@intentius/terragucci 0.4.46 → 0.4.47

package/dist/terragucci.schema.json

@@ -430,6 +430,27 @@
       ],
       "description": "The control repo to tell after the default branch's apply succeeds; it runs this repo's dependents."
     },
+    "templates": {
+      "type": "object",
+      "properties": {
+        "registry": {
+          "type": "string",
+          "pattern": "^https?://[^\\s/]+"
+        },
+        "apps": {
+          "type": "string",
+          "pattern": "^(?!/)(?!.*(^|/)\\.\\.(/|$))(?!.*//)(?!.*/$).*\\{name\\}"
+        },
+        "require": {
+          "enum": [
+            "signed",
+            "any"
+          ]
+        }
+      },
+      "additionalProperties": false,
+      "description": "Apps from templates: the registry whose catalog lists them, the path of a requested app's root, and the attestation a version needs."
+    },
     "gitlab": {
       "type": "object",
       "properties": {
@@ -2354,6 +2375,27 @@
           ],
           "description": "The control repo to tell after the default branch's apply succeeds; it runs this repo's dependents."
         },
+        "templates": {
+          "type": "object",
+          "properties": {
+            "registry": {
+              "type": "string",
+              "pattern": "^https?://[^\\s/]+"
+            },
+            "apps": {
+              "type": "string",
+              "pattern": "^(?!/)(?!.*(^|/)\\.\\.(/|$))(?!.*//)(?!.*/$).*\\{name\\}"
+            },
+            "require": {
+              "enum": [
+                "signed",
+                "any"
+              ]
+            }
+          },
+          "additionalProperties": false,
+          "description": "Apps from templates: the registry whose catalog lists them, the path of a requested app's root, and the attestation a version needs."
+        },
         "gitlab": {
           "type": "object",
           "properties": {

package/dist/types.d.ts

@@ -419,6 +419,22 @@ export interface ControlSettings {
     /** The branch of the control repo a GitLab pipeline or a Forgejo workflow runs on. Default `main`; GitHub's dispatch always runs the default branch. */
     ref?: string;
 }
+/** `templates`' settings. */
+export declare const TEMPLATES_KEYS: readonly ["registry", "apps", "require"];
+/** `templates.require`: `signed` takes a signed or verified version, `any` an unsigned one too. */
+export declare const TEMPLATES_REQUIRE: readonly ["signed", "any"];
+/** Where a requested app's root goes by default. */
+export declare const TEMPLATES_APPS = "apps/{name}";
+export interface TemplatesSettings {
+    /** The registry URL whose release catalog lists the templates. Default `modules.registry.url`. */
+    registry?: string;
+    /** The path of a requested app's root, with `{name}` in it. Default `apps/{name}`. */
+    apps?: string;
+    /** The lowest attestation a template version needs. Default `signed`. */
+    require?: (typeof TEMPLATES_REQUIRE)[number];
+}
+/** The problems of a `templates` value. */
+export declare function templatesProblems(v: unknown, where: string): string[];
 export declare const CONTROL_KEYS: readonly ["repo", "op", "forge", "member", "token_env", "read_token_env", "ref"];
 /** The token a member holds for the dispatch when `control.token_env` is unset. */
 export declare const CONTROL_TOKEN_ENV = "TERRAGUCCI_CONTROL_TOKEN";
@@ -558,6 +574,12 @@ export interface ProjectSettings {
      * control repo. `respond.rollout: off` leaves the job out.
      */
     rollouts?: string | false;
+    /**
+     * Apps from templates (`terragucci templates`, `terragucci request`): the
+     * registry whose catalog lists the templates, where a requested app's root
+     * goes, and the lowest attestation a template version needs.
+     */
+    templates?: TemplatesSettings;
     /**
      * The control repo to tell once the default branch's apply succeeded (ControlSettings). The pipeline gets a
      * job that sends the control repo a dispatch, and the control repo runs this project's dependents.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@intentius/terragucci",
-  "version": "0.4.46",
+  "version": "0.4.47",
   "description": "The whole Terraform lifecycle, handled: one config file, generated pipelines for GitHub, GitLab and Forgejo.",
   "license": "Apache-2.0",
   "type": "module",
@@ -36,7 +36,7 @@
     "build": "node ../../scripts/build-cli.mjs"
   },
   "dependencies": {
-    "@intentius/chant": "0.124.55"
+    "@intentius/chant": "0.124.57"
   },
   "peerDependencies": {
     "@intentius/tsad-reference": "2.x",
@@ -52,10 +52,10 @@
   },
   "devDependencies": {
     "@cdktn/hcl2json": "0.24.0",
-    "@intentius/chant-lexicon-forgejo": "0.124.55",
-    "@intentius/chant-lexicon-github": "0.124.55",
-    "@intentius/chant-lexicon-gitlab": "0.124.55",
-    "@intentius/chant-lexicon-terraform": "0.124.55",
+    "@intentius/chant-lexicon-forgejo": "0.124.57",
+    "@intentius/chant-lexicon-github": "0.124.57",
+    "@intentius/chant-lexicon-gitlab": "0.124.57",
+    "@intentius/chant-lexicon-terraform": "0.124.57",
     "@intentius/tsad-reference": "2.1.0",
     "@modelcontextprotocol/sdk": "1.30.1"
   }

package/dist/registry-edge-token-stores

@@ -1 +0,0 @@
-chant#4590