@kanonak-protocol/cli 8.5.0 → 8.6.0

package/dist/resolution/LocalResolution.d.ts

@@ -2,12 +2,12 @@ import { KanonakParser, LocalFirstRepository } from '@kanonak-protocol/sdk';
 import type { IKanonakDocumentRepository } from '@kanonak-protocol/sdk';
 export { LocalFirstRepository };
 /**
- * Find the workspace root by walking up from the given path.
- * Walks up through publisher domain directories (names containing a dot)
- * and their subdirectories, so sibling publisher directories are included.
- *
- * Example: given kanonak/example.com/platform-connections/,
- * walks up through example.com (publisher domain) to kanonak/.
+ * The workspace a folder belongs to: the nearest folder at or above it that is
+ * a git repository's root, the unit whose packages are versioned, ignored and
+ * validated together. Outside any repository, the folder itself, so nothing
+ * above it is read. A folder's name says nothing: guessing a publisher domain
+ * from a dot climbed into the system's temp folder (typescript#80) and stopped
+ * short of a sibling package (typescript#27).
  */
 export declare function findWorkspaceRoot(dir: string): string;
 /**

package/dist/resolution/cliRemote.d.ts

@@ -1,10 +1,14 @@
-import type { AuthenticatedFetchFn, PackageUrlTemplates } from '@kanonak-protocol/sdk';
+import type { AuthenticatedFetchFn, PackageUrlTemplates, TemplateTrustedRead } from '@kanonak-protocol/sdk';
 /** How the CLI reaches publishers. */
 export interface CliRemote {
     /** The one credentialed transport (see {@link cliFetch}). */
     fetchFn: AuthenticatedFetchFn;
     /** The user's package URL templates, when any are configured (#130). */
     packageUrlTemplates?: PackageUrlTemplates;
+    /** The publishers whose template the user trusts for bytes, when any are named (#222). */
+    templateTrustedPublishers?: readonly string[];
+    /** Says, once per publisher, that a version was read on that trust (see {@link templateTrustNotice}). */
+    onTemplateTrustedRead?: (read: TemplateTrustedRead) => void;
 }
 /**
  * How the CLI reaches publishers, one per process: the credentialed transport,
@@ -14,3 +18,8 @@ export interface CliRemote {
  * into its options, so no command fetches with one and not the other.
  */
 export declare function cliRemote(): CliRemote;
+/**
+ * Says, the first time a run reads a publisher's version on `templateTrustedPublishers`' trust, that its bytes were
+ * checked against nothing, so every log shows each run that relied on the setting rather than staying silent.
+ */
+export declare function templateTrustNotice(write: (line: string) => void): (read: TemplateTrustedRead) => void;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kanonak-protocol/cli",
-  "version": "8.5.0",
+  "version": "8.6.0",
   "description": "Command-line tool for the Kanonak Protocol — validate, resolve, preview, and publish semantic ontology packages.",
   "type": "module",
   "main": "./dist/index.js",
@@ -35,8 +35,8 @@
     "semantic-web"
   ],
   "dependencies": {
-    "@kanonak-protocol/sdk": "^8.5.0",
-    "@kanonak-protocol/types": "^8.5.0",
+    "@kanonak-protocol/sdk": "^8.6.0",
+    "@kanonak-protocol/types": "^8.6.0",
     "commander": "^13.0.0"
   },
   "devDependencies": {