@kanonak-protocol/cli 5.38.0 → 6.0.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (3) hide show
  1. package/dist/auth/credentialedFetch.d.ts +8 -6
  2. package/dist/index.js +204 -203
  3. package/package.json +3 -3
package/dist/auth/credentialedFetch.d.ts CHANGED
@@ -1,11 +1,13 @@
1
1
  import type { AuthenticatedFetchFn } from '@kanonak-protocol/sdk';
2
2
  /**
3
- * The open CLI's consumption transport. Gated reads present a BYO bearer token
4
- * from the environment (`KANONAK_TOKEN` / `KANONAK_TOKEN_<AUTHORITY>`) via the
5
- * SDK's reference provider; public publishers resolve anonymously.
3
+ * The open CLI's consumption transport. Gated reads present the credential the
4
+ * user configured (see `credentialProviderFromConfig`): an exec credential
5
+ * helper named by `KANONAK_CREDENTIAL_HELPER` or `credentialHelper` in
6
+ * `~/.kanonak/config.json`, or else a BYO bearer token from `KANONAK_TOKEN` /
7
+ * `KANONAK_TOKEN_<AUTHORITY>`. Public publishers resolve anonymously.
6
8
  *
7
- * Credential ACQUISITION (device-cert enrollment, mTLS session minting, the git
8
- * credential helper) is NOT here — it lives in the platform CLI and plugs into
9
- * the same `CredentialProvider` seam. See ideas/protocol-vs-platform-auth-split.md.
9
+ * Credential ACQUISITION (enrollment, session minting, token exchange) is not
10
+ * here: a helper does it, behind the same `CredentialProvider` seam. See
11
+ * ideas/protocol-vs-platform-auth-split.md and #126.
10
12
  */
11
13
  export declare function createCliFetch(): AuthenticatedFetchFn;