@kitsy/cnos 1.2.0 → 1.3.0

package/dist/plugin/process-env.cjs

@@ -35,6 +35,21 @@ __export(process_env_exports, {
 });
 module.exports = __toCommonJS(process_env_exports);
 
+// ../core/src/keychain/linux.ts
+var import_node_child_process = require("child_process");
+var import_node_util = require("util");
+var execFileAsync = (0, import_node_util.promisify)(import_node_child_process.execFile);
+
+// ../core/src/keychain/macos.ts
+var import_node_child_process2 = require("child_process");
+var import_node_util2 = require("util");
+var execFileAsync2 = (0, import_node_util2.promisify)(import_node_child_process2.execFile);
+
+// ../core/src/keychain/windows.ts
+var import_node_child_process3 = require("child_process");
+var import_node_util3 = require("util");
+var execFileAsync3 = (0, import_node_util3.promisify)(import_node_child_process3.execFile);
+
 // ../core/src/manifest/loadManifest.ts
 var import_promises2 = require("fs/promises");
 var import_node_path2 = __toESM(require("path"), 1);
@@ -59,14 +74,26 @@ var import_node_path4 = __toESM(require("path"), 1);
 var import_promises5 = require("fs/promises");
 var import_node_path5 = __toESM(require("path"), 1);
 
+// ../core/src/secrets/auditLog.ts
+var import_promises8 = require("fs/promises");
+var import_node_path8 = __toESM(require("path"), 1);
+
 // ../core/src/utils/secretStore.ts
 var import_node_crypto = require("crypto");
+var import_promises7 = require("fs/promises");
+var import_node_path7 = __toESM(require("path"), 1);
+
+// ../core/src/secrets/sessionStore.ts
 var import_promises6 = require("fs/promises");
 var import_node_path6 = __toESM(require("path"), 1);
 
+// ../core/src/secrets/prompt.ts
+var import_node_readline = __toESM(require("readline"), 1);
+var import_node_stream = require("stream");
+
 // ../core/src/runtime/dump.ts
-var import_promises7 = require("fs/promises");
-var import_node_path7 = __toESM(require("path"), 1);
+var import_promises9 = require("fs/promises");
+var import_node_path9 = __toESM(require("path"), 1);
 
 // ../core/src/utils/envNaming.ts
 function normalizeMappingConfig(config = {}) {
@@ -75,8 +102,8 @@ function normalizeMappingConfig(config = {}) {
     explicit: config.explicit ?? {}
   };
 }
-function fromScreamingSnake(path8) {
-  return path8.split("_").map((segment) => segment.trim().toLowerCase()).filter(Boolean).join(".");
+function fromScreamingSnake(path10) {
+  return path10.split("_").map((segment) => segment.trim().toLowerCase()).filter(Boolean).join(".");
 }
 function envVarToLogicalKey(envVar, config = {}) {
   const normalized = normalizeMappingConfig(config);

package/dist/plugin/process-env.d.cts

@@ -1,5 +1,5 @@
-import { L as LoaderPlugin, f as ConfigEntry } from '../plugin-DkOIT5uI.cjs';
-import { E as EnvMappingConfig } from '../envNaming-BTJpH93W.cjs';
+import { L as LoaderPlugin, a as ConfigEntry } from '../plugin-CyNkf7Dm.cjs';
+import { E as EnvMappingConfig } from '../envNaming-D6k66myh.cjs';
 
 declare function processEnvEntriesFromObject(env: Record<string, string | undefined>, mapping?: EnvMappingConfig, workspaceId?: string): ConfigEntry[];
 declare function createProcessEnvPlugin(): LoaderPlugin;

package/dist/plugin/process-env.d.ts

@@ -1,5 +1,5 @@
-import { L as LoaderPlugin, f as ConfigEntry } from '../plugin-DkOIT5uI.js';
-import { E as EnvMappingConfig } from '../envNaming-CcsqAel3.js';
+import { L as LoaderPlugin, a as ConfigEntry } from '../plugin-CyNkf7Dm.js';
+import { E as EnvMappingConfig } from '../envNaming-Dy3WYiGK.js';
 
 declare function processEnvEntriesFromObject(env: Record<string, string | undefined>, mapping?: EnvMappingConfig, workspaceId?: string): ConfigEntry[];
 declare function createProcessEnvPlugin(): LoaderPlugin;

package/dist/plugin/process-env.js

@@ -1,8 +1,8 @@
 import {
   createProcessEnvPlugin,
   processEnvEntriesFromObject
-} from "../chunk-WHUGFPE4.js";
-import "../chunk-APCTXRUN.js";
+} from "../chunk-CDXJISGB.js";
+import "../chunk-DRKDNY4I.js";
 export {
   createProcessEnvPlugin,
   processEnvEntriesFromObject

package/dist/{plugin-DkOIT5uI.d.cts → plugin-CyNkf7Dm.d.cts}

@@ -47,6 +47,16 @@ type ResolutionArrayPolicy = 'replace' | 'append' | 'unique-append';
 type NamespaceKind = 'data' | 'projection' | 'system';
 type NamespaceProjectionSource = 'promote' | 'envMapping';
 type VaultProviderName = 'local' | 'github-secrets' | (string & {});
+type VaultAuthMethod = 'passphrase' | 'environment' | 'token' | 'iam' | 'keychain';
+interface VaultAuthSourceConfig {
+    from?: string[];
+}
+interface VaultAuthDefinition {
+    method?: VaultAuthMethod;
+    passphrase?: VaultAuthSourceConfig;
+    token?: VaultAuthSourceConfig;
+    config?: Record<string, unknown>;
+}
 interface NamespaceDefinition {
     kind: NamespaceKind;
     shareable: boolean;
@@ -56,7 +66,8 @@ interface NamespaceDefinition {
 }
 interface VaultDefinition {
     provider: VaultProviderName;
-    passphrase?: string;
+    auth?: VaultAuthDefinition;
+    mapping?: Record<string, string>;
 }
 interface ManifestFile {
     version?: number;
@@ -228,6 +239,7 @@ interface CnosCreateOptions {
     profile?: string;
     workspace?: string;
     globalRoot?: string;
+    secretResolution?: 'eager' | 'lazy';
     cnosVersion?: string;
     plugins?: CnosPlugin[];
     cliArgs?: string[];
@@ -334,4 +346,4 @@ interface ExporterPlugin extends CnosPlugin {
     export(graph: ResolvedGraph, context: ExportContext): Promise<ExportResult>;
 }
 
-export type { CnosCreateOptions as C, DumpPlanOptions as D, ExporterPlugin as E, InspectResult as I, LoaderPlugin as L, ManifestFile as M, NormalizedManifest as N, ResolvedGraph as R, ToEnvOptions as T, VaultDefinition as V, WorkspaceFile as W, DumpPlan as a, DumpOptions as b, DumpResult as c, CnosRuntime as d, CnosPlugin as e, ConfigEntry as f, LogicalKey as g, ToPublicEnvOptions as h, LoadManifestOptions as i, LoadedManifest as j, ValidationSummary as k, ValidationIssue as l, ValidatorPlugin as m, WorkspaceRoot as n, NamespaceName as o };
+export type { CnosCreateOptions as C, DumpPlanOptions as D, ExporterPlugin as E, InspectResult as I, LoaderPlugin as L, ManifestFile as M, NormalizedManifest as N, ResolvedGraph as R, ToEnvOptions as T, ValidatorPlugin as V, WorkspaceRoot as W, ConfigEntry as a, LogicalKey as b, ToPublicEnvOptions as c, DumpPlan as d, DumpOptions as e, DumpResult as f, CnosRuntime as g, CnosPlugin as h, NamespaceName as i, LoadManifestOptions as j, LoadedManifest as k, VaultDefinition as l, ValidationSummary as m, ValidationIssue as n, WorkspaceFile as o };

package/dist/{plugin-DkOIT5uI.d.ts → plugin-CyNkf7Dm.d.ts}

@@ -47,6 +47,16 @@ type ResolutionArrayPolicy = 'replace' | 'append' | 'unique-append';
 type NamespaceKind = 'data' | 'projection' | 'system';
 type NamespaceProjectionSource = 'promote' | 'envMapping';
 type VaultProviderName = 'local' | 'github-secrets' | (string & {});
+type VaultAuthMethod = 'passphrase' | 'environment' | 'token' | 'iam' | 'keychain';
+interface VaultAuthSourceConfig {
+    from?: string[];
+}
+interface VaultAuthDefinition {
+    method?: VaultAuthMethod;
+    passphrase?: VaultAuthSourceConfig;
+    token?: VaultAuthSourceConfig;
+    config?: Record<string, unknown>;
+}
 interface NamespaceDefinition {
     kind: NamespaceKind;
     shareable: boolean;
@@ -56,7 +66,8 @@ interface NamespaceDefinition {
 }
 interface VaultDefinition {
     provider: VaultProviderName;
-    passphrase?: string;
+    auth?: VaultAuthDefinition;
+    mapping?: Record<string, string>;
 }
 interface ManifestFile {
     version?: number;
@@ -228,6 +239,7 @@ interface CnosCreateOptions {
     profile?: string;
     workspace?: string;
     globalRoot?: string;
+    secretResolution?: 'eager' | 'lazy';
     cnosVersion?: string;
     plugins?: CnosPlugin[];
     cliArgs?: string[];
@@ -334,4 +346,4 @@ interface ExporterPlugin extends CnosPlugin {
     export(graph: ResolvedGraph, context: ExportContext): Promise<ExportResult>;
 }
 
-export type { CnosCreateOptions as C, DumpPlanOptions as D, ExporterPlugin as E, InspectResult as I, LoaderPlugin as L, ManifestFile as M, NormalizedManifest as N, ResolvedGraph as R, ToEnvOptions as T, VaultDefinition as V, WorkspaceFile as W, DumpPlan as a, DumpOptions as b, DumpResult as c, CnosRuntime as d, CnosPlugin as e, ConfigEntry as f, LogicalKey as g, ToPublicEnvOptions as h, LoadManifestOptions as i, LoadedManifest as j, ValidationSummary as k, ValidationIssue as l, ValidatorPlugin as m, WorkspaceRoot as n, NamespaceName as o };
+export type { CnosCreateOptions as C, DumpPlanOptions as D, ExporterPlugin as E, InspectResult as I, LoaderPlugin as L, ManifestFile as M, NormalizedManifest as N, ResolvedGraph as R, ToEnvOptions as T, ValidatorPlugin as V, WorkspaceRoot as W, ConfigEntry as a, LogicalKey as b, ToPublicEnvOptions as c, DumpPlan as d, DumpOptions as e, DumpResult as f, CnosRuntime as g, CnosPlugin as h, NamespaceName as i, LoadManifestOptions as j, LoadedManifest as k, VaultDefinition as l, ValidationSummary as m, ValidationIssue as n, WorkspaceFile as o };