodString;
+        recordedAt: z.ZodString;
+    }, z.core.$strip>>>>;
+}, z.core.$strip>;
+export type DriftFingerprintRecord = z.infer<typeof driftFingerprintRecordSchema>;
+export type DriftIndex = z.infer<typeof driftIndexSchema>;
+export declare const DriftRowSchema: z.ZodObject<{
+    key: z.ZodString;
+    environment: z.ZodString;
+    status: z.ZodUnion<readonly [z.ZodLiteral<"match">, z.ZodLiteral<"diverge">, z.ZodLiteral<"single-store">, z.ZodLiteral<"unknown">]>;
+    backends: z.ZodArray<z.ZodString>;
+}, z.core.$strip>;
+export type DriftRow = z.infer<typeof DriftRowSchema>;
+/**
+ * Where the drift files live: the host's filesystem adapter and the directory
+ * (`secrets` under the runtime's active, per-user, profile-aware home). Both come
+ * from the runtime the caller holds; nothing reads `VIBES_HOME` or the OS home.
+ */
+export declare const DriftHomeSchema: z.ZodReadonly<z.ZodObject<{
+    fs: z.ZodCustom<{
+        descriptor: {
+            id: string;
+            kind: "filesystem/adapter";
+            protocols: ("file" | "directory" | "symlink" | "special")[];
+            capabilities: ("list" | "link" | "read" | "write" | "stat" | "realpath" | "touch" | "watch" | "move" | "copy" | "trash" | "glob" | "glob-pruning" | "versioned-file" | "file-observation" | "exclusive-create" | "temporary-directory" | "owner-private" | "stream-write" | "chmod" | "append" | "append-stream" | "read-range" | "read-sync" | "mutation-sync" | "special-entry-type" | "recursive-watch" | "volume-capacity")[];
+            supportsRecursive: boolean;
+            supportsWatch: boolean;
+            supportsSymlinks: boolean;
+            supportsHardLinks: boolean;
+            supportsPermissions: boolean;
+            supportsOwnership: boolean;
+            supportsExtendedAttributes: boolean;
+            persistent: boolean;
+            supportsTransactions: boolean;
+            supportsAtomic: boolean;
+            cloudNative: boolean;
+            supportsVersioning: boolean;
+            supportsGit: boolean;
+            supportsEncryption: boolean;
+            supportsCompression: boolean;
+            supportsQuota: boolean;
+            supportsACL: boolean;
+            supportsSearch: boolean;
+            name?: string | undefined;
+            description?: string | undefined;
+            tags?: string[] | undefined;
+            hardware?: string[] | undefined;
+            enabled?: boolean | undefined;
+            priority?: number | undefined;
+            capabilityId?: string | undefined;
+            requiredContext?: string[] | undefined;
+            optionalContext?: string[] | undefined;
+            config?: unknown;
+            retention?: string | {
+                reason: string;
+                maxAgeDays?: number | undefined;
+                maxEntries?: number | undefined;
+                maxBytes?: number | undefined;
+                cascadeFrom?: string | undefined;
+                ageField?: string | undefined;
+                enforcedBy?: string | undefined;
+            } | undefined;
+            versionedFile?: {
+                revisionScheme: string;
+                revisionScope: "file-content";
+                conditionalWrite?: {
+                    consistency: "process-cooperative" | "cross-process-cooperative" | "backend-atomic";
+                    writerSet: "adapter-instance-versioned-api" | "process-versioned-api" | "backend-all-writers";
+                    externalWritersFenced: boolean;
+                } | undefined;
+            } | undefined;
+        };
+        exists: (path: string) => Promise<boolean>;
+        stat: (path: string) => Promise<import("@vibesdotdev/filesystem").FileSystemStat>;
+        readFile: (path: string, encoding?: import("@vibesdotdev/filesystem").FileEncoding) => Promise<string | Uint8Array>;
+        writeFile: (path: string, data: string | Uint8Array, options?: import("@vibesdotdev/filesystem").FileEncoding | {
+            encoding?: import("@vibesdotdev/filesystem").FileEncoding;
+            mode?: number;
+        }) => Promise<void>;
+        list: (path: string) => Promise<import("@vibesdotdev/filesystem").FileSystemEntry[]>;
+        mkdir: (path: string, options?: {
+            recursive?: boolean;
+            mode?: number;
+        }) => Promise<void>;
+        remove: (path: string, options?: {
+            recursive?: boolean;
+        }) => Promise<void>;
+        rename: (oldPath: string, newPath: string) => Promise<void>;
+        copy: (source: string, destination: string, options?: {
+            recursive?: boolean;
+        }) => Promise<void>;
+        watch: (path: string, callback: import("@vibesdotdev/filesystem").FileSystemWatchCallback) => Promise<() => void>;
+        glob: (pattern: string, options?: {
+            cwd?: string;
+            absolute?: boolean;
+            ignore?: string[];
+        }) => Promise<string[]>;
+        resolve: (...pathSegments: string[]) => string;
+        dirname: (path: string) => string;
+        basename: (path: string, ext?: string) => string;
+        join: (...pathSegments: string[]) => string;
+        relative: (from: string, to: string) => string;
+        isAbsolute: (path: string) => boolean;
+        normalize: (path: string) => string;
+        extname: (path: string) => string;
+        createSynchronousMutationPort?: (() => import("@vibesdotdev/filesystem").FileSystemSynchronousMutationPort) | undefined;
+        createSynchronousReadPort?: ((rootDir: string) => import("@vibesdotdev/filesystem").FileSystemSynchronousReadPort) | undefined;
+        createTemporaryDirectory?: (() => Promise<import("@vibesdotdev/filesystem").FileSystemTemporaryDirectory>) | undefined;
+        volumeCapacity?: ((path: string) => Promise<import("@vibesdotdev/filesystem").FileSystemVolumeCapacity>) | undefined;
+        chmod?: ((path: string, mode: number) => Promise<void>) | undefined;
+        readFileRange?: ((path: string, options: import("@vibesdotdev/filesystem").FileSystemReadRangeOptions) => Promise<Uint8Array>) | undefined;
+        appendFile?: ((path: string, data: string | Uint8Array, encoding?: import("@vibesdotdev/filesystem").FileEncoding) => Promise<void>) | undefined;
+        openAppendFile?: ((path: string) => Promise<import("@vibesdotdev/filesystem").FileSystemAppendHandle>) | undefined;
+        realpath?: ((path: string) => Promise<string>) | undefined;
+        touch?: ((path: string) => Promise<boolean>) | undefined;
+        writeFileStream?: ((path: string, source: ReadableStream<Uint8Array>, options?: import("@vibesdotdev/filesystem").FileStreamWriteOptions) => Promise<number>) | undefined;
+        writeFileNoFollow?: ((path: string, data: string | Uint8Array, encoding?: import("@vibesdotdev/filesystem").FileEncoding) => Promise<void>) | undefined;
+        readFileNoFollow?: ((path: string) => Promise<import("@vibesdotdev/filesystem").NoFollowFileRead>) | undefined;
+        createFileExclusive?: ((path: string, data: string | Uint8Array, encoding?: import("@vibesdotdev/filesystem").FileEncoding) => Promise<boolean>) | undefined;
+        writeFilePrivate?: ((path: string, data: string | Uint8Array, encoding?: import("@vibesdotdev/filesystem").FileEncoding) => Promise<void>) | undefined;
+        readFilePrivate?: ((path: string, maxBytes: number) => Promise<Uint8Array>) | undefined;
+        removeFilePrivateIfContent?: ((path: string, expected: Uint8Array) => Promise<boolean>) | undefined;
+        createSymlink?: ((target: string, path: string) => Promise<boolean>) | undefined;
+        readFileVersioned?: ((path: string, options: import("@vibesdotdev/filesystem").VersionedReadOptions) => Promise<import("@vibesdotdev/filesystem").VersionedReadResult>) | undefined;
+        observeFile?: ((path: string) => Promise<import("@vibesdotdev/filesystem").FileObservationResult>) | undefined;
+        readFileObserved?: ((path: string, options: import("@vibesdotdev/filesystem").ObservedReadOptions) => Promise<import("@vibesdotdev/filesystem").ObservedReadResult>) | undefined;
+        writeFileConditional?: ((path: string, data: Uint8Array, options: import("@vibesdotdev/filesystem").ConditionalWriteOptions) => Promise<import("@vibesdotdev/filesystem").ConditionalWriteResult>) | undefined;
+        watchRecursive?: ((path: string, callback: import("@vibesdotdev/filesystem").FileSystemWatchCallback) => Promise<() => void>) | undefined;
+        clear?: (() => Promise<void>) | undefined;
+        exportTree?: ((path?: string) => Promise<import("@vibesdotdev/filesystem").FileSystemTreeEntry[]>) | undefined;
+        importTree?: ((entries: import("@vibesdotdev/filesystem").FileSystemTreeEntry[], options?: import("@vibesdotdev/filesystem").FileSystemTreeImportOptions) => Promise<void>) | undefined;
+    }, {
+        descriptor: {
+            id: string;
+            kind: "filesystem/adapter";
+            protocols: ("file" | "directory" | "symlink" | "special")[];
+            capabilities: ("list" | "link" | "read" | "write" | "stat" | "realpath" | "touch" | "watch" | "move" | "copy" | "trash" | "glob" | "glob-pruning" | "versioned-file" | "file-observation" | "exclusive-create" | "temporary-directory" | "owner-private" | "stream-write" | "chmod" | "append" | "append-stream" | "read-range" | "read-sync" | "mutation-sync" | "special-entry-type" | "recursive-watch" | "volume-capacity")[];
+            supportsRecursive: boolean;
+            supportsWatch: boolean;
+            supportsSymlinks: boolean;
+            supportsHardLinks: boolean;
+            supportsPermissions: boolean;
+            supportsOwnership: boolean;
+            supportsExtendedAttributes: boolean;
+            persistent: boolean;
+            supportsTransactions: boolean;
+            supportsAtomic: boolean;
+            cloudNative: boolean;
+            supportsVersioning: boolean;
+            supportsGit: boolean;
+            supportsEncryption: boolean;
+            supportsCompression: boolean;
+            supportsQuota: boolean;
+            supportsACL: boolean;
+            supportsSearch: boolean;
+            name?: string | undefined;
+            description?: string | undefined;
+            tags?: string[] | undefined;
+            hardware?: string[] | undefined;
+            enabled?: boolean | undefined;
+            priority?: number | undefined;
+            capabilityId?: string | undefined;
+            requiredContext?: string[] | undefined;
+            optionalContext?: string[] | undefined;
+            config?: unknown;
+            retention?: string | {
+                reason: string;
+                maxAgeDays?: number | undefined;
+                maxEntries?: number | undefined;
+                maxBytes?: number | undefined;
+                cascadeFrom?: string | undefined;
+                ageField?: string | undefined;
+                enforcedBy?: string | undefined;
+            } | undefined;
+            versionedFile?: {
+                revisionScheme: string;
+                revisionScope: "file-content";
+                conditionalWrite?: {
+                    consistency: "process-cooperative" | "cross-process-cooperative" | "backend-atomic";
+                    writerSet: "adapter-instance-versioned-api" | "process-versioned-api" | "backend-all-writers";
+                    externalWritersFenced: boolean;
+                } | undefined;
+            } | undefined;
+        };
+        exists: (path: string) => Promise<boolean>;
+        stat: (path: string) => Promise<import("@vibesdotdev/filesystem").FileSystemStat>;
+        readFile: (path: string, encoding?: import("@vibesdotdev/filesystem").FileEncoding) => Promise<string | Uint8Array>;
+        writeFile: (path: string, data: string | Uint8Array, options?: import("@vibesdotdev/filesystem").FileEncoding | {
+            encoding?: import("@vibesdotdev/filesystem").FileEncoding;
+            mode?: number;
+        }) => Promise<void>;
+        list: (path: string) => Promise<import("@vibesdotdev/filesystem").FileSystemEntry[]>;
+        mkdir: (path: string, options?: {
+            recursive?: boolean;
+            mode?: number;
+        }) => Promise<void>;
+        remove: (path: string, options?: {
+            recursive?: boolean;
+        }) => Promise<void>;
+        rename: (oldPath: string, newPath: string) => Promise<void>;
+        copy: (source: string, destination: string, options?: {
+            recursive?: boolean;
+        }) => Promise<void>;
+        watch: (path: string, callback: import("@vibesdotdev/filesystem").FileSystemWatchCallback) => Promise<() => void>;
+        glob: (pattern: string, options?: {
+            cwd?: string;
+            absolute?: boolean;
+            ignore?: string[];
+        }) => Promise<string[]>;
+        resolve: (...pathSegments: string[]) => string;
+        dirname: (path: string) => string;
+        basename: (path: string, ext?: string) => string;
+        join: (...pathSegments: string[]) => string;
+        relative: (from: string, to: string) => string;
+        isAbsolute: (path: string) => boolean;
+        normalize: (path: string) => string;
+        extname: (path: string) => string;
+        createSynchronousMutationPort?: (() => import("@vibesdotdev/filesystem").FileSystemSynchronousMutationPort) | undefined;
+        createSynchronousReadPort?: ((rootDir: string) => import("@vibesdotdev/filesystem").FileSystemSynchronousReadPort) | undefined;
+        createTemporaryDirectory?: (() => Promise<import("@vibesdotdev/filesystem").FileSystemTemporaryDirectory>) | undefined;
+        volumeCapacity?: ((path: string) => Promise<import("@vibesdotdev/filesystem").FileSystemVolumeCapacity>) | undefined;
+        chmod?: ((path: string, mode: number) => Promise<void>) | undefined;
+        readFileRange?: ((path: string, options: import("@vibesdotdev/filesystem").FileSystemReadRangeOptions) => Promise<Uint8Array>) | undefined;
+        appendFile?: ((path: string, data: string | Uint8Array, encoding?: import("@vibesdotdev/filesystem").FileEncoding) => Promise<void>) | undefined;
+        openAppendFile?: ((path: string) => Promise<import("@vibesdotdev/filesystem").FileSystemAppendHandle>) | undefined;
+        realpath?: ((path: string) => Promise<string>) | undefined;
+        touch?: ((path: string) => Promise<boolean>) | undefined;
+        writeFileStream?: ((path: string, source: ReadableStream<Uint8Array>, options?: import("@vibesdotdev/filesystem").FileStreamWriteOptions) => Promise<number>) | undefined;
+        writeFileNoFollow?: ((path: string, data: string | Uint8Array, encoding?: import("@vibesdotdev/filesystem").FileEncoding) => Promise<void>) | undefined;
+        readFileNoFollow?: ((path: string) => Promise<import("@vibesdotdev/filesystem").NoFollowFileRead>) | undefined;
+        createFileExclusive?: ((path: string, data: string | Uint8Array, encoding?: import("@vibesdotdev/filesystem").FileEncoding) => Promise<boolean>) | undefined;
+        writeFilePrivate?: ((path: string, data: string | Uint8Array, encoding?: import("@vibesdotdev/filesystem").FileEncoding) => Promise<void>) | undefined;
+        readFilePrivate?: ((path: string, maxBytes: number) => Promise<Uint8Array>) | undefined;
+        removeFilePrivateIfContent?: ((path: string, expected: Uint8Array) => Promise<boolean>) | undefined;
+        createSymlink?: ((target: string, path: string) => Promise<boolean>) | undefined;
+        readFileVersioned?: ((path: string, options: import("@vibesdotdev/filesystem").VersionedReadOptions) => Promise<import("@vibesdotdev/filesystem").VersionedReadResult>) | undefined;
+        observeFile?: ((path: string) => Promise<import("@vibesdotdev/filesystem").FileObservationResult>) | undefined;
+        readFileObserved?: ((path: string, options: import("@vibesdotdev/filesystem").ObservedReadOptions) => Promise<import("@vibesdotdev/filesystem").ObservedReadResult>) | undefined;
+        writeFileConditional?: ((path: string, data: Uint8Array, options: import("@vibesdotdev/filesystem").ConditionalWriteOptions) => Promise<import("@vibesdotdev/filesystem").ConditionalWriteResult>) | undefined;
+        watchRecursive?: ((path: string, callback: import("@vibesdotdev/filesystem").FileSystemWatchCallback) => Promise<() => void>) | undefined;
+        clear?: (() => Promise<void>) | undefined;
+        exportTree?: ((path?: string) => Promise<import("@vibesdotdev/filesystem").FileSystemTreeEntry[]>) | undefined;
+        importTree?: ((entries: import("@vibesdotdev/filesystem").FileSystemTreeEntry[], options?: import("@vibesdotdev/filesystem").FileSystemTreeImportOptions) => Promise<void>) | undefined;
+    }>;
+    directory: z.ZodString;
+}, z.core.$strip>>;
+export type DriftHome = z.infer<typeof DriftHomeSchema>;
+export declare const UnreadableKeySchema: z.ZodObject<{
+    store: z.ZodString;
+    key: z.ZodString;
+}, z.core.$strip>;
+export type UnreadableKey = z.infer<typeof UnreadableKeySchema>;
+//# sourceMappingURL=drift.schema.d.ts.map

package/dist/schemas/discovery/drift.schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"drift.schema.d.ts","sourceRoot":"","sources":["../../../src/schemas/discovery/drift.schema.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAE5B,eAAO,MAAM,mBAAmB,IAAI,CAAC;AAErC,eAAO,MAAM,4BAA4B;;;iBAGvC,CAAC;AAEH,eAAO,MAAM,gBAAgB;;;;;;iBAM3B,CAAC;AAEH,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC;AAElF,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAC1D,eAAO,MAAM,cAAc;;;;;iBAKzB,CAAC;AACH,MAAM,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAGtD;;;;GAIG;AACH,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;oBAY0yB,CAAC;gBAAoB,CAAC;;;;qBAAm7C,CAAC;gBAAe,CAAC;;;qBAAuE,CAAC;;;;qBAAuJ,CAAC;;;;eAAkiB,CAAC;oBAAkB,CAAC;kBAAiB,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;oBAAlwE,CAAC;gBAAoB,CAAC;;;;qBAAm7C,CAAC;gBAAe,CAAC;;;qBAAuE,CAAC;;;;qBAAuJ,CAAC;;;;eAAkiB,CAAC;oBAAkB,CAAC;kBAAiB,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAR3jG,CAAC;AACd,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AACxD,eAAO,MAAM,mBAAmB;;;iBAG9B,CAAC;AACH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC"}

package/dist/schemas/discovery/drift.schema.js

@@ -0,0 +1,31 @@
+import * as z from 'zod/v4';
+export const DRIFT_INDEX_VERSION = 1;
+export const driftFingerprintRecordSchema = z.object({
+    hmac: z.string(),
+    recordedAt: z.string()
+});
+export const driftIndexSchema = z.object({
+    version: z.literal(DRIFT_INDEX_VERSION),
+    fingerprints: z.record(z.string(), z.record(z.string(), z.record(z.string(), driftFingerprintRecordSchema)))
+});
+export const DriftRowSchema = z.object({
+    key: z.string(),
+    environment: z.string(),
+    status: z.union([z.literal('match'), z.literal('diverge'), z.literal('single-store'), z.literal('unknown')]),
+    backends: z.array(z.string()),
+});
+/**
+ * Where the drift files live: the host's filesystem adapter and the directory
+ * (`secrets` under the runtime's active, per-user, profile-aware home). Both come
+ * from the runtime the caller holds; nothing reads `VIBES_HOME` or the OS home.
+ */
+export const DriftHomeSchema = z.object({
+    // Runtime resolution validates the adapter through its owning kind.
+    fs: z.custom(),
+    directory: z.string()
+}).readonly();
+export const UnreadableKeySchema = z.object({
+    store: z.string(),
+    key: z.string(),
+});
+//# sourceMappingURL=drift.schema.js.map

package/dist/schemas/discovery/drift.schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"drift.schema.js","sourceRoot":"","sources":["../../../src/schemas/discovery/drift.schema.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAE5B,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC;AAErC,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,CAAC,MAAM,CAAC;IACpD,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;CACtB,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACxC,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,mBAAmB,CAAC;IACvC,YAAY,EAAE,CAAC,CAAC,MAAM,CACrB,CAAC,CAAC,MAAM,EAAE,EACV,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,4BAA4B,CAAC,CAAC,CACxE;CACD,CAAC,CAAC;AAKH,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC;IACtC,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE;IACf,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;IACvB,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC;IAC5G,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;CAC7B,CAAC,CAAC;AAIH;;;;GAIG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,oEAAoE;IACpE,EAAE,EAAE,CAAC,CAAC,MAAM,EAA8B;IAC1C,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;CACrB,CAAC,CAAC,QAAQ,EAAE,CAAC;AAEd,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE;CACf,CAAC,CAAC"}

package/dist/schemas/discovery/import.schema.d.ts

@@ -0,0 +1,77 @@
+/**
+ * Secrets Import Manifest Schema
+ *
+ * Catalogs the secrets the platform expects to receive from local root env
+ * files at bootstrap time. Carries no values — only key identity, source
+ * preference, and intent. The manifest is the contract a `vibes secrets
+ * import` command (phase 5) reads against.
+ */
+import * as z from 'zod/v4';
+/**
+ * Where a secret value is expected to originate from when running
+ * `vibes secrets import`. Sources with a `path` are repo-relative .env-shaped
+ * files; they are read-only inputs and never committed. Sources without a
+ * `path` (e.g. the canonical `manual` source) describe entries that are not
+ * importable from disk and must be set through other means
+ * (`vibes secrets set`, generated tokens, Cloudflare dashboard, etc.).
+ */
+export declare const SecretSourceSchema: z.ZodObject<{
+    path: z.ZodOptional<z.ZodString>;
+    purpose: z.ZodString;
+}, z.core.$strip>;
+export type SecretSource = z.infer<typeof SecretSourceSchema>;
+export declare const SecretCategorySchema: z.ZodEnum<{
+    "vibes-internal": "vibes-internal";
+    "vibes-auth": "vibes-auth";
+    cloudflare: "cloudflare";
+    "provider-llm": "provider-llm";
+    "provider-voice": "provider-voice";
+    "provider-search": "provider-search";
+    "provider-billing": "provider-billing";
+    "provider-other": "provider-other";
+}>;
+export type SecretCategory = z.infer<typeof SecretCategorySchema>;
+export declare const SecretManifestEntrySchema: z.ZodObject<{
+    key: z.ZodString;
+    category: z.ZodEnum<{
+        "vibes-internal": "vibes-internal";
+        "vibes-auth": "vibes-auth";
+        cloudflare: "cloudflare";
+        "provider-llm": "provider-llm";
+        "provider-voice": "provider-voice";
+        "provider-search": "provider-search";
+        "provider-billing": "provider-billing";
+        "provider-other": "provider-other";
+    }>;
+    source: z.ZodString;
+    aliases: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    required: z.ZodDefault<z.ZodBoolean>;
+    description: z.ZodString;
+}, z.core.$strip>;
+export type SecretManifestEntry = z.infer<typeof SecretManifestEntrySchema>;
+export declare const SecretsImportManifestSchema: z.ZodObject<{
+    version: z.ZodLiteral<1>;
+    sources: z.ZodRecord<z.ZodString, z.ZodObject<{
+        path: z.ZodOptional<z.ZodString>;
+        purpose: z.ZodString;
+    }, z.core.$strip>>;
+    secrets: z.ZodArray<z.ZodObject<{
+        key: z.ZodString;
+        category: z.ZodEnum<{
+            "vibes-internal": "vibes-internal";
+            "vibes-auth": "vibes-auth";
+            cloudflare: "cloudflare";
+            "provider-llm": "provider-llm";
+            "provider-voice": "provider-voice";
+            "provider-search": "provider-search";
+            "provider-billing": "provider-billing";
+            "provider-other": "provider-other";
+        }>;
+        source: z.ZodString;
+        aliases: z.ZodDefault<z.ZodArray<z.ZodString>>;
+        required: z.ZodDefault<z.ZodBoolean>;
+        description: z.ZodString;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export type SecretsImportManifest = z.infer<typeof SecretsImportManifestSchema>;
+//# sourceMappingURL=import.schema.d.ts.map

package/dist/schemas/discovery/import.schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"import.schema.d.ts","sourceRoot":"","sources":["../../../src/schemas/discovery/import.schema.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAE5B;;;;;;;GAOG;AACH,eAAO,MAAM,kBAAkB;;;iBAK7B,CAAC;AACH,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAE9D,eAAO,MAAM,oBAAoB;;;;;;;;;EAS/B,CAAC;AACH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAElE,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;;;iBAapC,CAAC;AACH,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAE5E,eAAO,MAAM,2BAA2B;;;;;;;;;;;;;;;;;;;;;;;iBAMtC,CAAC;AACH,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC"}