@vibesdotdev/secrets 0.0.2 → 1.0.0-rc.4

package/dist/domain/vault/secret-record.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Canonical record shapes for the managed secret vault.
+ *
+ * `ManagedSecretRow` is the server-side DB row (carries `encryptedValue` + `createdBy` —
+ * NEVER sent to clients; the storage/transform drops them). `ManagedSecretRecord` is the
+ * client-side wire record as returned by `/api/secrets` (PublicSecret-shaped; `value` only
+ * on create input, never on reads; dates arrive as strings over JSON). `secretRecordDescriptor`
+ * is the cloud-api record descriptor the client resolves CRUD through.
+ */
+import { type StorageRecordDescriptor } from '@vibesdotdev/storage/schemas/record';
+export { managedSecretRecordSchema, managedSecretRowSchema } from '../../schemas/managed/managed-record.schema.ts';
+export type { ManagedSecretRecord, ManagedSecretRow } from '../../schemas/managed/managed-record.schema.ts';
+export declare const secretRecordDescriptor: StorageRecordDescriptor;
+//# sourceMappingURL=secret-record.d.ts.map

package/dist/domain/vault/secret-record.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"secret-record.d.ts","sourceRoot":"","sources":["../../../src/domain/vault/secret-record.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAgC,KAAK,uBAAuB,EAAE,MAAM,qCAAqC,CAAC;AAEjH,OAAO,EAAE,yBAAyB,EAAC,sBAAsB,EAAE,MAAM,gDAAgD,CAAC;AAClH,YAAY,EAAE,mBAAmB,EAAC,gBAAgB,EAAE,MAAM,gDAAgD,CAAC;AAyC3G,eAAO,MAAM,sBAAsB,yBAAa,CAAC"}

package/dist/domain/vault/secret-record.js

@@ -0,0 +1,52 @@
+/**
+ * Canonical record shapes for the managed secret vault.
+ *
+ * `ManagedSecretRow` is the server-side DB row (carries `encryptedValue` + `createdBy` —
+ * NEVER sent to clients; the storage/transform drops them). `ManagedSecretRecord` is the
+ * client-side wire record as returned by `/api/secrets` (PublicSecret-shaped; `value` only
+ * on create input, never on reads; dates arrive as strings over JSON). `secretRecordDescriptor`
+ * is the cloud-api record descriptor the client resolves CRUD through.
+ */
+import { StorageRecordDescriptorSchema } from '@vibesdotdev/storage/schemas/record';
+import { managedRecordBoundarySchema } from "../../schemas/managed/managed-record.schema.js";
+export { managedSecretRecordSchema, managedSecretRowSchema } from "../../schemas/managed/managed-record.schema.js";
+/**
+ * The cloud-api record descriptor: the managed vault → platform-web `/api/secrets`.
+ *
+ * Targets the canonical CRUD wire shape — `{ results: [...] }` for list, `{ result }` for
+ * item ops, 204 for delete — which platform-web emits through `vibesCrudCollection` /
+ * `vibesCrudItem`. The owner temporarily includes legacy PlatformClient keys alongside these
+ * members; cloud-api consumers MUST read the canonical members.
+ *
+ * WIRE CONTRACT (load-bearing): a response record NEVER carries `value` — the server encrypts
+ * the plaintext into `encryptedValue` and returns only the PublicSecret shape. (`value` is a
+ * cloud-api envelope-unwrap key; a record that returned `value` would be mis-unwrapped.) `id`
+ * is client-generated (`autoId`) and the serving side accepts it.
+ */
+// SAFETY: StorageRecordDescriptorSchema.parse produces a valid storage record descriptor without sync hooks
+const descriptor = StorageRecordDescriptorSchema.parse({
+    id: 'secrets',
+    kind: 'storage/record',
+    name: 'Secrets',
+    schema: managedRecordBoundarySchema,
+    tableName: 'secrets',
+    primaryKey: 'id',
+    autoId: true,
+    allowedAdapters: ['storage.cloud-api'],
+    // Platform-web owns /api/secrets (apps map key `platform`) and serves the canonical
+    // `{ results }` / `{ result }` fields required by the storage.cloud-api adapter.
+    adapterConfig: {
+        'storage.cloud-api': {
+            ownerApp: 'platform',
+            endpoint: '/api/secrets',
+            apiPath: '/api/secrets',
+            idField: 'id'
+        }
+    },
+    remote: {
+        adapter: 'storage.cloud-api',
+        crud: { apiPath: '/api/secrets', entityPath: '/api/secrets/:id', listField: 'results' }
+    }
+});
+export const secretRecordDescriptor = descriptor;
+//# sourceMappingURL=secret-record.js.map

package/dist/domain/vault/secret-record.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secret-record.js","sourceRoot":"","sources":["../../../src/domain/vault/secret-record.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,6BAA6B,EAA+B,MAAM,qCAAqC,CAAC;AACjH,OAAO,EAAE,2BAA2B,EAAE,MAAM,gDAAgD,CAAC;AAC7F,OAAO,EAAE,yBAAyB,EAAC,sBAAsB,EAAE,MAAM,gDAAgD,CAAC;AAGlH;;;;;;;;;;;;GAYG;AACH,4GAA4G;AAC5G,MAAM,UAAU,GAAG,6BAA6B,CAAC,KAAK,CAAC;IACtD,EAAE,EAAE,SAAS;IACb,IAAI,EAAE,gBAAgB;IACtB,IAAI,EAAE,SAAS;IACf,MAAM,EAAE,2BAA2B;IACnC,SAAS,EAAE,SAAS;IACpB,UAAU,EAAE,IAAI;IAChB,MAAM,EAAE,IAAI;IACZ,eAAe,EAAE,CAAC,mBAAmB,CAAC;IACtC,oFAAoF;IACpF,iFAAiF;IACjF,aAAa,EAAE;QACd,mBAAmB,EAAE;YACpB,QAAQ,EAAE,UAAU;YACpB,QAAQ,EAAE,cAAc;YACxB,OAAO,EAAE,cAAc;YACvB,OAAO,EAAE,IAAI;SACb;KACD;IACD,MAAM,EAAE;QACP,OAAO,EAAE,mBAAmB;QAC5B,IAAI,EAAE,EAAE,OAAO,EAAE,cAAc,EAAE,UAAU,EAAE,kBAAkB,EAAE,SAAS,EAAE,SAAS,EAAE;KACvF;CACD,CAA4B,CAAC;AAE9B,MAAM,CAAC,MAAM,sBAAsB,GAAG,UAAU,CAAC"}

package/dist/domain/vault/secret.transform.d.ts

@@ -0,0 +1,46 @@
+/**
+ * The row↔PublicSecret mapping for the managed secret vault, registered as a
+ * `storage/transform` so the owner app's `vibesCrudCollection` emits the public wire
+ * shape. `fromRow` NEVER emits the encrypted value or `createdBy`.
+ *
+ * Exported as a factory the owner app (platform-web) registers in `hooks.server.ts`
+ * (§Storage ownership). The fromRow/toRow are also exported standalone for direct testing.
+ */
+import type { PublicSecret } from '../../schemas/index.ts';
+import type { ManagedSecretRow } from './secret-record.ts';
+/** Row → public wire shape (read path). Drops `encryptedValue` + `createdBy`; coerces dates. */
+export declare function secretRowToPublic(row: ManagedSecretRow): PublicSecret;
+/**
+ * Public/descriptor fields → row (write path). Never carries a secret value — the server
+ * encrypts the plaintext into `encryptedValue` separately, in its create/update handler.
+ */
+export declare function publicToSecretRow(descriptor: Partial<PublicSecret>): Partial<ManagedSecretRow>;
+/** Build the `storage/transform` (descriptor + impl) for the `secrets` manifest. */
+export declare function createSecretsTransform(): import("@vibesdotdev/storage/transform").StorageTransformPair<{
+    id: string;
+    name: string;
+    scope: "user" | "platform" | "project" | "org";
+    scopeId: string;
+    providerType: string;
+    encryptedValue: string;
+    createdBy: string;
+    createdAt: number | Date;
+    updatedAt: number | Date;
+    lastUsedAt: number | Date | null;
+    rotationPolicy?: "never" | "manual" | "monthly" | "quarterly" | "yearly" | undefined;
+    metadata?: Record<string, import("@vibesdotdev/kernel/bootstrap").JsonValue> | null | undefined;
+    lastRotatedAt?: number | Date | null | undefined;
+}, {
+    id: string;
+    name: string;
+    scope: "user" | "platform" | "project" | "org";
+    scopeId: string;
+    providerType: string;
+    createdAt: Date;
+    updatedAt: Date;
+    lastUsedAt: Date | null;
+    metadata: Record<string, import("@vibesdotdev/kernel/bootstrap").JsonValue> | null;
+    lastRotatedAt?: Date | null | undefined;
+    rotationPolicy?: "never" | "manual" | "monthly" | "quarterly" | "yearly" | undefined;
+}>;
+//# sourceMappingURL=secret.transform.d.ts.map

package/dist/domain/vault/secret.transform.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"secret.transform.d.ts","sourceRoot":"","sources":["../../../src/domain/vault/secret.transform.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAIH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAE3D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAE3D,gGAAgG;AAChG,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,gBAAgB,GAAG,YAAY,CAUrE;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,UAAU,EAAE,OAAO,CAAC,YAAY,CAAC,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAS9F;AAED,oFAAoF;AACpF,wBAAgB,sBAAsB;;;;;;;;;;;;;;;;;;;;;;;;;;GAQrC"}

package/dist/domain/vault/secret.transform.js

@@ -0,0 +1,54 @@
+/**
+ * The row↔PublicSecret mapping for the managed secret vault, registered as a
+ * `storage/transform` so the owner app's `vibesCrudCollection` emits the public wire
+ * shape. `fromRow` NEVER emits the encrypted value or `createdBy`.
+ *
+ * Exported as a factory the owner app (platform-web) registers in `hooks.server.ts`
+ * (§Storage ownership). The fromRow/toRow are also exported standalone for direct testing.
+ */
+import { CapabilityError } from '@vibesdotdev/kernel';
+import { createStorageTransform } from '@vibesdotdev/storage/transform';
+import { managedRowProjectionSchema } from "../../schemas/managed/managed-record.schema.js";
+/** Row → public wire shape (read path). Drops `encryptedValue` + `createdBy`; coerces dates. */
+export function secretRowToPublic(row) {
+    const parsed = managedRowProjectionSchema.safeParse(row);
+    if (!parsed.success) {
+        const dateFields = new Set(['createdAt', 'updatedAt', 'lastUsedAt', 'lastRotatedAt']);
+        const badDate = parsed.error.issues.some(issue => dateFields.has(String(issue.path[0])));
+        throw new CapabilityError('The managed secret row is invalid.', 'INTERNAL', {
+            reason: badDate ? 'secret-record-date-invalid' : 'managed-secret-record-invalid', retryable: false
+        });
+    }
+    return parsed.data;
+}
+/**
+ * Public/descriptor fields → row (write path). Never carries a secret value — the server
+ * encrypts the plaintext into `encryptedValue` separately, in its create/update handler.
+ */
+export function publicToSecretRow(descriptor) {
+    const row = {};
+    if (descriptor.name !== undefined)
+        row.name = descriptor.name;
+    if (descriptor.scope !== undefined)
+        row.scope = descriptor.scope;
+    if (descriptor.scopeId !== undefined)
+        row.scopeId = descriptor.scopeId;
+    if (descriptor.providerType !== undefined)
+        row.providerType = descriptor.providerType;
+    if (descriptor.rotationPolicy !== undefined)
+        row.rotationPolicy = descriptor.rotationPolicy;
+    if (descriptor.metadata !== undefined)
+        row.metadata = descriptor.metadata;
+    return row;
+}
+/** Build the `storage/transform` (descriptor + impl) for the `secrets` manifest. */
+export function createSecretsTransform() {
+    return createStorageTransform({
+        id: 'secrets',
+        manifestId: 'secrets',
+        description: 'Managed secret row → public wire shape (drops encrypted value + createdBy).',
+        fromRow: secretRowToPublic,
+        toRow: publicToSecretRow
+    });
+}
+//# sourceMappingURL=secret.transform.js.map

package/dist/domain/vault/secret.transform.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secret.transform.js","sourceRoot":"","sources":["../../../src/domain/vault/secret.transform.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AACtD,OAAO,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AAExE,OAAO,EAAE,0BAA0B,EAAE,MAAM,gDAAgD,CAAC;AAG5F,gGAAgG;AAChG,MAAM,UAAU,iBAAiB,CAAC,GAAqB;IACtD,MAAM,MAAM,GAAG,0BAA0B,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IACzD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACrB,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,WAAW,EAAE,YAAY,EAAE,eAAe,CAAC,CAAC,CAAC;QACtF,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACzF,MAAM,IAAI,eAAe,CAAC,oCAAoC,EAAE,UAAU,EAAE;YAC3E,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,4BAA4B,CAAC,CAAC,CAAC,+BAA+B,EAAE,SAAS,EAAE,KAAK;SAClG,CAAC,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC;AACpB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAAC,UAAiC;IAClE,MAAM,GAAG,GAA8B,EAAE,CAAC;IAC1C,IAAI,UAAU,CAAC,IAAI,KAAK,SAAS;QAAE,GAAG,CAAC,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC;IAC9D,IAAI,UAAU,CAAC,KAAK,KAAK,SAAS;QAAE,GAAG,CAAC,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC;IACjE,IAAI,UAAU,CAAC,OAAO,KAAK,SAAS;QAAE,GAAG,CAAC,OAAO,GAAG,UAAU,CAAC,OAAO,CAAC;IACvE,IAAI,UAAU,CAAC,YAAY,KAAK,SAAS;QAAE,GAAG,CAAC,YAAY,GAAG,UAAU,CAAC,YAAY,CAAC;IACtF,IAAI,UAAU,CAAC,cAAc,KAAK,SAAS;QAAE,GAAG,CAAC,cAAc,GAAG,UAAU,CAAC,cAAc,CAAC;IAC5F,IAAI,UAAU,CAAC,QAAQ,KAAK,SAAS;QAAE,GAAG,CAAC,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC;IAC1E,OAAO,GAAG,CAAC;AACZ,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,sBAAsB;IACrC,OAAO,sBAAsB,CAAiC;QAC7D,EAAE,EAAE,SAAS;QACb,UAAU,EAAE,SAAS;QACrB,WAAW,EAAE,6EAA6E;QAC1F,OAAO,EAAE,iBAAiB;QAC1B,KAAK,EAAE,iBAAiB;KACxB,CAAC,CAAC;AACJ,CAAC"}

package/dist/exec/attempt-audit.d.ts

@@ -0,0 +1,15 @@
+import { type CredentialEnvRequest, type SpawnWithCredentialsOptions } from '../schemas/execution/spawn.schema.ts';
+import { type LeverageAuditOutput, type LeverageAuditRecord } from './audit.ts';
+/**
+ * What a refused attempt audits: the action, the credential NAMES and the
+ * target. Fields that cannot be read (they fail the hint, or their getter
+ * throws) audit as the defaults: the attempt's own parse of the same options
+ * refuses them, typed, so the failure is not lost here.
+ */
+export declare function refusalRecord(request: SpawnWithCredentialsOptions | CredentialEnvRequest, targetDefaultsToCommand: boolean): Omit<LeverageAuditRecord, 'outcome' | 'reason'>;
+/**
+ * Run `attempt`; a failure before anything spawned is still an attempt, so it is
+ * audited `failure` with its typed reason (never a value) and then rethrown.
+ */
+export declare function auditRefusal<T>(output: LeverageAuditOutput, record: Omit<LeverageAuditRecord, 'outcome' | 'reason'>, attempt: () => Promise<T>): Promise<T>;
+//# sourceMappingURL=attempt-audit.d.ts.map

package/dist/exec/attempt-audit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"attempt-audit.d.ts","sourceRoot":"","sources":["../../src/exec/attempt-audit.ts"],"names":[],"mappings":"AAIA,OAAO,EAAkB,KAAK,oBAAoB,EAAC,KAAK,2BAA2B,EAAE,MAAM,sCAAsC,CAAC;AAElI,OAAO,EAEP,KAAK,mBAAmB,EACxB,KAAK,mBAAmB,EACvB,MAAM,YAAY,CAAC;AAEpB;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,OAAO,EAAE,2BAA2B,GAAG,oBAAoB,EAAE,uBAAuB,EAAE,OAAO,GAAG,IAAI,CAAC,mBAAmB,EAAE,SAAS,GAAG,QAAQ,CAAC,CAU5K;AAED;;;GAGG;AACH,wBAAsB,YAAY,CAAC,CAAC,EACnC,MAAM,EAAE,mBAAmB,EAC3B,MAAM,EAAE,IAAI,CAAC,mBAAmB,EAAE,SAAS,GAAG,QAAQ,CAAC,EACvD,OAAO,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GACvB,OAAO,CAAC,CAAC,CAAC,CAOZ"}

package/dist/exec/attempt-audit.js

@@ -0,0 +1,35 @@
+import { CapabilityError, CaughtFailureSchema } from '@vibesdotdev/kernel';
+import { auditHintSchema } from "../schemas/execution/spawn.schema.js";
+import { attemptOf } from "../support/file-failure.js";
+import { writeLeverageAudit } from "./audit.js";
+/**
+ * What a refused attempt audits: the action, the credential NAMES and the
+ * target. Fields that cannot be read (they fail the hint, or their getter
+ * throws) audit as the defaults: the attempt's own parse of the same options
+ * refuses them, typed, so the failure is not lost here.
+ */
+export function refusalRecord(request, targetDefaultsToCommand) {
+    const hint = attemptOf(() => auditHintSchema.safeParse(request));
+    const requested = hint.ok && hint.value.success ? hint.value.data : undefined;
+    return {
+        action: requested?.audit?.action ?? 'secrets.spawn',
+        keys: Object.keys(requested?.credentials ?? {}),
+        environment: '',
+        backend: '',
+        target: requested?.audit?.target ?? (targetDefaultsToCommand ? requested?.command : undefined) ?? ''
+    };
+}
+/**
+ * Run `attempt`; a failure before anything spawned is still an attempt, so it is
+ * audited `failure` with its typed reason (never a value) and then rethrown.
+ */
+export async function auditRefusal(output, record, attempt) {
+    try {
+        return await attempt();
+    }
+    catch (error) {
+        writeLeverageAudit(output, { ...record, outcome: 'failure', reason: CapabilityError.from(CaughtFailureSchema.parse(error)).reason });
+        throw error;
+    }
+}
+//# sourceMappingURL=attempt-audit.js.map

package/dist/exec/attempt-audit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"attempt-audit.js","sourceRoot":"","sources":["../../src/exec/attempt-audit.ts"],"names":[],"mappings":"AAAA,OAAO,EACP,eAAe,EACf,mBAAmB,EAClB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,eAAe,EAA6D,MAAM,sCAAsC,CAAC;AAClI,OAAO,EAAE,SAAS,EAAE,MAAM,4BAA4B,CAAC;AACvD,OAAO,EACP,kBAAkB,EAGjB,MAAM,YAAY,CAAC;AAEpB;;;;;GAKG;AACH,MAAM,UAAU,aAAa,CAAC,OAA2D,EAAE,uBAAgC;IAC1H,MAAM,IAAI,GAAG,SAAS,CAAC,GAAG,EAAE,CAAC,eAAe,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;IACjE,MAAM,SAAS,GAAG,IAAI,CAAC,EAAE,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;IAC9E,OAAO;QACN,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,IAAI,eAAe;QACnD,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,WAAW,IAAI,EAAE,CAAC;QAC/C,WAAW,EAAE,EAAE;QACf,OAAO,EAAE,EAAE;QACX,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,IAAI,CAAC,uBAAuB,CAAC,CAAC,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,EAAE;KACpG,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CACjC,MAA2B,EAC3B,MAAuD,EACvD,OAAyB;IAEzB,IAAI,CAAC;QACJ,OAAO,MAAM,OAAO,EAAE,CAAC;IACxB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,kBAAkB,CAAC,MAAM,EAAE,EAAE,GAAG,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,eAAe,CAAC,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;QACrI,MAAM,KAAK,CAAC;IACb,CAAC;AACF,CAAC"}

package/dist/exec/audit.d.ts

@@ -0,0 +1,17 @@
+import { type LeverageAuditOutput, type LeverageAuditRecord } from "../schemas/execution/audit.schema.ts";
+export { type LeverageAuditOutput, type LeverageAuditRecord, type LeverageHop, type LeverageLeaseAudit } from "../schemas/execution/audit.schema.ts";
+/**
+ * The one `[AUDIT]` line a credential leverage (`spawnWithCredentials`,
+ * `secrets exec|request`, the OAuth client mint) emits per attempt: key NAMES,
+ * the stores and the tier or environment they came from, the target command
+ * word and the outcome, and for a refusal the typed reason. Never a value.
+ *
+ * The line is written to the stderr of the handed runtime's `runtime/stdio`
+ * (`openLeverageAudit`), never to the process stream.
+ */
+import { type RuntimeRef } from '@vibesdotdev/kernel';
+/** Write the one `[AUDIT]` line for `record` to `output`. */
+export declare function writeLeverageAudit(output: LeverageAuditOutput, record: LeverageAuditRecord): void;
+/** Resolve the handed runtime's text output once, as an audit output (stderr). A host with none refuses `UNAVAILABLE` `stdio-unavailable`. */
+export declare function openLeverageAudit(runtime: Pick<RuntimeRef, 'hasKind' | 'query'>): Promise<LeverageAuditOutput>;
+//# sourceMappingURL=audit.d.ts.map

package/dist/exec/audit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit.d.ts","sourceRoot":"","sources":["../../src/exec/audit.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,mBAAmB,EAAC,KAAK,mBAAmB,EAAE,MAAM,sCAAsC,CAAC;AACzG,OAAO,EAAE,KAAK,mBAAmB,EAAC,KAAK,mBAAmB,EAAC,KAAK,WAAW,EAAC,KAAK,kBAAkB,EAAE,MAAM,sCAAsC,CAAC;AAClJ;;;;;;;;GAQG;AAEH,OAAO,EAAkB,KAAK,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAEtE,6DAA6D;AAC7D,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,mBAAmB,EAAE,MAAM,EAAE,mBAAmB,GAAG,IAAI,CASjG;AAED,8IAA8I;AAC9I,wBAAsB,iBAAiB,CAAC,OAAO,EAAE,IAAI,CAAC,UAAU,EAAE,SAAS,GAAG,OAAO,CAAC,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAGpH"}

package/dist/exec/audit.js

@@ -0,0 +1,29 @@
+import {} from "../schemas/execution/audit.schema.js";
+export {} from "../schemas/execution/audit.schema.js";
+/**
+ * The one `[AUDIT]` line a credential leverage (`spawnWithCredentials`,
+ * `secrets exec|request`, the OAuth client mint) emits per attempt: key NAMES,
+ * the stores and the tier or environment they came from, the target command
+ * word and the outcome, and for a refusal the typed reason. Never a value.
+ *
+ * The line is written to the stderr of the handed runtime's `runtime/stdio`
+ * (`openLeverageAudit`), never to the process stream.
+ */
+import { getRuntimeStdio } from '@vibesdotdev/kernel';
+/** Write the one `[AUDIT]` line for `record` to `output`. */
+export function writeLeverageAudit(output, record) {
+    const payload = {
+        id: crypto.randomUUID(),
+        timestamp: new Date().toISOString(),
+        category: 'data_access',
+        severity: 'high',
+        ...record
+    };
+    output.warn(`[AUDIT] ${JSON.stringify(payload)}`);
+}
+/** Resolve the handed runtime's text output once, as an audit output (stderr). A host with none refuses `UNAVAILABLE` `stdio-unavailable`. */
+export async function openLeverageAudit(runtime) {
+    const stdio = await getRuntimeStdio(runtime);
+    return { warn: (text) => stdio.write('stderr', `${text}\n`) };
+}
+//# sourceMappingURL=audit.js.map

package/dist/exec/audit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit.js","sourceRoot":"","sources":["../../src/exec/audit.ts"],"names":[],"mappings":"AAAA,OAAO,EAAqD,MAAM,sCAAsC,CAAC;AACzG,OAAO,EAA8F,MAAM,sCAAsC,CAAC;AAClJ;;;;;;;;GAQG;AAEH,OAAO,EAAE,eAAe,EAAkB,MAAM,qBAAqB,CAAC;AAEtE,6DAA6D;AAC7D,MAAM,UAAU,kBAAkB,CAAC,MAA2B,EAAE,MAA2B;IAC1F,MAAM,OAAO,GAAG;QACf,EAAE,EAAE,MAAM,CAAC,UAAU,EAAE;QACvB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,QAAQ,EAAE,aAAa;QACvB,QAAQ,EAAE,MAAM;QAChB,GAAG,MAAM;KACT,CAAC;IACF,MAAM,CAAC,IAAI,CAAC,WAAW,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;AACnD,CAAC;AAED,8IAA8I;AAC9I,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,OAA8C;IACrF,MAAM,KAAK,GAAG,MAAM,eAAe,CAAC,OAAO,CAAC,CAAC;IAC7C,OAAO,EAAE,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,EAAE,GAAG,IAAI,IAAI,CAAC,EAAE,CAAC;AAC/D,CAAC"}

package/dist/exec/bootstrap.d.ts

@@ -0,0 +1,14 @@
+import { type BootstrapCredentialAuditReason, type BootstrapCredentialErrorCode, type BootstrapCredentialPorts, type BootstrapCredentialExecRequest } from '../schemas/execution/bootstrap.schema.ts';
+export { BootstrapCredentialAuditReasonSchema, BootstrapCredentialAuditSchema, BootstrapCredentialEnvironmentNameSchema, BootstrapCredentialErrorCodeSchema, BootstrapCredentialExecRequestSchema, BootstrapCredentialSpawnOptionsSchema, type BootstrapCredentialAudit, type BootstrapCredentialAuditReason, type BootstrapCredentialChild, type BootstrapCredentialErrorCode, type BootstrapCredentialPorts, type BootstrapCredentialExecRequest, type BootstrapCredentialSpawnOptions } from '../schemas/execution/bootstrap.schema.ts';
+export type BootstrapCredentialError = Error & {
+    readonly code: BootstrapCredentialErrorCode;
+    readonly reason: BootstrapCredentialAuditReason;
+};
+/**
+ * Executes the one pre-host credentialed install path. This entrypoint has no
+ * kernel import because a fresh install has no framework graph to host a runtime.
+ * The secrets owner still exclusively resolves named references, admits
+ * first-install values, replaces the environment, redacts output, and audits.
+ */
+export declare function spawnBootstrappedCredentialProcess(request: BootstrapCredentialExecRequest, ports: BootstrapCredentialPorts): Promise<number>;
+//# sourceMappingURL=bootstrap.d.ts.map

package/dist/exec/bootstrap.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bootstrap.d.ts","sourceRoot":"","sources":["../../src/exec/bootstrap.ts"],"names":[],"mappings":"AACA,OAAO,EAIN,KAAK,8BAA8B,EACnC,KAAK,4BAA4B,EACjC,KAAK,wBAAwB,EAC7B,KAAK,8BAA8B,EACnC,MAAM,0CAA0C,CAAC;AAElD,OAAO,EACN,oCAAoC,EACpC,8BAA8B,EAC9B,wCAAwC,EACxC,kCAAkC,EAClC,oCAAoC,EACpC,qCAAqC,EACrC,KAAK,wBAAwB,EAC7B,KAAK,8BAA8B,EACnC,KAAK,wBAAwB,EAC7B,KAAK,4BAA4B,EACjC,KAAK,wBAAwB,EAC7B,KAAK,8BAA8B,EACnC,KAAK,+BAA+B,EACpC,MAAM,0CAA0C,CAAC;AAElD,MAAM,MAAM,wBAAwB,GAAG,KAAK,GAAG;IAC9C,QAAQ,CAAC,IAAI,EAAE,4BAA4B,CAAC;IAC5C,QAAQ,CAAC,MAAM,EAAE,8BAA8B,CAAC;CAChD,CAAC;AAiGF;;;;;GAKG;AACH,wBAAsB,kCAAkC,CACvD,OAAO,EAAE,8BAA8B,EACvC,KAAK,EAAE,wBAAwB,GAC7B,OAAO,CAAC,MAAM,CAAC,CAqGjB"}

package/dist/exec/bootstrap.js

@@ -0,0 +1,178 @@
+import { createStreamRedactor, MIN_REDACTABLE_VALUE_LENGTH } from "./redactor.core.js";
+import { BootstrapCredentialAuditSchema, BootstrapCredentialExecRequestSchema } from "../schemas/execution/bootstrap.schema.js";
+export { BootstrapCredentialAuditReasonSchema, BootstrapCredentialAuditSchema, BootstrapCredentialEnvironmentNameSchema, BootstrapCredentialErrorCodeSchema, BootstrapCredentialExecRequestSchema, BootstrapCredentialSpawnOptionsSchema } from "../schemas/execution/bootstrap.schema.js";
+function createBootstrapCredentialError(code, reason) {
+    const error = new Error('The bootstrapped credential operation could not be completed.');
+    error.name = 'BootstrapCredentialError';
+    return Object.assign(error, { code, reason });
+}
+const PASSTHROUGH_ENV_NAMES = [
+    'PATH',
+    'HOME',
+    'USERPROFILE',
+    'TMPDIR',
+    'TEMP',
+    'TMP',
+    'SYSTEMROOT',
+    'WINDIR',
+    'BUN_INSTALL',
+    'BUN_INSTALL_CACHE_DIR',
+    'CI',
+    'TERM',
+    'NO_COLOR',
+    'FORCE_COLOR',
+    'HTTP_PROXY',
+    'HTTPS_PROXY',
+    'ALL_PROXY',
+    'NO_PROXY'
+];
+function auditRecord(credentialNames, outcome, reason, exitCode) {
+    const candidate = {
+        action: 'bootstrap-credentialed-process',
+        target: 'package-install',
+        credentialNames,
+        outcome
+    };
+    if (reason !== undefined) {
+        candidate.reason = reason;
+    }
+    if (exitCode !== undefined) {
+        candidate.exitCode = exitCode;
+    }
+    return BootstrapCredentialAuditSchema.parse(candidate);
+}
+function recordAudit(ports, record) {
+    try {
+        ports.audit(record);
+    }
+    catch (cause) {
+        throw new Error('The bootstrapped credential operation could not be completed.', { cause });
+    }
+}
+function refuse(ports, credentialNames, code, reason) {
+    recordAudit(ports, auditRecord(credentialNames, 'failure', reason));
+    throw createBootstrapCredentialError(code, reason);
+}
+function defineEnvironmentValue(environment, name, value) {
+    Object.defineProperty(environment, name, {
+        value,
+        enumerable: true,
+        configurable: true,
+        writable: true
+    });
+}
+async function redactStream(stream, redactor, write) {
+    if (stream) {
+        const decoder = new TextDecoder();
+        for await (const chunk of stream) {
+            const text = decoder.decode(chunk, { stream: true });
+            if (text)
+                write(redactor.push(text));
+        }
+        const trailing = decoder.decode();
+        if (trailing)
+            write(redactor.push(trailing));
+    }
+    write(redactor.flush());
+}
+/**
+ * Executes the one pre-host credentialed install path. This entrypoint has no
+ * kernel import because a fresh install has no framework graph to host a runtime.
+ * The secrets owner still exclusively resolves named references, admits
+ * first-install values, replaces the environment, redacts output, and audits.
+ */
+export async function spawnBootstrappedCredentialProcess(request, ports) {
+    const parsedResult = BootstrapCredentialExecRequestSchema.safeParse(request);
+    if (!parsedResult.success) {
+        refuse(ports, [], 'INVALID_INPUT', 'spawn-options-invalid');
+    }
+    const parsed = parsedResult.data;
+    const resolved = new Map();
+    for (const [name, value] of Object.entries(parsed.credentials)) {
+        resolved.set(name, value);
+    }
+    for (const name of parsed.references) {
+        if (resolved.has(name)) {
+            refuse(ports, [...resolved.keys(), name].sort(), 'INVALID_INPUT', 'credential-name-duplicate');
+        }
+        const value = ports.environment[name];
+        if (value === undefined || value.length === 0) {
+            refuse(ports, [...resolved.keys(), name].sort(), 'UNAVAILABLE', 'credential-not-set');
+        }
+        resolved.set(name, value);
+    }
+    const credentialNames = [...new Set([
+            ...resolved.keys(),
+            ...parsed.redactions.map(({ name }) => name)
+        ])].sort();
+    const values = {};
+    for (const [name, value] of resolved) {
+        defineEnvironmentValue(values, name, value);
+        if (value.length < MIN_REDACTABLE_VALUE_LENGTH) {
+            refuse(ports, credentialNames, 'INVALID_INPUT', 'secret-value-invalid');
+        }
+        if (requestHasValue(parsed.command, parsed.args, value)) {
+            refuse(ports, credentialNames, 'INVALID_INPUT', 'credential-in-argv');
+        }
+    }
+    for (const { name, value } of parsed.redactions) {
+        if (value.length < MIN_REDACTABLE_VALUE_LENGTH) {
+            refuse(ports, credentialNames, 'INVALID_INPUT', 'secret-value-invalid');
+        }
+        if (requestHasValue(parsed.command, parsed.args, value)) {
+            refuse(ports, credentialNames, 'INVALID_INPUT', 'credential-in-argv');
+        }
+        let redactionName = name;
+        let suffix = 2;
+        while (Object.hasOwn(values, redactionName)) {
+            redactionName = name + '_' + suffix++;
+        }
+        defineEnvironmentValue(values, redactionName, value);
+    }
+    const childEnv = {};
+    const passNames = new Set([...PASSTHROUGH_ENV_NAMES, ...parsed.pass]);
+    for (const name of passNames) {
+        const value = ports.environment[name];
+        if (value !== undefined)
+            defineEnvironmentValue(childEnv, name, value);
+    }
+    defineEnvironmentValue(childEnv, 'BUN_BE_BUN', '1');
+    for (const [name, value] of resolved)
+        defineEnvironmentValue(childEnv, name, value);
+    const spawnOptions = {
+        command: parsed.command,
+        args: [...parsed.args],
+        env: childEnv,
+        envMode: 'replace',
+        stdin: 'inherit',
+        stdout: 'pipe',
+        stderr: 'pipe',
+        cwd: parsed.cwd
+    };
+    if (parsed.cwd === undefined) {
+        delete spawnOptions.cwd;
+    }
+    const child = await ports.spawn(spawnOptions).catch((cause) => {
+        recordAudit(ports, auditRecord(credentialNames, 'failure', 'spawn-failed'));
+        const error = createBootstrapCredentialError('INTERNAL', 'spawn-failed');
+        throw new Error(error.message, { cause });
+    });
+    const stdoutRedactor = createStreamRedactor(values);
+    const stderrRedactor = createStreamRedactor(values);
+    return Promise.all([
+        redactStream(child.stdout, stdoutRedactor, ports.stdout),
+        redactStream(child.stderr, stderrRedactor, ports.stderr),
+        child.exited
+    ]).then(([, , exitCode]) => {
+        recordAudit(ports, auditRecord(credentialNames, exitCode === 0 ? 'success' : 'failure', exitCode === 0 ? undefined : 'child-failed', exitCode));
+        return exitCode;
+    }, (cause) => {
+        recordAudit(ports, auditRecord(credentialNames, 'failure', 'output-failed'));
+        const error = createBootstrapCredentialError('INTERNAL', 'output-failed');
+        throw new Error(error.message, { cause });
+    });
+}
+function requestHasValue(command, args, value) {
+    return command.includes(value) || args.some((argument) => argument.includes(value));
+}
+//# sourceMappingURL=bootstrap.js.map

package/dist/exec/bootstrap.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bootstrap.js","sourceRoot":"","sources":["../../src/exec/bootstrap.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,2BAA2B,EAAE,MAAM,oBAAoB,CAAC;AACvF,OAAO,EACN,8BAA8B,EAC9B,oCAAoC,EAMpC,MAAM,0CAA0C,CAAC;AAElD,OAAO,EACN,oCAAoC,EACpC,8BAA8B,EAC9B,wCAAwC,EACxC,kCAAkC,EAClC,oCAAoC,EACpC,qCAAqC,EAQrC,MAAM,0CAA0C,CAAC;AAOlD,SAAS,8BAA8B,CACtC,IAAkC,EAClC,MAAsC;IAEtC,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,+DAA+D,CAAC,CAAC;IACzF,KAAK,CAAC,IAAI,GAAG,0BAA0B,CAAC;IACxC,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;AAC/C,CAAC;AAED,MAAM,qBAAqB,GAAG;IAC7B,MAAM;IACN,MAAM;IACN,aAAa;IACb,QAAQ;IACR,MAAM;IACN,KAAK;IACL,YAAY;IACZ,QAAQ;IACR,aAAa;IACb,uBAAuB;IACvB,IAAI;IACJ,MAAM;IACN,UAAU;IACV,aAAa;IACb,YAAY;IACZ,aAAa;IACb,WAAW;IACX,UAAU;CACV,CAAC;AAEF,SAAS,WAAW,CACnB,eAAyB,EACzB,OAA8B,EAC9B,MAAuC,EACvC,QAAiB;IAEjB,MAAM,SAAS,GAA6B;QAC3C,MAAM,EAAE,gCAAgC;QACxC,MAAM,EAAE,iBAAiB;QACzB,eAAe;QACf,OAAO;KACP,CAAC;IACF,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QAC1B,SAAS,CAAC,MAAM,GAAG,MAAM,CAAC;IAC3B,CAAC;IACD,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC5B,SAAS,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAC/B,CAAC;IACD,OAAO,8BAA8B,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;AACxD,CAAC;AAED,SAAS,WAAW,CAAC,KAA+B,EAAE,MAAgC;IACrF,IAAI,CAAC;QACJ,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACrB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,MAAM,IAAI,KAAK,CAAC,+DAA+D,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;IAC7F,CAAC;AACF,CAAC;AAED,SAAS,MAAM,CACd,KAA+B,EAC/B,eAAyB,EACzB,IAAkC,EAClC,MAAsC;IAEtC,WAAW,CAAC,KAAK,EAAE,WAAW,CAAC,eAAe,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC;IACpE,MAAM,8BAA8B,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;AACpD,CAAC;AAED,SAAS,sBAAsB,CAAC,WAAmC,EAAE,IAAY,EAAE,KAAa;IAC/F,MAAM,CAAC,cAAc,CAAC,WAAW,EAAE,IAAI,EAAE;QACxC,KAAK;QACL,UAAU,EAAE,IAAI;QAChB,YAAY,EAAE,IAAI;QAClB,QAAQ,EAAE,IAAI;KACd,CAAC,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,YAAY,CAC1B,MAAyC,EACzC,QAAiD,EACjD,KAA6B;IAE7B,IAAI,MAAM,EAAE,CAAC;QACZ,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;QAClC,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAClC,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;YACrD,IAAI,IAAI;gBAAE,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QACtC,CAAC;QACD,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;QAClC,IAAI,QAAQ;YAAE,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC9C,CAAC;IACD,KAAK,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC;AACzB,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,kCAAkC,CACvD,OAAuC,EACvC,KAA+B;IAE/B,MAAM,YAAY,GAAG,oCAAoC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;IAC7E,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC;QAC3B,MAAM,CAAC,KAAK,EAAE,EAAE,EAAE,eAAe,EAAE,uBAAuB,CAAC,CAAC;IAC7D,CAAC;IACD,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC;IAEjC,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC3C,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC;QAChE,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAC3B,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;QACtC,IAAI,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACxB,MAAM,CAAC,KAAK,EAAE,CAAC,GAAG,QAAQ,CAAC,IAAI,EAAE,EAAE,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,eAAe,EAAE,2BAA2B,CAAC,CAAC;QAChG,CAAC;QACD,MAAM,KAAK,GAAG,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;QACtC,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC/C,MAAM,CAAC,KAAK,EAAE,CAAC,GAAG,QAAQ,CAAC,IAAI,EAAE,EAAE,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,aAAa,EAAE,oBAAoB,CAAC,CAAC;QACvF,CAAC;QACD,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAC3B,CAAC;IAED,MAAM,eAAe,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC;YACnC,GAAG,QAAQ,CAAC,IAAI,EAAE;YAClB,GAAG,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC;SAC5C,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACX,MAAM,MAAM,GAA2B,EAAE,CAAC;IAC1C,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,QAAQ,EAAE,CAAC;QACtC,sBAAsB,CAAC,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;QAC5C,IAAI,KAAK,CAAC,MAAM,GAAG,2BAA2B,EAAE,CAAC;YAChD,MAAM,CAAC,KAAK,EAAE,eAAe,EAAE,eAAe,EAAE,sBAAsB,CAAC,CAAC;QACzE,CAAC;QACD,IAAI,eAAe,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,CAAC;YACzD,MAAM,CAAC,KAAK,EAAE,eAAe,EAAE,eAAe,EAAE,oBAAoB,CAAC,CAAC;QACvE,CAAC;IACF,CAAC;IACD,KAAK,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;QACjD,IAAI,KAAK,CAAC,MAAM,GAAG,2BAA2B,EAAE,CAAC;YAChD,MAAM,CAAC,KAAK,EAAE,eAAe,EAAE,eAAe,EAAE,sBAAsB,CAAC,CAAC;QACzE,CAAC;QACD,IAAI,eAAe,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,CAAC;YACzD,MAAM,CAAC,KAAK,EAAE,eAAe,EAAE,eAAe,EAAE,oBAAoB,CAAC,CAAC;QACvE,CAAC;QACD,IAAI,aAAa,GAAG,IAAI,CAAC;QACzB,IAAI,MAAM,GAAG,CAAC,CAAC;QACf,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,EAAE,CAAC;YAC7C,aAAa,GAAG,IAAI,GAAG,GAAG,GAAG,MAAM,EAAE,CAAC;QACvC,CAAC;QACD,sBAAsB,CAAC,MAAM,EAAE,aAAa,EAAE,KAAK,CAAC,CAAC;IACtD,CAAC;IAED,MAAM,QAAQ,GAA2B,EAAE,CAAC;IAC5C,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,qBAAqB,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;IACtE,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;QAC9B,MAAM,KAAK,GAAG,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;QACtC,IAAI,KAAK,KAAK,SAAS;YAAE,sBAAsB,CAAC,QAAQ,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;IACxE,CAAC;IACD,sBAAsB,CAAC,QAAQ,EAAE,YAAY,EAAE,GAAG,CAAC,CAAC;IACpD,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,QAAQ;QAAE,sBAAsB,CAAC,QAAQ,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;IAEpF,MAAM,YAAY,GAAG;QACpB,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,IAAI,EAAE,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC;QACtB,GAAG,EAAE,QAAQ;QACb,OAAO,EAAE,SAAkB;QAC3B,KAAK,EAAE,SAAkB;QACzB,MAAM,EAAE,MAAe;QACvB,MAAM,EAAE,MAAe;QACvB,GAAG,EAAE,MAAM,CAAC,GAAG;KACf,CAAC;IACF,IAAI,MAAM,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;QAC9B,OAAO,YAAY,CAAC,GAAG,CAAC;IACzB,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,KAAK,CAAC,CAAC,KAAY,EAAE,EAAE;QACpE,WAAW,CAAC,KAAK,EAAE,WAAW,CAAC,eAAe,EAAE,SAAS,EAAE,cAAc,CAAC,CAAC,CAAC;QAC5E,MAAM,KAAK,GAAG,8BAA8B,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC;QACzE,MAAM,IAAI,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,MAAM,cAAc,GAAG,oBAAoB,CAAC,MAAM,CAAC,CAAC;IACpD,MAAM,cAAc,GAAG,oBAAoB,CAAC,MAAM,CAAC,CAAC;IACpD,OAAO,OAAO,CAAC,GAAG,CAAC;QAClB,YAAY,CAAC,KAAK,CAAC,MAAM,EAAE,cAAc,EAAE,KAAK,CAAC,MAAM,CAAC;QACxD,YAAY,CAAC,KAAK,CAAC,MAAM,EAAE,cAAc,EAAE,KAAK,CAAC,MAAM,CAAC;QACxD,KAAK,CAAC,MAAM;KACZ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,AAAD,EAAG,QAAQ,CAAC,EAAE,EAAE;QAC1B,WAAW,CACV,KAAK,EACL,WAAW,CACV,eAAe,EACf,QAAQ,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,EACtC,QAAQ,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,cAAc,EAC3C,QAAQ,CACR,CACD,CAAC;QACF,OAAO,QAAQ,CAAC;IACjB,CAAC,EAAE,CAAC,KAAY,EAAE,EAAE;QACnB,WAAW,CAAC,KAAK,EAAE,WAAW,CAAC,eAAe,EAAE,SAAS,EAAE,eAAe,CAAC,CAAC,CAAC;QAC7E,MAAM,KAAK,GAAG,8BAA8B,CAAC,UAAU,EAAE,eAAe,CAAC,CAAC;QAC1E,MAAM,IAAI,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,OAAe,EAAE,IAAuB,EAAE,KAAa;IAC/E,OAAO,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;AACrF,CAAC"}

package/dist/exec/credential-leases.d.ts

@@ -0,0 +1,56 @@
+import { CapabilityError, type VibesRuntime } from '@vibesdotdev/kernel';
+import { type CredentialReference } from '@vibesdotdev/kernel/credentials';
+import * as z from 'zod/v4';
+import type { AdmittedLeases, NameRole } from '../schemas/execution/result.schema.ts';
+import { type ResolvedCredentialSpawn } from "../schemas/execution/result.schema.ts";
+import { type CallerHeldLease, type SpawnWithCredentialsOptions } from '../schemas/execution/spawn.schema.ts';
+export type { AdmittedLeases, NameRole } from '../schemas/execution/result.schema.ts';
+export declare const ENV_NAME: RegExp;
+/**
+ * What a failed parse of the options refuses with. A failure confined to the
+ * `leases` member is `credential-lease-invalid` naming the lease; any other is
+ * `spawn-options-invalid` naming the fields, or, for a getter that throws or a
+ * Proxy that traps, the throw as the cause.
+ */
+export declare function invalidOptions(cause: Error): CapabilityError;
+/**
+ * Read an untrusted options object ONCE: the parsed copy is what the attempt
+ * uses, and a getter that throws or a Proxy that traps is the typed refusal
+ * `spawn-options-invalid` (cause kept), never an escape past the audit.
+ */
+export declare function parseOptions<Schema extends z.ZodType, Options extends object>(schema: Schema, options: Options): z.output<Schema>;
+export declare function nameInvalid(name: string, role: NameRole): CapabilityError;
+export declare function manifestReserved(name: string, role: NameRole): CapabilityError;
+export declare function validateNames(names: readonly string[], role: NameRole): void;
+/**
+ * A lease that is null, or lacks its value or its `expiresAt`, or a collection
+ * that is not a record of leases, is `INVALID_INPUT` `credential-lease-invalid`;
+ * the lease is named, its value never.
+ */
+export declare function leaseMalformed(names: readonly string[]): CapabilityError;
+export declare const LEASE_MALFORMED_MESSAGE = "A caller-held lease is malformed: it needs a string value and a lease with an expiresAt.";
+/**
+ * The caller-held leases, admitted: names valid and colliding with no
+ * credential or pass name (`lease-name-conflict`), each `expiresAt` a date in
+ * the future (`credential-lease-invalid` when it is not a date,
+ * `lease-expired`). Returns their values and their audit entries.
+ */
+export declare function admitLeases(leases: Readonly<Record<string, CallerHeldLease>>, taken: ReadonlySet<string>, now: number): AdmittedLeases;
+/**
+ * The child's whole environment, composed by the kernel under the host
+ * platform's key policy (`composeChildEnv`, C16): the host set, then the
+ * inherited `pass` and `runtime.hostProtocolEnv` names, then the credential
+ * values, which win; then the manifest when published.
+ */
+export declare function composeCredentialedEnv(runtime: VibesRuntime, pass: readonly string[], values: Readonly<Record<string, string>>, manifest: string | null, env?: Readonly<Record<string, string>>): Record<string, string>;
+/**
+ * Resolve every reference through `runtime.resolveCredential`, in order; the
+ * first failure throws its typed error. With `skipNotSet`, a reference the
+ * store confirms is not set (`credential-not-set`) is reported in `notSet`
+ * instead (the caller asked to run without it); every other failure still
+ * throws. The audit names each key's store and the tier.
+ */
+export declare function resolveCredentialLeases(runtime: VibesRuntime, credentials: Readonly<Record<string, CredentialReference>>, command: string, audit: SpawnWithCredentialsOptions['audit'], skipNotSet?: boolean): Promise<ResolvedCredentialSpawn & {
+    notSet: string[];
+}>;
+//# sourceMappingURL=credential-leases.d.ts.map

package/dist/exec/credential-leases.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"credential-leases.d.ts","sourceRoot":"","sources":["../../src/exec/credential-leases.ts"],"names":[],"mappings":"AACA,OAAO,EACP,eAAe,EAKf,KAAK,YAAY,EAChB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,KAAK,mBAAmB,EAAE,MAAM,iCAAiC,CAAC;AAC3E,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,KAAK,EAAE,cAAc,EAAC,QAAQ,EAAE,MAAM,uCAAuC,CAAC;AACrF,OAAO,EAAE,KAAK,uBAAuB,EAAE,MAAM,uCAAuC,CAAC;AACrF,OAAO,EAAE,KAAK,eAAe,EAAC,KAAK,2BAA2B,EAAE,MAAM,sCAAsC,CAAC;AAI7G,YAAY,EAAE,cAAc,EAAC,QAAQ,EAAE,MAAM,uCAAuC,CAAC;AAErF,eAAO,MAAM,QAAQ,QAA6B,CAAC;AAEnD;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,KAAK,GAAG,eAAe,CAW5D;AAED;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,MAAM,SAAS,CAAC,CAAC,OAAO,EAAE,OAAO,SAAS,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAEjI;AAED,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,GAAG,eAAe,CAKzE;AAED,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,GAAG,eAAe,CAM9E;AAED,wBAAgB,aAAa,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,GAAG,IAAI,CAK5E;AAED;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,GAAG,eAAe,CAMxE;AAED,eAAO,MAAM,uBAAuB,6FAA6F,CAAC;AAElI;;;;;GAKG;AACH,wBAAgB,WAAW,CAC1B,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC,EACjD,KAAK,EAAE,WAAW,CAAC,MAAM,CAAC,EAC1B,GAAG,EAAE,MAAM,GACT,cAAc,CAmChB;AAED;;;;;GAKG;AACH,wBAAgB,sBAAsB,CACrC,OAAO,EAAE,YAAY,EACrB,IAAI,EAAE,SAAS,MAAM,EAAE,EACvB,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,EACxC,QAAQ,EAAE,MAAM,GAAG,IAAI,EACvB,GAAG,GAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAM,GACxC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAsBxB;AAED;;;;;;GAMG;AACH,wBAAsB,uBAAuB,CAC5C,OAAO,EAAE,YAAY,EACrB,WAAW,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC,EAC1D,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,2BAA2B,CAAC,OAAO,CAAC,EAC3C,UAAU,UAAQ,GAChB,OAAO,CAAC,uBAAuB,GAAG;IAAE,MAAM,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC,CA6BzD"}