envpkt 0.11.0 → 0.11.2
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/cli.js +496 -290
- package/dist/index.d.ts +99 -113
- package/dist/index.js +143 -207
- package/package.json +8 -8
package/dist/index.d.ts
CHANGED
|
@@ -1,126 +1,126 @@
|
|
|
1
|
-
import * as _$_sinclair_typebox0 from "@sinclair/typebox";
|
|
2
1
|
import { Static } from "@sinclair/typebox";
|
|
3
2
|
import { Either, List, Option } from "functype";
|
|
4
|
-
import { DirectLogger,
|
|
3
|
+
import { DirectLogger, DirectTestLoggerHandle, createDirectConsoleLogger, createDirectTestLogger, directSilentLogger } from "functype-log/direct";
|
|
5
4
|
import { Server } from "@modelcontextprotocol/sdk/server/index.js";
|
|
6
5
|
import { CallToolResult, ReadResourceResult, Resource } from "@modelcontextprotocol/sdk/types.js";
|
|
6
|
+
import { DirectLogger as DirectLogger$1, LogEntry, LogLevel, LogMetadata } from "functype-log";
|
|
7
7
|
|
|
8
8
|
//#region src/core/schema.d.ts
|
|
9
|
-
declare const ConsumerType:
|
|
9
|
+
declare const ConsumerType: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"agent">, import("@sinclair/typebox").TLiteral<"service">, import("@sinclair/typebox").TLiteral<"developer">, import("@sinclair/typebox").TLiteral<"ci">]>;
|
|
10
10
|
type ConsumerType = Static<typeof ConsumerType>;
|
|
11
|
-
declare const IdentitySchema:
|
|
12
|
-
name:
|
|
13
|
-
consumer:
|
|
14
|
-
description:
|
|
15
|
-
capabilities:
|
|
16
|
-
expires:
|
|
17
|
-
services:
|
|
18
|
-
key_file:
|
|
19
|
-
recipient:
|
|
20
|
-
secrets:
|
|
11
|
+
declare const IdentitySchema: import("@sinclair/typebox").TObject<{
|
|
12
|
+
name: import("@sinclair/typebox").TString;
|
|
13
|
+
consumer: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"agent">, import("@sinclair/typebox").TLiteral<"service">, import("@sinclair/typebox").TLiteral<"developer">, import("@sinclair/typebox").TLiteral<"ci">]>>;
|
|
14
|
+
description: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
|
|
15
|
+
capabilities: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TArray<import("@sinclair/typebox").TString>>;
|
|
16
|
+
expires: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
|
|
17
|
+
services: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TArray<import("@sinclair/typebox").TString>>;
|
|
18
|
+
key_file: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
|
|
19
|
+
recipient: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
|
|
20
|
+
secrets: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TArray<import("@sinclair/typebox").TString>>;
|
|
21
21
|
}>;
|
|
22
22
|
type Identity = Static<typeof IdentitySchema>;
|
|
23
23
|
/** @deprecated Use `IdentitySchema` instead */
|
|
24
|
-
declare const AgentIdentitySchema:
|
|
25
|
-
name:
|
|
26
|
-
consumer:
|
|
27
|
-
description:
|
|
28
|
-
capabilities:
|
|
29
|
-
expires:
|
|
30
|
-
services:
|
|
31
|
-
key_file:
|
|
32
|
-
recipient:
|
|
33
|
-
secrets:
|
|
24
|
+
declare const AgentIdentitySchema: import("@sinclair/typebox").TObject<{
|
|
25
|
+
name: import("@sinclair/typebox").TString;
|
|
26
|
+
consumer: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"agent">, import("@sinclair/typebox").TLiteral<"service">, import("@sinclair/typebox").TLiteral<"developer">, import("@sinclair/typebox").TLiteral<"ci">]>>;
|
|
27
|
+
description: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
|
|
28
|
+
capabilities: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TArray<import("@sinclair/typebox").TString>>;
|
|
29
|
+
expires: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
|
|
30
|
+
services: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TArray<import("@sinclair/typebox").TString>>;
|
|
31
|
+
key_file: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
|
|
32
|
+
recipient: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
|
|
33
|
+
secrets: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TArray<import("@sinclair/typebox").TString>>;
|
|
34
34
|
}>;
|
|
35
|
-
declare const SecretMetaSchema:
|
|
36
|
-
service:
|
|
37
|
-
expires:
|
|
38
|
-
rotation_url:
|
|
39
|
-
purpose:
|
|
40
|
-
comment:
|
|
41
|
-
capabilities:
|
|
42
|
-
created:
|
|
43
|
-
rotates:
|
|
44
|
-
rate_limit:
|
|
45
|
-
model_hint:
|
|
46
|
-
source:
|
|
47
|
-
encrypted_value:
|
|
48
|
-
from_key:
|
|
49
|
-
required:
|
|
50
|
-
tags:
|
|
35
|
+
declare const SecretMetaSchema: import("@sinclair/typebox").TObject<{
|
|
36
|
+
service: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
|
|
37
|
+
expires: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
|
|
38
|
+
rotation_url: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
|
|
39
|
+
purpose: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
|
|
40
|
+
comment: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
|
|
41
|
+
capabilities: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TArray<import("@sinclair/typebox").TString>>;
|
|
42
|
+
created: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
|
|
43
|
+
rotates: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
|
|
44
|
+
rate_limit: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
|
|
45
|
+
model_hint: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
|
|
46
|
+
source: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
|
|
47
|
+
encrypted_value: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
|
|
48
|
+
from_key: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
|
|
49
|
+
required: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TBoolean>;
|
|
50
|
+
tags: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TRecord<import("@sinclair/typebox").TString, import("@sinclair/typebox").TString>>;
|
|
51
51
|
}>;
|
|
52
52
|
type SecretMeta = Static<typeof SecretMetaSchema>;
|
|
53
|
-
declare const LifecycleConfigSchema:
|
|
54
|
-
stale_warning_days:
|
|
55
|
-
require_expiration:
|
|
56
|
-
require_service:
|
|
53
|
+
declare const LifecycleConfigSchema: import("@sinclair/typebox").TObject<{
|
|
54
|
+
stale_warning_days: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TNumber>;
|
|
55
|
+
require_expiration: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TBoolean>;
|
|
56
|
+
require_service: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TBoolean>;
|
|
57
57
|
}>;
|
|
58
58
|
type LifecycleConfig = Static<typeof LifecycleConfigSchema>;
|
|
59
|
-
declare const CallbackConfigSchema:
|
|
60
|
-
on_expiring:
|
|
61
|
-
on_expired:
|
|
62
|
-
on_audit_fail:
|
|
59
|
+
declare const CallbackConfigSchema: import("@sinclair/typebox").TObject<{
|
|
60
|
+
on_expiring: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
|
|
61
|
+
on_expired: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
|
|
62
|
+
on_audit_fail: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
|
|
63
63
|
}>;
|
|
64
64
|
type CallbackConfig = Static<typeof CallbackConfigSchema>;
|
|
65
|
-
declare const ToolsConfigSchema:
|
|
65
|
+
declare const ToolsConfigSchema: import("@sinclair/typebox").TRecord<import("@sinclair/typebox").TString, import("@sinclair/typebox").TUnknown>;
|
|
66
66
|
type ToolsConfig = Static<typeof ToolsConfigSchema>;
|
|
67
|
-
declare const EnvMetaSchema:
|
|
68
|
-
value:
|
|
69
|
-
from_key:
|
|
70
|
-
purpose:
|
|
71
|
-
comment:
|
|
72
|
-
tags:
|
|
67
|
+
declare const EnvMetaSchema: import("@sinclair/typebox").TObject<{
|
|
68
|
+
value: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
|
|
69
|
+
from_key: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
|
|
70
|
+
purpose: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
|
|
71
|
+
comment: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
|
|
72
|
+
tags: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TRecord<import("@sinclair/typebox").TString, import("@sinclair/typebox").TString>>;
|
|
73
73
|
}>;
|
|
74
74
|
type EnvMeta = Static<typeof EnvMetaSchema>;
|
|
75
|
-
declare const EnvpktConfigSchema:
|
|
76
|
-
version:
|
|
77
|
-
catalog:
|
|
78
|
-
identity:
|
|
79
|
-
name:
|
|
80
|
-
consumer:
|
|
81
|
-
description:
|
|
82
|
-
capabilities:
|
|
83
|
-
expires:
|
|
84
|
-
services:
|
|
85
|
-
key_file:
|
|
86
|
-
recipient:
|
|
87
|
-
secrets:
|
|
75
|
+
declare const EnvpktConfigSchema: import("@sinclair/typebox").TObject<{
|
|
76
|
+
version: import("@sinclair/typebox").TNumber;
|
|
77
|
+
catalog: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
|
|
78
|
+
identity: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TObject<{
|
|
79
|
+
name: import("@sinclair/typebox").TString;
|
|
80
|
+
consumer: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"agent">, import("@sinclair/typebox").TLiteral<"service">, import("@sinclair/typebox").TLiteral<"developer">, import("@sinclair/typebox").TLiteral<"ci">]>>;
|
|
81
|
+
description: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
|
|
82
|
+
capabilities: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TArray<import("@sinclair/typebox").TString>>;
|
|
83
|
+
expires: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
|
|
84
|
+
services: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TArray<import("@sinclair/typebox").TString>>;
|
|
85
|
+
key_file: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
|
|
86
|
+
recipient: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
|
|
87
|
+
secrets: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TArray<import("@sinclair/typebox").TString>>;
|
|
88
88
|
}>>;
|
|
89
|
-
secret:
|
|
90
|
-
service:
|
|
91
|
-
expires:
|
|
92
|
-
rotation_url:
|
|
93
|
-
purpose:
|
|
94
|
-
comment:
|
|
95
|
-
capabilities:
|
|
96
|
-
created:
|
|
97
|
-
rotates:
|
|
98
|
-
rate_limit:
|
|
99
|
-
model_hint:
|
|
100
|
-
source:
|
|
101
|
-
encrypted_value:
|
|
102
|
-
from_key:
|
|
103
|
-
required:
|
|
104
|
-
tags:
|
|
89
|
+
secret: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TRecord<import("@sinclair/typebox").TString, import("@sinclair/typebox").TObject<{
|
|
90
|
+
service: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
|
|
91
|
+
expires: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
|
|
92
|
+
rotation_url: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
|
|
93
|
+
purpose: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
|
|
94
|
+
comment: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
|
|
95
|
+
capabilities: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TArray<import("@sinclair/typebox").TString>>;
|
|
96
|
+
created: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
|
|
97
|
+
rotates: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
|
|
98
|
+
rate_limit: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
|
|
99
|
+
model_hint: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
|
|
100
|
+
source: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
|
|
101
|
+
encrypted_value: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
|
|
102
|
+
from_key: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
|
|
103
|
+
required: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TBoolean>;
|
|
104
|
+
tags: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TRecord<import("@sinclair/typebox").TString, import("@sinclair/typebox").TString>>;
|
|
105
105
|
}>>>;
|
|
106
|
-
env:
|
|
107
|
-
value:
|
|
108
|
-
from_key:
|
|
109
|
-
purpose:
|
|
110
|
-
comment:
|
|
111
|
-
tags:
|
|
106
|
+
env: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TRecord<import("@sinclair/typebox").TString, import("@sinclair/typebox").TObject<{
|
|
107
|
+
value: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
|
|
108
|
+
from_key: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
|
|
109
|
+
purpose: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
|
|
110
|
+
comment: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
|
|
111
|
+
tags: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TRecord<import("@sinclair/typebox").TString, import("@sinclair/typebox").TString>>;
|
|
112
112
|
}>>>;
|
|
113
|
-
lifecycle:
|
|
114
|
-
stale_warning_days:
|
|
115
|
-
require_expiration:
|
|
116
|
-
require_service:
|
|
113
|
+
lifecycle: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TObject<{
|
|
114
|
+
stale_warning_days: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TNumber>;
|
|
115
|
+
require_expiration: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TBoolean>;
|
|
116
|
+
require_service: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TBoolean>;
|
|
117
117
|
}>>;
|
|
118
|
-
callbacks:
|
|
119
|
-
on_expiring:
|
|
120
|
-
on_expired:
|
|
121
|
-
on_audit_fail:
|
|
118
|
+
callbacks: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TObject<{
|
|
119
|
+
on_expiring: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
|
|
120
|
+
on_expired: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
|
|
121
|
+
on_audit_fail: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
|
|
122
122
|
}>>;
|
|
123
|
-
tools:
|
|
123
|
+
tools: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TRecord<import("@sinclair/typebox").TString, import("@sinclair/typebox").TUnknown>>;
|
|
124
124
|
}>;
|
|
125
125
|
type EnvpktConfig = Static<typeof EnvpktConfigSchema>;
|
|
126
126
|
//#endregion
|
|
@@ -404,20 +404,6 @@ declare const resolveSecrets: (agentMeta: Record<string, SecretMeta>, catalogMet
|
|
|
404
404
|
declare const resolveConfig: (agentConfig: EnvpktConfig, agentConfigDir: string) => Either<CatalogError, ResolveResult>;
|
|
405
405
|
//#endregion
|
|
406
406
|
//#region src/core/alias.d.ts
|
|
407
|
-
/**
|
|
408
|
-
* Validate all `from_key` references in a resolved config. Produces an
|
|
409
|
-
* AliasTable mapping each alias to its target, or an AliasError describing
|
|
410
|
-
* the first failure.
|
|
411
|
-
*
|
|
412
|
-
* Rules:
|
|
413
|
-
* - Ref must be "secret.<KEY>" or "env.<KEY>"
|
|
414
|
-
* - Target must exist in the same resolved config
|
|
415
|
-
* - Target must be the same type (secret→secret, env→env only)
|
|
416
|
-
* - Target must not itself be a from_key entry (single hop only)
|
|
417
|
-
* - Self-reference is rejected
|
|
418
|
-
* - An alias entry cannot also carry a value field (encrypted_value for
|
|
419
|
-
* secrets, value for env)
|
|
420
|
-
*/
|
|
421
407
|
declare const validateAliases: (config: EnvpktConfig) => Either<AliasError, AliasTable>;
|
|
422
408
|
/** Does this secret entry point at another entry? */
|
|
423
409
|
declare const isSecretAlias: (meta: {
|
|
@@ -630,4 +616,4 @@ type ToolDef = {
|
|
|
630
616
|
declare const toolDefinitions: readonly ToolDef[];
|
|
631
617
|
declare const callTool: (name: string, args: Record<string, unknown>) => CallToolResult;
|
|
632
618
|
//#endregion
|
|
633
|
-
export { type AgentIdentity, AgentIdentitySchema, type AliasError, type AliasTable, type AuditResult, type BootError, type BootOptions, type BootResult, type CallbackConfig, CallbackConfigSchema, type CatalogError, type CheckResult, type ConfidenceLevel, type ConfigError, type ConfigSource,
|
|
619
|
+
export { type AgentIdentity, AgentIdentitySchema, type AliasError, type AliasTable, type AuditResult, type BootError, type BootOptions, type BootResult, type CallbackConfig, CallbackConfigSchema, type CatalogError, type CheckResult, type ConfidenceLevel, type ConfigError, type ConfigSource, ConsumerType, type CredentialPattern, type DirectLogger, type DirectTestLoggerHandle, type DriftEntry, type DriftStatus, type EnvAuditResult, type EnvDriftEntry, type EnvDriftStatus, type EnvMeta, EnvMetaSchema, EnvpktBootError, type EnvpktConfig, EnvpktConfigSchema, type FleetAgent, type FleetHealth, type FnoxConfig, type FnoxError, type FnoxSecret, type FormatPacketOptions, type HealthStatus, type Identity, type IdentityError, IdentitySchema, type KeygenError, type KeygenResult, type LifecycleConfig, LifecycleConfigSchema, type LogEntry, type LogLevel, type LogMetadata, type MatchResult, type ResolveOptions, type ResolveResult, type ResolvedPath, type ScanOptions, type ScanResult, type SealError, type SecretDisplay, type SecretHealth, type SecretMeta, SecretMetaSchema, type SecretStatus, type TomlEditError, type ToolsConfig, ToolsConfigSchema, ageAvailable, ageDecrypt, ageEncrypt, appendSection, boot, bootSafe, callTool, compareFnoxAndEnvpkt, computeAudit, computeEnvAudit, createDirectConsoleLogger, createDirectTestLogger, createServer, deriveServiceFromName, detectFnox, directSilentLogger, discoverConfig, envCheck, envScan, extractFnoxKeys, findConfigPath, fnoxAvailable, fnoxExport, fnoxGet, formatAliasError, formatPacket, generateKeypair, generateTomlFromScan, isEnvAlias, isSecretAlias, loadCatalog, loadConfig, loadConfigFromCwd, maskValue, matchEnvVar, matchValueShape, parseToml, readConfigFile, readFnoxConfig, readResource, removeSection, renameSection, resolveConfig, resolveConfigPath, resolveInlineKey, resolveKeyPath, resolveSecrets, resolveValues, resourceDefinitions, scanEnv, scanFleet, sealSecrets, startServer, toolDefinitions, unsealSecrets, unwrapAgentKey, updateConfigIdentity, updateSectionFields, validateAliases, validateConfig };
|