logicsrc/packages/schemas/schemas/logicsrc-credential-provider.schema.json
Anthony Ettinger cf73fe5af2 feat(credential-sharing): implement the Credential Sharing OpenSpec (M1-M3)
New @logicsrc/plugin-credential-sharing: a provider-neutral secret-sync engine
with env/.env, Doppler, Railway, and GitHub Secrets adapters behind one
CredentialProvider contract.

- engine: inspect -> diff -> plan -> approve -> sync -> rollback -> audit/export
- dry-run is the default for sync; --approve writes; destructive changes gated
- fingerprint-based diffs (salted SHA-256); raw values never printed or stored in
  plans/runs/audit; rollback pre-image kept in a 0600 .logicsrc vault (gitignored)
- github-secrets is write-only for values (sealed-box via libsodium), so it cannot
  be a sync source or value-restoring rollback target
- CLI: real `logicsrc credentials <providers|inspect|diff|plan|approve|sync|
  rollback|audit|export>` (replaces the prior stub)
- 4 JSON schemas registered in @logicsrc/validators
- flip logicsrc.com/credential-sharing band from coming-soon to available
- 37 tests pass; full env->env lifecycle verified; artifacts schema-validate

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-06-27 15:24:30 +00:00

28 lines
1.1 KiB
JSON

{
"$schema": "https://json-schema.org/draft/2020-12/schema",
"$id": "https://schemas.logicsrc.com/logicsrc-credential-provider.schema.json",
"title": "LogicSRC Credential Provider",
"type": "object",
"required": ["id", "name", "description", "capabilities", "authRequirements", "status"],
"additionalProperties": false,
"properties": {
"id": { "type": "string", "pattern": "^[a-z][a-z0-9-]*$" },
"name": { "type": "string", "minLength": 1 },
"description": { "type": "string", "minLength": 1 },
"capabilities": {
"type": "object",
"required": ["readValues", "readNames", "write", "delete", "rollback", "audit"],
"additionalProperties": false,
"properties": {
"readValues": { "type": "boolean" },
"readNames": { "type": "boolean" },
"write": { "type": "boolean" },
"delete": { "type": "boolean" },
"rollback": { "type": "boolean" },
"audit": { "type": "boolean" }
}
},
"authRequirements": { "type": "array", "items": { "type": "string" } },
"status": { "enum": ["available", "planned"] }
}
}