envpkt 0.7.3 → 0.8.1

package/dist/index.d.ts

@@ -430,7 +430,7 @@ declare const generateTomlFromScan: (matches: ReadonlyArray<MatchResult>) => str
 //#region src/core/boot.d.ts
 /** Programmatic boot — returns Either<BootError, BootResult> */
 declare const bootSafe: (options?: BootOptions) => Either<BootError, BootResult>;
-/** Programmatic boot — throws EnvpktBootError on failure */
+/** Programmatic boot — throws EnvpktBootError on failure (intentional throwing wrapper over bootSafe) */
 declare const boot: (options?: BootOptions) => BootResult;
 /** Error class for boot() failures */
 declare class EnvpktBootError extends Error {
@@ -453,13 +453,17 @@ declare const unsealSecrets: (meta: Readonly<Record<string, SecretMeta>>, identi
 declare const resolveKeyPath: () => string;
 /** Resolve an inline age key from ENVPKT_AGE_KEY env var (for CI) */
 declare const resolveInlineKey: () => Option<string>;
-/** Generate an age keypair and write to disk */
+/** Generate an age keypair and write to disk. Refuses to overwrite if the file already exists. */
 declare const generateKeypair: (options?: {
-  readonly force?: boolean;
   readonly outputPath?: string;
 }) => Either<KeygenError, KeygenResult>;
-/** Update identity.recipient in an envpkt.toml file, preserving structure */
-declare const updateConfigRecipient: (configPath: string, recipient: string) => Either<KeygenError, true>;
+type UpdateIdentityOptions = {
+  readonly recipient: string;
+  readonly keyFile?: string;
+  readonly name?: string;
+};
+/** Update identity fields (recipient, key_file, name) in an envpkt.toml file, preserving structure */
+declare const updateConfigIdentity: (configPath: string, options: UpdateIdentityOptions) => Either<KeygenError, true>;
 //#endregion
 //#region src/core/resolve-values.d.ts
 /** Resolve plaintext values for the given keys via cascade: fnox → env → interactive prompt */
@@ -509,7 +513,11 @@ declare const fnoxAvailable: () => boolean;
 //#region src/fnox/identity.d.ts
 /** Check if the age CLI is available on PATH */
 declare const ageAvailable: () => boolean;
-/** Unwrap an encrypted agent key using age --decrypt */
+/**
+ * Extract the secret key from an age identity file (plain or encrypted).
+ * - Plain identity files (from `age-keygen`) contain `AGE-SECRET-KEY-*` lines directly
+ * - Encrypted identity files need `age --decrypt` to unwrap
+ */
 declare const unwrapAgentKey: (identityPath: string) => Either<IdentityError, string>;
 //#endregion
 //#region src/fnox/parse.d.ts
@@ -527,7 +535,7 @@ declare const compareFnoxAndEnvpkt: (fnoxKeys: ReadonlySet<string>, envpktKeys:
 //#endregion
 //#region src/mcp/resources.d.ts
 declare const resourceDefinitions: readonly Resource[];
-declare const readResource: (uri: string) => ReadResourceResult | undefined;
+declare const readResource: (uri: string) => Option<ReadResourceResult>;
 //#endregion
 //#region src/mcp/server.d.ts
 declare const createServer: () => Server;
@@ -546,4 +554,4 @@ type ToolDef = {
 declare const toolDefinitions: readonly ToolDef[];
 declare const callTool: (name: string, args: Record<string, unknown>) => CallToolResult;
 //#endregion
-export { type AgentIdentity, AgentIdentitySchema, type AuditResult, type BootError, type BootOptions, type BootResult, type CallbackConfig, CallbackConfigSchema, type CatalogError, type CheckResult, type ConfidenceLevel, type ConfigError, type ConfigSource, type ConsumerType, type CredentialPattern, type DriftEntry, type DriftStatus, type EnvAuditResult, type EnvDriftEntry, type EnvDriftStatus, type EnvMeta, EnvMetaSchema, EnvpktBootError, type EnvpktConfig, EnvpktConfigSchema, type FleetAgent, type FleetHealth, type FnoxConfig, type FnoxError, type FnoxSecret, type FormatPacketOptions, type HealthStatus, type Identity, type IdentityError, IdentitySchema, type KeygenError, type KeygenResult, type LifecycleConfig, LifecycleConfigSchema, type MatchResult, type ResolveOptions, type ResolveResult, type ResolvedPath, type ScanOptions, type ScanResult, type SealError, type SecretDisplay, type SecretHealth, type SecretMeta, SecretMetaSchema, type SecretStatus, type TomlEditError, type ToolsConfig, ToolsConfigSchema, ageAvailable, ageDecrypt, ageEncrypt, appendSection, boot, bootSafe, callTool, compareFnoxAndEnvpkt, computeAudit, computeEnvAudit, createServer, deriveServiceFromName, detectFnox, discoverConfig, envCheck, envScan, extractFnoxKeys, findConfigPath, fnoxAvailable, fnoxExport, fnoxGet, formatPacket, generateKeypair, generateTomlFromScan, loadCatalog, loadConfig, loadConfigFromCwd, maskValue, matchEnvVar, matchValueShape, parseToml, readConfigFile, readFnoxConfig, readResource, removeSection, renameSection, resolveConfig, resolveConfigPath, resolveInlineKey, resolveKeyPath, resolveSecrets, resolveValues, resourceDefinitions, scanEnv, scanFleet, sealSecrets, startServer, toolDefinitions, unsealSecrets, unwrapAgentKey, updateConfigRecipient, updateSectionFields, validateConfig };
+export { type AgentIdentity, AgentIdentitySchema, type AuditResult, type BootError, type BootOptions, type BootResult, type CallbackConfig, CallbackConfigSchema, type CatalogError, type CheckResult, type ConfidenceLevel, type ConfigError, type ConfigSource, type ConsumerType, type CredentialPattern, type DriftEntry, type DriftStatus, type EnvAuditResult, type EnvDriftEntry, type EnvDriftStatus, type EnvMeta, EnvMetaSchema, EnvpktBootError, type EnvpktConfig, EnvpktConfigSchema, type FleetAgent, type FleetHealth, type FnoxConfig, type FnoxError, type FnoxSecret, type FormatPacketOptions, type HealthStatus, type Identity, type IdentityError, IdentitySchema, type KeygenError, type KeygenResult, type LifecycleConfig, LifecycleConfigSchema, type MatchResult, type ResolveOptions, type ResolveResult, type ResolvedPath, type ScanOptions, type ScanResult, type SealError, type SecretDisplay, type SecretHealth, type SecretMeta, SecretMetaSchema, type SecretStatus, type TomlEditError, type ToolsConfig, ToolsConfigSchema, ageAvailable, ageDecrypt, ageEncrypt, appendSection, boot, bootSafe, callTool, compareFnoxAndEnvpkt, computeAudit, computeEnvAudit, createServer, deriveServiceFromName, detectFnox, discoverConfig, envCheck, envScan, extractFnoxKeys, findConfigPath, fnoxAvailable, fnoxExport, fnoxGet, formatPacket, generateKeypair, generateTomlFromScan, loadCatalog, loadConfig, loadConfigFromCwd, maskValue, matchEnvVar, matchValueShape, parseToml, readConfigFile, readFnoxConfig, readResource, removeSection, renameSection, resolveConfig, resolveConfigPath, resolveInlineKey, resolveKeyPath, resolveSecrets, resolveValues, resourceDefinitions, scanEnv, scanFleet, sealSecrets, startServer, toolDefinitions, unsealSecrets, unwrapAgentKey, updateConfigIdentity, updateSectionFields, validateConfig };