mirror of
https://github.com/profullstack/logicsrc.git
synced 2026-10-02 12:54:03 +00:00
New @logicsrc/plugin-credential-sharing: a provider-neutral secret-sync engine with env/.env, Doppler, Railway, and GitHub Secrets adapters behind one CredentialProvider contract. - engine: inspect -> diff -> plan -> approve -> sync -> rollback -> audit/export - dry-run is the default for sync; --approve writes; destructive changes gated - fingerprint-based diffs (salted SHA-256); raw values never printed or stored in plans/runs/audit; rollback pre-image kept in a 0600 .logicsrc vault (gitignored) - github-secrets is write-only for values (sealed-box via libsodium), so it cannot be a sync source or value-restoring rollback target - CLI: real `logicsrc credentials <providers|inspect|diff|plan|approve|sync| rollback|audit|export>` (replaces the prior stub) - 4 JSON schemas registered in @logicsrc/validators - flip logicsrc.com/credential-sharing band from coming-soon to available - 37 tests pass; full env->env lifecycle verified; artifacts schema-validate Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
28 lines
1.1 KiB
JSON
28 lines
1.1 KiB
JSON
{
|
|
"$schema": "https://json-schema.org/draft/2020-12/schema",
|
|
"$id": "https://schemas.logicsrc.com/logicsrc-credential-provider.schema.json",
|
|
"title": "LogicSRC Credential Provider",
|
|
"type": "object",
|
|
"required": ["id", "name", "description", "capabilities", "authRequirements", "status"],
|
|
"additionalProperties": false,
|
|
"properties": {
|
|
"id": { "type": "string", "pattern": "^[a-z][a-z0-9-]*$" },
|
|
"name": { "type": "string", "minLength": 1 },
|
|
"description": { "type": "string", "minLength": 1 },
|
|
"capabilities": {
|
|
"type": "object",
|
|
"required": ["readValues", "readNames", "write", "delete", "rollback", "audit"],
|
|
"additionalProperties": false,
|
|
"properties": {
|
|
"readValues": { "type": "boolean" },
|
|
"readNames": { "type": "boolean" },
|
|
"write": { "type": "boolean" },
|
|
"delete": { "type": "boolean" },
|
|
"rollback": { "type": "boolean" },
|
|
"audit": { "type": "boolean" }
|
|
}
|
|
},
|
|
"authRequirements": { "type": "array", "items": { "type": "string" } },
|
|
"status": { "enum": ["available", "planned"] }
|
|
}
|
|
}
|