Skip to main content

Variable: AdapterVarResponseSchema

const AdapterVarResponseSchema: ZodObject<{
  key: ZodString;
  value: ZodOptional<ZodNullable<ZodString>>;
  type: ZodEnum<["VAR", "SECRET"]>;
} & {
  is_redacted: ZodOptional<ZodBoolean>;
}, "passthrough", ZodTypeAny, objectOutputType<{
  key: ZodString;
  value: ZodOptional<ZodNullable<ZodString>>;
  type: ZodEnum<["VAR", "SECRET"]>;
} & {
  is_redacted: ZodOptional<ZodBoolean>;
}, ZodTypeAny, "passthrough">, objectInputType<{
  key: ZodString;
  value: ZodOptional<ZodNullable<ZodString>>;
  type: ZodEnum<["VAR", "SECRET"]>;
} & {
  is_redacted: ZodOptional<ZodBoolean>;
}, ZodTypeAny, "passthrough">>;

Defined in: src/models/red-team.ts:1081

A variable as returned in adapter responses (spec AdapterVarResponseSchema).

Secrets are masked with is_redacted: true. The spec says the masked value is null, but a live tenant returns the literal placeholder string '**********' (verified 2026-08-01) — so treat is_redacted, not the value, as the signal. Either form round-trips: pass the variable back on validate/update alongside adapter_uuid and the real value is resolved from storage.