@kitsy/cnos 1.5.0 → 1.6.0

package/dist/{plugin-B4xwySxw.d.ts → plugin-CKrBlWGI.d.ts}

@@ -14,7 +14,7 @@ interface SchemaRule {
     default?: unknown;
 }
 
-type WorkspaceSource = 'cli' | 'workspace-file' | 'manifest-default' | 'implicit';
+type WorkspaceSource = 'cli' | 'workspace-file' | 'anchor-file' | 'manifest-default' | 'implicit' | 'directory-inferred';
 type GlobalRootSource = 'cli' | 'workspace-file' | 'manifest' | 'CNOS_HOME';
 interface WorkspaceFile {
     workspace?: string;
@@ -167,15 +167,43 @@ interface NormalizedManifest {
 }
 interface LoadManifestOptions {
     root?: string;
+    cwd?: string;
 }
 interface LoadedManifest {
     manifestRoot: string;
     repoRoot: string;
+    consumerRoot: string;
+    anchorPath?: string;
+    anchoredWorkspace?: string;
     manifestPath: string;
     manifest: NormalizedManifest;
     rawManifest: ManifestFile;
 }
 
+interface SecretReference {
+    provider: string;
+    ref: string;
+    vault?: string;
+}
+interface VaultAuthConfig {
+    passphrase?: string;
+    token?: string;
+    derivedKey?: Buffer;
+    method: 'passphrase' | 'environment' | 'token' | 'iam' | 'keychain';
+    config?: Record<string, unknown>;
+}
+interface SecretVaultProvider {
+    readonly vaultId: string;
+    readonly definition: VaultDefinition;
+    authenticate(authConfig: VaultAuthConfig): Promise<void>;
+    isAuthenticated(): boolean;
+    batchGet(refs: string[]): Promise<Map<string, string>>;
+    get(ref: string): Promise<string | undefined>;
+    set(ref: string, value: string): Promise<void>;
+    delete(ref: string): Promise<void>;
+    list(): Promise<string[]>;
+}
+
 type LogicalKey = string;
 type NamespaceName = string;
 interface ConfigOrigin {
@@ -235,11 +263,13 @@ interface InspectResult {
     }>;
 }
 interface CnosCreateOptions {
+    cwd?: string;
     root?: string;
     profile?: string;
     workspace?: string;
     globalRoot?: string;
-    secretResolution?: 'eager' | 'lazy';
+    secretResolution?: 'eager' | 'lazy' | 'refreshing';
+    secretRefreshTtl?: number;
     cnosVersion?: string;
     plugins?: CnosPlugin[];
     cliArgs?: string[];
@@ -287,6 +317,25 @@ interface CnosRuntime {
     toNamespace(namespace: NamespaceName): Record<string, unknown>;
     toEnv(options?: ToEnvOptions): Record<string, string>;
     toPublicEnv(options?: ToPublicEnvOptions): Record<string, string>;
+    toServerProjection(): ServerProjection;
+    refreshSecrets(): Promise<void>;
+    refreshSecret(key: LogicalKey): Promise<void>;
+}
+interface ServerProjection {
+    version: 1;
+    workspace: string;
+    profile: string;
+    resolvedAt: string;
+    configHash: string;
+    values: Record<string, unknown>;
+    secretRefs: Record<string, SecretReference>;
+    publicKeys: string[];
+    meta: {
+        workspace: string;
+        profile: string;
+        cnos_version: string;
+        namespaces?: string[];
+    };
 }
 
 type CnosPluginKind = 'loader' | 'resolver' | 'validator' | 'exporter' | 'inspector';
@@ -347,4 +396,4 @@ interface ExporterPlugin extends CnosPlugin {
     export(graph: ResolvedGraph, context: ExportContext): Promise<ExportResult>;
 }
 
-export type { CnosCreateOptions as C, DumpPlanOptions as D, ExporterPlugin as E, InspectResult as I, LoaderPlugin as L, ManifestFile as M, NormalizedManifest as N, ResolvedGraph as R, ToEnvOptions as T, ValidatorPlugin as V, WorkspaceRoot as W, ConfigEntry as a, LogicalKey as b, ToPublicEnvOptions as c, DumpPlan as d, DumpOptions as e, DumpResult as f, CnosRuntime as g, CnosPlugin as h, NamespaceName as i, LoadManifestOptions as j, LoadedManifest as k, NamespaceDefinition as l, VaultDefinition as m, ValidationSummary as n, ValidationIssue as o, WorkspaceFile as p };
+export type { CnosCreateOptions as C, DumpPlanOptions as D, ExporterPlugin as E, InspectResult as I, LoaderPlugin as L, ManifestFile as M, NormalizedManifest as N, ResolvedGraph as R, ServerProjection as S, ToEnvOptions as T, ValidatorPlugin as V, WorkspaceRoot as W, ConfigEntry as a, LogicalKey as b, ToPublicEnvOptions as c, DumpPlan as d, DumpOptions as e, DumpResult as f, CnosRuntime as g, CnosPlugin as h, NamespaceName as i, LoadManifestOptions as j, LoadedManifest as k, NamespaceDefinition as l, VaultDefinition as m, VaultAuthConfig as n, SecretVaultProvider as o, SecretReference as p, ValidationSummary as q, ValidationIssue as r, WorkspaceFile as s };