envpkt 0.7.2 → 0.8.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (4) hide show
  1. package/dist/cli.js +475 -470
  2. package/dist/index.d.ts +108 -99
  3. package/dist/index.js +292 -303
  4. package/package.json +27 -29
package/dist/index.d.ts CHANGED
@@ -1,121 +1,121 @@
1
- import * as _sinclair_typebox0 from "@sinclair/typebox";
1
+ import * as _$_sinclair_typebox0 from "@sinclair/typebox";
2
2
  import { Static } from "@sinclair/typebox";
3
3
  import { Either, List, Option } from "functype";
4
4
  import { Server } from "@modelcontextprotocol/sdk/server/index.js";
5
5
  import { CallToolResult, ReadResourceResult, Resource } from "@modelcontextprotocol/sdk/types.js";
6
6
 
7
7
  //#region src/core/schema.d.ts
8
- declare const ConsumerType: _sinclair_typebox0.TUnion<[_sinclair_typebox0.TLiteral<"agent">, _sinclair_typebox0.TLiteral<"service">, _sinclair_typebox0.TLiteral<"developer">, _sinclair_typebox0.TLiteral<"ci">]>;
8
+ declare const ConsumerType: _$_sinclair_typebox0.TUnion<[_$_sinclair_typebox0.TLiteral<"agent">, _$_sinclair_typebox0.TLiteral<"service">, _$_sinclair_typebox0.TLiteral<"developer">, _$_sinclair_typebox0.TLiteral<"ci">]>;
9
9
  type ConsumerType = Static<typeof ConsumerType>;
10
- declare const IdentitySchema: _sinclair_typebox0.TObject<{
11
- name: _sinclair_typebox0.TString;
12
- consumer: _sinclair_typebox0.TOptional<_sinclair_typebox0.TUnion<[_sinclair_typebox0.TLiteral<"agent">, _sinclair_typebox0.TLiteral<"service">, _sinclair_typebox0.TLiteral<"developer">, _sinclair_typebox0.TLiteral<"ci">]>>;
13
- description: _sinclair_typebox0.TOptional<_sinclair_typebox0.TString>;
14
- capabilities: _sinclair_typebox0.TOptional<_sinclair_typebox0.TArray<_sinclair_typebox0.TString>>;
15
- expires: _sinclair_typebox0.TOptional<_sinclair_typebox0.TString>;
16
- services: _sinclair_typebox0.TOptional<_sinclair_typebox0.TArray<_sinclair_typebox0.TString>>;
17
- key_file: _sinclair_typebox0.TOptional<_sinclair_typebox0.TString>;
18
- recipient: _sinclair_typebox0.TOptional<_sinclair_typebox0.TString>;
19
- secrets: _sinclair_typebox0.TOptional<_sinclair_typebox0.TArray<_sinclair_typebox0.TString>>;
10
+ declare const IdentitySchema: _$_sinclair_typebox0.TObject<{
11
+ name: _$_sinclair_typebox0.TString;
12
+ consumer: _$_sinclair_typebox0.TOptional<_$_sinclair_typebox0.TUnion<[_$_sinclair_typebox0.TLiteral<"agent">, _$_sinclair_typebox0.TLiteral<"service">, _$_sinclair_typebox0.TLiteral<"developer">, _$_sinclair_typebox0.TLiteral<"ci">]>>;
13
+ description: _$_sinclair_typebox0.TOptional<_$_sinclair_typebox0.TString>;
14
+ capabilities: _$_sinclair_typebox0.TOptional<_$_sinclair_typebox0.TArray<_$_sinclair_typebox0.TString>>;
15
+ expires: _$_sinclair_typebox0.TOptional<_$_sinclair_typebox0.TString>;
16
+ services: _$_sinclair_typebox0.TOptional<_$_sinclair_typebox0.TArray<_$_sinclair_typebox0.TString>>;
17
+ key_file: _$_sinclair_typebox0.TOptional<_$_sinclair_typebox0.TString>;
18
+ recipient: _$_sinclair_typebox0.TOptional<_$_sinclair_typebox0.TString>;
19
+ secrets: _$_sinclair_typebox0.TOptional<_$_sinclair_typebox0.TArray<_$_sinclair_typebox0.TString>>;
20
20
  }>;
21
21
  type Identity = Static<typeof IdentitySchema>;
22
22
  /** @deprecated Use `IdentitySchema` instead */
23
- declare const AgentIdentitySchema: _sinclair_typebox0.TObject<{
24
- name: _sinclair_typebox0.TString;
25
- consumer: _sinclair_typebox0.TOptional<_sinclair_typebox0.TUnion<[_sinclair_typebox0.TLiteral<"agent">, _sinclair_typebox0.TLiteral<"service">, _sinclair_typebox0.TLiteral<"developer">, _sinclair_typebox0.TLiteral<"ci">]>>;
26
- description: _sinclair_typebox0.TOptional<_sinclair_typebox0.TString>;
27
- capabilities: _sinclair_typebox0.TOptional<_sinclair_typebox0.TArray<_sinclair_typebox0.TString>>;
28
- expires: _sinclair_typebox0.TOptional<_sinclair_typebox0.TString>;
29
- services: _sinclair_typebox0.TOptional<_sinclair_typebox0.TArray<_sinclair_typebox0.TString>>;
30
- key_file: _sinclair_typebox0.TOptional<_sinclair_typebox0.TString>;
31
- recipient: _sinclair_typebox0.TOptional<_sinclair_typebox0.TString>;
32
- secrets: _sinclair_typebox0.TOptional<_sinclair_typebox0.TArray<_sinclair_typebox0.TString>>;
23
+ declare const AgentIdentitySchema: _$_sinclair_typebox0.TObject<{
24
+ name: _$_sinclair_typebox0.TString;
25
+ consumer: _$_sinclair_typebox0.TOptional<_$_sinclair_typebox0.TUnion<[_$_sinclair_typebox0.TLiteral<"agent">, _$_sinclair_typebox0.TLiteral<"service">, _$_sinclair_typebox0.TLiteral<"developer">, _$_sinclair_typebox0.TLiteral<"ci">]>>;
26
+ description: _$_sinclair_typebox0.TOptional<_$_sinclair_typebox0.TString>;
27
+ capabilities: _$_sinclair_typebox0.TOptional<_$_sinclair_typebox0.TArray<_$_sinclair_typebox0.TString>>;
28
+ expires: _$_sinclair_typebox0.TOptional<_$_sinclair_typebox0.TString>;
29
+ services: _$_sinclair_typebox0.TOptional<_$_sinclair_typebox0.TArray<_$_sinclair_typebox0.TString>>;
30
+ key_file: _$_sinclair_typebox0.TOptional<_$_sinclair_typebox0.TString>;
31
+ recipient: _$_sinclair_typebox0.TOptional<_$_sinclair_typebox0.TString>;
32
+ secrets: _$_sinclair_typebox0.TOptional<_$_sinclair_typebox0.TArray<_$_sinclair_typebox0.TString>>;
33
33
  }>;
34
- declare const SecretMetaSchema: _sinclair_typebox0.TObject<{
35
- service: _sinclair_typebox0.TOptional<_sinclair_typebox0.TString>;
36
- expires: _sinclair_typebox0.TOptional<_sinclair_typebox0.TString>;
37
- rotation_url: _sinclair_typebox0.TOptional<_sinclair_typebox0.TString>;
38
- purpose: _sinclair_typebox0.TOptional<_sinclair_typebox0.TString>;
39
- comment: _sinclair_typebox0.TOptional<_sinclair_typebox0.TString>;
40
- capabilities: _sinclair_typebox0.TOptional<_sinclair_typebox0.TArray<_sinclair_typebox0.TString>>;
41
- created: _sinclair_typebox0.TOptional<_sinclair_typebox0.TString>;
42
- rotates: _sinclair_typebox0.TOptional<_sinclair_typebox0.TString>;
43
- rate_limit: _sinclair_typebox0.TOptional<_sinclair_typebox0.TString>;
44
- model_hint: _sinclair_typebox0.TOptional<_sinclair_typebox0.TString>;
45
- source: _sinclair_typebox0.TOptional<_sinclair_typebox0.TString>;
46
- encrypted_value: _sinclair_typebox0.TOptional<_sinclair_typebox0.TString>;
47
- required: _sinclair_typebox0.TOptional<_sinclair_typebox0.TBoolean>;
48
- tags: _sinclair_typebox0.TOptional<_sinclair_typebox0.TRecord<_sinclair_typebox0.TString, _sinclair_typebox0.TString>>;
34
+ declare const SecretMetaSchema: _$_sinclair_typebox0.TObject<{
35
+ service: _$_sinclair_typebox0.TOptional<_$_sinclair_typebox0.TString>;
36
+ expires: _$_sinclair_typebox0.TOptional<_$_sinclair_typebox0.TString>;
37
+ rotation_url: _$_sinclair_typebox0.TOptional<_$_sinclair_typebox0.TString>;
38
+ purpose: _$_sinclair_typebox0.TOptional<_$_sinclair_typebox0.TString>;
39
+ comment: _$_sinclair_typebox0.TOptional<_$_sinclair_typebox0.TString>;
40
+ capabilities: _$_sinclair_typebox0.TOptional<_$_sinclair_typebox0.TArray<_$_sinclair_typebox0.TString>>;
41
+ created: _$_sinclair_typebox0.TOptional<_$_sinclair_typebox0.TString>;
42
+ rotates: _$_sinclair_typebox0.TOptional<_$_sinclair_typebox0.TString>;
43
+ rate_limit: _$_sinclair_typebox0.TOptional<_$_sinclair_typebox0.TString>;
44
+ model_hint: _$_sinclair_typebox0.TOptional<_$_sinclair_typebox0.TString>;
45
+ source: _$_sinclair_typebox0.TOptional<_$_sinclair_typebox0.TString>;
46
+ encrypted_value: _$_sinclair_typebox0.TOptional<_$_sinclair_typebox0.TString>;
47
+ required: _$_sinclair_typebox0.TOptional<_$_sinclair_typebox0.TBoolean>;
48
+ tags: _$_sinclair_typebox0.TOptional<_$_sinclair_typebox0.TRecord<_$_sinclair_typebox0.TString, _$_sinclair_typebox0.TString>>;
49
49
  }>;
50
50
  type SecretMeta = Static<typeof SecretMetaSchema>;
51
- declare const LifecycleConfigSchema: _sinclair_typebox0.TObject<{
52
- stale_warning_days: _sinclair_typebox0.TOptional<_sinclair_typebox0.TNumber>;
53
- require_expiration: _sinclair_typebox0.TOptional<_sinclair_typebox0.TBoolean>;
54
- require_service: _sinclair_typebox0.TOptional<_sinclair_typebox0.TBoolean>;
51
+ declare const LifecycleConfigSchema: _$_sinclair_typebox0.TObject<{
52
+ stale_warning_days: _$_sinclair_typebox0.TOptional<_$_sinclair_typebox0.TNumber>;
53
+ require_expiration: _$_sinclair_typebox0.TOptional<_$_sinclair_typebox0.TBoolean>;
54
+ require_service: _$_sinclair_typebox0.TOptional<_$_sinclair_typebox0.TBoolean>;
55
55
  }>;
56
56
  type LifecycleConfig = Static<typeof LifecycleConfigSchema>;
57
- declare const CallbackConfigSchema: _sinclair_typebox0.TObject<{
58
- on_expiring: _sinclair_typebox0.TOptional<_sinclair_typebox0.TString>;
59
- on_expired: _sinclair_typebox0.TOptional<_sinclair_typebox0.TString>;
60
- on_audit_fail: _sinclair_typebox0.TOptional<_sinclair_typebox0.TString>;
57
+ declare const CallbackConfigSchema: _$_sinclair_typebox0.TObject<{
58
+ on_expiring: _$_sinclair_typebox0.TOptional<_$_sinclair_typebox0.TString>;
59
+ on_expired: _$_sinclair_typebox0.TOptional<_$_sinclair_typebox0.TString>;
60
+ on_audit_fail: _$_sinclair_typebox0.TOptional<_$_sinclair_typebox0.TString>;
61
61
  }>;
62
62
  type CallbackConfig = Static<typeof CallbackConfigSchema>;
63
- declare const ToolsConfigSchema: _sinclair_typebox0.TRecord<_sinclair_typebox0.TString, _sinclair_typebox0.TUnknown>;
63
+ declare const ToolsConfigSchema: _$_sinclair_typebox0.TRecord<_$_sinclair_typebox0.TString, _$_sinclair_typebox0.TUnknown>;
64
64
  type ToolsConfig = Static<typeof ToolsConfigSchema>;
65
- declare const EnvMetaSchema: _sinclair_typebox0.TObject<{
66
- value: _sinclair_typebox0.TString;
67
- purpose: _sinclair_typebox0.TOptional<_sinclair_typebox0.TString>;
68
- comment: _sinclair_typebox0.TOptional<_sinclair_typebox0.TString>;
69
- tags: _sinclair_typebox0.TOptional<_sinclair_typebox0.TRecord<_sinclair_typebox0.TString, _sinclair_typebox0.TString>>;
65
+ declare const EnvMetaSchema: _$_sinclair_typebox0.TObject<{
66
+ value: _$_sinclair_typebox0.TString;
67
+ purpose: _$_sinclair_typebox0.TOptional<_$_sinclair_typebox0.TString>;
68
+ comment: _$_sinclair_typebox0.TOptional<_$_sinclair_typebox0.TString>;
69
+ tags: _$_sinclair_typebox0.TOptional<_$_sinclair_typebox0.TRecord<_$_sinclair_typebox0.TString, _$_sinclair_typebox0.TString>>;
70
70
  }>;
71
71
  type EnvMeta = Static<typeof EnvMetaSchema>;
72
- declare const EnvpktConfigSchema: _sinclair_typebox0.TObject<{
73
- version: _sinclair_typebox0.TNumber;
74
- catalog: _sinclair_typebox0.TOptional<_sinclair_typebox0.TString>;
75
- identity: _sinclair_typebox0.TOptional<_sinclair_typebox0.TObject<{
76
- name: _sinclair_typebox0.TString;
77
- consumer: _sinclair_typebox0.TOptional<_sinclair_typebox0.TUnion<[_sinclair_typebox0.TLiteral<"agent">, _sinclair_typebox0.TLiteral<"service">, _sinclair_typebox0.TLiteral<"developer">, _sinclair_typebox0.TLiteral<"ci">]>>;
78
- description: _sinclair_typebox0.TOptional<_sinclair_typebox0.TString>;
79
- capabilities: _sinclair_typebox0.TOptional<_sinclair_typebox0.TArray<_sinclair_typebox0.TString>>;
80
- expires: _sinclair_typebox0.TOptional<_sinclair_typebox0.TString>;
81
- services: _sinclair_typebox0.TOptional<_sinclair_typebox0.TArray<_sinclair_typebox0.TString>>;
82
- key_file: _sinclair_typebox0.TOptional<_sinclair_typebox0.TString>;
83
- recipient: _sinclair_typebox0.TOptional<_sinclair_typebox0.TString>;
84
- secrets: _sinclair_typebox0.TOptional<_sinclair_typebox0.TArray<_sinclair_typebox0.TString>>;
72
+ declare const EnvpktConfigSchema: _$_sinclair_typebox0.TObject<{
73
+ version: _$_sinclair_typebox0.TNumber;
74
+ catalog: _$_sinclair_typebox0.TOptional<_$_sinclair_typebox0.TString>;
75
+ identity: _$_sinclair_typebox0.TOptional<_$_sinclair_typebox0.TObject<{
76
+ name: _$_sinclair_typebox0.TString;
77
+ consumer: _$_sinclair_typebox0.TOptional<_$_sinclair_typebox0.TUnion<[_$_sinclair_typebox0.TLiteral<"agent">, _$_sinclair_typebox0.TLiteral<"service">, _$_sinclair_typebox0.TLiteral<"developer">, _$_sinclair_typebox0.TLiteral<"ci">]>>;
78
+ description: _$_sinclair_typebox0.TOptional<_$_sinclair_typebox0.TString>;
79
+ capabilities: _$_sinclair_typebox0.TOptional<_$_sinclair_typebox0.TArray<_$_sinclair_typebox0.TString>>;
80
+ expires: _$_sinclair_typebox0.TOptional<_$_sinclair_typebox0.TString>;
81
+ services: _$_sinclair_typebox0.TOptional<_$_sinclair_typebox0.TArray<_$_sinclair_typebox0.TString>>;
82
+ key_file: _$_sinclair_typebox0.TOptional<_$_sinclair_typebox0.TString>;
83
+ recipient: _$_sinclair_typebox0.TOptional<_$_sinclair_typebox0.TString>;
84
+ secrets: _$_sinclair_typebox0.TOptional<_$_sinclair_typebox0.TArray<_$_sinclair_typebox0.TString>>;
85
85
  }>>;
86
- secret: _sinclair_typebox0.TOptional<_sinclair_typebox0.TRecord<_sinclair_typebox0.TString, _sinclair_typebox0.TObject<{
87
- service: _sinclair_typebox0.TOptional<_sinclair_typebox0.TString>;
88
- expires: _sinclair_typebox0.TOptional<_sinclair_typebox0.TString>;
89
- rotation_url: _sinclair_typebox0.TOptional<_sinclair_typebox0.TString>;
90
- purpose: _sinclair_typebox0.TOptional<_sinclair_typebox0.TString>;
91
- comment: _sinclair_typebox0.TOptional<_sinclair_typebox0.TString>;
92
- capabilities: _sinclair_typebox0.TOptional<_sinclair_typebox0.TArray<_sinclair_typebox0.TString>>;
93
- created: _sinclair_typebox0.TOptional<_sinclair_typebox0.TString>;
94
- rotates: _sinclair_typebox0.TOptional<_sinclair_typebox0.TString>;
95
- rate_limit: _sinclair_typebox0.TOptional<_sinclair_typebox0.TString>;
96
- model_hint: _sinclair_typebox0.TOptional<_sinclair_typebox0.TString>;
97
- source: _sinclair_typebox0.TOptional<_sinclair_typebox0.TString>;
98
- encrypted_value: _sinclair_typebox0.TOptional<_sinclair_typebox0.TString>;
99
- required: _sinclair_typebox0.TOptional<_sinclair_typebox0.TBoolean>;
100
- tags: _sinclair_typebox0.TOptional<_sinclair_typebox0.TRecord<_sinclair_typebox0.TString, _sinclair_typebox0.TString>>;
86
+ secret: _$_sinclair_typebox0.TOptional<_$_sinclair_typebox0.TRecord<_$_sinclair_typebox0.TString, _$_sinclair_typebox0.TObject<{
87
+ service: _$_sinclair_typebox0.TOptional<_$_sinclair_typebox0.TString>;
88
+ expires: _$_sinclair_typebox0.TOptional<_$_sinclair_typebox0.TString>;
89
+ rotation_url: _$_sinclair_typebox0.TOptional<_$_sinclair_typebox0.TString>;
90
+ purpose: _$_sinclair_typebox0.TOptional<_$_sinclair_typebox0.TString>;
91
+ comment: _$_sinclair_typebox0.TOptional<_$_sinclair_typebox0.TString>;
92
+ capabilities: _$_sinclair_typebox0.TOptional<_$_sinclair_typebox0.TArray<_$_sinclair_typebox0.TString>>;
93
+ created: _$_sinclair_typebox0.TOptional<_$_sinclair_typebox0.TString>;
94
+ rotates: _$_sinclair_typebox0.TOptional<_$_sinclair_typebox0.TString>;
95
+ rate_limit: _$_sinclair_typebox0.TOptional<_$_sinclair_typebox0.TString>;
96
+ model_hint: _$_sinclair_typebox0.TOptional<_$_sinclair_typebox0.TString>;
97
+ source: _$_sinclair_typebox0.TOptional<_$_sinclair_typebox0.TString>;
98
+ encrypted_value: _$_sinclair_typebox0.TOptional<_$_sinclair_typebox0.TString>;
99
+ required: _$_sinclair_typebox0.TOptional<_$_sinclair_typebox0.TBoolean>;
100
+ tags: _$_sinclair_typebox0.TOptional<_$_sinclair_typebox0.TRecord<_$_sinclair_typebox0.TString, _$_sinclair_typebox0.TString>>;
101
101
  }>>>;
102
- env: _sinclair_typebox0.TOptional<_sinclair_typebox0.TRecord<_sinclair_typebox0.TString, _sinclair_typebox0.TObject<{
103
- value: _sinclair_typebox0.TString;
104
- purpose: _sinclair_typebox0.TOptional<_sinclair_typebox0.TString>;
105
- comment: _sinclair_typebox0.TOptional<_sinclair_typebox0.TString>;
106
- tags: _sinclair_typebox0.TOptional<_sinclair_typebox0.TRecord<_sinclair_typebox0.TString, _sinclair_typebox0.TString>>;
102
+ env: _$_sinclair_typebox0.TOptional<_$_sinclair_typebox0.TRecord<_$_sinclair_typebox0.TString, _$_sinclair_typebox0.TObject<{
103
+ value: _$_sinclair_typebox0.TString;
104
+ purpose: _$_sinclair_typebox0.TOptional<_$_sinclair_typebox0.TString>;
105
+ comment: _$_sinclair_typebox0.TOptional<_$_sinclair_typebox0.TString>;
106
+ tags: _$_sinclair_typebox0.TOptional<_$_sinclair_typebox0.TRecord<_$_sinclair_typebox0.TString, _$_sinclair_typebox0.TString>>;
107
107
  }>>>;
108
- lifecycle: _sinclair_typebox0.TOptional<_sinclair_typebox0.TObject<{
109
- stale_warning_days: _sinclair_typebox0.TOptional<_sinclair_typebox0.TNumber>;
110
- require_expiration: _sinclair_typebox0.TOptional<_sinclair_typebox0.TBoolean>;
111
- require_service: _sinclair_typebox0.TOptional<_sinclair_typebox0.TBoolean>;
108
+ lifecycle: _$_sinclair_typebox0.TOptional<_$_sinclair_typebox0.TObject<{
109
+ stale_warning_days: _$_sinclair_typebox0.TOptional<_$_sinclair_typebox0.TNumber>;
110
+ require_expiration: _$_sinclair_typebox0.TOptional<_$_sinclair_typebox0.TBoolean>;
111
+ require_service: _$_sinclair_typebox0.TOptional<_$_sinclair_typebox0.TBoolean>;
112
112
  }>>;
113
- callbacks: _sinclair_typebox0.TOptional<_sinclair_typebox0.TObject<{
114
- on_expiring: _sinclair_typebox0.TOptional<_sinclair_typebox0.TString>;
115
- on_expired: _sinclair_typebox0.TOptional<_sinclair_typebox0.TString>;
116
- on_audit_fail: _sinclair_typebox0.TOptional<_sinclair_typebox0.TString>;
113
+ callbacks: _$_sinclair_typebox0.TOptional<_$_sinclair_typebox0.TObject<{
114
+ on_expiring: _$_sinclair_typebox0.TOptional<_$_sinclair_typebox0.TString>;
115
+ on_expired: _$_sinclair_typebox0.TOptional<_$_sinclair_typebox0.TString>;
116
+ on_audit_fail: _$_sinclair_typebox0.TOptional<_$_sinclair_typebox0.TString>;
117
117
  }>>;
118
- tools: _sinclair_typebox0.TOptional<_sinclair_typebox0.TRecord<_sinclair_typebox0.TString, _sinclair_typebox0.TUnknown>>;
118
+ tools: _$_sinclair_typebox0.TOptional<_$_sinclair_typebox0.TRecord<_$_sinclair_typebox0.TString, _$_sinclair_typebox0.TUnknown>>;
119
119
  }>;
120
120
  type EnvpktConfig = Static<typeof EnvpktConfigSchema>;
121
121
  //#endregion
@@ -430,7 +430,7 @@ declare const generateTomlFromScan: (matches: ReadonlyArray<MatchResult>) => str
430
430
  //#region src/core/boot.d.ts
431
431
  /** Programmatic boot — returns Either<BootError, BootResult> */
432
432
  declare const bootSafe: (options?: BootOptions) => Either<BootError, BootResult>;
433
- /** Programmatic boot — throws EnvpktBootError on failure */
433
+ /** Programmatic boot — throws EnvpktBootError on failure (intentional throwing wrapper over bootSafe) */
434
434
  declare const boot: (options?: BootOptions) => BootResult;
435
435
  /** Error class for boot() failures */
436
436
  declare class EnvpktBootError extends Error {
@@ -458,8 +458,13 @@ declare const generateKeypair: (options?: {
458
458
  readonly force?: boolean;
459
459
  readonly outputPath?: string;
460
460
  }) => Either<KeygenError, KeygenResult>;
461
- /** Update identity.recipient in an envpkt.toml file, preserving structure */
462
- declare const updateConfigRecipient: (configPath: string, recipient: string) => Either<KeygenError, true>;
461
+ type UpdateIdentityOptions = {
462
+ readonly recipient: string;
463
+ readonly keyFile?: string;
464
+ readonly name?: string;
465
+ };
466
+ /** Update identity fields (recipient, key_file, name) in an envpkt.toml file, preserving structure */
467
+ declare const updateConfigIdentity: (configPath: string, options: UpdateIdentityOptions) => Either<KeygenError, true>;
463
468
  //#endregion
464
469
  //#region src/core/resolve-values.d.ts
465
470
  /** Resolve plaintext values for the given keys via cascade: fnox → env → interactive prompt */
@@ -509,7 +514,11 @@ declare const fnoxAvailable: () => boolean;
509
514
  //#region src/fnox/identity.d.ts
510
515
  /** Check if the age CLI is available on PATH */
511
516
  declare const ageAvailable: () => boolean;
512
- /** Unwrap an encrypted agent key using age --decrypt */
517
+ /**
518
+ * Extract the secret key from an age identity file (plain or encrypted).
519
+ * - Plain identity files (from `age-keygen`) contain `AGE-SECRET-KEY-*` lines directly
520
+ * - Encrypted identity files need `age --decrypt` to unwrap
521
+ */
513
522
  declare const unwrapAgentKey: (identityPath: string) => Either<IdentityError, string>;
514
523
  //#endregion
515
524
  //#region src/fnox/parse.d.ts
@@ -527,7 +536,7 @@ declare const compareFnoxAndEnvpkt: (fnoxKeys: ReadonlySet<string>, envpktKeys:
527
536
  //#endregion
528
537
  //#region src/mcp/resources.d.ts
529
538
  declare const resourceDefinitions: readonly Resource[];
530
- declare const readResource: (uri: string) => ReadResourceResult | undefined;
539
+ declare const readResource: (uri: string) => Option<ReadResourceResult>;
531
540
  //#endregion
532
541
  //#region src/mcp/server.d.ts
533
542
  declare const createServer: () => Server;
@@ -546,4 +555,4 @@ type ToolDef = {
546
555
  declare const toolDefinitions: readonly ToolDef[];
547
556
  declare const callTool: (name: string, args: Record<string, unknown>) => CallToolResult;
548
557
  //#endregion
549
- export { type AgentIdentity, AgentIdentitySchema, type AuditResult, type BootError, type BootOptions, type BootResult, type CallbackConfig, CallbackConfigSchema, type CatalogError, type CheckResult, type ConfidenceLevel, type ConfigError, type ConfigSource, type ConsumerType, type CredentialPattern, type DriftEntry, type DriftStatus, type EnvAuditResult, type EnvDriftEntry, type EnvDriftStatus, type EnvMeta, EnvMetaSchema, EnvpktBootError, type EnvpktConfig, EnvpktConfigSchema, type FleetAgent, type FleetHealth, type FnoxConfig, type FnoxError, type FnoxSecret, type FormatPacketOptions, type HealthStatus, type Identity, type IdentityError, IdentitySchema, type KeygenError, type KeygenResult, type LifecycleConfig, LifecycleConfigSchema, type MatchResult, type ResolveOptions, type ResolveResult, type ResolvedPath, type ScanOptions, type ScanResult, type SealError, type SecretDisplay, type SecretHealth, type SecretMeta, SecretMetaSchema, type SecretStatus, type TomlEditError, type ToolsConfig, ToolsConfigSchema, ageAvailable, ageDecrypt, ageEncrypt, appendSection, boot, bootSafe, callTool, compareFnoxAndEnvpkt, computeAudit, computeEnvAudit, createServer, deriveServiceFromName, detectFnox, discoverConfig, envCheck, envScan, extractFnoxKeys, findConfigPath, fnoxAvailable, fnoxExport, fnoxGet, formatPacket, generateKeypair, generateTomlFromScan, loadCatalog, loadConfig, loadConfigFromCwd, maskValue, matchEnvVar, matchValueShape, parseToml, readConfigFile, readFnoxConfig, readResource, removeSection, renameSection, resolveConfig, resolveConfigPath, resolveInlineKey, resolveKeyPath, resolveSecrets, resolveValues, resourceDefinitions, scanEnv, scanFleet, sealSecrets, startServer, toolDefinitions, unsealSecrets, unwrapAgentKey, updateConfigRecipient, updateSectionFields, validateConfig };
558
+ export { type AgentIdentity, AgentIdentitySchema, type AuditResult, type BootError, type BootOptions, type BootResult, type CallbackConfig, CallbackConfigSchema, type CatalogError, type CheckResult, type ConfidenceLevel, type ConfigError, type ConfigSource, type ConsumerType, type CredentialPattern, type DriftEntry, type DriftStatus, type EnvAuditResult, type EnvDriftEntry, type EnvDriftStatus, type EnvMeta, EnvMetaSchema, EnvpktBootError, type EnvpktConfig, EnvpktConfigSchema, type FleetAgent, type FleetHealth, type FnoxConfig, type FnoxError, type FnoxSecret, type FormatPacketOptions, type HealthStatus, type Identity, type IdentityError, IdentitySchema, type KeygenError, type KeygenResult, type LifecycleConfig, LifecycleConfigSchema, type MatchResult, type ResolveOptions, type ResolveResult, type ResolvedPath, type ScanOptions, type ScanResult, type SealError, type SecretDisplay, type SecretHealth, type SecretMeta, SecretMetaSchema, type SecretStatus, type TomlEditError, type ToolsConfig, ToolsConfigSchema, ageAvailable, ageDecrypt, ageEncrypt, appendSection, boot, bootSafe, callTool, compareFnoxAndEnvpkt, computeAudit, computeEnvAudit, createServer, deriveServiceFromName, detectFnox, discoverConfig, envCheck, envScan, extractFnoxKeys, findConfigPath, fnoxAvailable, fnoxExport, fnoxGet, formatPacket, generateKeypair, generateTomlFromScan, loadCatalog, loadConfig, loadConfigFromCwd, maskValue, matchEnvVar, matchValueShape, parseToml, readConfigFile, readFnoxConfig, readResource, removeSection, renameSection, resolveConfig, resolveConfigPath, resolveInlineKey, resolveKeyPath, resolveSecrets, resolveValues, resourceDefinitions, scanEnv, scanFleet, sealSecrets, startServer, toolDefinitions, unsealSecrets, unwrapAgentKey, updateConfigIdentity, updateSectionFields, validateConfig };