@kitsy/cnos-cli 1.8.1 → 1.8.2

package/dist/index.js

@@ -812,7 +812,7 @@ async function setSecret(configPath, rawValue, options = {}) {
   if (!vaultDefinition) {
     throw new Error(`Unknown vault "${vault}". Create it first with cnos vault create ${vault}.`);
   }
-  const mode = options.mode ?? (vaultDefinition.provider === "local" ? "local" : vaultDefinition.provider === "github-secrets" ? "ref" : "remote");
+  const mode = options.mode ?? (vaultDefinition.provider === "local" ? "local" : vaultDefinition.provider === "github-secrets" || vaultDefinition.provider === "environment" ? "ref" : "remote");
   let reference;
   if (mode === "local") {
     const auth = await resolveVaultAuth(vault, vaultDefinition, options.processEnv ?? process.env);
@@ -1806,7 +1806,7 @@ var COMMANDS = [
       "cnos vault create local-dev",
       "cnos vault auth local-dev",
       "cnos secret set app.token super-secret --vault local-dev",
-      "cnos vault create github-ci --provider github-secrets --no-passphrase",
+      "cnos vault create github-ci --provider environment --no-passphrase",
       "cnos secret set app.token APP_TOKEN --vault github-ci"
     ]
   },
@@ -1814,21 +1814,21 @@ var COMMANDS = [
     id: "vault",
     summary: "Manage manifest-defined secret vaults.",
     usage: "cnos vault [create <name> | list | remove <name>] [options] [global-options]",
-    description: "Creates, lists, and removes vault definitions in .cnos/cnos.yml. Local vaults use encrypted material under ~/.cnos/secrets, while github-secrets vaults resolve from process.env in CI.",
+    description: "Creates, lists, and removes vault definitions in .cnos/cnos.yml. Local vaults use encrypted material under ~/.cnos/secrets, while environment-backed vaults resolve from process.env in CI and cloud runtimes. github-secrets remains a compatibility alias.",
     options: [
       {
-        flag: "--provider <local|github-secrets>",
+        flag: "--provider <local|environment|github-secrets>",
         description: "Vault provider. Defaults to local."
       },
       {
         flag: "--no-passphrase",
-        description: "Allowed for passwordless providers such as github-secrets."
+        description: "Allowed for passwordless providers such as environment-backed vaults."
       }
     ],
     examples: [
       "cnos vault create local-dev",
       "cnos vault auth local-dev",
-      "cnos vault create github-ci --provider github-secrets --no-passphrase",
+      "cnos vault create github-ci --provider environment --no-passphrase",
       "cnos vault list",
       "cnos vault remove local-dev"
     ]
@@ -1836,11 +1836,11 @@ var COMMANDS = [
   {
     id: "vault create",
     summary: "Create a manifest-defined vault.",
-    usage: "cnos vault create <name> [--provider <local|github-secrets>] [--no-passphrase] [global-options]",
+    usage: "cnos vault create <name> [--provider <local|environment|github-secrets>] [--no-passphrase] [global-options]",
     description: "Creates a vault definition in .cnos/cnos.yml and, for local vaults, initializes the encrypted store under ~/.cnos/secrets. CNOS prompts for a passphrase when one is not already available from env or keychain.",
     examples: [
       "cnos vault create local-dev",
-      "cnos vault create github-ci --provider github-secrets --no-passphrase"
+      "cnos vault create firebase-prod --provider environment --no-passphrase"
     ]
   },
   {
@@ -2013,12 +2013,12 @@ var COMMANDS = [
     id: "secret set",
     summary: "Write a secret securely.",
     usage: "cnos secret set <path> <value> [--local|--remote|--ref] [--vault <name>] [--provider <name>] [global-options]",
-    description: "Writes a secret reference into the repo. When a local vault is selected, CNOS stores encrypted secret material outside the repo under ~/.cnos/secrets/vaults/<vault>; when a github-secrets vault is selected, CNOS writes a CI env-backed ref.",
+    description: "Writes a secret reference into the repo. When a local vault is selected, CNOS stores encrypted secret material outside the repo under ~/.cnos/secrets/vaults/<vault>; when an environment-backed vault is selected, CNOS writes an env-backed ref for CI or cloud runtimes.",
     examples: [
       "cnos vault create db",
       "cnos vault auth db",
       "cnos secret set app.token super-secret --vault db",
-      "cnos vault create github-ci --provider github-secrets --no-passphrase",
+      "cnos vault create github-ci --provider environment --no-passphrase",
       "cnos secret set app.token APP_TOKEN --vault github-ci"
     ]
   },
@@ -4318,7 +4318,7 @@ async function runValidate(options = {}) {
 // package.json
 var package_default = {
   name: "@kitsy/cnos-cli",
-  version: "1.8.1",
+  version: "1.8.2",
   description: "CLI entry point and developer tooling for CNOS.",
   type: "module",
   main: "./dist/index.js",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kitsy/cnos-cli",
-  "version": "1.8.1",
+  "version": "1.8.2",
   "description": "CLI entry point and developer tooling for CNOS.",
   "type": "module",
   "main": "./dist/index.js",
@@ -37,7 +37,7 @@
   },
   "dependencies": {
     "smol-toml": "^1.4.2",
-    "@kitsy/cnos": "1.8.1"
+    "@kitsy/cnos": "1.8.2"
   },
   "scripts": {
     "build": "tsup src/index.ts --format esm --dts",