@vyuhlabs/dxkit 2.9.4 → 2.11.0

package/dist/baseline/salt.d.ts

@@ -1,45 +0,0 @@
-/**
- * Per-repo salt resolution for secret HMAC identity.
- *
- * The secret-HMAC scheme uses a salt that's:
- *   1. Consistent across `baseline create` (writes HMACs) and every
- *      subsequent `guardrail check` (reads them).
- *   2. Not stored in git — a baseline-file leak should not enable
- *      secret recovery via rainbow tables.
- *   3. Reachable from every consumer — single dev, multiple devs on
- *      one repo, CI, shallow clones, detached HEADs.
- *
- * A three-step waterfall satisfies all three:
- *
- *   1. `DXKIT_BASELINE_SALT` env var — opt-in override for teams
- *      who want stronger isolation than the deterministic default.
- *   2. `.dxkit/salt` file — reserved for environments where env-vars
- *      are awkward (cron jobs, embedded runners). Gitignored by
- *      default.
- *   3. Deterministic default — `HMAC("dxkit-baseline-salt-v1",
- *      initialCommitSha)`. Zero-setup; same across clones of the
- *      same repo; different across different repos; reachable in
- *      shallow clones (git always includes the root commit).
- *
- * Every baseline file records which mode produced it so the
- * matcher can either match the same mode (HMAC compare works) or
- * gracefully degrade to location-only matching when the salt is
- * unrecoverable on the current run.
- */
-/** Resolution path that produced the salt. Stamped on every baseline
- *  file so the guardrail check knows what the matcher needs. */
-export type SaltMode = 'env-var' | 'file' | 'deterministic';
-export interface ResolvedSalt {
-    readonly mode: SaltMode;
-    readonly salt: string;
-}
-/**
- * Resolve the salt for a repo. Pure dispatch over the three-step
- * waterfall; no I/O happens past the resolution step that succeeds.
- *
- * Throws when none of the three paths can produce a salt — typically
- * a non-git checkout with no env var set. Callers should surface the
- * message verbatim so users learn which mode to configure.
- */
-export declare function resolveSalt(cwd: string): ResolvedSalt;
-//# sourceMappingURL=salt.d.ts.map

package/dist/baseline/salt.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"salt.d.ts","sourceRoot":"","sources":["../../src/baseline/salt.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAOH;gEACgE;AAChE,MAAM,MAAM,QAAQ,GAAG,SAAS,GAAG,MAAM,GAAG,eAAe,CAAC;AAE5D,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB;AAQD;;;;;;;GAOG;AACH,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,YAAY,CAiCrD"}

package/dist/baseline/salt.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"salt.js","sourceRoot":"","sources":["../../src/baseline/salt.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA8BH,kCAiCC;AA7DD,iDAA6C;AAC7C,mCAAoC;AACpC,uCAAyB;AACzB,2CAA6B;AAW7B;;;mDAGmD;AACnD,MAAM,oBAAoB,GAAG,wBAAwB,CAAC;AAEtD;;;;;;;GAOG;AACH,SAAgB,WAAW,CAAC,GAAW;IACrC,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC;IAChD,IAAI,OAAO,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAClC,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;IAC5C,CAAC;IAED,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;IAClD,IAAI,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC5B,MAAM,QAAQ,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;QAC1D,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxB,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;QAC1C,CAAC;IACH,CAAC;IAED,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAA,4BAAY,EAAC,KAAK,EAAE,CAAC,UAAU,EAAE,iBAAiB,EAAE,MAAM,CAAC,EAAE;YACvE,GAAG;YACH,QAAQ,EAAE,MAAM;YAChB,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;SAClC,CAAC;aACC,IAAI,EAAE;aACN,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QAClB,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;QACxD,CAAC;QACD,MAAM,IAAI,GAAG,IAAA,mBAAU,EAAC,QAAQ,EAAE,oBAAoB,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAClF,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC;IACzC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CACb,qFAAqF;YACnF,oFAAoF,CACvF,CAAC;IACJ,CAAC;AACH,CAAC"}