@nimbus-dev/connectors 0.8.0 → 0.9.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (11) hide show
  1. package/connectors/iac/nimbus.extension.json +1 -1
  2. package/connectors/iac/src/tools.ts +808 -105
  3. package/connectors/kubernetes/nimbus.extension.json +1 -1
  4. package/connectors/kubernetes/src/manifest-scan.ts +602 -0
  5. package/connectors/kubernetes/src/tools.ts +331 -2
  6. package/package.json +1 -1
  7. package/shared/consent-kit.ts +15 -0
  8. package/shared/prepare-tool-ids.ts +13 -4
  9. package/shared/private-kubeconfig.ts +10 -9
  10. package/shared/private-scratch.ts +68 -0
  11. package/shared/run-cli-json.ts +17 -1
package/connectors/iac/nimbus.extension.json CHANGED
@@ -2,7 +2,7 @@
2
2
  "id": "com.nimbus.iac",
3
3
  "displayName": "Infrastructure-as-Code",
4
4
  "version": "0.1.0",
5
- "description": "Terraform / Pulumi / OpenTofu CLI helpers. The connector itself opens no sockets; CLI subprocesses' network access is sandbox-bounded. Workspace paths are tool-call scoped (workingDirectory argument), not baked into the manifest. Mutations require Gateway HITL.",
5
+ "description": "Terraform / CloudFormation / Pulumi CLI helpers. Applies are plan-bound: a Terraform apply runs only a saved plan file whose SHA-256 the owner approved, a CloudFormation deploy executes only a reviewed change set made for the exact template, and Pulumi up is refused. The connector itself opens no sockets; CLI subprocesses' network access is sandbox-bounded. Workspace paths are tool-call scoped (workingDirectory argument), not baked into the manifest. Plans are saved under NIMBUS_IAC_PLAN_DIR. Mutations require Gateway HITL.",
6
6
  "author": "Nimbus",
7
7
  "entrypoint": "dist/server.js",
8
8
  "runtime": "bun",