@kitsy/cnos 1.10.0 → 1.11.0

package/dist/build/index.js

@@ -1,17 +1,17 @@
 import {
   createCnos
-} from "../chunk-CSA4L64V.js";
-import "../chunk-3EZGPQCE.js";
-import "../chunk-RTHKUGJV.js";
-import "../chunk-ESBHCFC6.js";
-import "../chunk-UGLATJJD.js";
-import "../chunk-A5U7EZCJ.js";
-import "../chunk-FHXLOWAB.js";
+} from "../chunk-NFGPS7VJ.js";
+import "../chunk-5JGNRADB.js";
+import "../chunk-NU25VFA2.js";
+import "../chunk-RNTTPI5S.js";
+import "../chunk-2DMCB3PK.js";
+import "../chunk-KJ57PF47.js";
+import "../chunk-DPC2BV3S.js";
 import {
   CnosManifestError,
-  createSecretVaultProvider,
+  assertSecretRefVaultProviderCompatible,
   isSecretReference
-} from "../chunk-MQ4WG3K6.js";
+} from "../chunk-WPB4HB2K.js";
 
 // src/build/index.ts
 async function resolveBrowserData(options = {}) {
@@ -106,15 +106,13 @@ function validateServerProjectionSecretRefs(runtime) {
     }
     const vaultId = entry.value.vault ?? "default";
     const definition = runtime.manifest.vaults[vaultId];
-    if (!definition) {
+    if (!definition && entry.value.vault) {
       throw new CnosManifestError(`Unknown vault "${vaultId}" for secret ref "${entry.key}"`);
     }
-    if (entry.value.provider !== definition.provider) {
-      throw new CnosManifestError(
-        `Secret ref "${entry.key}" declares provider "${entry.value.provider}" but vault "${vaultId}" uses provider "${definition.provider}"`
-      );
+    if (!definition && !entry.value.provider) {
+      throw new CnosManifestError(`Secret ref "${entry.key}" must declare a provider or reference a configured vault`);
     }
-    createSecretVaultProvider(vaultId, definition);
+    assertSecretRefVaultProviderCompatible(runtime.manifest, entry.value, entry.key);
   }
 }
 export {

package/dist/{chunk-A5U7EZCJ.js → chunk-2DMCB3PK.js}

@@ -1,6 +1,6 @@
 import {
   applySchemaRules
-} from "./chunk-MQ4WG3K6.js";
+} from "./chunk-WPB4HB2K.js";
 
 // ../../plugins/basic-schema/src/index.ts
 function createBasicSchemaPlugin() {

package/dist/{chunk-RTHKUGJV.js → chunk-5JGNRADB.js}

@@ -1,7 +1,7 @@
 import {
   toEnv,
   toPublicEnv
-} from "./chunk-MQ4WG3K6.js";
+} from "./chunk-WPB4HB2K.js";
 
 // ../../plugins/env-export/src/index.ts
 function createEnvExportPlugin() {

package/dist/{chunk-3EZGPQCE.js → chunk-DPC2BV3S.js}

@@ -2,7 +2,7 @@ import {
   envVarToLogicalKey,
   resolveWorkspaceScopedPath,
   toPortablePath
-} from "./chunk-MQ4WG3K6.js";
+} from "./chunk-WPB4HB2K.js";
 
 // ../../plugins/dotenv/src/index.ts
 import { readFile } from "fs/promises";

package/dist/{chunk-FHXLOWAB.js → chunk-KJ57PF47.js}

@@ -1,6 +1,6 @@
 import {
   joinConfigPath
-} from "./chunk-MQ4WG3K6.js";
+} from "./chunk-WPB4HB2K.js";
 
 // ../../plugins/cli-args/src/index.ts
 var CLI_ARGS_PLUGIN_ID = "@kitsy/cnos/plugins/cli-args";

package/dist/{chunk-CSA4L64V.js → chunk-NFGPS7VJ.js}

@@ -1,27 +1,27 @@
-import {
-  createDotenvPlugin
-} from "./chunk-3EZGPQCE.js";
 import {
   createEnvExportPlugin,
   createPublicEnvExportPlugin
-} from "./chunk-RTHKUGJV.js";
+} from "./chunk-5JGNRADB.js";
 import {
   createFilesystemSecretsPlugin,
   createFilesystemValuesPlugin
-} from "./chunk-ESBHCFC6.js";
+} from "./chunk-NU25VFA2.js";
 import {
   createProcessEnvPlugin
-} from "./chunk-UGLATJJD.js";
+} from "./chunk-RNTTPI5S.js";
 import {
   createBasicSchemaPlugin
-} from "./chunk-A5U7EZCJ.js";
+} from "./chunk-2DMCB3PK.js";
 import {
   createCliArgsPlugin
-} from "./chunk-FHXLOWAB.js";
+} from "./chunk-KJ57PF47.js";
+import {
+  createDotenvPlugin
+} from "./chunk-DPC2BV3S.js";
 import {
   createCnos,
   createProvenanceInspector
-} from "./chunk-MQ4WG3K6.js";
+} from "./chunk-WPB4HB2K.js";
 
 // src/defaultPlugins.ts
 function defaultPlugins() {
@@ -68,7 +68,7 @@ function setBootstrappedSecretHydrationRequired(value) {
 // package.json
 var package_default = {
   name: "@kitsy/cnos",
-  version: "1.10.0",
+  version: "1.11.0",
   description: "Batteries-included CNOS runtime package wired with the official plugins.",
   type: "module",
   main: "./dist/index.cjs",

package/dist/{chunk-ESBHCFC6.js → chunk-NU25VFA2.js}

@@ -4,7 +4,7 @@ import {
   isSecretReference,
   parseYaml,
   toPortablePath
-} from "./chunk-MQ4WG3K6.js";
+} from "./chunk-WPB4HB2K.js";
 
 // ../../plugins/filesystem/src/helpers.ts
 import { readdir } from "fs/promises";

package/dist/{chunk-UGLATJJD.js → chunk-RNTTPI5S.js}

@@ -1,6 +1,6 @@
 import {
   envVarToLogicalKey
-} from "./chunk-MQ4WG3K6.js";
+} from "./chunk-WPB4HB2K.js";
 
 // ../../plugins/process-env/src/index.ts
 var PROCESS_ENV_PLUGIN_ID = "@kitsy/cnos/plugins/process-env";

package/dist/{chunk-UKNL2Y4N.js → chunk-T3E57MSQ.js}

@@ -1,6 +1,6 @@
 import {
   isSecretReference
-} from "./chunk-MQ4WG3K6.js";
+} from "./chunk-WPB4HB2K.js";
 
 // src/runtime/bootstrap.ts
 import { createCipheriv, createDecipheriv, randomBytes } from "crypto";