@firestartr/cli 1.49.0-snapshot-7 → 1.49.0-snapshot-9

package/build/index.js

@@ -165028,7 +165028,7 @@ __exportStar(__nccwpck_require__(58898), exports);
 __exportStar(__nccwpck_require__(17419), exports);
 __exportStar(__nccwpck_require__(70161), exports);
 __exportStar(__nccwpck_require__(55079), exports);
-__exportStar(__nccwpck_require__(99515), exports);
+__exportStar(__nccwpck_require__(39477), exports);
 __exportStar(__nccwpck_require__(34311), exports);
 __exportStar(__nccwpck_require__(88740), exports);
 __exportStar(__nccwpck_require__(15023), exports);
@@ -166666,7 +166666,7 @@ Object.defineProperty(exports, "__esModule", ({ value: true }));
 exports.TerraformModule = void 0;
 const JSII_RTTI_SYMBOL_1 = Symbol.for("jsii.rtti");
 const terraform_element_1 = __nccwpck_require__(70161);
-const terraform_provider_1 = __nccwpck_require__(99515);
+const terraform_provider_1 = __nccwpck_require__(39477);
 const util_1 = __nccwpck_require__(79751);
 const tokens_1 = __nccwpck_require__(58898);
 const tfExpression_1 = __nccwpck_require__(75754);
@@ -166985,7 +166985,7 @@ TerraformOutput[_a] = { fqn: "cdktf.TerraformOutput", version: "0.19.2" };
 
 /***/ }),
 
-/***/ 99515:
+/***/ 39477:
 /***/ ((__unused_webpack_module, exports, __nccwpck_require__) => {
 
 
@@ -167539,7 +167539,7 @@ const constructs_1 = __nccwpck_require__(38794);
 const _tokens_1 = __nccwpck_require__(9074);
 const terraform_element_1 = __nccwpck_require__(70161);
 const util_1 = __nccwpck_require__(79751);
-const terraform_provider_1 = __nccwpck_require__(99515);
+const terraform_provider_1 = __nccwpck_require__(39477);
 const local_backend_1 = __nccwpck_require__(31797);
 const tfExpression_1 = __nccwpck_require__(75754);
 const terraform_output_1 = __nccwpck_require__(15023);
@@ -170929,7 +170929,7 @@ exports.ValidateProviderPresence = void 0;
 // Copyright (c) HashiCorp, Inc
 // SPDX-License-Identifier: MPL-2.0
 const constructs_1 = __nccwpck_require__(38794);
-const terraform_provider_1 = __nccwpck_require__(99515);
+const terraform_provider_1 = __nccwpck_require__(39477);
 const terraform_resource_1 = __nccwpck_require__(34311);
 const terraform_data_source_1 = __nccwpck_require__(88740);
 const terraform_stack_1 = __nccwpck_require__(17419);
@@ -298091,6 +298091,7 @@ async function createOrphanBranch(repo, branch, owner = 'prefapp') {
 ;// CONCATENATED MODULE: ../github/src/check_run.ts
 
 
+
 const FLUSH_TIMEOUT = 4; // seconds
 const GITHUB_OUTPUT_TEXT_LIMIT = 65000; // ~65k hard limit for output.text
 /**
@@ -298227,6 +298228,9 @@ class GithubCheckRun {
             });
             this.closed = true;
         }
+        catch (e) {
+            github_src_logger.error(e);
+        }
         finally {
             this.closing = false;
         }
@@ -299357,6 +299361,25 @@ function resolveCodeownersRef(ref, org) {
     }
     return result;
 }
+const IS_SECRET_REF = new RegExp(/^ref:secretsclaim:([a-zA-Z0-9_-]+):([a-zA-Z0-9_-]+)$/);
+function isRepoSecretRef(suspectedRef) {
+    return IS_SECRET_REF.test(suspectedRef);
+}
+function extractRepoSecretRef(ref) {
+    if (!IS_SECRET_REF.test(ref)) {
+        throw new Error(`extractRepoSecretRef: ref not valid ${ref}`);
+    }
+    const parts = ref.split(':');
+    const secretKind = parts[1];
+    if (secretKind !== 'secretsclaim') {
+        throw new Error(`extractRepoSecretRef: Invalid secret kind ${secretKind}`);
+    }
+    return {
+        kind: secretKind,
+        name: parts[2],
+        key: parts[3],
+    };
+}
 
 ;// CONCATENATED MODULE: ../cdk8s_renderer/src/overriders/base.ts
 
@@ -300682,6 +300705,7 @@ const NORMALIZERS = [
 
 
 
+
 const kindMap = {
     user: 'UserClaim',
     group: 'GroupClaim',
@@ -300735,6 +300759,11 @@ function extractAllRefs(claimData) {
             refs.push(...groupRefs);
             break;
         }
+        case 'ComponentClaim': {
+            const secretsRefs = getComponentVarsAndSecretsRefs(parsedClaim);
+            refs.push(...secretsRefs);
+            break;
+        }
     }
     cdk8s_renderer_src_logger.info(`Refs for ${parsedClaim.kind}-${parsedClaim.name}: ${[...new Set(refs)].join(',')}`);
     return [...new Set(refs)];
@@ -300781,6 +300810,33 @@ function getTfWorkspacesRefs(values, references = []) {
     }
     return references;
 }
+function getComponentVarsAndSecretsRefs(parsedClaim) {
+    const refs = {};
+    const githubProvider = parsedClaim.providers?.github;
+    if (githubProvider) {
+        const varsBlock = githubProvider.vars;
+        const secretsBlock = githubProvider.secrets;
+        if (varsBlock) {
+            for (const block of Object.keys(varsBlock)) {
+                for (const refVar of varsBlock[block]) {
+                    if (isRepoSecretRef(refVar.value)) {
+                        const secretRef = extractRepoSecretRef(refVar.value);
+                        refs[`SecretsClaim-${secretRef.name}`] = true;
+                    }
+                }
+            }
+        }
+        if (secretsBlock) {
+            for (const block of Object.keys(secretsBlock)) {
+                for (const secret of secretsBlock[block]) {
+                    const secretRef = extractRepoSecretRef(secret.value);
+                    refs[`SecretsClaim-${secretRef.name}`] = true;
+                }
+            }
+        }
+    }
+    return Object.keys(refs);
+}
 function getClaimReferences(claim) {
     const headerRegex = catalog_common.types.regex.YAMLHeaderRegex;
     const multilineRegex = catalog_common.types.regex.YAMLMultilineRegex;
@@ -301555,7 +301611,7 @@ const external_node_child_process_namespaceObject = __WEBPACK_EXTERNAL_createReq
             $id: 'firestartr.dev://github/GithubComponentClaimSecretRef',
             type: 'string',
             description: 'the reference of the secret',
-            pattern: '^ref:secretclaim:([a-zA-Z0-9_-]+):([a-zA-Z0-9_-]+)$',
+            pattern: '^ref:secretsclaim:([a-zA-Z0-9_-]+):([a-zA-Z0-9_-]+)$',
         },
         GithubComponentClaimRepoSecret: {
             $id: 'firestartr.dev://github/GithubComponentClaimRepoSecret',
@@ -302611,15 +302667,20 @@ function validatePermissionsUniqueness(crs) {
             const permissions = cr.spec.permissions;
             cdk8s_renderer_src_logger.debug(`Validating Permissions Uniqueness of ${crkey}`);
             if (permissions) {
-                const seen = new Set();
+                const rolesByIdentifier = new Map();
                 for (const perm of permissions) {
                     const identifier = perm.collaborator
                         ? perm.collaborator
                         : `ref:${perm.ref.kind}:${perm.ref.name}`;
-                    if (seen.has(identifier)) {
-                        throw new Error(`Duplicate permission reference found in FirestartrGithubRepository ${crkey}: ${identifier}\nFull CR: ${JSON.stringify(cr, null, 2)}`);
+                    const role = perm.role;
+                    if (rolesByIdentifier.has(identifier)) {
+                        const prevRole = rolesByIdentifier.get(identifier);
+                        if (prevRole !== role) {
+                            throw new Error(`Conflicting permission role in FirestartrGithubRepository ${crkey}: ${identifier} has roles "${prevRole}" and "${role}".\nFull CR: ${JSON.stringify(cr, null, 2)}`);
+                        }
+                        continue;
                     }
-                    seen.add(identifier);
+                    rolesByIdentifier.set(identifier, role);
                 }
             }
         }
@@ -305318,6 +305379,8 @@ function toJson_FirestartrGithubRepositorySpec(obj) {
         'actions': toJson_FirestartrGithubRepositorySpecActions(obj.actions),
         'pages': toJson_FirestartrGithubRepositorySpecPages(obj.pages),
         'permissions': obj.permissions?.map(y => toJson_FirestartrGithubRepositorySpecPermissions(y)),
+        'secrets': toJson_FirestartrGithubRepositorySpecSecrets(obj.secrets),
+        'vars': toJson_FirestartrGithubRepositorySpecVars(obj.vars),
         'branchProtections': obj.branchProtections?.map(y => toJson_FirestartrGithubRepositorySpecBranchProtections(y)),
         'writeConnectionSecretToRef': toJson_FirestartrGithubRepositorySpecWriteConnectionSecretToRef(obj.writeConnectionSecretToRef),
     };
@@ -305428,6 +305491,39 @@ function toJson_FirestartrGithubRepositorySpecPermissions(obj) {
     // filter undefined values
     return Object.entries(result).reduce((r, i) => (i[1] === undefined) ? r : ({ ...r, [i[0]]: i[1] }), {});
 }
+/**
+ * Converts an object of type 'FirestartrGithubRepositorySpecSecrets' to JSON representation.
+ */
+/* eslint-disable max-len, @stylistic/max-len, quote-props, @stylistic/quote-props */
+function toJson_FirestartrGithubRepositorySpecSecrets(obj) {
+    if (obj === undefined) {
+        return undefined;
+    }
+    const result = {
+        'actions': obj.actions?.map(y => toJson_FirestartrGithubRepositorySpecSecretsActions(y)),
+        'codespaces': obj.codespaces?.map(y => toJson_FirestartrGithubRepositorySpecSecretsCodespaces(y)),
+        'copilot': obj.copilot?.map(y => toJson_FirestartrGithubRepositorySpecSecretsCopilot(y)),
+    };
+    // filter undefined values
+    return Object.entries(result).reduce((r, i) => (i[1] === undefined) ? r : ({ ...r, [i[0]]: i[1] }), {});
+}
+/**
+ * Converts an object of type 'FirestartrGithubRepositorySpecVars' to JSON representation.
+ */
+/* eslint-disable max-len, @stylistic/max-len, quote-props, @stylistic/quote-props */
+function toJson_FirestartrGithubRepositorySpecVars(obj) {
+    if (obj === undefined) {
+        return undefined;
+    }
+    const result = {
+        'variableItemSchema': toJson_FirestartrGithubRepositorySpecVarsVariableItemSchema(obj.variableItemSchema),
+        'actions': obj.actions?.map(y => toJson_FirestartrGithubRepositorySpecVarsActions(y)),
+        'dependabot': obj.dependabot?.map(y => toJson_FirestartrGithubRepositorySpecVarsDependabot(y)),
+        'codespaces': obj.codespaces?.map(y => toJson_FirestartrGithubRepositorySpecVarsCodespaces(y)),
+    };
+    // filter undefined values
+    return Object.entries(result).reduce((r, i) => (i[1] === undefined) ? r : ({ ...r, [i[0]]: i[1] }), {});
+}
 /**
  * Converts an object of type 'FirestartrGithubRepositorySpecBranchProtections' to JSON representation.
  */
@@ -305580,6 +305676,115 @@ function toJson_FirestartrGithubRepositorySpecPermissionsRef(obj) {
     // filter undefined values
     return Object.entries(result).reduce((r, i) => (i[1] === undefined) ? r : ({ ...r, [i[0]]: i[1] }), {});
 }
+/**
+ * Converts an object of type 'FirestartrGithubRepositorySpecSecretsActions' to JSON representation.
+ */
+/* eslint-disable max-len, @stylistic/max-len, quote-props, @stylistic/quote-props */
+function toJson_FirestartrGithubRepositorySpecSecretsActions(obj) {
+    if (obj === undefined) {
+        return undefined;
+    }
+    const result = {
+        'name': obj.name,
+        'ref': toJson_FirestartrGithubRepositorySpecSecretsActionsRef(obj.ref),
+    };
+    // filter undefined values
+    return Object.entries(result).reduce((r, i) => (i[1] === undefined) ? r : ({ ...r, [i[0]]: i[1] }), {});
+}
+/**
+ * Converts an object of type 'FirestartrGithubRepositorySpecSecretsCodespaces' to JSON representation.
+ */
+/* eslint-disable max-len, @stylistic/max-len, quote-props, @stylistic/quote-props */
+function toJson_FirestartrGithubRepositorySpecSecretsCodespaces(obj) {
+    if (obj === undefined) {
+        return undefined;
+    }
+    const result = {
+        'name': obj.name,
+        'ref': toJson_FirestartrGithubRepositorySpecSecretsCodespacesRef(obj.ref),
+    };
+    // filter undefined values
+    return Object.entries(result).reduce((r, i) => (i[1] === undefined) ? r : ({ ...r, [i[0]]: i[1] }), {});
+}
+/**
+ * Converts an object of type 'FirestartrGithubRepositorySpecSecretsCopilot' to JSON representation.
+ */
+/* eslint-disable max-len, @stylistic/max-len, quote-props, @stylistic/quote-props */
+function toJson_FirestartrGithubRepositorySpecSecretsCopilot(obj) {
+    if (obj === undefined) {
+        return undefined;
+    }
+    const result = {
+        'name': obj.name,
+        'ref': toJson_FirestartrGithubRepositorySpecSecretsCopilotRef(obj.ref),
+    };
+    // filter undefined values
+    return Object.entries(result).reduce((r, i) => (i[1] === undefined) ? r : ({ ...r, [i[0]]: i[1] }), {});
+}
+/**
+ * Converts an object of type 'FirestartrGithubRepositorySpecVarsVariableItemSchema' to JSON representation.
+ */
+/* eslint-disable max-len, @stylistic/max-len, quote-props, @stylistic/quote-props */
+function toJson_FirestartrGithubRepositorySpecVarsVariableItemSchema(obj) {
+    if (obj === undefined) {
+        return undefined;
+    }
+    const result = {
+        'name': obj.name,
+        'value': obj.value,
+        'ref': toJson_FirestartrGithubRepositorySpecVarsVariableItemSchemaRef(obj.ref),
+    };
+    // filter undefined values
+    return Object.entries(result).reduce((r, i) => (i[1] === undefined) ? r : ({ ...r, [i[0]]: i[1] }), {});
+}
+/**
+ * Converts an object of type 'FirestartrGithubRepositorySpecVarsActions' to JSON representation.
+ */
+/* eslint-disable max-len, @stylistic/max-len, quote-props, @stylistic/quote-props */
+function toJson_FirestartrGithubRepositorySpecVarsActions(obj) {
+    if (obj === undefined) {
+        return undefined;
+    }
+    const result = {
+        'name': obj.name,
+        'value': obj.value,
+        'ref': toJson_FirestartrGithubRepositorySpecVarsActionsRef(obj.ref),
+    };
+    // filter undefined values
+    return Object.entries(result).reduce((r, i) => (i[1] === undefined) ? r : ({ ...r, [i[0]]: i[1] }), {});
+}
+/**
+ * Converts an object of type 'FirestartrGithubRepositorySpecVarsDependabot' to JSON representation.
+ */
+/* eslint-disable max-len, @stylistic/max-len, quote-props, @stylistic/quote-props */
+function toJson_FirestartrGithubRepositorySpecVarsDependabot(obj) {
+    if (obj === undefined) {
+        return undefined;
+    }
+    const result = {
+        'name': obj.name,
+        'value': obj.value,
+        'ref': toJson_FirestartrGithubRepositorySpecVarsDependabotRef(obj.ref),
+    };
+    // filter undefined values
+    return Object.entries(result).reduce((r, i) => (i[1] === undefined) ? r : ({ ...r, [i[0]]: i[1] }), {});
+}
+/**
+ * Converts an object of type 'FirestartrGithubRepositorySpecVarsCodespaces' to JSON representation.
+ */
+/* eslint-disable max-len, @stylistic/max-len, quote-props, @stylistic/quote-props */
+function toJson_FirestartrGithubRepositorySpecVarsCodespaces(obj) {
+    if (obj === undefined) {
+        return undefined;
+    }
+    const result = {
+        'name': obj.name,
+        'value': obj.value,
+        'ref': toJson_FirestartrGithubRepositorySpecVarsCodespacesRef(obj.ref),
+    };
+    // filter undefined values
+    return Object.entries(result).reduce((r, i) => (i[1] === undefined) ? r : ({ ...r, [i[0]]: i[1] }), {});
+}
 /**
  * Converts an object of type 'FirestartrGithubRepositorySpecWriteConnectionSecretToRefOutputs' to JSON representation.
  */
@@ -305624,6 +305829,118 @@ function toJson_FirestartrGithubRepositorySpecContextProviderRef(obj) {
     // filter undefined values
     return Object.entries(result).reduce((r, i) => (i[1] === undefined) ? r : ({ ...r, [i[0]]: i[1] }), {});
 }
+/**
+ * Converts an object of type 'FirestartrGithubRepositorySpecSecretsActionsRef' to JSON representation.
+ */
+/* eslint-disable max-len, @stylistic/max-len, quote-props, @stylistic/quote-props */
+function toJson_FirestartrGithubRepositorySpecSecretsActionsRef(obj) {
+    if (obj === undefined) {
+        return undefined;
+    }
+    const result = {
+        'kind': obj.kind,
+        'name': obj.name,
+        'key': obj.key,
+    };
+    // filter undefined values
+    return Object.entries(result).reduce((r, i) => (i[1] === undefined) ? r : ({ ...r, [i[0]]: i[1] }), {});
+}
+/**
+ * Converts an object of type 'FirestartrGithubRepositorySpecSecretsCodespacesRef' to JSON representation.
+ */
+/* eslint-disable max-len, @stylistic/max-len, quote-props, @stylistic/quote-props */
+function toJson_FirestartrGithubRepositorySpecSecretsCodespacesRef(obj) {
+    if (obj === undefined) {
+        return undefined;
+    }
+    const result = {
+        'kind': obj.kind,
+        'name': obj.name,
+        'key': obj.key,
+    };
+    // filter undefined values
+    return Object.entries(result).reduce((r, i) => (i[1] === undefined) ? r : ({ ...r, [i[0]]: i[1] }), {});
+}
+/**
+ * Converts an object of type 'FirestartrGithubRepositorySpecSecretsCopilotRef' to JSON representation.
+ */
+/* eslint-disable max-len, @stylistic/max-len, quote-props, @stylistic/quote-props */
+function toJson_FirestartrGithubRepositorySpecSecretsCopilotRef(obj) {
+    if (obj === undefined) {
+        return undefined;
+    }
+    const result = {
+        'kind': obj.kind,
+        'name': obj.name,
+        'key': obj.key,
+    };
+    // filter undefined values
+    return Object.entries(result).reduce((r, i) => (i[1] === undefined) ? r : ({ ...r, [i[0]]: i[1] }), {});
+}
+/**
+ * Converts an object of type 'FirestartrGithubRepositorySpecVarsVariableItemSchemaRef' to JSON representation.
+ */
+/* eslint-disable max-len, @stylistic/max-len, quote-props, @stylistic/quote-props */
+function toJson_FirestartrGithubRepositorySpecVarsVariableItemSchemaRef(obj) {
+    if (obj === undefined) {
+        return undefined;
+    }
+    const result = {
+        'kind': obj.kind,
+        'name': obj.name,
+        'key': obj.key,
+    };
+    // filter undefined values
+    return Object.entries(result).reduce((r, i) => (i[1] === undefined) ? r : ({ ...r, [i[0]]: i[1] }), {});
+}
+/**
+ * Converts an object of type 'FirestartrGithubRepositorySpecVarsActionsRef' to JSON representation.
+ */
+/* eslint-disable max-len, @stylistic/max-len, quote-props, @stylistic/quote-props */
+function toJson_FirestartrGithubRepositorySpecVarsActionsRef(obj) {
+    if (obj === undefined) {
+        return undefined;
+    }
+    const result = {
+        'kind': obj.kind,
+        'name': obj.name,
+        'key': obj.key,
+    };
+    // filter undefined values
+    return Object.entries(result).reduce((r, i) => (i[1] === undefined) ? r : ({ ...r, [i[0]]: i[1] }), {});
+}
+/**
+ * Converts an object of type 'FirestartrGithubRepositorySpecVarsDependabotRef' to JSON representation.
+ */
+/* eslint-disable max-len, @stylistic/max-len, quote-props, @stylistic/quote-props */
+function toJson_FirestartrGithubRepositorySpecVarsDependabotRef(obj) {
+    if (obj === undefined) {
+        return undefined;
+    }
+    const result = {
+        'kind': obj.kind,
+        'name': obj.name,
+        'key': obj.key,
+    };
+    // filter undefined values
+    return Object.entries(result).reduce((r, i) => (i[1] === undefined) ? r : ({ ...r, [i[0]]: i[1] }), {});
+}
+/**
+ * Converts an object of type 'FirestartrGithubRepositorySpecVarsCodespacesRef' to JSON representation.
+ */
+/* eslint-disable max-len, @stylistic/max-len, quote-props, @stylistic/quote-props */
+function toJson_FirestartrGithubRepositorySpecVarsCodespacesRef(obj) {
+    if (obj === undefined) {
+        return undefined;
+    }
+    const result = {
+        'kind': obj.kind,
+        'name': obj.name,
+        'key': obj.key,
+    };
+    // filter undefined values
+    return Object.entries(result).reduce((r, i) => (i[1] === undefined) ? r : ({ ...r, [i[0]]: i[1] }), {});
+}
 /* eslint-enable max-len, @stylistic/max-len, quote-props, @stylistic/quote-props */
 /**
  * @schema FirestartrGithubRepositorySpecContextBackendRefKind
@@ -306966,6 +307283,8 @@ class GithubRepositoryChart extends BaseGithubChart {
                 },
                 actions,
                 permissions: this.createPermissions(claim),
+                vars: this.createVars(claim),
+                secrets: this.createRepoSecrets(claim),
                 pages: claim.providers.github.pages,
                 branchProtections: [],
                 writeConnectionSecretToRef: {
@@ -307037,6 +307356,87 @@ class GithubRepositoryChart extends BaseGithubChart {
         }
         return permissions;
     }
+    /**
+     * @description This method creates the vars data for the repository
+     * @param claim
+     * @returns VarsConfiguration
+     */
+    createVars(claim) {
+        const vars = {};
+        const varsDefinition = claim.providers?.github?.vars;
+        if (varsDefinition) {
+            if (varsDefinition.actions) {
+                vars.actions = this.formatVars(varsDefinition.actions);
+            }
+            if (varsDefinition.codespaces) {
+                vars.codespaces = this.formatVars(varsDefinition.codespaces);
+            }
+            if (varsDefinition.copilot) {
+                vars.copilot = this.formatVars(varsDefinition.copilot);
+            }
+        }
+        return vars;
+    }
+    /**
+     * @description This method creates the secrets data for the repository
+     * @param claim
+     * @returns RepoSecretsConfiguration
+     */
+    createRepoSecrets(claim) {
+        const repoSecrets = {};
+        const repoSecretsDefinitions = claim.providers?.github?.secrets;
+        if (repoSecretsDefinitions) {
+            if (repoSecretsDefinitions.actions) {
+                repoSecrets.actions = this.formatRepoSecrets(repoSecretsDefinitions.actions);
+            }
+            if (repoSecretsDefinitions.codespaces) {
+                repoSecrets.codespaces = this.formatRepoSecrets(repoSecretsDefinitions.codespaces);
+            }
+            if (repoSecretsDefinitions.copilot) {
+                repoSecrets.copilot = this.formatRepoSecrets(repoSecretsDefinitions.copilot);
+            }
+        }
+        return repoSecrets;
+    }
+    formatVars(blockDefinition) {
+        return blockDefinition.map((varDef) => {
+            if (isRepoSecretRef(varDef.value)) {
+                const parts = varDef.value.split(':');
+                return {
+                    name: varDef.name,
+                    ref: {
+                        kind: 'Secret',
+                        name: parts[2],
+                        key: parts[3],
+                    },
+                };
+            }
+            else {
+                return {
+                    name: varDef.name,
+                    value: varDef.value,
+                };
+            }
+        });
+    }
+    formatRepoSecrets(blockDefinition) {
+        return blockDefinition.map((secretDef) => {
+            if (isRepoSecretRef(secretDef.value)) {
+                const parts = secretDef.value.split(':');
+                return {
+                    name: secretDef.name,
+                    ref: {
+                        kind: 'Secret',
+                        name: parts[2],
+                        key: parts[3],
+                    },
+                };
+            }
+            else {
+                throw new Error(`RepoSecret value is not correct: ${secretDef.value}`);
+            }
+        });
+    }
     extraCharts() {
         return this.get('features') || [];
     }
@@ -314647,6 +315047,40 @@ function tf_checkrun_extractPrInfo(item) {
     return { prNumber, repo, org };
 }
 
+;// CONCATENATED MODULE: ../operator/src/utils/index.ts
+const secretRegex = /\$\{\{ secrets\.(.*?) \}\}/g;
+function replaceConfigSecrets(config, secrets) {
+    for (const key in config) {
+        if (typeof config[key] === 'object' && config[key] !== null) {
+            // If the property is an object, call this function recursively
+            replaceConfigSecrets(config[key], secrets);
+        }
+        else if (typeof config[key] === 'string') {
+            // If the property is a string and its value is equal to secrets.something,
+            // replace the value with the value of the 'something' key in the secrets object
+            config[key] = config[key].replace(secretRegex, (_, group1) => {
+                if (!secrets[group1]) {
+                    throw new Error(`Secret ${group1} not found in secrets`);
+                }
+                return secrets[group1];
+            });
+        }
+    }
+    return config;
+}
+function replaceInlineSecrets(inline, secrets) {
+    if (typeof inline !== 'string' || !inline)
+        return inline;
+    let result = inline;
+    result = result.replace(secretRegex, (_, group1) => {
+        if (!secrets[group1]) {
+            throw new Error(`Secret ${group1} not found in secrets`);
+        }
+        return secrets[group1];
+    });
+    return result;
+}
+
 ;// CONCATENATED MODULE: ../operator/src/tfworkspaces/process-operation.ts
 
 
@@ -314658,6 +315092,7 @@ function tf_checkrun_extractPrInfo(item) {
 
 
 
+
 const TF_PROJECTS_PATH = '/tmp/tfworkspaces';
 function process_operation_processOperation(item, op, handler) {
     try {
@@ -315223,25 +315658,6 @@ function getRefContextFromCr(cr, deps) {
     }
     return secrets;
 }
-function replaceConfigSecrets(config, secrets) {
-    for (const key in config) {
-        if (typeof config[key] === 'object' && config[key] !== null) {
-            // If the property is an object, call this function recursively
-            replaceConfigSecrets(config[key], secrets);
-        }
-        else if (typeof config[key] === 'string') {
-            // If the property is a string and its value is equal to secrets.something,
-            // replace the value with the value of the 'something' key in the secrets object
-            config[key] = config[key].replace(/\$\{\{ secrets\.(.*?) \}\}/g, (_, group1) => {
-                if (!secrets[group1]) {
-                    throw new Error(`Secret ${group1} not found in secrets`);
-                }
-                return secrets[group1];
-            });
-        }
-    }
-    return config;
-}
 function adaptProviders(item, deps) {
     const result = {};
     result['secrets'] = [];
@@ -315266,10 +315682,11 @@ function adaptProvider(providerFromItem, deps) {
     const providerDependency = deps[providerName].cr;
     const providerSecrets = getRefContextFromCr(providerDependency, deps);
     const providerConfigData = replaceConfigSecrets(JSON.parse(providerDependency.spec.config), providerSecrets);
+    const providerInlineData = replaceInlineSecrets(providerDependency.spec.inline, providerSecrets);
     provider['name'] = providerDependency.spec.type;
     provider['version'] = providerDependency.spec.version;
     provider['source'] = providerDependency.spec.source;
-    provider['inline'] = providerDependency.spec.inline;
+    provider['inline'] = providerInlineData;
     provider['config'] = providerConfigData;
     const secrets = [];
     if (providerDependency.spec.env) {
@@ -315294,8 +315711,10 @@ function adaptBackend(item, deps) {
     const backendDependency = deps[backendName].cr;
     const backendSecrets = getRefContextFromCr(backendDependency, deps);
     const providerConfigData = replaceConfigSecrets(JSON.parse(backendDependency.spec.config), backendSecrets);
+    const providerInlineData = replaceInlineSecrets(backendDependency.spec.inline, backendSecrets);
     backend[backendDependency.spec.type] = {};
     backend[backendDependency.spec.type]['config'] = providerConfigData;
+    backend[backendDependency.spec.type]['inline'] = providerInlineData;
     return backend;
 }
 /**
@@ -315503,6 +315922,7 @@ async function acquireLease(namespace, cb, interval = 10000) {
 
 
 
+
 const processOperationPlan_TF_PROJECTS_PATH = '/tmp/tfworkspaces';
 function processOperationPlan(item, op, handler) {
     try {
@@ -315797,25 +316217,6 @@ function processOperationPlan_getRefContextFromCr(cr, deps) {
     }
     return secrets;
 }
-function processOperationPlan_replaceConfigSecrets(config, secrets) {
-    for (const key in config) {
-        if (typeof config[key] === 'object' && config[key] !== null) {
-            // If the property is an object, call this function recursively
-            processOperationPlan_replaceConfigSecrets(config[key], secrets);
-        }
-        else if (typeof config[key] === 'string') {
-            // If the property is a string and its value is equal to secrets.something,
-            // replace the value with the value of the 'something' key in the secrets object
-            config[key] = config[key].replace(/\$\{\{ secrets\.(.*?) \}\}/g, (_, group1) => {
-                if (!secrets[group1]) {
-                    throw new Error(`Secret ${group1} not found in secrets`);
-                }
-                return secrets[group1];
-            });
-        }
-    }
-    return config;
-}
 function processOperationPlan_adaptProviders(item, deps) {
     const result = {};
     result['secrets'] = [];
@@ -315839,11 +316240,12 @@ function processOperationPlan_adaptProvider(providerFromItem, deps) {
     const providerName = `FirestartrProviderConfig-${providerFromItem.ref.name}`;
     const providerDependency = deps[providerName].cr;
     const providerSecrets = processOperationPlan_getRefContextFromCr(providerDependency, deps);
-    const providerConfigData = processOperationPlan_replaceConfigSecrets(JSON.parse(providerDependency.spec.config), providerSecrets);
+    const providerConfigData = replaceConfigSecrets(JSON.parse(providerDependency.spec.config), providerSecrets);
+    const providerInlineData = replaceInlineSecrets(providerDependency.spec.inline, providerSecrets);
     provider['name'] = providerDependency.spec.type;
     provider['version'] = providerDependency.spec.version;
     provider['source'] = providerDependency.spec.source;
-    provider['inline'] = providerDependency.spec.inline;
+    provider['inline'] = providerInlineData;
     provider['config'] = providerConfigData;
     const secrets = [];
     if (providerDependency.spec.env) {
@@ -315867,9 +316269,11 @@ function processOperationPlan_adaptBackend(item, deps) {
     const backendName = `FirestartrProviderConfig-${item.spec.context.backend.ref.name}`;
     const backendDependency = deps[backendName].cr;
     const backendSecrets = processOperationPlan_getRefContextFromCr(backendDependency, deps);
-    const providerConfigData = processOperationPlan_replaceConfigSecrets(JSON.parse(backendDependency.spec.config), backendSecrets);
+    const providerConfigData = replaceConfigSecrets(JSON.parse(backendDependency.spec.config), backendSecrets);
+    const providerInlineData = replaceInlineSecrets(backendDependency.spec.inline, backendSecrets);
     backend[backendDependency.spec.type] = {};
     backend[backendDependency.spec.type]['config'] = providerConfigData;
+    backend[backendDependency.spec.type]['inline'] = providerInlineData;
     return backend;
 }
 /**

package/build/packages/cdk8s_renderer/imports/firestartr.dev.d.ts

@@ -896,6 +896,14 @@ export interface FirestartrGithubRepositorySpec {
      * @schema FirestartrGithubRepositorySpec#permissions
      */
     readonly permissions: FirestartrGithubRepositorySpecPermissions[];
+    /**
+     * @schema FirestartrGithubRepositorySpec#secrets
+     */
+    readonly secrets?: FirestartrGithubRepositorySpecSecrets;
+    /**
+     * @schema FirestartrGithubRepositorySpec#vars
+     */
+    readonly vars?: FirestartrGithubRepositorySpecVars;
     /**
      * @schema FirestartrGithubRepositorySpec#branchProtections
      */
@@ -1067,6 +1075,52 @@ export interface FirestartrGithubRepositorySpecPermissions {
  * Converts an object of type 'FirestartrGithubRepositorySpecPermissions' to JSON representation.
  */
 export declare function toJson_FirestartrGithubRepositorySpecPermissions(obj: FirestartrGithubRepositorySpecPermissions | undefined): Record<string, any> | undefined;
+/**
+ * @schema FirestartrGithubRepositorySpecSecrets
+ */
+export interface FirestartrGithubRepositorySpecSecrets {
+    /**
+     * @schema FirestartrGithubRepositorySpecSecrets#actions
+     */
+    readonly actions?: FirestartrGithubRepositorySpecSecretsActions[];
+    /**
+     * @schema FirestartrGithubRepositorySpecSecrets#codespaces
+     */
+    readonly codespaces?: FirestartrGithubRepositorySpecSecretsCodespaces[];
+    /**
+     * @schema FirestartrGithubRepositorySpecSecrets#copilot
+     */
+    readonly copilot?: FirestartrGithubRepositorySpecSecretsCopilot[];
+}
+/**
+ * Converts an object of type 'FirestartrGithubRepositorySpecSecrets' to JSON representation.
+ */
+export declare function toJson_FirestartrGithubRepositorySpecSecrets(obj: FirestartrGithubRepositorySpecSecrets | undefined): Record<string, any> | undefined;
+/**
+ * @schema FirestartrGithubRepositorySpecVars
+ */
+export interface FirestartrGithubRepositorySpecVars {
+    /**
+     * @schema FirestartrGithubRepositorySpecVars#variableItemSchema
+     */
+    readonly variableItemSchema?: FirestartrGithubRepositorySpecVarsVariableItemSchema;
+    /**
+     * @schema FirestartrGithubRepositorySpecVars#actions
+     */
+    readonly actions?: FirestartrGithubRepositorySpecVarsActions[];
+    /**
+     * @schema FirestartrGithubRepositorySpecVars#dependabot
+     */
+    readonly dependabot?: FirestartrGithubRepositorySpecVarsDependabot[];
+    /**
+     * @schema FirestartrGithubRepositorySpecVars#codespaces
+     */
+    readonly codespaces?: FirestartrGithubRepositorySpecVarsCodespaces[];
+}
+/**
+ * Converts an object of type 'FirestartrGithubRepositorySpecVars' to JSON representation.
+ */
+export declare function toJson_FirestartrGithubRepositorySpecVars(obj: FirestartrGithubRepositorySpecVars | undefined): Record<string, any> | undefined;
 /**
  * @schema FirestartrGithubRepositorySpecBranchProtections
  */
@@ -1251,6 +1305,141 @@ export interface FirestartrGithubRepositorySpecPermissionsRef {
  * Converts an object of type 'FirestartrGithubRepositorySpecPermissionsRef' to JSON representation.
  */
 export declare function toJson_FirestartrGithubRepositorySpecPermissionsRef(obj: FirestartrGithubRepositorySpecPermissionsRef | undefined): Record<string, any> | undefined;
+/**
+ * @schema FirestartrGithubRepositorySpecSecretsActions
+ */
+export interface FirestartrGithubRepositorySpecSecretsActions {
+    /**
+     * @schema FirestartrGithubRepositorySpecSecretsActions#name
+     */
+    readonly name: string;
+    /**
+     * @schema FirestartrGithubRepositorySpecSecretsActions#ref
+     */
+    readonly ref: FirestartrGithubRepositorySpecSecretsActionsRef;
+}
+/**
+ * Converts an object of type 'FirestartrGithubRepositorySpecSecretsActions' to JSON representation.
+ */
+export declare function toJson_FirestartrGithubRepositorySpecSecretsActions(obj: FirestartrGithubRepositorySpecSecretsActions | undefined): Record<string, any> | undefined;
+/**
+ * @schema FirestartrGithubRepositorySpecSecretsCodespaces
+ */
+export interface FirestartrGithubRepositorySpecSecretsCodespaces {
+    /**
+     * @schema FirestartrGithubRepositorySpecSecretsCodespaces#name
+     */
+    readonly name: string;
+    /**
+     * @schema FirestartrGithubRepositorySpecSecretsCodespaces#ref
+     */
+    readonly ref: FirestartrGithubRepositorySpecSecretsCodespacesRef;
+}
+/**
+ * Converts an object of type 'FirestartrGithubRepositorySpecSecretsCodespaces' to JSON representation.
+ */
+export declare function toJson_FirestartrGithubRepositorySpecSecretsCodespaces(obj: FirestartrGithubRepositorySpecSecretsCodespaces | undefined): Record<string, any> | undefined;
+/**
+ * @schema FirestartrGithubRepositorySpecSecretsCopilot
+ */
+export interface FirestartrGithubRepositorySpecSecretsCopilot {
+    /**
+     * @schema FirestartrGithubRepositorySpecSecretsCopilot#name
+     */
+    readonly name: string;
+    /**
+     * @schema FirestartrGithubRepositorySpecSecretsCopilot#ref
+     */
+    readonly ref: FirestartrGithubRepositorySpecSecretsCopilotRef;
+}
+/**
+ * Converts an object of type 'FirestartrGithubRepositorySpecSecretsCopilot' to JSON representation.
+ */
+export declare function toJson_FirestartrGithubRepositorySpecSecretsCopilot(obj: FirestartrGithubRepositorySpecSecretsCopilot | undefined): Record<string, any> | undefined;
+/**
+ * @schema FirestartrGithubRepositorySpecVarsVariableItemSchema
+ */
+export interface FirestartrGithubRepositorySpecVarsVariableItemSchema {
+    /**
+     * @schema FirestartrGithubRepositorySpecVarsVariableItemSchema#name
+     */
+    readonly name?: string;
+    /**
+     * @schema FirestartrGithubRepositorySpecVarsVariableItemSchema#value
+     */
+    readonly value?: string;
+    /**
+     * @schema FirestartrGithubRepositorySpecVarsVariableItemSchema#ref
+     */
+    readonly ref?: FirestartrGithubRepositorySpecVarsVariableItemSchemaRef;
+}
+/**
+ * Converts an object of type 'FirestartrGithubRepositorySpecVarsVariableItemSchema' to JSON representation.
+ */
+export declare function toJson_FirestartrGithubRepositorySpecVarsVariableItemSchema(obj: FirestartrGithubRepositorySpecVarsVariableItemSchema | undefined): Record<string, any> | undefined;
+/**
+ * @schema FirestartrGithubRepositorySpecVarsActions
+ */
+export interface FirestartrGithubRepositorySpecVarsActions {
+    /**
+     * @schema FirestartrGithubRepositorySpecVarsActions#name
+     */
+    readonly name?: string;
+    /**
+     * @schema FirestartrGithubRepositorySpecVarsActions#value
+     */
+    readonly value?: string;
+    /**
+     * @schema FirestartrGithubRepositorySpecVarsActions#ref
+     */
+    readonly ref?: FirestartrGithubRepositorySpecVarsActionsRef;
+}
+/**
+ * Converts an object of type 'FirestartrGithubRepositorySpecVarsActions' to JSON representation.
+ */
+export declare function toJson_FirestartrGithubRepositorySpecVarsActions(obj: FirestartrGithubRepositorySpecVarsActions | undefined): Record<string, any> | undefined;
+/**
+ * @schema FirestartrGithubRepositorySpecVarsDependabot
+ */
+export interface FirestartrGithubRepositorySpecVarsDependabot {
+    /**
+     * @schema FirestartrGithubRepositorySpecVarsDependabot#name
+     */
+    readonly name?: string;
+    /**
+     * @schema FirestartrGithubRepositorySpecVarsDependabot#value
+     */
+    readonly value?: string;
+    /**
+     * @schema FirestartrGithubRepositorySpecVarsDependabot#ref
+     */
+    readonly ref?: FirestartrGithubRepositorySpecVarsDependabotRef;
+}
+/**
+ * Converts an object of type 'FirestartrGithubRepositorySpecVarsDependabot' to JSON representation.
+ */
+export declare function toJson_FirestartrGithubRepositorySpecVarsDependabot(obj: FirestartrGithubRepositorySpecVarsDependabot | undefined): Record<string, any> | undefined;
+/**
+ * @schema FirestartrGithubRepositorySpecVarsCodespaces
+ */
+export interface FirestartrGithubRepositorySpecVarsCodespaces {
+    /**
+     * @schema FirestartrGithubRepositorySpecVarsCodespaces#name
+     */
+    readonly name?: string;
+    /**
+     * @schema FirestartrGithubRepositorySpecVarsCodespaces#value
+     */
+    readonly value?: string;
+    /**
+     * @schema FirestartrGithubRepositorySpecVarsCodespaces#ref
+     */
+    readonly ref?: FirestartrGithubRepositorySpecVarsCodespacesRef;
+}
+/**
+ * Converts an object of type 'FirestartrGithubRepositorySpecVarsCodespaces' to JSON representation.
+ */
+export declare function toJson_FirestartrGithubRepositorySpecVarsCodespaces(obj: FirestartrGithubRepositorySpecVarsCodespaces | undefined): Record<string, any> | undefined;
 /**
  * @schema FirestartrGithubRepositorySpecWriteConnectionSecretToRefOutputs
  */
@@ -1298,6 +1487,153 @@ export interface FirestartrGithubRepositorySpecContextProviderRef {
  * Converts an object of type 'FirestartrGithubRepositorySpecContextProviderRef' to JSON representation.
  */
 export declare function toJson_FirestartrGithubRepositorySpecContextProviderRef(obj: FirestartrGithubRepositorySpecContextProviderRef | undefined): Record<string, any> | undefined;
+/**
+ * @schema FirestartrGithubRepositorySpecSecretsActionsRef
+ */
+export interface FirestartrGithubRepositorySpecSecretsActionsRef {
+    /**
+     * @schema FirestartrGithubRepositorySpecSecretsActionsRef#kind
+     */
+    readonly kind: string;
+    /**
+     * @schema FirestartrGithubRepositorySpecSecretsActionsRef#name
+     */
+    readonly name: string;
+    /**
+     * @schema FirestartrGithubRepositorySpecSecretsActionsRef#key
+     */
+    readonly key: string;
+}
+/**
+ * Converts an object of type 'FirestartrGithubRepositorySpecSecretsActionsRef' to JSON representation.
+ */
+export declare function toJson_FirestartrGithubRepositorySpecSecretsActionsRef(obj: FirestartrGithubRepositorySpecSecretsActionsRef | undefined): Record<string, any> | undefined;
+/**
+ * @schema FirestartrGithubRepositorySpecSecretsCodespacesRef
+ */
+export interface FirestartrGithubRepositorySpecSecretsCodespacesRef {
+    /**
+     * @schema FirestartrGithubRepositorySpecSecretsCodespacesRef#kind
+     */
+    readonly kind: string;
+    /**
+     * @schema FirestartrGithubRepositorySpecSecretsCodespacesRef#name
+     */
+    readonly name: string;
+    /**
+     * @schema FirestartrGithubRepositorySpecSecretsCodespacesRef#key
+     */
+    readonly key: string;
+}
+/**
+ * Converts an object of type 'FirestartrGithubRepositorySpecSecretsCodespacesRef' to JSON representation.
+ */
+export declare function toJson_FirestartrGithubRepositorySpecSecretsCodespacesRef(obj: FirestartrGithubRepositorySpecSecretsCodespacesRef | undefined): Record<string, any> | undefined;
+/**
+ * @schema FirestartrGithubRepositorySpecSecretsCopilotRef
+ */
+export interface FirestartrGithubRepositorySpecSecretsCopilotRef {
+    /**
+     * @schema FirestartrGithubRepositorySpecSecretsCopilotRef#kind
+     */
+    readonly kind: string;
+    /**
+     * @schema FirestartrGithubRepositorySpecSecretsCopilotRef#name
+     */
+    readonly name: string;
+    /**
+     * @schema FirestartrGithubRepositorySpecSecretsCopilotRef#key
+     */
+    readonly key: string;
+}
+/**
+ * Converts an object of type 'FirestartrGithubRepositorySpecSecretsCopilotRef' to JSON representation.
+ */
+export declare function toJson_FirestartrGithubRepositorySpecSecretsCopilotRef(obj: FirestartrGithubRepositorySpecSecretsCopilotRef | undefined): Record<string, any> | undefined;
+/**
+ * @schema FirestartrGithubRepositorySpecVarsVariableItemSchemaRef
+ */
+export interface FirestartrGithubRepositorySpecVarsVariableItemSchemaRef {
+    /**
+     * @schema FirestartrGithubRepositorySpecVarsVariableItemSchemaRef#kind
+     */
+    readonly kind: string;
+    /**
+     * @schema FirestartrGithubRepositorySpecVarsVariableItemSchemaRef#name
+     */
+    readonly name: string;
+    /**
+     * @schema FirestartrGithubRepositorySpecVarsVariableItemSchemaRef#key
+     */
+    readonly key: string;
+}
+/**
+ * Converts an object of type 'FirestartrGithubRepositorySpecVarsVariableItemSchemaRef' to JSON representation.
+ */
+export declare function toJson_FirestartrGithubRepositorySpecVarsVariableItemSchemaRef(obj: FirestartrGithubRepositorySpecVarsVariableItemSchemaRef | undefined): Record<string, any> | undefined;
+/**
+ * @schema FirestartrGithubRepositorySpecVarsActionsRef
+ */
+export interface FirestartrGithubRepositorySpecVarsActionsRef {
+    /**
+     * @schema FirestartrGithubRepositorySpecVarsActionsRef#kind
+     */
+    readonly kind: string;
+    /**
+     * @schema FirestartrGithubRepositorySpecVarsActionsRef#name
+     */
+    readonly name: string;
+    /**
+     * @schema FirestartrGithubRepositorySpecVarsActionsRef#key
+     */
+    readonly key: string;
+}
+/**
+ * Converts an object of type 'FirestartrGithubRepositorySpecVarsActionsRef' to JSON representation.
+ */
+export declare function toJson_FirestartrGithubRepositorySpecVarsActionsRef(obj: FirestartrGithubRepositorySpecVarsActionsRef | undefined): Record<string, any> | undefined;
+/**
+ * @schema FirestartrGithubRepositorySpecVarsDependabotRef
+ */
+export interface FirestartrGithubRepositorySpecVarsDependabotRef {
+    /**
+     * @schema FirestartrGithubRepositorySpecVarsDependabotRef#kind
+     */
+    readonly kind: string;
+    /**
+     * @schema FirestartrGithubRepositorySpecVarsDependabotRef#name
+     */
+    readonly name: string;
+    /**
+     * @schema FirestartrGithubRepositorySpecVarsDependabotRef#key
+     */
+    readonly key: string;
+}
+/**
+ * Converts an object of type 'FirestartrGithubRepositorySpecVarsDependabotRef' to JSON representation.
+ */
+export declare function toJson_FirestartrGithubRepositorySpecVarsDependabotRef(obj: FirestartrGithubRepositorySpecVarsDependabotRef | undefined): Record<string, any> | undefined;
+/**
+ * @schema FirestartrGithubRepositorySpecVarsCodespacesRef
+ */
+export interface FirestartrGithubRepositorySpecVarsCodespacesRef {
+    /**
+     * @schema FirestartrGithubRepositorySpecVarsCodespacesRef#kind
+     */
+    readonly kind: string;
+    /**
+     * @schema FirestartrGithubRepositorySpecVarsCodespacesRef#name
+     */
+    readonly name: string;
+    /**
+     * @schema FirestartrGithubRepositorySpecVarsCodespacesRef#key
+     */
+    readonly key: string;
+}
+/**
+ * Converts an object of type 'FirestartrGithubRepositorySpecVarsCodespacesRef' to JSON representation.
+ */
+export declare function toJson_FirestartrGithubRepositorySpecVarsCodespacesRef(obj: FirestartrGithubRepositorySpecVarsCodespacesRef | undefined): Record<string, any> | undefined;
 /**
  * @schema FirestartrGithubRepositorySpecContextBackendRefKind
  */

package/build/packages/cdk8s_renderer/src/charts/github/repositoryChart.d.ts

@@ -1,4 +1,5 @@
 import { ApiObject, GroupVersionKind } from 'cdk8s';
+import { NamedVars, RepoSecrets } from '../../utils/repositoryClaimUtils';
 import { FirestartrGithubRepositoryProps } from '../../../imports/firestartr.dev';
 import { IUnitializedStateKey } from '../../claims/base';
 import { BaseGithubChart } from './base';
@@ -14,6 +15,20 @@ export declare class GithubRepositoryChart extends BaseGithubChart {
      * @returns Permission[]
      */
     private createPermissions;
+    /**
+     * @description This method creates the vars data for the repository
+     * @param claim
+     * @returns VarsConfiguration
+     */
+    private createVars;
+    /**
+     * @description This method creates the secrets data for the repository
+     * @param claim
+     * @returns RepoSecretsConfiguration
+     */
+    private createRepoSecrets;
+    formatVars(blockDefinition: any): NamedVars;
+    formatRepoSecrets(blockDefinition: any): RepoSecrets;
     extraCharts(): {
         claim: {
             kind: string;

package/build/packages/cdk8s_renderer/src/refsSorter/refsExtractor.d.ts

@@ -3,3 +3,4 @@ export declare function extractRefs(renderClaims: RenderClaims, kind: string): a
 export declare function extractAllRefs(claimData: string): any[];
 export declare function getGroupParentRef(parent: string, references?: any[]): any[];
 export declare function getTfWorkspacesRefs(values: any, references?: any[]): any[];
+export declare function getComponentVarsAndSecretsRefs(parsedClaim: any): string[];

package/build/packages/cdk8s_renderer/src/utils/repositoryClaimUtils.d.ts

@@ -45,3 +45,45 @@ export interface CollaboratorPermission {
  * @returns string
  */
 export declare function createCodeOwnersData(claim: any, additionalRules?: any[]): string;
+/**
+ * A reference to a secret, which can be an internal or external source.
+ */
+export interface SecretRef {
+    kind: 'Secret' | 'ExternalSecret';
+    name: string;
+    key: string;
+}
+/**
+ *  * A variable definition. It must have a name and can be either a literal
+ *   * value or a reference to a secret.
+ *    */
+export type Var = {
+    name: string;
+    value: string;
+} | {
+    name: string;
+    ref: SecretRef;
+};
+export type RepoSecret = {
+    name: string;
+    ref: RepoSecretRef;
+};
+export type NamedVars = Var[];
+export type RepoSecrets = RepoSecret[];
+export interface VarsConfiguration {
+    copilot?: NamedVars;
+    actions?: NamedVars;
+    codespaces?: NamedVars;
+}
+export interface RepoSecretsConfiguration {
+    copilot?: RepoSecrets;
+    actions?: RepoSecrets;
+    codespaces?: RepoSecrets;
+}
+export interface RepoSecretRef {
+    kind: 'secretsclaim';
+    name: string;
+    key: string;
+}
+export declare function isRepoSecretRef(suspectedRef: string): boolean;
+export declare function extractRepoSecretRef(ref: string): RepoSecretRef;

package/build/packages/operator/src/utils/index.d.ts

@@ -0,0 +1,2 @@
+export declare function replaceConfigSecrets(config: any, secrets: any): any;
+export declare function replaceInlineSecrets(inline: string, secrets: any): string;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@firestartr/cli",
-  "version": "1.49.0-snapshot-7",
+  "version": "1.49.0-snapshot-9",
   "private": false,
   "description": "Commandline tool",
   "main": "build/main.js",