@vibesdotdev/secrets 0.0.2 → 1.0.0-rc.3

package/dist/support/test-support/filesystem-paths.js

@@ -0,0 +1,44 @@
+import { escapeRegExp, joinPath, normalizePath, stripPrefix } from "./path-mechanics.js";
+export function pathOperations(files) {
+    return {
+        resolve(...pathSegments) {
+            return joinPath(...pathSegments);
+        },
+        dirname(path) {
+            const index = path.lastIndexOf('/');
+            return index <= 0 ? '/' : path.slice(0, index);
+        },
+        basename(path, ext) {
+            const name = path.slice(path.lastIndexOf('/') + 1);
+            return ext !== undefined && name.endsWith(ext) ? name.slice(0, -ext.length) : name;
+        },
+        join(...pathSegments) {
+            return joinPath(...pathSegments);
+        },
+        relative(from, to) {
+            return to.startsWith(`${from}/`) ? to.slice(from.length + 1) : to;
+        },
+        isAbsolute(path) {
+            return path.startsWith('/');
+        },
+        normalize(path) {
+            return normalizePath(path);
+        },
+        extname(path) {
+            const name = path.slice(path.lastIndexOf('/') + 1);
+            const dot = name.lastIndexOf('.');
+            return dot <= 0 ? '' : name.slice(dot);
+        },
+        async glob(pattern, options) {
+            // The one glob shape an in-memory table can answer honestly: `*` within
+            // one directory segment. Anything else is reported as no match rather than
+            // guessed at.
+            const cwd = options?.cwd ?? '/';
+            const matcher = new RegExp(`^${pattern.split('/').map(escapeRegExp).join('/').replaceAll('\\*', '[^/]*')}$`);
+            return [...files.keys()]
+                .filter((candidate) => matcher.test(stripPrefix(candidate, cwd)))
+                .map((candidate) => (options?.absolute === false ? stripPrefix(candidate, cwd) : candidate));
+        }
+    };
+}
+//# sourceMappingURL=filesystem-paths.js.map

package/dist/support/test-support/filesystem-paths.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"filesystem-paths.js","sourceRoot":"","sources":["../../../src/support/test-support/filesystem-paths.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAC,QAAQ,EAAC,aAAa,EAAC,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAEtF,MAAM,UAAU,cAAc,CAAC,KAA0B;IACxD,OAAO;QAEN,OAAO,CAAC,GAAG,YAAsB;YAChC,OAAO,QAAQ,CAAC,GAAG,YAAY,CAAC,CAAC;QAClC,CAAC;QAED,OAAO,CAAC,IAAY;YACnB,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;YACpC,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;QAChD,CAAC;QAED,QAAQ,CAAC,IAAY,EAAE,GAAY;YAClC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;YACnD,OAAO,GAAG,KAAK,SAAS,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACpF,CAAC;QAED,IAAI,CAAC,GAAG,YAAsB;YAC7B,OAAO,QAAQ,CAAC,GAAG,YAAY,CAAC,CAAC;QAClC,CAAC;QAED,QAAQ,CAAC,IAAY,EAAE,EAAU;YAChC,OAAO,EAAE,CAAC,UAAU,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACnE,CAAC;QAED,UAAU,CAAC,IAAY;YACtB,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;QAC7B,CAAC;QAED,SAAS,CAAC,IAAY;YACrB,OAAO,aAAa,CAAC,IAAI,CAAC,CAAC;QAC5B,CAAC;QAED,OAAO,CAAC,IAAY;YACnB,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;YACnD,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;YAClC,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACxC,CAAC;QAED,KAAK,CAAC,IAAI,CAAC,OAAe,EAAE,OAA8C;YACzE,wEAAwE;YACxE,2EAA2E;YAC3E,cAAc;YACd,MAAM,GAAG,GAAG,OAAO,EAAE,GAAG,IAAI,GAAG,CAAC;YAChC,MAAM,OAAO,GAAG,IAAI,MAAM,CACzB,IAAI,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC,KAAK,EAAE,OAAO,CAAC,GAAG,CAChF,CAAC;YACF,OAAO,CAAC,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;iBACtB,MAAM,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC,CAAC;iBAChE,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,QAAQ,KAAK,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;QAC/F,CAAC;KACD,CAAC;AACH,CAAC"}

package/dist/support/test-support/path-mechanics.d.ts

@@ -0,0 +1,6 @@
+/** POSIX path mechanics for the in-memory filesystem boundary. */
+export declare function joinPath(...pathSegments: string[]): string;
+export declare function normalizePath(path: string): string;
+export declare function stripPrefix(candidate: string, prefix: string): string;
+export declare function escapeRegExp(literal: string): string;
+//# sourceMappingURL=path-mechanics.d.ts.map

package/dist/support/test-support/path-mechanics.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"path-mechanics.d.ts","sourceRoot":"","sources":["../../../src/support/test-support/path-mechanics.ts"],"names":[],"mappings":"AAAA,kEAAkE;AAClE,wBAAgB,QAAQ,CAAC,GAAG,YAAY,EAAE,MAAM,EAAE,GAAG,MAAM,CAI1D;AAED,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAalD;AAED,wBAAgB,WAAW,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAGrE;AAED,wBAAgB,YAAY,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAEpD"}

package/dist/support/test-support/path-mechanics.js

@@ -0,0 +1,31 @@
+/** POSIX path mechanics for the in-memory filesystem boundary. */
+export function joinPath(...pathSegments) {
+    const joined = pathSegments.filter(segment => segment.length > 0).join('/');
+    const absolute = joined.startsWith('/') || pathSegments.some(segment => segment.startsWith('/'));
+    return normalizePath(absolute ? `/${joined}` : joined);
+}
+export function normalizePath(path) {
+    const absolute = path.startsWith('/');
+    const segments = [];
+    for (const segment of path.split('/')) {
+        if (segment === '' || segment === '.')
+            continue;
+        if (segment === '..') {
+            if (segments.length > 0 && segments.at(-1) !== '..')
+                segments.pop();
+            else if (!absolute)
+                segments.push('..');
+            continue;
+        }
+        segments.push(segment);
+    }
+    return absolute ? `/${segments.join('/')}` : segments.join('/');
+}
+export function stripPrefix(candidate, prefix) {
+    const normalized = prefix.endsWith('/') ? prefix : `${prefix}/`;
+    return candidate.startsWith(normalized) ? candidate.slice(normalized.length) : candidate;
+}
+export function escapeRegExp(literal) {
+    return literal.replace(/[.*+?^${}()|[\]\\]/g, character => `\\${character}`);
+}
+//# sourceMappingURL=path-mechanics.js.map

package/dist/support/test-support/path-mechanics.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"path-mechanics.js","sourceRoot":"","sources":["../../../src/support/test-support/path-mechanics.ts"],"names":[],"mappings":"AAAA,kEAAkE;AAClE,MAAM,UAAU,QAAQ,CAAC,GAAG,YAAsB;IACjD,MAAM,MAAM,GAAG,YAAY,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC5E,MAAM,QAAQ,GAAG,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;IACjG,OAAO,aAAa,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,MAAM,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;AACxD,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,IAAY;IACzC,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;IACtC,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QACvC,IAAI,OAAO,KAAK,EAAE,IAAI,OAAO,KAAK,GAAG;YAAE,SAAS;QAChD,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;YACtB,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,IAAI,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI;gBAAE,QAAQ,CAAC,GAAG,EAAE,CAAC;iBAC/D,IAAI,CAAC,QAAQ;gBAAE,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACxC,SAAS;QACV,CAAC;QACD,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACxB,CAAC;IACD,OAAO,QAAQ,CAAC,CAAC,CAAC,IAAI,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACjE,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,SAAiB,EAAE,MAAc;IAC5D,MAAM,UAAU,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,GAAG,CAAC;IAChE,OAAO,SAAS,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAC1F,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,OAAe;IAC3C,OAAO,OAAO,CAAC,OAAO,CAAC,qBAAqB,EAAE,SAAS,CAAC,EAAE,CAAC,KAAK,SAAS,EAAE,CAAC,CAAC;AAC9E,CAAC"}

package/dist/support/test-support/private-files.d.ts

@@ -0,0 +1,3 @@
+import type { FilesystemDoubleAdapter } from '../../schemas/domain/testing/filesystem.schema.ts';
+export declare function privateFileOperations(files: Map<string, string>, sharedParent: () => boolean | undefined): Pick<FilesystemDoubleAdapter, "readFilePrivate" | "writeFilePrivate" | "removeFilePrivateIfContent">;
+//# sourceMappingURL=private-files.d.ts.map

package/dist/support/test-support/private-files.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"private-files.d.ts","sourceRoot":"","sources":["../../../src/support/test-support/private-files.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,mDAAmD,CAAC;AAEjG,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,YAAY,EAAE,MAAM,OAAO,GAAG,SAAS,GAAG,IAAI,CAAC,uBAAuB,EAAE,iBAAiB,GAAG,kBAAkB,GAAG,4BAA4B,CAAC,CAiD/M"}

package/dist/support/test-support/private-files.js

@@ -0,0 +1,52 @@
+import { CapabilityError } from '@vibesdotdev/kernel';
+export function privateFileOperations(files, sharedParent) {
+    return {
+        async readFilePrivate(path, maxBytes) {
+            if (sharedParent()) {
+                throw new CapabilityError('Refusing a private file under a shared parent.', 'PERMISSION_DENIED', {
+                    reason: 'filesystem-private-parent-shared',
+                    retryable: false
+                });
+            }
+            const data = files.get(path);
+            if (data === undefined) {
+                throw new CapabilityError('The private file does not exist.', 'NOT_FOUND', {
+                    reason: 'filesystem-private-missing',
+                    retryable: false
+                });
+            }
+            const bytes = new TextEncoder().encode(data);
+            if (bytes.byteLength > maxBytes) {
+                throw new CapabilityError('Private file exceeds byte limit.', 'INVALID_INPUT', {
+                    reason: 'filesystem-private-too-large',
+                    retryable: false
+                });
+            }
+            return bytes;
+        },
+        async writeFilePrivate(path, data) {
+            if (sharedParent()) {
+                throw new CapabilityError('Refusing a private file under a shared parent.', 'PERMISSION_DENIED', {
+                    reason: 'filesystem-private-parent-shared',
+                    retryable: false
+                });
+            }
+            files.set(path, data instanceof Uint8Array ? new TextDecoder().decode(data) : data);
+        },
+        async removeFilePrivateIfContent(path, expected) {
+            const current = files.get(path);
+            if (current === undefined)
+                return false;
+            const currentBytes = new TextEncoder().encode(current);
+            if (currentBytes.length !== expected.length)
+                return false;
+            for (let i = 0; i < currentBytes.length; i++) {
+                if (currentBytes[i] !== expected[i])
+                    return false;
+            }
+            files.delete(path);
+            return true;
+        }
+    };
+}
+//# sourceMappingURL=private-files.js.map

package/dist/support/test-support/private-files.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"private-files.js","sourceRoot":"","sources":["../../../src/support/test-support/private-files.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAGtD,MAAM,UAAU,qBAAqB,CAAC,KAA0B,EAAE,YAAuC;IACxG,OAAO;QAEN,KAAK,CAAC,eAAe,CAAC,IAAY,EAAE,QAAgB;YACnD,IAAI,YAAY,EAAE,EAAE,CAAC;gBACpB,MAAM,IAAI,eAAe,CAAC,gDAAgD,EAAE,mBAAmB,EAAE;oBAChG,MAAM,EAAE,kCAAkC;oBAC1C,SAAS,EAAE,KAAK;iBAChB,CAAC,CAAC;YACJ,CAAC;YACD,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAC7B,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;gBACxB,MAAM,IAAI,eAAe,CAAC,kCAAkC,EAAE,WAAW,EAAE;oBAC1E,MAAM,EAAE,4BAA4B;oBACpC,SAAS,EAAE,KAAK;iBAChB,CAAC,CAAC;YACJ,CAAC;YACD,MAAM,KAAK,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YAC7C,IAAI,KAAK,CAAC,UAAU,GAAG,QAAQ,EAAE,CAAC;gBACjC,MAAM,IAAI,eAAe,CAAC,kCAAkC,EAAE,eAAe,EAAE;oBAC9E,MAAM,EAAE,8BAA8B;oBACtC,SAAS,EAAE,KAAK;iBAChB,CAAC,CAAC;YACJ,CAAC;YACD,OAAO,KAAK,CAAC;QACd,CAAC;QAED,KAAK,CAAC,gBAAgB,CAAC,IAAY,EAAE,IAAyB;YAC7D,IAAI,YAAY,EAAE,EAAE,CAAC;gBACpB,MAAM,IAAI,eAAe,CAAC,gDAAgD,EAAE,mBAAmB,EAAE;oBAChG,MAAM,EAAE,kCAAkC;oBAC1C,SAAS,EAAE,KAAK;iBAChB,CAAC,CAAC;YACJ,CAAC;YACD,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,YAAY,UAAU,CAAC,CAAC,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACrF,CAAC;QAED,KAAK,CAAC,0BAA0B,CAAC,IAAY,EAAE,QAAoB;YAClE,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAChC,IAAI,OAAO,KAAK,SAAS;gBAAE,OAAO,KAAK,CAAC;YACxC,MAAM,YAAY,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YACvD,IAAI,YAAY,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM;gBAAE,OAAO,KAAK,CAAC;YAC1D,KAAK,IAAI,CAAC,GAAG,CAAC,EAAC,CAAC,GAAG,YAAY,CAAC,MAAM,EAAC,CAAC,EAAE,EAAE,CAAC;gBAC5C,IAAI,YAAY,CAAC,CAAC,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC;oBAAE,OAAO,KAAK,CAAC;YACnD,CAAC;YACD,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YACnB,OAAO,IAAI,CAAC;QACb,CAAC;KACD,CAAC;AACH,CAAC"}

package/dist/support/test-support/register-adapter.d.ts

@@ -0,0 +1,5 @@
+import { type FileSystemAdapterDescriptor } from '@vibesdotdev/filesystem/schemas/adapter-descriptor';
+import type { VibesRuntime } from '@vibesdotdev/kernel';
+import type { FilesystemDoubleAdapter } from '../../schemas/domain/testing/filesystem.schema.ts';
+export declare function registerAdapter(runtime: VibesRuntime, descriptor: FileSystemAdapterDescriptor, adapter: FilesystemDoubleAdapter): void;
+//# sourceMappingURL=register-adapter.d.ts.map

package/dist/support/test-support/register-adapter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"register-adapter.d.ts","sourceRoot":"","sources":["../../../src/support/test-support/register-adapter.ts"],"names":[],"mappings":"AAAA,OAAO,EAAoC,KAAK,2BAA2B,EAAE,MAAM,oDAAoD,CAAC;AACxI,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAExD,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,mDAAmD,CAAC;AAEjG,wBAAgB,eAAe,CAAC,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,2BAA2B,EAAE,OAAO,EAAE,uBAAuB,GAAG,IAAI,CAuBtI"}

package/dist/support/test-support/register-adapter.js

@@ -0,0 +1,20 @@
+import { FileSystemAdapterDescriptorSchema } from '@vibesdotdev/filesystem/schemas/adapter-descriptor';
+import { createRuntimeImplementation, createRuntimeKind } from '@vibesdotdev/kernel';
+export function registerAdapter(runtime, descriptor, adapter) {
+    if (!runtime.hasKind('filesystem/adapter')) {
+        // A host with no environment registers no kind. The descriptor schema is the
+        // owning one, so a bare host's double is held to the same contract as the
+        // host's own adapter rather than a permissive passthrough.
+        runtime.registerKind(createRuntimeKind({
+            id: 'filesystem/adapter',
+            descriptorSchema: FileSystemAdapterDescriptorSchema
+        }));
+    }
+    runtime.registerDescriptor('filesystem/adapter', descriptor);
+    runtime.registerLoader('filesystem/adapter', descriptor.id, async () => createRuntimeImplementation({
+        kind: 'filesystem/adapter',
+        id: descriptor.id,
+        implementation: adapter
+    }));
+}
+//# sourceMappingURL=register-adapter.js.map

package/dist/support/test-support/register-adapter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"register-adapter.js","sourceRoot":"","sources":["../../../src/support/test-support/register-adapter.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iCAAiC,EAAmC,MAAM,oDAAoD,CAAC;AAExI,OAAO,EAAE,2BAA2B,EAAC,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAGpF,MAAM,UAAU,eAAe,CAAC,OAAqB,EAAE,UAAuC,EAAE,OAAgC;IAE/H,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,oBAAoB,CAAC,EAAE,CAAC;QAC5C,6EAA6E;QAC7E,0EAA0E;QAC1E,2DAA2D;QAC3D,OAAO,CAAC,YAAY,CACnB,iBAAiB,CAAC;YACjB,EAAE,EAAE,oBAAoB;YACxB,gBAAgB,EAAE,iCAAiC;SACnD,CAAC,CACF,CAAC;IACH,CAAC;IAED,OAAO,CAAC,kBAAkB,CAAC,oBAAoB,EAAE,UAAU,CAAC,CAAC;IAE7D,OAAO,CAAC,cAAc,CAAC,oBAAoB,EAAE,UAAU,CAAC,EAAE,EAAE,KAAK,IAAI,EAAE,CACtE,2BAA2B,CAAC;QAC3B,IAAI,EAAE,oBAAoB;QAC1B,EAAE,EAAE,UAAU,CAAC,EAAE;QACjB,cAAc,EAAE,OAAO;KACvB,CAAC,CACF,CAAC;AACH,CAAC"}

package/dist/support/test-support/stub-fetch.d.ts

@@ -0,0 +1,13 @@
+/**
+ * A complete `typeof fetch` over a minimal handler, for tests that fake the
+ * far boundary (the network) only.
+ *
+ * Bun's fetch carries members a bare handler lacks (`preconnect`), so a bare
+ * `(input, init) => Response` is not assignable to `typeof fetch`. The stub
+ * borrows the live `preconnect` (tests never preconnect) through
+ * `Object.assign`, so call sites need no casts or suppressions. Read the
+ * live fetch before overwriting it: in `globalThis.fetch = stubFetch(impl)`
+ * the right-hand side evaluates first.
+ */
+export declare function stubFetch(impl: (input: string | URL | Request, init?: RequestInit) => Promise<Response>): typeof fetch;
+//# sourceMappingURL=stub-fetch.d.ts.map

package/dist/support/test-support/stub-fetch.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"stub-fetch.d.ts","sourceRoot":"","sources":["../../../src/support/test-support/stub-fetch.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,wBAAgB,SAAS,CACxB,IAAI,EAAE,CAAC,KAAK,EAAE,MAAM,GAAG,GAAG,GAAG,OAAO,EAAE,IAAI,CAAC,EAAE,WAAW,KAAK,OAAO,CAAC,QAAQ,CAAC,GAC5E,OAAO,KAAK,CAOd"}

package/dist/support/test-support/stub-fetch.js

@@ -0,0 +1,17 @@
+/**
+ * A complete `typeof fetch` over a minimal handler, for tests that fake the
+ * far boundary (the network) only.
+ *
+ * Bun's fetch carries members a bare handler lacks (`preconnect`), so a bare
+ * `(input, init) => Response` is not assignable to `typeof fetch`. The stub
+ * borrows the live `preconnect` (tests never preconnect) through
+ * `Object.assign`, so call sites need no casts or suppressions. Read the
+ * live fetch before overwriting it: in `globalThis.fetch = stubFetch(impl)`
+ * the right-hand side evaluates first.
+ */
+export function stubFetch(impl) {
+    const { preconnect } = globalThis.fetch;
+    const bound = preconnect.bind(globalThis.fetch);
+    return Object.assign(async (input, init) => impl(input, init), { preconnect: bound });
+}
+//# sourceMappingURL=stub-fetch.js.map

package/dist/support/test-support/stub-fetch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"stub-fetch.js","sourceRoot":"","sources":["../../../src/support/test-support/stub-fetch.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,MAAM,UAAU,SAAS,CACxB,IAA8E;IAE9E,MAAM,EAAE,UAAU,EAAE,GAAG,UAAU,CAAC,KAAK,CAAC;IACxC,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;IAChD,OAAO,MAAM,CAAC,MAAM,CACnB,KAAK,EAAE,KAA6B,EAAE,IAAkB,EAAqB,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,EACjG,EAAE,UAAU,EAAE,KAAK,EAAE,CACrB,CAAC;AACH,CAAC"}

package/dist/surfaces/cli/commands/exec/exec-input.d.ts

@@ -0,0 +1,39 @@
+import { CapabilityError } from '@vibesdotdev/kernel';
+import { composeCredentialedEnv, type CredentialedOutput } from '../../../../exec/spawn-with-credentials.ts';
+import { type ExecArgs, type ExecOptionsInput } from "../../../../schemas/cli/commands/exec.schema.ts";
+import { type ExecRequest } from "../../../../schemas/cli/exec-request.schema.ts";
+import { type CommandOutput } from '../../shared/output/command-output.ts';
+import { type LeverageAuditRecord } from '../../shared/stores/leverage-shared.ts';
+export { type ExecRequest } from "../../../../schemas/cli/exec-request.schema.ts";
+/** The caller's bearer: only `--session` injects it, from the device session. */
+export declare const SESSION_BEARER_KEY = "VIBES_AUTH_TOKEN";
+export declare const SESSION_STORE_ID = "auth/device-session";
+/** Non-secret names every child receives from the captured environment (rc05 §2.4). */
+export declare const EXEC_BASE_PASS: readonly ["PATH", "HOME", "TMPDIR", "TERM", "LANG", "USER", "SHELL"];
+export declare const ENV_NAME: RegExp;
+export declare function principalKeyReserved(): CapabilityError;
+/** Validate `--pass` names: plain variable names, never a credential channel. */
+export declare function parsePassNames(value: string | undefined): string[];
+/** Named keys from one `--with` token (`A,B` → `A`, `B`). */
+export declare function splitWithKeys(value?: string): string[];
+/** `--with` is declared once and takes one comma-separated list; a second occurrence is refused. */
+export declare function repeatedWith(values: readonly unknown[]): CapabilityError;
+/**
+ * The child's whole environment, composed by the kernel (`replace`): the base
+ * and `--pass` names plus the host's declared protocol pass set, read from the
+ * host's capture under its platform's key policy (`Path` is `PATH` on win32),
+ * then the resolved credentials and the manifest that names them, which win.
+ */
+export declare function composeExecChildEnv(runtime: Parameters<typeof composeCredentialedEnv>[0], passNames: readonly string[], credentials: Readonly<Record<string, string>>, manifest: string): Record<string, string>;
+/** The child's output goes to the handed runtime's `runtime/stdio`, already redacted. */
+export declare function runtimeOutput(out: CommandOutput): CredentialedOutput;
+export declare function usageRefusal(reason: string, message: string): CapabilityError;
+/**
+ * Validate the invocation, in the order the user would fix it. Every refusal
+ * is typed, and each field of `attempt` (what a refused attempt audits) is
+ * filled only once the input that supplies it has been validated, so an
+ * audit line names the target, the key names and the store a refusal is about
+ * and never a name that was itself the refusal (a malformed key, a chain).
+ */
+export declare function parseExecRequest(args: ExecArgs, opts: ExecOptionsInput, attempt: Omit<LeverageAuditRecord, 'outcome' | 'reason'>): ExecRequest;
+//# sourceMappingURL=exec-input.d.ts.map

package/dist/surfaces/cli/commands/exec/exec-input.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"exec-input.d.ts","sourceRoot":"","sources":["../../../../../src/surfaces/cli/commands/exec/exec-input.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAA+B,MAAM,qBAAqB,CAAC;AAEnF,OAAO,EACP,sBAAsB,EACtB,KAAK,kBAAkB,EACtB,MAAM,4CAA4C,CAAC;AACpD,OAAO,EAAgD,KAAK,QAAQ,EAAkB,KAAK,gBAAgB,EAAE,MAAM,iDAAiD,CAAC;AACrK,OAAO,EAAE,KAAK,WAAW,EAAE,MAAM,gDAAgD,CAAC;AAClF,OAAO,EAAE,KAAK,aAAa,EAAE,MAAM,uCAAuC,CAAC;AAE3E,OAAO,EAEP,KAAK,mBAAmB,EACvB,MAAM,wCAAwC,CAAC;AAChD,OAAO,EAAE,KAAK,WAAW,EAAE,MAAM,gDAAgD,CAAC;AAElF,iFAAiF;AACjF,eAAO,MAAM,kBAAkB,qBAAqB,CAAC;AAErD,eAAO,MAAM,gBAAgB,wBAAwB,CAAC;AAEtD,uFAAuF;AACvF,eAAO,MAAM,cAAc,sEAAuE,CAAC;AAEnG,eAAO,MAAM,QAAQ,QAA6B,CAAC;AAEnD,wBAAgB,oBAAoB,IAAI,eAAe,CAUtD;AAED,iFAAiF;AACjF,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,EAAE,CAmBlE;AAED,6DAA6D;AAC7D,wBAAgB,aAAa,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAOtD;AAED,oGAAoG;AACpG,wBAAgB,YAAY,CAAC,MAAM,EAAE,SAAS,OAAO,EAAE,GAAG,eAAe,CAQxE;AAED;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAClC,OAAO,EAAE,UAAU,CAAC,OAAO,sBAAsB,CAAC,CAAC,CAAC,CAAC,EACrD,SAAS,EAAE,SAAS,MAAM,EAAE,EAC5B,WAAW,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,EAC7C,QAAQ,EAAE,MAAM,GACd,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAExB;AAED,yFAAyF;AACzF,wBAAgB,aAAa,CAAC,GAAG,EAAE,aAAa,GAAG,kBAAkB,CAKpE;AAED,wBAAgB,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,eAAe,CAE7E;AAED;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,IAAI,CAAC,mBAAmB,EAAE,SAAS,GAAG,QAAQ,CAAC,GAAG,WAAW,CAsC9I"}

package/dist/surfaces/cli/commands/exec/exec-input.js

@@ -0,0 +1,116 @@
+import { CapabilityError, HOST_CREDENTIAL_MANIFEST_KEY } from '@vibesdotdev/kernel';
+import { assertSecretKey } from "../../../../domain/kinds/secret-key.js";
+import { composeCredentialedEnv } from "../../../../exec/spawn-with-credentials.js";
+import { execArgsSchema, execOptionsSchema, stringSchema } from "../../../../schemas/cli/commands/exec.schema.js";
+import {} from "../../../../schemas/cli/exec-request.schema.js";
+import {} from "../../shared/output/command-output.js";
+import { parseCommandInput } from "../../shared/parse-options.js";
+import { parseSingleBackend } from "../../shared/stores/leverage-shared.js";
+export {} from "../../../../schemas/cli/exec-request.schema.js";
+/** The caller's bearer: only `--session` injects it, from the device session. */
+export const SESSION_BEARER_KEY = 'VIBES_AUTH_TOKEN';
+export const SESSION_STORE_ID = 'auth/device-session';
+/** Non-secret names every child receives from the captured environment (rc05 §2.4). */
+export const EXEC_BASE_PASS = ['PATH', 'HOME', 'TMPDIR', 'TERM', 'LANG', 'USER', 'SHELL'];
+export const ENV_NAME = /^[A-Za-z_][A-Za-z0-9_]*$/;
+export function principalKeyReserved() {
+    return new CapabilityError(`secrets exec: ${SESSION_BEARER_KEY} is the operator's identity and is never read from a secrets store.`, 'PERMISSION_DENIED', {
+        reason: 'principal-key-reserved',
+        recoveryHint: 'Use --session to pass your signed-in session to the command.',
+        details: { key: SESSION_BEARER_KEY }
+    });
+}
+/** Validate `--pass` names: plain variable names, never a credential channel. */
+export function parsePassNames(value) {
+    const names = splitWithKeys(value ?? '');
+    for (const name of names) {
+        if (!ENV_NAME.test(name)) {
+            throw new CapabilityError(`secrets exec: '${name}' is not an environment variable name.`, 'INVALID_INPUT', {
+                reason: 'pass-name-invalid',
+                details: { name }
+            });
+        }
+        if (name === SESSION_BEARER_KEY)
+            throw principalKeyReserved();
+        if (name === HOST_CREDENTIAL_MANIFEST_KEY) {
+            throw new CapabilityError(`secrets exec: ${HOST_CREDENTIAL_MANIFEST_KEY} is written by this command, never passed through.`, 'INVALID_INPUT', { reason: 'pass-name-reserved', details: { name } });
+        }
+    }
+    return names;
+}
+/** Named keys from one `--with` token (`A,B` → `A`, `B`). */
+export function splitWithKeys(value) {
+    const parsed = stringSchema.safeParse(value);
+    if (!parsed.success)
+        return [];
+    return parsed.data
+        .split(',')
+        .map((key) => key.trim())
+        .filter((k) => k.length > 0);
+}
+/** `--with` is declared once and takes one comma-separated list; a second occurrence is refused. */
+export function repeatedWith(values) {
+    const keys = values.flatMap((value) => splitWithKeys(String(value)));
+    const listed = keys.length > 0 ? ` (got ${keys.join(', ')})` : '';
+    return new CapabilityError(`secrets exec: repeated --with is not allowed${listed}. Use a single comma-separated --with KEY1,KEY2.`, 'INVALID_INPUT', { reason: 'exec-with-repeated', retryable: false, details: { count: values.length } });
+}
+/**
+ * The child's whole environment, composed by the kernel (`replace`): the base
+ * and `--pass` names plus the host's declared protocol pass set, read from the
+ * host's capture under its platform's key policy (`Path` is `PATH` on win32),
+ * then the resolved credentials and the manifest that names them, which win.
+ */
+export function composeExecChildEnv(runtime, passNames, credentials, manifest) {
+    return composeCredentialedEnv(runtime, [...EXEC_BASE_PASS, ...passNames], credentials, manifest);
+}
+/** The child's output goes to the handed runtime's `runtime/stdio`, already redacted. */
+export function runtimeOutput(out) {
+    return {
+        stdout: (text) => out.write('stdout', text),
+        stderr: (text) => out.write('stderr', text)
+    };
+}
+export function usageRefusal(reason, message) {
+    return new CapabilityError(message, 'INVALID_INPUT', { reason, retryable: false });
+}
+/**
+ * Validate the invocation, in the order the user would fix it. Every refusal
+ * is typed, and each field of `attempt` (what a refused attempt audits) is
+ * filled only once the input that supplies it has been validated, so an
+ * audit line names the target, the key names and the store a refusal is about
+ * and never a name that was itself the refusal (a malformed key, a chain).
+ */
+export function parseExecRequest(args, opts, attempt) {
+    const { command = [] } = parseCommandInput(execArgsSchema, args, 'exec');
+    if (Array.isArray(opts.with) && opts.with.length > 1)
+        throw repeatedWith(opts.with);
+    const withOpt = Array.isArray(opts.with) ? opts.with[0] : opts.with;
+    const options = parseCommandInput(execOptionsSchema, {
+        with: withOpt,
+        environment: opts.environment,
+        backend: opts.backend,
+        allowMissing: opts.allowMissing,
+        session: opts.session,
+        pass: opts.pass
+    }, 'exec');
+    if (command.length === 0) {
+        throw usageRefusal('exec-command-missing', 'Usage: vibes secrets exec --with KEY[,KEY...] [--session] -- <command...>');
+    }
+    const target = command[0];
+    attempt.target = target;
+    const keys = splitWithKeys(options.with ?? '');
+    if (keys.includes(SESSION_BEARER_KEY))
+        throw principalKeyReserved();
+    if (keys.length === 0 && !options.session) {
+        throw usageRefusal('exec-keys-missing', 'secrets exec: --with <keys> or --session is required (comma-separated secret key names).');
+    }
+    for (const key of keys)
+        assertSecretKey(key);
+    attempt.keys = [...keys];
+    const passNames = parsePassNames(options.pass);
+    const backend = parseSingleBackend(options.backend);
+    attempt.environment = options.environment ?? '';
+    attempt.backend = backend ?? '';
+    return { command, target, keys, options, passNames, backend };
+}
+//# sourceMappingURL=exec-input.js.map

package/dist/surfaces/cli/commands/exec/exec-input.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"exec-input.js","sourceRoot":"","sources":["../../../../../src/surfaces/cli/commands/exec/exec-input.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAC,4BAA4B,EAAE,MAAM,qBAAqB,CAAC;AACnF,OAAO,EAAE,eAAe,EAAE,MAAM,wCAAwC,CAAC;AACzE,OAAO,EACP,sBAAsB,EAErB,MAAM,4CAA4C,CAAC;AACpD,OAAO,EAAE,cAAc,EAAC,iBAAiB,EAAC,YAAY,EAAuD,MAAM,iDAAiD,CAAC;AACrK,OAAO,EAAoB,MAAM,gDAAgD,CAAC;AAClF,OAAO,EAAsB,MAAM,uCAAuC,CAAC;AAC3E,OAAO,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AAClE,OAAO,EACP,kBAAkB,EAEjB,MAAM,wCAAwC,CAAC;AAChD,OAAO,EAAoB,MAAM,gDAAgD,CAAC;AAElF,iFAAiF;AACjF,MAAM,CAAC,MAAM,kBAAkB,GAAG,kBAAkB,CAAC;AAErD,MAAM,CAAC,MAAM,gBAAgB,GAAG,qBAAqB,CAAC;AAEtD,uFAAuF;AACvF,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,CAAU,CAAC;AAEnG,MAAM,CAAC,MAAM,QAAQ,GAAG,0BAA0B,CAAC;AAEnD,MAAM,UAAU,oBAAoB;IACnC,OAAO,IAAI,eAAe,CACzB,iBAAiB,kBAAkB,qEAAqE,EACxG,mBAAmB,EACnB;QACC,MAAM,EAAE,wBAAwB;QAChC,YAAY,EAAE,8DAA8D;QAC5E,OAAO,EAAE,EAAE,GAAG,EAAE,kBAAkB,EAAE;KACpC,CACD,CAAC;AACH,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,cAAc,CAAC,KAAyB;IACvD,MAAM,KAAK,GAAG,aAAa,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;IACzC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QAC1B,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAC1B,MAAM,IAAI,eAAe,CAAC,kBAAkB,IAAI,wCAAwC,EAAE,eAAe,EAAE;gBAC1G,MAAM,EAAE,mBAAmB;gBAC3B,OAAO,EAAE,EAAE,IAAI,EAAE;aACjB,CAAC,CAAC;QACJ,CAAC;QACD,IAAI,IAAI,KAAK,kBAAkB;YAAE,MAAM,oBAAoB,EAAE,CAAC;QAC9D,IAAI,IAAI,KAAK,4BAA4B,EAAE,CAAC;YAC3C,MAAM,IAAI,eAAe,CACxB,iBAAiB,4BAA4B,oDAAoD,EACjG,eAAe,EACf,EAAE,MAAM,EAAE,oBAAoB,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,EAAE,CACnD,CAAC;QACH,CAAC;IACF,CAAC;IACD,OAAO,KAAK,CAAC;AACd,CAAC;AAED,6DAA6D;AAC7D,MAAM,UAAU,aAAa,CAAC,KAAc;IAC3C,MAAM,MAAM,GAAG,YAAY,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC7C,IAAI,CAAC,MAAM,CAAC,OAAO;QAAE,OAAO,EAAE,CAAC;IAC/B,OAAO,MAAM,CAAC,IAAI;SAChB,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;SACxB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;AAC/B,CAAC;AAED,oGAAoG;AACpG,MAAM,UAAU,YAAY,CAAC,MAA0B;IACtD,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACrE,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;IAClE,OAAO,IAAI,eAAe,CACzB,+CAA+C,MAAM,kDAAkD,EACvG,eAAe,EACf,EAAE,MAAM,EAAE,oBAAoB,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,EAAE,CACrF,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CAClC,OAAqD,EACrD,SAA4B,EAC5B,WAA6C,EAC7C,QAAgB;IAEhB,OAAO,sBAAsB,CAAC,OAAO,EAAE,CAAC,GAAG,cAAc,EAAE,GAAG,SAAS,CAAC,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC;AAClG,CAAC;AAED,yFAAyF;AACzF,MAAM,UAAU,aAAa,CAAC,GAAkB;IAC/C,OAAO;QACN,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,EAAE,IAAI,CAAC;QAC3C,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,EAAE,IAAI,CAAC;KAC3C,CAAC;AACH,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,MAAc,EAAE,OAAe;IAC3D,OAAO,IAAI,eAAe,CAAC,OAAO,EAAE,eAAe,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;AACpF,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAc,EAAE,IAAsB,EAAE,OAAwD;IAChI,MAAM,EAAE,OAAO,GAAG,EAAE,EAAE,GAAG,iBAAiB,CAAC,cAAc,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;IACzE,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC;QAAE,MAAM,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAEpF,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;IACpE,MAAM,OAAO,GAAgB,iBAAiB,CAC7C,iBAAiB,EACjB;QACC,IAAI,EAAE,OAAO;QACb,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,IAAI,EAAE,IAAI,CAAC,IAAI;KACf,EACD,MAAM,CACN,CAAC;IAEF,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,MAAM,YAAY,CAAC,sBAAsB,EAAE,2EAA2E,CAAC,CAAC;IACzH,CAAC;IACD,MAAM,MAAM,GAAG,OAAO,CAAC,CAAC,CAAE,CAAC;IAC3B,OAAO,CAAC,MAAM,GAAG,MAAM,CAAC;IACxB,MAAM,IAAI,GAAG,aAAa,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IAC/C,IAAI,IAAI,CAAC,QAAQ,CAAC,kBAAkB,CAAC;QAAE,MAAM,oBAAoB,EAAE,CAAC;IACpE,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;QAC3C,MAAM,YAAY,CACjB,mBAAmB,EACnB,0FAA0F,CAC1F,CAAC;IACH,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,IAAI;QAAE,eAAe,CAAC,GAAG,CAAC,CAAC;IAC7C,OAAO,CAAC,IAAI,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC;IACzB,MAAM,SAAS,GAAG,cAAc,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/C,MAAM,OAAO,GAAG,kBAAkB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IACpD,OAAO,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,EAAE,CAAC;IAChD,OAAO,CAAC,OAAO,GAAG,OAAO,IAAI,EAAE,CAAC;IAChC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC;AAC/D,CAAC"}

package/dist/surfaces/cli/commands/exec/exec.command.descriptor.d.ts

@@ -0,0 +1,57 @@
+/**
+ * `vibes secrets exec --with KEY[,KEY...] -- <command...>` — run a command
+ * with secrets injected as environment variables.
+ *
+ * The child's environment is replaced, not inherited: declared pass names,
+ * the injected secrets, and a `VIBES_HOST_CREDENTIALS` manifest naming them.
+ *
+ * The LEVERAGE alternative to `secrets reveal`: values never touch stdout,
+ * argv, or shell history — they are resolved in-process and injected into
+ * the child's env only. All child output is streamed through a redactor so
+ * an echoed value can never leak into a terminal capture or an AI agent's
+ * transcript. This is the canonical way for agents and scripts to use a
+ * secret; `reveal` is for humans reading a value on purpose.
+ */
+export declare const execCommandDescriptor: {
+    readonly kind: "cli/command";
+    readonly id: "secrets.exec";
+    readonly name: "exec";
+    readonly description: "Run a command with secrets injected as env vars (values never printed; output redacted)";
+    readonly group: "secrets";
+    readonly arguments: [{
+        readonly name: "command";
+        readonly description: "Command and arguments to run (prefix with -- to stop option parsing)";
+        readonly required: true;
+        readonly variadic: true;
+    }];
+    readonly options: [{
+        readonly flags: "--with <keys>";
+        readonly description: "Comma-separated secret keys to inject as env vars (required; repeat --with is an error)";
+    }, {
+        readonly flags: "--environment <name>";
+        readonly description: "Target environment (default: current)";
+    }, {
+        readonly flags: "--backend <id>";
+        readonly description: "Read from this one store (exactly one store answers each key; a comma chain or @environment pin is refused, use --environment for another tier)";
+    }, {
+        readonly flags: "--allow-missing";
+        readonly description: "Run even when some keys are missing (default: fail closed)";
+    }, {
+        readonly flags: "--session";
+        readonly description: "Pass your signed-in session (VIBES_AUTH_TOKEN) so a nested vibes acts as you; --with VIBES_AUTH_TOKEN is refused";
+    }, {
+        readonly flags: "--pass <names>";
+        readonly description: "Comma-separated non-secret variables to pass through (the child gets only PATH HOME TMPDIR TERM LANG USER SHELL otherwise)";
+    }];
+    readonly surfaces: ["cli"];
+    readonly hardware: readonly ["consumer"];
+    readonly enabled: true;
+    readonly order: 22;
+    readonly examples: [{
+        readonly command: "vibes secrets exec --with VIBES_INTERNAL_SERVICE_TOKEN -- bun run smoke-internal.ts";
+        readonly description: "Run a script that reads the token from its env; value never printed";
+        readonly expectExit: 0;
+    }];
+};
+export default execCommandDescriptor;
+//# sourceMappingURL=exec.command.descriptor.d.ts.map

package/dist/surfaces/cli/commands/exec/exec.command.descriptor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"exec.command.descriptor.d.ts","sourceRoot":"","sources":["../../../../../src/surfaces/cli/commands/exec/exec.command.descriptor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAIH,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAsDhC,CAAC;AAEH,eAAe,qBAAqB,CAAC"}

package/dist/surfaces/cli/commands/exec/exec.command.descriptor.js

@@ -0,0 +1,66 @@
+/**
+ * `vibes secrets exec --with KEY[,KEY...] -- <command...>` — run a command
+ * with secrets injected as environment variables.
+ *
+ * The child's environment is replaced, not inherited: declared pass names,
+ * the injected secrets, and a `VIBES_HOST_CREDENTIALS` manifest naming them.
+ *
+ * The LEVERAGE alternative to `secrets reveal`: values never touch stdout,
+ * argv, or shell history — they are resolved in-process and injected into
+ * the child's env only. All child output is streamed through a redactor so
+ * an echoed value can never leak into a terminal capture or an AI agent's
+ * transcript. This is the canonical way for agents and scripts to use a
+ * secret; `reveal` is for humans reading a value on purpose.
+ */
+import { createRuntimeAsset } from '@vibesdotdev/kernel';
+export const execCommandDescriptor = createRuntimeAsset({
+    kind: 'cli/command',
+    id: 'secrets.exec',
+    name: 'exec',
+    description: 'Run a command with secrets injected as env vars (values never printed; output redacted)',
+    group: 'secrets',
+    arguments: [
+        {
+            name: 'command',
+            description: 'Command and arguments to run (prefix with -- to stop option parsing)',
+            required: true,
+            variadic: true
+        }
+    ],
+    options: [
+        {
+            flags: '--with <keys>',
+            description: 'Comma-separated secret keys to inject as env vars (required; repeat --with is an error)'
+        },
+        { flags: '--environment <name>', description: 'Target environment (default: current)' },
+        {
+            flags: '--backend <id>',
+            description: 'Read from this one store (exactly one store answers each key; a comma chain or @environment pin is refused, use --environment for another tier)'
+        },
+        {
+            flags: '--allow-missing',
+            description: 'Run even when some keys are missing (default: fail closed)'
+        },
+        {
+            flags: '--session',
+            description: 'Pass your signed-in session (VIBES_AUTH_TOKEN) so a nested vibes acts as you; --with VIBES_AUTH_TOKEN is refused'
+        },
+        {
+            flags: '--pass <names>',
+            description: 'Comma-separated non-secret variables to pass through (the child gets only PATH HOME TMPDIR TERM LANG USER SHELL otherwise)'
+        }
+    ],
+    surfaces: ['cli'],
+    hardware: ['consumer'],
+    enabled: true,
+    order: 22,
+    examples: [
+        {
+            command: 'vibes secrets exec --with VIBES_INTERNAL_SERVICE_TOKEN -- bun run smoke-internal.ts',
+            description: 'Run a script that reads the token from its env; value never printed',
+            expectExit: 0
+        }
+    ]
+});
+export default execCommandDescriptor;
+//# sourceMappingURL=exec.command.descriptor.js.map

package/dist/surfaces/cli/commands/exec/exec.command.descriptor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"exec.command.descriptor.js","sourceRoot":"","sources":["../../../../../src/surfaces/cli/commands/exec/exec.command.descriptor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAEzD,MAAM,CAAC,MAAM,qBAAqB,GAAG,kBAAkB,CAAC;IACvD,IAAI,EAAE,aAAa;IACnB,EAAE,EAAE,cAAc;IAClB,IAAI,EAAE,MAAM;IACZ,WAAW,EACV,yFAAyF;IAC1F,KAAK,EAAE,SAAS;IAChB,SAAS,EAAE;QACV;YACC,IAAI,EAAE,SAAS;YACf,WAAW,EAAE,sEAAsE;YACnF,QAAQ,EAAE,IAAI;YACd,QAAQ,EAAE,IAAI;SACd;KACD;IACD,OAAO,EAAE;QACR;YACC,KAAK,EAAE,eAAe;YACtB,WAAW,EACV,yFAAyF;SAC1F;QACD,EAAE,KAAK,EAAE,sBAAsB,EAAE,WAAW,EAAE,uCAAuC,EAAE;QACvF;YACC,KAAK,EAAE,gBAAgB;YACvB,WAAW,EACV,iJAAiJ;SAClJ;QACD;YACC,KAAK,EAAE,iBAAiB;YACxB,WAAW,EAAE,4DAA4D;SACzE;QACD;YACC,KAAK,EAAE,WAAW;YAClB,WAAW,EACV,kHAAkH;SACnH;QACD;YACC,KAAK,EAAE,gBAAgB;YACvB,WAAW,EACV,4HAA4H;SAC7H;KACD;IACD,QAAQ,EAAE,CAAC,KAAK,CAAC;IACjB,QAAQ,EAAE,CAAC,UAAU,CAAC;IACtB,OAAO,EAAE,IAAI;IACb,KAAK,EAAE,EAAE;IACT,QAAQ,EAAE;QACT;YACC,OAAO,EACN,qFAAqF;YACtF,WAAW,EAAE,qEAAqE;YAClF,UAAU,EAAE,CAAC;SACb;KACD;CACD,CAAC,CAAC;AAEH,eAAe,qBAAqB,CAAC"}

package/dist/surfaces/cli/commands/exec/exec.command.impl.d.ts

@@ -0,0 +1,33 @@
+import { type ExecArgs, type ExecOptionsInput } from "../../../../schemas/cli/commands/exec.schema.ts";
+export { execArgsSchema, execOptionsSchema, stringSchema, type ExecArgs, type ExecOptions, type ExecOptionsInput } from "../../../../schemas/cli/commands/exec.schema.ts";
+export { ENV_NAME, EXEC_BASE_PASS, SESSION_BEARER_KEY, SESSION_STORE_ID, composeExecChildEnv, parseExecRequest, parsePassNames, principalKeyReserved, repeatedWith, runtimeOutput, splitWithKeys, usageRefusal, type ExecRequest } from "./exec-input.ts";
+/**
+ * `vibes secrets exec`: a thin command over `spawnWithCredentials`
+ * (`@vibesdotdev/secrets/exec`, rc05 §2.4).
+ *
+ * - With no `--environment`, every `--with` key (and `--session`'s bearer) is
+ *   a `CredentialReference` resolved through `runtime.resolveCredential`; a
+ *   single `--backend <id>` names the by-id store that answers them.
+ * - `--environment T` is the secrets owner's cross-tier read (rc05 :62-63),
+ *   resolved through the `secrets/store` kind inside this package, with the
+ *   same spawn, environment and redaction guarantees.
+ * - The child's environment is replaced, never inherited: the base pass names
+ *   (plus `--pass`) and the host's declared protocol pass set from this host's
+ *   capture, the injected credentials, and the `VIBES_HOST_CREDENTIALS`
+ *   manifest naming them with this process as the live publisher.
+ * - Child output passes through the value redactor into the handed runtime's
+ *   `runtime/stdio`; one `[AUDIT]` line per attempt names keys, store and tier
+ *   (and a refusal's typed reason), never a value.
+ * - `--with VIBES_AUTH_TOKEN` is refused, so the bearer never comes from a
+ *   generic store; only `--session` injects it, from `auth/device-session`.
+ * - Options parse to a typed `INVALID_INPUT`; usage, a repeated `--with` (a
+ *   declared single-value option: the CLI surface refuses a second one) and a
+ *   missing key are typed refusals, like the lease path's.
+ */
+import type { CommandContext } from '@vibesdotdev/cli/schemas/types';
+export declare function execute(args: ExecArgs, opts: ExecOptionsInput, context: CommandContext): Promise<void>;
+declare const _default: {
+    execute: typeof execute;
+};
+export default _default;
+//# sourceMappingURL=exec.command.impl.d.ts.map

package/dist/surfaces/cli/commands/exec/exec.command.impl.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"exec.command.impl.d.ts","sourceRoot":"","sources":["../../../../../src/surfaces/cli/commands/exec/exec.command.impl.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,QAAQ,EAAkB,KAAK,gBAAgB,EAAE,MAAM,iDAAiD,CAAC;AAEvH,OAAO,EAAE,cAAc,EAAC,iBAAiB,EAAC,YAAY,EAAC,KAAK,QAAQ,EAAC,KAAK,WAAW,EAAC,KAAK,gBAAgB,EAAE,MAAM,iDAAiD,CAAC;AACrK,OAAO,EAAE,QAAQ,EAAC,cAAc,EAAC,kBAAkB,EAAC,gBAAgB,EAAC,mBAAmB,EAAC,gBAAgB,EAAC,cAAc,EAAC,oBAAoB,EAAC,YAAY,EAAC,aAAa,EAAC,aAAa,EAAC,YAAY,EAAC,KAAK,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAC9O;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,gCAAgC,CAAC;AAiBrE,wBAAsB,OAAO,CAC5B,IAAI,EAAE,QAAQ,EACd,IAAI,EAAE,gBAAgB,EACtB,OAAO,EAAE,cAAc,GACrB,OAAO,CAAC,IAAI,CAAC,CAsCf;;;;AAqFD,wBAA2B"}