@vibesdotdev/secrets 0.0.2 → 1.0.0-rc.4

package/dist/cli/set/secrets.set.cli-command.descriptor.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"secrets.set.cli-command.descriptor.js","sourceRoot":"","sources":["../../../src/cli/set/secrets.set.cli-command.descriptor.ts"],"names":[],"mappings":"AAEA,MAAM,UAAU,GAA8B;IAC7C,IAAI,EAAE,aAAa;IACnB,EAAE,EAAE,aAAa;IACjB,IAAI,EAAE,KAAK;IACX,WAAW,EAAE,gDAAgD;IAC7D,KAAK,EAAE,SAAS;IAChB,SAAS,EAAE;QACV,EAAE,IAAI,EAAE,KAAK,EAAE,WAAW,EAAE,2CAA2C,EAAE,QAAQ,EAAE,IAAI,EAAE;QACzF,EAAE,IAAI,EAAE,OAAO,EAAE,WAAW,EAAE,wCAAwC,EAAE,QAAQ,EAAE,KAAK,EAAE;KACzF;IACD,OAAO,EAAE;QACR,EAAE,KAAK,EAAE,sBAAsB,EAAE,WAAW,EAAE,uCAAuC,EAAE;QACvF,EAAE,KAAK,EAAE,gBAAgB,EAAE,WAAW,EAAE,4CAA4C,EAAE;KACtF;IACD,QAAQ,EAAE,CAAC,KAAK,CAAC;IACjB,QAAQ,EAAE,CAAC,UAAU,CAAC;IACtB,OAAO,EAAE,IAAI;IACb,KAAK,EAAE,EAAE;CACT,CAAC;AAEF,eAAe,UAAU,CAAC"}

package/dist/cli/set/secrets.set.cli-command.impl.d.ts

@@ -1,5 +0,0 @@
-declare const _default: {
-    execute(args: Record<string, unknown>, opts: Record<string, unknown>): Promise<void>;
-};
-export default _default;
-//# sourceMappingURL=secrets.set.cli-command.impl.d.ts.map

package/dist/cli/set/secrets.set.cli-command.impl.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"secrets.set.cli-command.impl.d.ts","sourceRoot":"","sources":["../../../src/cli/set/secrets.set.cli-command.impl.ts"],"names":[],"mappings":";kBA4BqB,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,QAAQ,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;;AAD3F,wBAiDE"}

package/dist/cli/set/secrets.set.cli-command.impl.js

@@ -1,59 +0,0 @@
-import { getVibesRuntime } from '@vibesdotdev/runtime';
-import { resolveSecretsEnvironment } from '../shared/resolve-environment';
-// `set` is the write side of the local-development workflow: the user types
-// a value and expects it to land in their machine-local store. Remote
-// backends (vault, cloudflare-secrets-store, ...) are the *deploy* side —
-// reached via `secrets push` after the user explicitly opts in. Default
-// routing therefore restricts to local backend kinds; an explicit
-// `--backend <id>` still wins.
-const LOCAL_BACKEND_KINDS = new Set(['env-file', 'encrypted-local']);
-function resolveBackend(descriptors, tier, backendId) {
-    if (backendId)
-        return descriptors.find((d) => d.id === backendId);
-    const tierStores = descriptors
-        .filter((d) => d.tiers.includes(tier))
-        .filter((d) => LOCAL_BACKEND_KINDS.has(d.backend))
-        .sort((a, b) => (b.priority ?? 0) - (a.priority ?? 0));
-    return tierStores[0];
-}
-export default {
-    async execute(args, opts) {
-        const runtime = getVibesRuntime();
-        const ui = (await runtime.context('cli/ui'));
-        const key = args.key;
-        let value = args.value;
-        const options = opts;
-        const { name: envName, tier: envTier } = await resolveSecretsEnvironment(ui, options.environment);
-        if (!key || !/^[_A-Z0-9]+$/.test(key)) {
-            ui.error('Secret key must match pattern: ^[_A-Z0-9]+$');
-            process.exit(1);
-        }
-        if (!value) {
-            process.stdout.write(`Enter value for ${key}: `);
-            const chunks = [];
-            for await (const chunk of process.stdin) {
-                chunks.push(chunk);
-                if (chunk.includes(10))
-                    break;
-            }
-            value = Buffer.concat(chunks).toString('utf-8').trim();
-        }
-        if (!value) {
-            ui.error('No value provided');
-            process.exit(1);
-        }
-        const descriptors = runtime.assets('secrets/store').descriptors();
-        const target = resolveBackend(descriptors, envTier, options.backend);
-        if (!target) {
-            ui.error(`No secrets store available for tier: ${envTier}`);
-            process.exit(1);
-        }
-        const impl = (await runtime
-            .query('secrets/store')
-            .withId(target.id)
-            .resolve());
-        await impl.set(envName, key, value);
-        ui.success(`Set ${key} in [${target.id}] for environment: ${envName}`);
-    }
-};
-//# sourceMappingURL=secrets.set.cli-command.impl.js.map

package/dist/cli/set/secrets.set.cli-command.impl.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"secrets.set.cli-command.impl.js","sourceRoot":"","sources":["../../../src/cli/set/secrets.set.cli-command.impl.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAIvD,OAAO,EAAE,yBAAyB,EAAE,MAAM,+BAA+B,CAAC;AAE1E,4EAA4E;AAC5E,sEAAsE;AACtE,0EAA0E;AAC1E,wEAAwE;AACxE,kEAAkE;AAClE,+BAA+B;AAC/B,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAC,CAAC,UAAU,EAAE,iBAAiB,CAAC,CAAC,CAAC;AAErE,SAAS,cAAc,CACtB,WAAqC,EACrC,IAAqB,EACrB,SAAkB;IAElB,IAAI,SAAS;QAAE,OAAO,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,SAAS,CAAC,CAAC;IAClE,MAAM,UAAU,GAAG,WAAW;SAC5B,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;SACrC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,mBAAmB,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;SACjD,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,CAAC,CAAC;IACxD,OAAO,UAAU,CAAC,CAAC,CAAC,CAAC;AACtB,CAAC;AAED,eAAe;IACd,KAAK,CAAC,OAAO,CAAC,IAA6B,EAAE,IAA6B;QACzE,MAAM,OAAO,GAAG,eAAe,EAAE,CAAC;QAClC,MAAM,EAAE,GAAG,CAAC,MAAM,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAc,CAAC;QAC1D,MAAM,GAAG,GAAG,IAAI,CAAC,GAAa,CAAC;QAC/B,IAAI,KAAK,GAAG,IAAI,CAAC,KAA2B,CAAC;QAC7C,MAAM,OAAO,GAAG,IAAkD,CAAC;QAEnE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,MAAM,yBAAyB,CACvE,EAAE,EACF,OAAO,CAAC,WAAW,CACnB,CAAC;QAEF,IAAI,CAAC,GAAG,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YACvC,EAAE,CAAC,KAAK,CAAC,6CAA6C,CAAC,CAAC;YACxD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACjB,CAAC;QAED,IAAI,CAAC,KAAK,EAAE,CAAC;YACZ,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,mBAAmB,GAAG,IAAI,CAAC,CAAC;YACjD,MAAM,MAAM,GAAa,EAAE,CAAC;YAC5B,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;gBACzC,MAAM,CAAC,IAAI,CAAC,KAAe,CAAC,CAAC;gBAC7B,IAAK,KAAgB,CAAC,QAAQ,CAAC,EAAE,CAAC;oBAAE,MAAM;YAC3C,CAAC;YACD,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;QACxD,CAAC;QAED,IAAI,CAAC,KAAK,EAAE,CAAC;YACZ,EAAE,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC;YAC9B,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACjB,CAAC;QAED,MAAM,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,WAAW,EAA8B,CAAC;QAC9F,MAAM,MAAM,GAAG,cAAc,CAAC,WAAW,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;QAErE,IAAI,CAAC,MAAM,EAAE,CAAC;YACb,EAAE,CAAC,KAAK,CAAC,wCAAwC,OAAO,EAAE,CAAC,CAAC;YAC5D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACjB,CAAC;QAED,MAAM,IAAI,GAAG,CAAC,MAAM,OAAO;aACzB,KAAK,CAAC,eAAe,CAAC;aACtB,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;aACjB,OAAO,EAAE,CAA+B,CAAC;QAC3C,MAAM,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;QAEpC,EAAE,CAAC,OAAO,CAAC,OAAO,GAAG,QAAQ,MAAM,CAAC,EAAE,sBAAsB,OAAO,EAAE,CAAC,CAAC;IACxE,CAAC;CACD,CAAC"}

package/dist/cli/shared/resolve-environment.d.ts

@@ -1,14 +0,0 @@
-import type { UIContext } from '@vibesdotdev/cli/providers';
-import type { EnvironmentTier } from '../../kinds/store.schema';
-export interface ResolvedSecretsEnvironment {
-    name: string;
-    tier: EnvironmentTier;
-}
-/**
- * Resolve the active environment for secrets commands.
- *
- * Falls back to local when the environment config manifest/plugin graph is
- * unavailable so end-users can still run local secrets workflows.
- */
-export declare function resolveSecretsEnvironment(ui: UIContext, environmentOverride?: string): Promise<ResolvedSecretsEnvironment>;
-//# sourceMappingURL=resolve-environment.d.ts.map

package/dist/cli/shared/resolve-environment.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"resolve-environment.d.ts","sourceRoot":"","sources":["../../../src/cli/shared/resolve-environment.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,4BAA4B,CAAC;AAE5D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAEhE,MAAM,WAAW,0BAA0B;IAC1C,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,eAAe,CAAC;CACtB;AASD;;;;;GAKG;AACH,wBAAsB,yBAAyB,CAC9C,EAAE,EAAE,SAAS,EACb,mBAAmB,CAAC,EAAE,MAAM,GAC1B,OAAO,CAAC,0BAA0B,CAAC,CA+BrC"}

package/dist/cli/shared/resolve-environment.js

@@ -1,45 +0,0 @@
-import { resolveCurrentEnvironmentConfig } from '@vibesdotdev/config/environment/current';
-const ENVIRONMENT_TIERS = new Set([
-    'local',
-    'dev',
-    'staging',
-    'production'
-]);
-/**
- * Resolve the active environment for secrets commands.
- *
- * Falls back to local when the environment config manifest/plugin graph is
- * unavailable so end-users can still run local secrets workflows.
- */
-export async function resolveSecretsEnvironment(ui, environmentOverride) {
-    if (environmentOverride && environmentOverride.length > 0) {
-        if (ENVIRONMENT_TIERS.has(environmentOverride)) {
-            return {
-                name: environmentOverride,
-                tier: environmentOverride
-            };
-        }
-        try {
-            const envConfig = await resolveCurrentEnvironmentConfig();
-            return {
-                name: environmentOverride,
-                tier: (envConfig.tier ?? 'local')
-            };
-        }
-        catch {
-            return { name: environmentOverride, tier: 'local' };
-        }
-    }
-    try {
-        const envConfig = await resolveCurrentEnvironmentConfig();
-        return {
-            name: envConfig.name,
-            tier: (envConfig.tier ?? 'local')
-        };
-    }
-    catch {
-        ui.warn("Environment config manifest is unavailable; defaulting to 'local'. Register @vibesdotdev/config/environment/plugin to enable named environment selection.");
-        return { name: 'local', tier: 'local' };
-    }
-}
-//# sourceMappingURL=resolve-environment.js.map

package/dist/cli/shared/resolve-environment.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"resolve-environment.js","sourceRoot":"","sources":["../../../src/cli/shared/resolve-environment.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,+BAA+B,EAAE,MAAM,yCAAyC,CAAC;AAQ1F,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAkB;IAClD,OAAO;IACP,KAAK;IACL,SAAS;IACT,YAAY;CACZ,CAAC,CAAC;AAEH;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC9C,EAAa,EACb,mBAA4B;IAE5B,IAAI,mBAAmB,IAAI,mBAAmB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3D,IAAI,iBAAiB,CAAC,GAAG,CAAC,mBAAsC,CAAC,EAAE,CAAC;YACnE,OAAO;gBACN,IAAI,EAAE,mBAAmB;gBACzB,IAAI,EAAE,mBAAsC;aAC5C,CAAC;QACH,CAAC;QACD,IAAI,CAAC;YACJ,MAAM,SAAS,GAAG,MAAM,+BAA+B,EAAE,CAAC;YAC1D,OAAO;gBACN,IAAI,EAAE,mBAAmB;gBACzB,IAAI,EAAE,CAAC,SAAS,CAAC,IAAI,IAAI,OAAO,CAAoB;aACpD,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACR,OAAO,EAAE,IAAI,EAAE,mBAAmB,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;QACrD,CAAC;IACF,CAAC;IAED,IAAI,CAAC;QACJ,MAAM,SAAS,GAAG,MAAM,+BAA+B,EAAE,CAAC;QAC1D,OAAO;YACN,IAAI,EAAE,SAAS,CAAC,IAAI;YACpB,IAAI,EAAE,CAAC,SAAS,CAAC,IAAI,IAAI,OAAO,CAAoB;SACpD,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACR,EAAE,CAAC,IAAI,CACN,2JAA2J,CAC3J,CAAC;QACF,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;IACzC,CAAC;AACF,CAAC"}

package/dist/cli/unset/secrets.unset.cli-command.descriptor.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"secrets.unset.cli-command.descriptor.d.ts","sourceRoot":"","sources":["../../../src/cli/unset/secrets.unset.cli-command.descriptor.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,gCAAgC,CAAC;AAEhF,QAAA,MAAM,UAAU,EAAE,yBAiBjB,CAAC;AAEF,eAAe,UAAU,CAAC"}

package/dist/cli/unset/secrets.unset.cli-command.descriptor.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"secrets.unset.cli-command.descriptor.js","sourceRoot":"","sources":["../../../src/cli/unset/secrets.unset.cli-command.descriptor.ts"],"names":[],"mappings":"AAEA,MAAM,UAAU,GAA8B;IAC7C,IAAI,EAAE,aAAa;IACnB,EAAE,EAAE,eAAe;IACnB,IAAI,EAAE,OAAO;IACb,WAAW,EAAE,8CAA8C;IAC3D,KAAK,EAAE,SAAS;IAChB,SAAS,EAAE;QACV,EAAE,IAAI,EAAE,KAAK,EAAE,WAAW,EAAE,2BAA2B,EAAE,QAAQ,EAAE,IAAI,EAAE;KACzE;IACD,OAAO,EAAE;QACR,EAAE,KAAK,EAAE,sBAAsB,EAAE,WAAW,EAAE,uCAAuC,EAAE;QACvF,EAAE,KAAK,EAAE,gBAAgB,EAAE,WAAW,EAAE,4CAA4C,EAAE;KACtF;IACD,QAAQ,EAAE,CAAC,KAAK,CAAC;IACjB,QAAQ,EAAE,CAAC,UAAU,CAAC;IACtB,OAAO,EAAE,IAAI;IACb,KAAK,EAAE,EAAE;CACT,CAAC;AAEF,eAAe,UAAU,CAAC"}

package/dist/cli/unset/secrets.unset.cli-command.impl.d.ts

@@ -1,5 +0,0 @@
-declare const _default: {
-    execute(args: Record<string, unknown>, opts: Record<string, unknown>): Promise<void>;
-};
-export default _default;
-//# sourceMappingURL=secrets.unset.cli-command.impl.d.ts.map

package/dist/cli/unset/secrets.unset.cli-command.impl.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"secrets.unset.cli-command.impl.d.ts","sourceRoot":"","sources":["../../../src/cli/unset/secrets.unset.cli-command.impl.ts"],"names":[],"mappings":";kBAOqB,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,QAAQ,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;;AAD3F,wBAkCE"}

package/dist/cli/unset/secrets.unset.cli-command.impl.js

@@ -1,31 +0,0 @@
-import { getVibesRuntime } from '@vibesdotdev/runtime';
-import { resolveSecretsEnvironment } from '../shared/resolve-environment.js';
-export default {
-    async execute(args, opts) {
-        const runtime = getVibesRuntime();
-        const ui = (await runtime.context('cli/ui'));
-        const key = args.key;
-        const options = opts;
-        const { name: envName, tier: envTier } = await resolveSecretsEnvironment(ui, options.environment);
-        const descriptors = runtime.assets('secrets/store').descriptors();
-        const tierStores = descriptors
-            .filter((d) => {
-            if (options.backend)
-                return d.id === options.backend;
-            return d.tiers.includes(envTier);
-        })
-            .sort((a, b) => (b.priority ?? 0) - (a.priority ?? 0));
-        const target = tierStores[0];
-        if (!target) {
-            ui.error(`No secrets store available for tier: ${envTier}`);
-            process.exit(1);
-        }
-        const impl = (await runtime
-            .query('secrets/store')
-            .withId(target.id)
-            .resolve());
-        await impl.unset(envName, key);
-        ui.success(`Removed ${key} from [${target.id}] for environment: ${envName}`);
-    }
-};
-//# sourceMappingURL=secrets.unset.cli-command.impl.js.map

package/dist/cli/unset/secrets.unset.cli-command.impl.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"secrets.unset.cli-command.impl.js","sourceRoot":"","sources":["../../../src/cli/unset/secrets.unset.cli-command.impl.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAIvD,OAAO,EAAE,yBAAyB,EAAE,MAAM,+BAA+B,CAAC;AAE1E,eAAe;IACd,KAAK,CAAC,OAAO,CAAC,IAA6B,EAAE,IAA6B;QACzE,MAAM,OAAO,GAAG,eAAe,EAAE,CAAC;QAClC,MAAM,EAAE,GAAG,CAAC,MAAM,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAc,CAAC;QAC1D,MAAM,GAAG,GAAG,IAAI,CAAC,GAAa,CAAC;QAC/B,MAAM,OAAO,GAAG,IAAkD,CAAC;QAEnE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,MAAM,yBAAyB,CACvE,EAAE,EACF,OAAO,CAAC,WAAW,CACnB,CAAC;QAEF,MAAM,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,WAAW,EAA8B,CAAC;QAC9F,MAAM,UAAU,GAAG,WAAW;aAC5B,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;YACb,IAAI,OAAO,CAAC,OAAO;gBAAE,OAAO,CAAC,CAAC,EAAE,KAAK,OAAO,CAAC,OAAO,CAAC;YACrD,OAAO,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAClC,CAAC,CAAC;aACD,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,CAAC,CAAC;QAExD,MAAM,MAAM,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;QAC7B,IAAI,CAAC,MAAM,EAAE,CAAC;YACb,EAAE,CAAC,KAAK,CAAC,wCAAwC,OAAO,EAAE,CAAC,CAAC;YAC5D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACjB,CAAC;QAED,MAAM,IAAI,GAAG,CAAC,MAAM,OAAO;aACzB,KAAK,CAAC,eAAe,CAAC;aACtB,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;aACjB,OAAO,EAAE,CAA+B,CAAC;QAC3C,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QAE/B,EAAE,CAAC,OAAO,CAAC,WAAW,GAAG,UAAU,MAAM,CAAC,EAAE,sBAAsB,OAAO,EAAE,CAAC,CAAC;IAC9E,CAAC;CACD,CAAC"}

package/dist/kinds/index.d.ts

@@ -1,4 +0,0 @@
-export { SecretsStoreDescriptorSchema, EnvironmentTierSchema, SecretsBackendSchema, type SecretsStoreDescriptor, type EnvironmentTier, type SecretsBackend } from './store.schema';
-export type { SecretEntry, SecretsStoreImplementation } from './store.interface';
-export { secretsStoreKind } from './store.kind';
-//# sourceMappingURL=index.d.ts.map

package/dist/kinds/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/kinds/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACN,4BAA4B,EAC5B,qBAAqB,EACrB,oBAAoB,EACpB,KAAK,sBAAsB,EAC3B,KAAK,eAAe,EACpB,KAAK,cAAc,EACnB,MAAM,gBAAgB,CAAC;AAExB,YAAY,EAAE,WAAW,EAAE,0BAA0B,EAAE,MAAM,mBAAmB,CAAC;AAEjF,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC"}

package/dist/kinds/index.js

@@ -1,3 +0,0 @@
-export { SecretsStoreDescriptorSchema, EnvironmentTierSchema, SecretsBackendSchema } from './store.schema.js';
-export { secretsStoreKind } from './store.kind.js';
-//# sourceMappingURL=index.js.map

package/dist/kinds/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/kinds/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACN,4BAA4B,EAC5B,qBAAqB,EACrB,oBAAoB,EAIpB,MAAM,gBAAgB,CAAC;AAIxB,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC"}

package/dist/kinds/schemas/store.schema.d.ts

@@ -1,49 +0,0 @@
-/**
- * Secrets Store Descriptor Schema
- *
- * Defines the structure for secrets/store kind descriptors.
- * Each descriptor represents a secrets storage backend
- * (env-file, encrypted-local, cloudflare-api, vault).
- */
-import * as z from 'zod/v4';
-export declare const EnvironmentTierSchema: z.ZodEnum<{
-    local: "local";
-    dev: "dev";
-    staging: "staging";
-    production: "production";
-}>;
-export type EnvironmentTier = z.infer<typeof EnvironmentTierSchema>;
-export declare const SecretsBackendSchema: z.ZodEnum<{
-    "env-file": "env-file";
-    "encrypted-local": "encrypted-local";
-    "cloudflare-api": "cloudflare-api";
-    "cloudflare-secrets-store": "cloudflare-secrets-store";
-    vault: "vault";
-}>;
-export type SecretsBackend = z.infer<typeof SecretsBackendSchema>;
-export declare const SecretsStoreDescriptorSchema: z.ZodObject<{
-    id: z.ZodString;
-    kind: z.ZodLiteral<"secrets/store">;
-    name: z.ZodOptional<z.ZodString>;
-    description: z.ZodOptional<z.ZodString>;
-    tags: z.ZodOptional<z.ZodArray<z.ZodString>>;
-    enabled: z.ZodOptional<z.ZodBoolean>;
-    hardware: z.ZodOptional<z.ZodArray<z.ZodString>>;
-    backend: z.ZodEnum<{
-        "env-file": "env-file";
-        "encrypted-local": "encrypted-local";
-        "cloudflare-api": "cloudflare-api";
-        "cloudflare-secrets-store": "cloudflare-secrets-store";
-        vault: "vault";
-    }>;
-    tiers: z.ZodArray<z.ZodEnum<{
-        local: "local";
-        dev: "dev";
-        staging: "staging";
-        production: "production";
-    }>>;
-    priority: z.ZodDefault<z.ZodNumber>;
-    config: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
-}, z.core.$strip>;
-export type SecretsStoreDescriptor = z.infer<typeof SecretsStoreDescriptorSchema>;
-//# sourceMappingURL=store.schema.d.ts.map

package/dist/kinds/schemas/store.schema.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"store.schema.d.ts","sourceRoot":"","sources":["../../../src/kinds/schemas/store.schema.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAE5B,eAAO,MAAM,qBAAqB;;;;;EAAoD,CAAC;AAEvF,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAEpE,eAAO,MAAM,oBAAoB;;;;;;EAM/B,CAAC;AAEH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAElE,eAAO,MAAM,4BAA4B;;;;;;;;;;;;;;;;;;;;;;;iBAoBvC,CAAC;AAEH,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC"}

package/dist/kinds/schemas/store.schema.js

@@ -1,34 +0,0 @@
-/**
- * Secrets Store Descriptor Schema
- *
- * Defines the structure for secrets/store kind descriptors.
- * Each descriptor represents a secrets storage backend
- * (env-file, encrypted-local, cloudflare-api, vault).
- */
-import * as z from 'zod/v4';
-export const EnvironmentTierSchema = z.enum(['local', 'dev', 'staging', 'production']);
-export const SecretsBackendSchema = z.enum([
-    'env-file',
-    'encrypted-local',
-    'cloudflare-api',
-    'cloudflare-secrets-store',
-    'vault'
-]);
-export const SecretsStoreDescriptorSchema = z.object({
-    id: z.string().min(1),
-    kind: z.literal('secrets/store'),
-    name: z.string().optional(),
-    description: z.string().optional(),
-    tags: z.array(z.string()).optional(),
-    enabled: z.boolean().optional(),
-    hardware: z.array(z.string()).optional(),
-    /** Backend type for this store */
-    backend: SecretsBackendSchema,
-    /** Environment tiers this store operates on */
-    tiers: z.array(EnvironmentTierSchema).min(1),
-    /** Resolution priority (higher wins for write ops) */
-    priority: z.number().int().default(0),
-    /** Backend-specific configuration key-value pairs */
-    config: z.record(z.string(), z.string()).optional()
-});
-//# sourceMappingURL=store.schema.js.map

package/dist/kinds/schemas/store.schema.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"store.schema.js","sourceRoot":"","sources":["../../../src/kinds/schemas/store.schema.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAE5B,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,YAAY,CAAC,CAAC,CAAC;AAIvF,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,IAAI,CAAC;IAC1C,UAAU;IACV,iBAAiB;IACjB,gBAAgB;IAChB,0BAA0B;IAC1B,OAAO;CACP,CAAC,CAAC;AAIH,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,CAAC,MAAM,CAAC;IACpD,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACrB,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC;IAChC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC3B,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IACpC,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAC/B,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IAExC,kCAAkC;IAClC,OAAO,EAAE,oBAAoB;IAE7B,+CAA+C;IAC/C,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAE5C,sDAAsD;IACtD,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IAErC,qDAAqD;IACrD,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;CACnD,CAAC,CAAC"}

package/dist/kinds/schemas/store.types.d.ts

@@ -1,28 +0,0 @@
-import type { SecretsStoreDescriptor } from './store.schema';
-/** A single entry in a secrets listing */
-export interface SecretEntry {
-    /** Secret key name (e.g., VIBES_AUTH_SECRET) */
-    key: string;
-    /** Whether a value is stored for this key */
-    hasValue: boolean;
-    /** Backend source identifier */
-    source: string;
-}
-/** Interface all secrets store backends must implement */
-export interface SecretsStoreImplementation {
-    readonly id: string;
-    readonly descriptor: SecretsStoreDescriptor;
-    /** List all secret keys stored for an environment */
-    list(environment: string): Promise<SecretEntry[]>;
-    /** Get a single secret value (undefined if not found) */
-    get(environment: string, key: string): Promise<string | undefined>;
-    /** Set a secret value for an environment */
-    set(environment: string, key: string, value: string): Promise<void>;
-    /** Remove a secret from an environment */
-    unset(environment: string, key: string): Promise<void>;
-    /** Get all secret key-value pairs for an environment */
-    getAll(environment: string): Promise<Record<string, string>>;
-    /** Set multiple secrets at once (merges with existing) */
-    setAll(environment: string, secrets: Record<string, string>): Promise<void>;
-}
-//# sourceMappingURL=store.types.d.ts.map

package/dist/kinds/schemas/store.types.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"store.types.d.ts","sourceRoot":"","sources":["../../../src/kinds/schemas/store.types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,gBAAgB,CAAC;AAE7D,0CAA0C;AAC1C,MAAM,WAAW,WAAW;IAC3B,gDAAgD;IAChD,GAAG,EAAE,MAAM,CAAC;IACZ,6CAA6C;IAC7C,QAAQ,EAAE,OAAO,CAAC;IAClB,gCAAgC;IAChC,MAAM,EAAE,MAAM,CAAC;CACf;AAED,0DAA0D;AAC1D,MAAM,WAAW,0BAA0B;IAC1C,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,UAAU,EAAE,sBAAsB,CAAC;IAE5C,qDAAqD;IACrD,IAAI,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;IAElD,yDAAyD;IACzD,GAAG,CAAC,WAAW,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAEnE,4CAA4C;IAC5C,GAAG,CAAC,WAAW,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAEpE,0CAA0C;IAC1C,KAAK,CAAC,WAAW,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAEvD,wDAAwD;IACxD,MAAM,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAE7D,0DAA0D;IAC1D,MAAM,CAAC,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC5E"}

package/dist/kinds/schemas/store.types.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"store.types.js","sourceRoot":"","sources":["../../../src/kinds/schemas/store.types.ts"],"names":[],"mappings":""}

package/dist/kinds/store.interface.d.ts

@@ -1,2 +0,0 @@
-export type { SecretEntry, SecretsStoreImplementation } from './schemas/store.types';
-//# sourceMappingURL=store.interface.d.ts.map

package/dist/kinds/store.interface.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"store.interface.d.ts","sourceRoot":"","sources":["../../src/kinds/store.interface.ts"],"names":[],"mappings":"AAAA,YAAY,EAAE,WAAW,EAAE,0BAA0B,EAAE,MAAM,uBAAuB,CAAC"}

package/dist/kinds/store.interface.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"store.interface.js","sourceRoot":"","sources":["../../src/kinds/store.interface.ts"],"names":[],"mappings":""}

package/dist/kinds/store.kind.d.ts

@@ -1,10 +0,0 @@
-/**
- * Secrets Store Kind Definition
- *
- * Registers the secrets/store kind with the runtime.
- * Resolution selects backends by environment tier and priority.
- */
-import type { RuntimeKindDescriptorRecord } from '@vibesdotdev/runtime/schemas/kind';
-import type { SecretsStoreImplementation } from './store.interface';
-export declare const secretsStoreKind: RuntimeKindDescriptorRecord<SecretsStoreImplementation>;
-//# sourceMappingURL=store.kind.d.ts.map

package/dist/kinds/store.kind.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"store.kind.d.ts","sourceRoot":"","sources":["../../src/kinds/store.kind.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,KAAK,EAAe,2BAA2B,EAAqB,MAAM,mCAAmC,CAAC;AAOrH,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,mBAAmB,CAAC;AA2BpE,eAAO,MAAM,gBAAgB,yDAS3B,CAAC"}

package/dist/kinds/store.kind.js

@@ -1,36 +0,0 @@
-/**
- * Secrets Store Kind Definition
- *
- * Registers the secrets/store kind with the runtime.
- * Resolution selects backends by environment tier and priority.
- */
-import { createRuntimeKind } from '@vibesdotdev/runtime/factory/kind';
-import { SecretsStoreDescriptorSchema } from './store.schema.js';
-/**
- * Resolve the best secrets store for the current scope.
- *
- * Filters candidates by environment tier (from scope qualifiers),
- * then picks the highest-priority match.
- *
- * No defaultImplementation — missing backends cause hard failure at resolve()
- * time per the SPEC hard rule: "Missing-backend means hard failure."
- */
-function resolveSecretsStore(candidates, scope, _context) {
-    const typed = candidates;
-    if (typed.length === 0)
-        return undefined;
-    if (typed.length === 1)
-        return typed[0];
-    const envTier = (scope.qualifiers?.environmentTier ?? 'local');
-    const tierMatches = typed.filter((d) => d.tiers.includes(envTier));
-    const pool = tierMatches.length > 0 ? tierMatches : typed;
-    pool.sort((a, b) => (b.priority ?? 0) - (a.priority ?? 0));
-    return pool[0];
-}
-export const secretsStoreKind = createRuntimeKind({
-    id: 'secrets/store',
-    descriptorSchema: SecretsStoreDescriptorSchema,
-    resolve: resolveSecretsStore,
-    contexts: []
-});
-//# sourceMappingURL=store.kind.js.map

package/dist/kinds/store.kind.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"store.kind.js","sourceRoot":"","sources":["../../src/kinds/store.kind.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,iBAAiB,EAAE,MAAM,mCAAmC,CAAC;AAGtE,OAAO,EACN,4BAA4B,EAG5B,MAAM,gBAAgB,CAAC;AAExB;;;;;;;;GAQG;AACH,SAAS,mBAAmB,CAC3B,UAA+B,EAC/B,KAAmB,EACnB,QAAqB;IAErB,MAAM,KAAK,GAAG,UAAsC,CAAC;IACrD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IACzC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC;IAExC,MAAM,OAAO,GAAG,CAAC,KAAK,CAAC,UAAU,EAAE,eAAe,IAAI,OAAO,CAAoB,CAAC;IAClF,MAAM,WAAW,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;IACnE,MAAM,IAAI,GAAG,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC;IAE1D,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,CAAC,CAAC;IAC3D,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC;AAChB,CAAC;AAED,MAAM,CAAC,MAAM,gBAAgB,GAAG,iBAAiB,CAI/C;IACD,EAAE,EAAE,eAAe;IACnB,gBAAgB,EAAE,4BAA4B;IAC9C,OAAO,EAAE,mBAAmB;IAC5B,QAAQ,EAAE,EAAE;CACZ,CAAC,CAAC"}

package/dist/kinds/store.schema.d.ts

@@ -1,2 +0,0 @@
-export { SecretsStoreDescriptorSchema, EnvironmentTierSchema, SecretsBackendSchema, type SecretsStoreDescriptor, type EnvironmentTier, type SecretsBackend } from './schemas/store.schema';
-//# sourceMappingURL=store.schema.d.ts.map

package/dist/kinds/store.schema.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"store.schema.d.ts","sourceRoot":"","sources":["../../src/kinds/store.schema.ts"],"names":[],"mappings":"AAAA,OAAO,EACN,4BAA4B,EAC5B,qBAAqB,EACrB,oBAAoB,EACpB,KAAK,sBAAsB,EAC3B,KAAK,eAAe,EACpB,KAAK,cAAc,EACnB,MAAM,wBAAwB,CAAC"}

package/dist/kinds/store.schema.js

@@ -1,2 +0,0 @@
-export { SecretsStoreDescriptorSchema, EnvironmentTierSchema, SecretsBackendSchema } from './schemas/store.schema.js';
-//# sourceMappingURL=store.schema.js.map

package/dist/kinds/store.schema.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"store.schema.js","sourceRoot":"","sources":["../../src/kinds/store.schema.ts"],"names":[],"mappings":"AAAA,OAAO,EACN,4BAA4B,EAC5B,qBAAqB,EACrB,oBAAoB,EAIpB,MAAM,wBAAwB,CAAC"}

package/dist/manifest/canonical.d.ts

@@ -1,30 +0,0 @@
-/**
- * Vibes Secrets Import Manifest (canonical, value-free)
- *
- * Read by `vibes secrets import` to discover which keys to pull from which
- * local root env files when bootstrapping the encrypted Vibes store. The
- * manifest is reconciled against ground truth: every entry corresponds to a
- * real `secret: true` env var declared by an app's deployment config (or, in
- * auth-web's case, by its sub-manifest files).
- *
- * Sources:
- *   - `local-env` (`.env.local`) is the canonical machine-local store of
- *     every actual production-quality secret value: auth secrets, OAuth
- *     client secrets (GitHub / Google / Discord / Microsoft), Resend, the
- *     internal auth token, Stripe billing keys, etc.
- *   - `production-env` (`.env.production`) holds production-flavored
- *     non-secret config plus the operator's CF coordinates. Value-free here.
- *   - `manual` is a pseudo-source for keys that must be set through another
- *     channel (`vibes secrets set`, generated tokens, or pasted from a vault).
- *     The import command skips `manual` entries with a notice.
- *
- * Operator credentials (`CLOUDFLARE_API_TOKEN`, `CLOUDFLARE_ACCOUNT_ID`,
- * `CLOUDFLARE_SECRETS_STORE_ID`) are intentionally NOT in this manifest.
- * They authenticate the operator's machine to push secrets into the store;
- * they are never themselves pushed into the store.
- */
-import { type SecretsImportManifest } from './import-manifest.schema';
-declare const manifest: SecretsImportManifest;
-export declare const canonicalImportManifest: SecretsImportManifest;
-export default manifest;
-//# sourceMappingURL=canonical.d.ts.map

package/dist/manifest/canonical.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"canonical.d.ts","sourceRoot":"","sources":["../../src/manifest/canonical.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,OAAO,EAEN,KAAK,qBAAqB,EAC1B,MAAM,0BAA0B,CAAC;AAElC,QAAA,MAAM,QAAQ,EAAE,qBAiSd,CAAC;AAEH,eAAO,MAAM,uBAAuB,EAAE,qBAAgC,CAAC;AACvE,eAAe,QAAQ,CAAC"}