@mutmutco/pi-plugin 4.5.23 → 4.5.25
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/package.json
CHANGED
|
@@ -35,6 +35,7 @@ the [MMI help skill](../mmi-help/SKILL.md).
|
|
|
35
35
|
| Consume, declare, rotate, or request a secret | [Vault and keyless access](references/vault.md) |
|
|
36
36
|
| Register domains or configure Google OAuth | [Domains and OAuth](references/domains-and-oauth.md) |
|
|
37
37
|
| Decide what belongs in a product repository | [Repository rules](references/repository-rules.md) |
|
|
38
|
+
| Build an MM-Work module | not bundled — [MM-Work module guide](https://github.com/mutmutco/MM-Work/blob/development/packages/mmwork-ds/GUIDE.md) in `@mutmutco/mmwork-ds` |
|
|
38
39
|
| Produce company-facing documents in the MM brand | not bundled — the MM-Strategy MCP serves the brand kit (`mm_brand_guide`); strategists install `@mutmutco/strategy` |
|
|
39
40
|
|
|
40
41
|
This is MMI organization guidance, not Jerv or JervCode operating instructions.
|
|
@@ -28,6 +28,11 @@ value at runtime. Do not print it, save it to a repository environment file, pas
|
|
|
28
28
|
or pass it as a command argument. Keyless means using the authorized runtime injection or workload
|
|
29
29
|
identity; developers do not need standing cloud keys to perform supported MMI vault operations.
|
|
30
30
|
|
|
31
|
+
A secret minted inside a live tenant reaches a vault without anyone seeing it through a declared
|
|
32
|
+
tenant task `secretOutput` (`{path, vault:{repo,key}, overwrite?}`, master-declared). The target
|
|
33
|
+
project consents by declaring that key in its own catalog. `run-task` then delivers the file once,
|
|
34
|
+
value-free, and the run log names only the key and a fingerprint. Do not hand-carry such a value.
|
|
35
|
+
|
|
31
36
|
For declarations, writes, grants, rotation, and verification, read the
|
|
32
37
|
[secrets skill](../../secrets/SKILL.md). Writes take values through stdin, never argv.
|
|
33
38
|
An access denial or failed provider probe is a fact to resolve, not permission to bypass the vault.
|