@kitsy/cnos 1.8.3 → 1.8.4

package/dist/build/index.cjs

@@ -3712,7 +3712,7 @@ function envVarToLogicalKey(envVar, config = {}) {
 // package.json
 var package_default = {
   name: "@kitsy/cnos",
-  version: "1.8.3",
+  version: "1.8.4",
   description: "Batteries-included CNOS runtime package wired with the official plugins.",
   type: "module",
   main: "./dist/index.cjs",
@@ -4436,12 +4436,33 @@ async function resolveFrameworkEnv(options = {}, framework = "generic", envOptio
   });
 }
 async function resolveServerProjection(options = {}) {
+  const secretResolution = options.secretResolution ?? "lazy";
   const runtime = await createCnos2({
     ...options,
-    cacheMode: options.cacheMode ?? "build"
+    cacheMode: options.cacheMode ?? "build",
+    secretResolution
   });
+  validateServerProjectionSecretRefs(runtime);
   return runtime.toServerProjection();
 }
+function validateServerProjectionSecretRefs(runtime) {
+  for (const entry of runtime.graph.entries.values()) {
+    if (entry.namespace !== "secret" || !isSecretReference(entry.value)) {
+      continue;
+    }
+    const vaultId = entry.value.vault ?? "default";
+    const definition = runtime.manifest.vaults[vaultId];
+    if (!definition) {
+      throw new CnosManifestError(`Unknown vault "${vaultId}" for secret ref "${entry.key}"`);
+    }
+    if (entry.value.provider !== definition.provider) {
+      throw new CnosManifestError(
+        `Secret ref "${entry.key}" declares provider "${entry.value.provider}" but vault "${vaultId}" uses provider "${definition.provider}"`
+      );
+    }
+    createSecretVaultProvider(vaultId, definition);
+  }
+}
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
   resolveBrowserData,

package/dist/build/index.js

@@ -1,13 +1,17 @@
 import {
   createCnos
-} from "../chunk-7MUDEJSP.js";
+} from "../chunk-O2KTQ6PB.js";
 import "../chunk-JQLV4OQU.js";
 import "../chunk-4AAA2RHV.js";
 import "../chunk-UMVFSHP2.js";
 import "../chunk-N5DX5QEB.js";
 import "../chunk-36AR262B.js";
 import "../chunk-EJT2VJTM.js";
-import "../chunk-ZH5QZQ7C.js";
+import {
+  CnosManifestError,
+  createSecretVaultProvider,
+  isSecretReference
+} from "../chunk-ZH5QZQ7C.js";
 
 // src/build/index.ts
 async function resolveBrowserData(options = {}) {
@@ -86,12 +90,33 @@ async function resolveFrameworkEnv(options = {}, framework = "generic", envOptio
   });
 }
 async function resolveServerProjection(options = {}) {
+  const secretResolution = options.secretResolution ?? "lazy";
   const runtime = await createCnos({
     ...options,
-    cacheMode: options.cacheMode ?? "build"
+    cacheMode: options.cacheMode ?? "build",
+    secretResolution
   });
+  validateServerProjectionSecretRefs(runtime);
   return runtime.toServerProjection();
 }
+function validateServerProjectionSecretRefs(runtime) {
+  for (const entry of runtime.graph.entries.values()) {
+    if (entry.namespace !== "secret" || !isSecretReference(entry.value)) {
+      continue;
+    }
+    const vaultId = entry.value.vault ?? "default";
+    const definition = runtime.manifest.vaults[vaultId];
+    if (!definition) {
+      throw new CnosManifestError(`Unknown vault "${vaultId}" for secret ref "${entry.key}"`);
+    }
+    if (entry.value.provider !== definition.provider) {
+      throw new CnosManifestError(
+        `Secret ref "${entry.key}" declares provider "${entry.value.provider}" but vault "${vaultId}" uses provider "${definition.provider}"`
+      );
+    }
+    createSecretVaultProvider(vaultId, definition);
+  }
+}
 export {
   resolveBrowserData,
   resolveFrameworkEnv,

package/dist/{chunk-SUMWGMRA.js → chunk-LDFKY65G.js}

@@ -12,7 +12,7 @@ import {
   setBootstrappedSecretHydrationRequired,
   setSingletonReady,
   setSingletonRuntime
-} from "./chunk-7MUDEJSP.js";
+} from "./chunk-O2KTQ6PB.js";
 import {
   createDefaultRuntimeProviders,
   createDerivedRuntimeSupport,

package/dist/{chunk-7MUDEJSP.js → chunk-O2KTQ6PB.js}

@@ -68,7 +68,7 @@ function setBootstrappedSecretHydrationRequired(value) {
 // package.json
 var package_default = {
   name: "@kitsy/cnos",
-  version: "1.8.3",
+  version: "1.8.4",
   description: "Batteries-included CNOS runtime package wired with the official plugins.",
   type: "module",
   main: "./dist/index.cjs",

package/dist/configure/index.cjs

@@ -3756,7 +3756,7 @@ function envVarToLogicalKey(envVar, config = {}) {
 // package.json
 var package_default = {
   name: "@kitsy/cnos",
-  version: "1.8.3",
+  version: "1.8.4",
   description: "Batteries-included CNOS runtime package wired with the official plugins.",
   type: "module",
   main: "./dist/index.cjs",

package/dist/configure/index.js

@@ -1,7 +1,7 @@
 import {
   createCnos,
   defaultPlugins
-} from "../chunk-7MUDEJSP.js";
+} from "../chunk-O2KTQ6PB.js";
 import "../chunk-JQLV4OQU.js";
 import "../chunk-4AAA2RHV.js";
 import "../chunk-UMVFSHP2.js";

package/dist/index.cjs

@@ -3714,7 +3714,7 @@ function envVarToLogicalKey(envVar, config = {}) {
 // package.json
 var package_default = {
   name: "@kitsy/cnos",
-  version: "1.8.3",
+  version: "1.8.4",
   description: "Batteries-included CNOS runtime package wired with the official plugins.",
   type: "module",
   main: "./dist/index.cjs",

package/dist/index.js

@@ -1,8 +1,8 @@
 import {
   runtime_default
-} from "./chunk-SUMWGMRA.js";
+} from "./chunk-LDFKY65G.js";
 import "./chunk-DL5G3QSZ.js";
-import "./chunk-7MUDEJSP.js";
+import "./chunk-O2KTQ6PB.js";
 import "./chunk-JQLV4OQU.js";
 import "./chunk-4AAA2RHV.js";
 import "./chunk-UMVFSHP2.js";

package/dist/runtime/index.cjs

@@ -3711,7 +3711,7 @@ function envVarToLogicalKey(envVar, config = {}) {
 // package.json
 var package_default = {
   name: "@kitsy/cnos",
-  version: "1.8.3",
+  version: "1.8.4",
   description: "Batteries-included CNOS runtime package wired with the official plugins.",
   type: "module",
   main: "./dist/index.cjs",

package/dist/runtime/index.js

@@ -1,8 +1,8 @@
 import {
   runtime_default
-} from "../chunk-SUMWGMRA.js";
+} from "../chunk-LDFKY65G.js";
 import "../chunk-DL5G3QSZ.js";
-import "../chunk-7MUDEJSP.js";
+import "../chunk-O2KTQ6PB.js";
 import "../chunk-JQLV4OQU.js";
 import "../chunk-4AAA2RHV.js";
 import "../chunk-UMVFSHP2.js";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kitsy/cnos",
-  "version": "1.8.3",
+  "version": "1.8.4",
   "description": "Batteries-included CNOS runtime package wired with the official plugins.",
   "type": "module",
   "main": "./dist/index.cjs",