@orchestraworks/cli 0.5.8 → 0.7.0

package/dist/generated/providers.d.ts

@@ -547,6 +547,16 @@ export declare const Slack: {
         readonly SessionPerConversation: import("../constructs/provider-types.js").Binding<"slack::app_mention" | "slack::message" | "slack::message.im" | "slack::message.mpim">;
         readonly SessionPerThread: import("../constructs/provider-types.js").Binding<"slack::app_mention" | "slack::message" | "slack::message.im" | "slack::message.mpim">;
     };
+    readonly skill: {
+        /**
+         * Accepts a platform id or a slug interchangeably — one rule for every reference property, stated
+         * once on `IResource` (`constructs/interfaces.ts`). A catalog row is seeded with slug = id, so this
+         * one key is both at once.
+         */
+        readonly skillId: "skill_slack";
+        /** @internal — the reference this catalog skill contributes when passed (its `org_global` key). */
+        readonly _resourceId: () => string;
+    };
     readonly conversation: {
         readonly mention: import("../constructs/provider-types.js").ProviderEventHandle<"slack::app_mention">;
         readonly dm: import("../constructs/provider-types.js").ProviderEventHandle<"slack::message.im">;
@@ -605,6 +615,16 @@ export declare const Teams: {
         readonly SessionPerConversation: import("../constructs/provider-types.js").Binding<"teams::message">;
         readonly SessionPerThread: import("../constructs/provider-types.js").Binding<"teams::message">;
     };
+    readonly skill: {
+        /**
+         * Accepts a platform id or a slug interchangeably — one rule for every reference property, stated
+         * once on `IResource` (`constructs/interfaces.ts`). A catalog row is seeded with slug = id, so this
+         * one key is both at once.
+         */
+        readonly skillId: "skill_teams";
+        /** @internal — the reference this catalog skill contributes when passed (its `org_global` key). */
+        readonly _resourceId: () => string;
+    };
     readonly conversation: {
         readonly message: import("../constructs/provider-types.js").ProviderEventHandle<"teams::message">;
         readonly inChannel: () => ScopedCondition<"teams::message">;
@@ -1140,6 +1160,16 @@ export declare const Providers: {
             readonly SessionPerConversation: import("../constructs/provider-types.js").Binding<"slack::app_mention" | "slack::message" | "slack::message.im" | "slack::message.mpim">;
             readonly SessionPerThread: import("../constructs/provider-types.js").Binding<"slack::app_mention" | "slack::message" | "slack::message.im" | "slack::message.mpim">;
         };
+        readonly skill: {
+            /**
+             * Accepts a platform id or a slug interchangeably — one rule for every reference property, stated
+             * once on `IResource` (`constructs/interfaces.ts`). A catalog row is seeded with slug = id, so this
+             * one key is both at once.
+             */
+            readonly skillId: "skill_slack";
+            /** @internal — the reference this catalog skill contributes when passed (its `org_global` key). */
+            readonly _resourceId: () => string;
+        };
         readonly conversation: {
             readonly mention: import("../constructs/provider-types.js").ProviderEventHandle<"slack::app_mention">;
             readonly dm: import("../constructs/provider-types.js").ProviderEventHandle<"slack::message.im">;
@@ -1191,6 +1221,16 @@ export declare const Providers: {
             readonly SessionPerConversation: import("../constructs/provider-types.js").Binding<"teams::message">;
             readonly SessionPerThread: import("../constructs/provider-types.js").Binding<"teams::message">;
         };
+        readonly skill: {
+            /**
+             * Accepts a platform id or a slug interchangeably — one rule for every reference property, stated
+             * once on `IResource` (`constructs/interfaces.ts`). A catalog row is seeded with slug = id, so this
+             * one key is both at once.
+             */
+            readonly skillId: "skill_teams";
+            /** @internal — the reference this catalog skill contributes when passed (its `org_global` key). */
+            readonly _resourceId: () => string;
+        };
         readonly conversation: {
             readonly message: import("../constructs/provider-types.js").ProviderEventHandle<"teams::message">;
             readonly inChannel: () => ScopedCondition<"teams::message">;

package/dist/generated/providers.js

@@ -538,6 +538,20 @@ export const Slack = {
     conversational: true,
     events: slackEvents,
     bindings: slackBindings,
+    // The provider's catalog skill — attach it with `skills: [Slack.skill]`. A plain catalog literal
+    // satisfying `ISkill` rather than a registered plan import: a module-level constant has no construct
+    // scope to register one in. It skips synth-time plan-import registration only — at apply the ref still
+    // resolves through one idempotent getSkill, and boot validation guarantees the catalog row exists.
+    skill: {
+        /**
+         * Accepts a platform id or a slug interchangeably — one rule for every reference property, stated
+         * once on `IResource` (`constructs/interfaces.ts`). A catalog row is seeded with slug = id, so this
+         * one key is both at once.
+         */
+        skillId: "skill_slack",
+        /** @internal — the reference this catalog skill contributes when passed (its `org_global` key). */
+        _resourceId: () => "skill_slack",
+    },
     // The conversation authoring sugar, generated from the catalog conversation block.
     conversation: {
         mention: slackEvents.AppMention,
@@ -589,6 +603,20 @@ export const Teams = {
     conversational: true,
     events: teamsEvents,
     bindings: teamsBindings,
+    // The provider's catalog skill — attach it with `skills: [Teams.skill]`. A plain catalog literal
+    // satisfying `ISkill` rather than a registered plan import: a module-level constant has no construct
+    // scope to register one in. It skips synth-time plan-import registration only — at apply the ref still
+    // resolves through one idempotent getSkill, and boot validation guarantees the catalog row exists.
+    skill: {
+        /**
+         * Accepts a platform id or a slug interchangeably — one rule for every reference property, stated
+         * once on `IResource` (`constructs/interfaces.ts`). A catalog row is seeded with slug = id, so this
+         * one key is both at once.
+         */
+        skillId: "skill_teams",
+        /** @internal — the reference this catalog skill contributes when passed (its `org_global` key). */
+        _resourceId: () => "skill_teams",
+    },
     // The conversation authoring sugar, generated from the catalog conversation block.
     conversation: {
         message: teamsEvents.Message,
@@ -673,6 +701,8 @@ export const PROVIDER_SKILL_IDS = {
     "jira-classic": "skill_jira-classic",
     "linear": "skill_linear",
     "notion": "skill_notion",
+    "slack": "skill_slack",
+    "teams": "skill_teams",
     "zendesk": "skill_zendesk",
 };
 /**

package/docs/REFERENCE.md

@@ -131,9 +131,11 @@ export ORCHESTRA_API_TOKEN="…"            # any principal's bearer; the CLI ne
 export ORCHESTRA_ORGANIZATION_ID="org_…"
 ```
 
+Each `ORCHESTRA_` machine variable this page names also has a former `SFDK_` spelling. Until the rename's compatibility period ends ([D50](../../docs/specs/2026-10-03_2446_orchestra_rename_spec.md)), the platform and the worker still write the former spelling beside the new one, and every reader takes the new name first and the former one when the new one is absent.
+
 **The auth-provider chain** (one ordered chain for every command, presence is selection):
 `ORCHESTRA_API_TOKEN` → the file `ORCHESTRA_API_TOKEN_FILE` names → the `login` profile → the
-platform-injected machine edge flag (`SFDK_AUTH_EDGE_INJECTED`) → a named missing-credentials error.
+platform-injected machine edge flag (`ORCHESTRA_AUTH_EDGE_INJECTED`) → a named missing-credentials error.
 There is **no `--token` flag**: a token never appears in argv.
 
 - **The token file.** On an Orchestra machine, the worker writes the agent's own platform token to a
@@ -158,14 +160,14 @@ bearer is itself a credential — with the unauthenticated `health` ping the one
 print the resolved target org as a banner before any read/write, and warn when an exported
 `ORCHESTRA_ORGANIZATION_ID` diverges from the profile's org (so a stale export can't silently redirect writes).
 
-The conversation (`SFDK_SESSION_ID`, under every provider). The worker sets it on each harness process
+The conversation (`ORCHESTRA_SESSION_ID`, under every provider). The worker sets it on each harness process
 it starts, so a command an agent runs knows which conversation it is in. When it is set, `orchestra` adds
 `sessionId` to every JSON request body that has none: typed commands, `orchestra api`, `apply`, and the
 `login` and refresh token requests. A body that already names a `sessionId` is sent unchanged, so
 `artifacts create --session-id <id>` wins. Query strings, uploads and other non-JSON bodies are never
 changed, and an empty or whitespace-only value counts as unset. The platform checks a supplied session as
 usual. An artifact takes its project from the session, so a command that must publish into another project
-than its conversation's runs without the variable: `env -u SFDK_SESSION_ID orchestra artifacts create …`. A
+than its conversation's runs without the variable: `env -u ORCHESTRA_SESSION_ID orchestra artifacts create …`. A
 value you export by hand in your own shell applies the same way.
 
 ## 4. Author your first factory
@@ -819,7 +821,7 @@ subscription token rather than an API key:
 import { EgressPolicy, Secret, SecretValue } from "@orchestraworks/cli";
 
 new Secret(factory, "claude-sign-in", {
-  value: SecretValue.fromEnv("SFDK_CLAUDE_CODE_OAUTH_TOKEN"),
+  value: SecretValue.fromEnv("ORCHESTRA_FDK_CLAUDE_CODE_OAUTH_TOKEN"),
   hosts: ["api.anthropic.com"],
   injection: {
     headers: [{ name: "authorization", value: "Bearer ${secret}" }],
@@ -863,7 +865,7 @@ Agent.fromSlug(factory, "existing-agent");
 Environment.fromSlug(factory, "shared-runtime");
 Volume.fromSlug(factory, "cache-vol");
 Volume.fromId(factory, "volume_…");
-Connection.fromEnv(factory, "SFDK_ZENDESK_CONNECTION_ID", { provider: Providers.Zendesk });
+Connection.fromEnv(factory, "ORCHESTRA_FDK_ZENDESK_CONNECTION_ID", { provider: Providers.Zendesk });
 ```
 
 `Connection.fromEnv` resolves the connection id from `process.env` at apply, so **no tenant id
@@ -1069,8 +1071,8 @@ const ourSlackApp = new Connector(factory, "our-slack-app", {
   provider: Providers.Slack,
   clientId: "1234.5678",
   appId: "A0ACME",
-  clientSecret: new Secret(factory, "slack-client-secret", { value: SecretValue.fromEnv("SFDK_SLACK_CLIENT_SECRET") }),
-  signingSecret: new Secret(factory, "slack-signing-secret", { value: SecretValue.fromEnv("SFDK_SLACK_SIGNING_SECRET") }),
+  clientSecret: new Secret(factory, "slack-client-secret", { value: SecretValue.fromEnv("ORCHESTRA_FDK_SLACK_CLIENT_SECRET") }),
+  signingSecret: new Secret(factory, "slack-signing-secret", { value: SecretValue.fromEnv("ORCHESTRA_FDK_SLACK_SIGNING_SECRET") }),
 });
 
 const workspace = new Connection(factory, "workspace", {

package/node_modules/@orchestraworks/client/dist/esm/models/ApiErrorDetail.d.ts

@@ -16,7 +16,7 @@
  */
 export interface ApiErrorDetail {
     /**
-     * Present only when `code` is CREDENTIAL_UNAVAILABLE, ORGANIZATION_AUTH_POLICY_UNSATISFIED or SSO_CALLER_SESSION_REQUIRED. Published as a plain value rather than a closed enum because the shapes that carry `reason` do not agree on one value set. When `code` is CREDENTIAL_UNAVAILABLE: Closed denial-reason class explaining why the credential chain refused — one of secret_missing, secret_expired, refresh_failed, recipe_field_missing, policy_denied, ambiguous_match, connection_needs_attention, user_subject_required, user_grant_unavailable, conversation_not_attested, path_not_permitted, forge_credential_stale, install_declaration_invalid, provider_unavailable, internal_error, credential_not_found, use_denied, host_not_covered, machine_in_setup, credential_needs_https, plan_feature_disabled. When `code` is ORGANIZATION_AUTH_POLICY_UNSATISFIED or SSO_CALLER_SESSION_REQUIRED: Closed reason class naming the first policy check the session failed — one of ORGANIZATION_NOT_ACTIVE, SSO_ENFORCED_WITHOUT_BINDING, WRONG_IDENTITY_PROVIDER, AUTHENTICATION_METHOD_NOT_ALLOWED, MFA_REQUIRED.
+     * Present only when `code` is CREDENTIAL_UNAVAILABLE, ORGANIZATION_AUTH_POLICY_UNSATISFIED or SSO_CALLER_SESSION_REQUIRED. Published as a plain value rather than a closed enum because the shapes that carry `reason` do not agree on one value set. When `code` is CREDENTIAL_UNAVAILABLE: Closed denial-reason class explaining why the credential chain refused — one of secret_missing, secret_expired, refresh_failed, recipe_field_missing, policy_denied, connection_needs_attention, user_subject_required, user_grant_unavailable, conversation_not_attested, path_not_permitted, forge_credential_stale, install_declaration_invalid, provider_unavailable, internal_error, credential_not_found, use_denied, host_not_covered, machine_in_setup, credential_needs_https, plan_feature_disabled. When `code` is ORGANIZATION_AUTH_POLICY_UNSATISFIED or SSO_CALLER_SESSION_REQUIRED: Closed reason class naming the first policy check the session failed — one of ORGANIZATION_NOT_ACTIVE, SSO_ENFORCED_WITHOUT_BINDING, WRONG_IDENTITY_PROVIDER, AUTHENTICATION_METHOD_NOT_ALLOWED, MFA_REQUIRED.
      * @type {string}
      * @memberof ApiErrorDetail
      */

package/node_modules/@orchestraworks/client/dist/esm/models/CreateEnvironmentRequest.d.ts

@@ -10,6 +10,7 @@
  * Do not edit the class manually.
  */
 import type { EnvironmentIngressPolicy } from './EnvironmentIngressPolicy';
+import type { EnvironmentCredential } from './EnvironmentCredential';
 import type { EnvironmentHooks } from './EnvironmentHooks';
 import type { EnvironmentPlatformRequest } from './EnvironmentPlatformRequest';
 import type { EnvironmentEgressPolicy } from './EnvironmentEgressPolicy';
@@ -50,6 +51,12 @@ export interface CreateEnvironmentRequest {
      * @memberof CreateEnvironmentRequest
      */
     ingressPolicy?: EnvironmentIngressPolicy | null;
+    /**
+     * The credentials this environment's machines get on a request that names none, in order: the first one covering the request's host is added, whatever the agent. Each entry is a Secret or Connection of this organization by id, and adding one needs the caller's own use of it. A request naming a credential gets that one instead. Absent declares none.
+     * @type {Array<EnvironmentCredential>}
+     * @memberof CreateEnvironmentRequest
+     */
+    credentials?: Array<EnvironmentCredential>;
     /**
      * Whether the platform provisions this environment's machines (provisioned, the default) or a customer's own machine enrols into it (enrolled). Fixed at create.
      * @type {CreateEnvironmentRequestKindEnum}

package/node_modules/@orchestraworks/client/dist/esm/models/CreateEnvironmentRequest.js

@@ -12,6 +12,7 @@
  * Do not edit the class manually.
  */
 import { EnvironmentIngressPolicyFromJSON, EnvironmentIngressPolicyToJSON, } from './EnvironmentIngressPolicy';
+import { EnvironmentCredentialFromJSON, EnvironmentCredentialToJSON, } from './EnvironmentCredential';
 import { EnvironmentHooksFromJSON, EnvironmentHooksToJSON, } from './EnvironmentHooks';
 import { EnvironmentPlatformRequestFromJSON, EnvironmentPlatformRequestToJSON, } from './EnvironmentPlatformRequest';
 import { EnvironmentEgressPolicyFromJSON, EnvironmentEgressPolicyToJSON, } from './EnvironmentEgressPolicy';
@@ -44,6 +45,7 @@ export function CreateEnvironmentRequestFromJSONTyped(json, ignoreDiscriminator)
         'platform': json['platform'] == null ? undefined : EnvironmentPlatformRequestFromJSON(json['platform']),
         'egressPolicy': json['egressPolicy'] == null ? undefined : EnvironmentEgressPolicyFromJSON(json['egressPolicy']),
         'ingressPolicy': json['ingressPolicy'] == null ? undefined : EnvironmentIngressPolicyFromJSON(json['ingressPolicy']),
+        'credentials': json['credentials'] == null ? undefined : (json['credentials'].map(EnvironmentCredentialFromJSON)),
         'kind': json['kind'] == null ? undefined : json['kind'],
         'provisionSpec': json['provisionSpec'] == null ? undefined : EnvironmentProvisionSpecRequestFromJSON(json['provisionSpec']),
         'teamId': json['teamId'] == null ? undefined : json['teamId'],
@@ -65,6 +67,7 @@ export function CreateEnvironmentRequestToJSONTyped(value, ignoreDiscriminator =
         'platform': EnvironmentPlatformRequestToJSON(value['platform']),
         'egressPolicy': EnvironmentEgressPolicyToJSON(value['egressPolicy']),
         'ingressPolicy': EnvironmentIngressPolicyToJSON(value['ingressPolicy']),
+        'credentials': value['credentials'] == null ? undefined : (value['credentials'].map(EnvironmentCredentialToJSON)),
         'kind': value['kind'],
         'provisionSpec': EnvironmentProvisionSpecRequestToJSON(value['provisionSpec']),
         'teamId': value['teamId'],

package/node_modules/@orchestraworks/client/dist/esm/models/CreateSecretRequest.d.ts

@@ -35,7 +35,7 @@ export interface CreateSecretRequest {
      */
     description?: string;
     /**
-     * Secret value. This is write-only and is never returned by management APIs.
+     * Secret value. This is write-only and is never returned by management APIs. For git over HTTPS, store base64 of <user>:<token> as the value, such as the output of printf 'x-access-token:%s' "$TOKEN" | base64 | tr -d '\n' for a GitHub token, and present it as Authorization: Basic ${secret}.
      * @type {string}
      * @memberof CreateSecretRequest
      */
@@ -53,7 +53,7 @@ export interface CreateSecretRequest {
      */
     teamId?: string;
     /**
-     * Optional injection recipe describing the request mutations the broker applies from this secret
+     * Optional injection recipe: the request mutations the broker applies from this secret, and the hosts it applies them on. A secret without one is stored only: the broker presents it on no request. For git over HTTPS, store base64 of <user>:<token> as the value, such as the output of printf 'x-access-token:%s' "$TOKEN" | base64 | tr -d '\n' for a GitHub token, and present it as Authorization: Basic ${secret}.
      * @type {InjectionRecipe}
      * @memberof CreateSecretRequest
      */
@@ -67,9 +67,10 @@ export interface CreateSecretRequest {
         [key: string]: string;
     };
     /**
-     * Host patterns this secret is presented on, in egress rule host syntax (exact host, *.suffix, or *); empty or omitted covers no host. A non-empty list needs an injection recipe with a header, and no pattern may name the platform API host or the object store host.
+     * Deprecated: write injection.hosts instead. Accepted for one release and moved into the recipe's hosts; a request whose recipe names other hosts is refused.
      * @type {Array<string>}
      * @memberof CreateSecretRequest
+     * @deprecated
      */
     hosts?: Array<string>;
 }

package/node_modules/@orchestraworks/client/dist/esm/models/Environment.d.ts

@@ -11,6 +11,7 @@
  */
 import type { EnvironmentIngressPolicy } from './EnvironmentIngressPolicy';
 import type { EnvironmentPlatformWithRuntime } from './EnvironmentPlatformWithRuntime';
+import type { EnvironmentCredential } from './EnvironmentCredential';
 import type { EnvironmentHooks } from './EnvironmentHooks';
 import type { EnvironmentEgressPolicy } from './EnvironmentEgressPolicy';
 import type { EnvironmentProvisionSpec } from './EnvironmentProvisionSpec';
@@ -68,6 +69,12 @@ export interface Environment {
      * @memberof Environment
      */
     ingressPolicy?: EnvironmentIngressPolicy;
+    /**
+     * The credentials this environment's machines get on a request that names none, in order: the first one covering the request's host is added, whatever the agent. Each entry is a Secret or Connection of this organization by id, and adding one needs the caller's own use of it. A request naming a credential gets that one instead.
+     * @type {Array<EnvironmentCredential>}
+     * @memberof Environment
+     */
+    credentials?: Array<EnvironmentCredential>;
     /**
      * Whether the platform provisions this environment's machines (provisioned) or a customer's own machine enrols into it (enrolled). Fixed when the environment is created.
      * @type {EnvironmentKindEnum}

package/node_modules/@orchestraworks/client/dist/esm/models/Environment.js

@@ -13,6 +13,7 @@
  */
 import { EnvironmentIngressPolicyFromJSON, EnvironmentIngressPolicyToJSON, } from './EnvironmentIngressPolicy';
 import { EnvironmentPlatformWithRuntimeFromJSON, EnvironmentPlatformWithRuntimeToJSON, } from './EnvironmentPlatformWithRuntime';
+import { EnvironmentCredentialFromJSON, EnvironmentCredentialToJSON, } from './EnvironmentCredential';
 import { EnvironmentHooksFromJSON, EnvironmentHooksToJSON, } from './EnvironmentHooks';
 import { EnvironmentEgressPolicyFromJSON, EnvironmentEgressPolicyToJSON, } from './EnvironmentEgressPolicy';
 import { EnvironmentProvisionSpecFromJSON, EnvironmentProvisionSpecToJSON, } from './EnvironmentProvisionSpec';
@@ -65,6 +66,7 @@ export function EnvironmentFromJSONTyped(json, ignoreDiscriminator) {
         'platform': EnvironmentPlatformWithRuntimeFromJSON(json['platform']),
         'egressPolicy': EnvironmentEgressPolicyFromJSON(json['egressPolicy']),
         'ingressPolicy': json['ingressPolicy'] == null ? undefined : EnvironmentIngressPolicyFromJSON(json['ingressPolicy']),
+        'credentials': json['credentials'] == null ? undefined : (json['credentials'].map(EnvironmentCredentialFromJSON)),
         'kind': json['kind'],
         'provisionSpec': json['provisionSpec'] == null ? undefined : EnvironmentProvisionSpecFromJSON(json['provisionSpec']),
         'workingDirectory': json['workingDirectory'] == null ? undefined : json['workingDirectory'],
@@ -90,6 +92,7 @@ export function EnvironmentToJSONTyped(value, ignoreDiscriminator = false) {
         'platform': EnvironmentPlatformWithRuntimeToJSON(value['platform']),
         'egressPolicy': EnvironmentEgressPolicyToJSON(value['egressPolicy']),
         'ingressPolicy': EnvironmentIngressPolicyToJSON(value['ingressPolicy']),
+        'credentials': value['credentials'] == null ? undefined : (value['credentials'].map(EnvironmentCredentialToJSON)),
         'provisionSpec': EnvironmentProvisionSpecToJSON(value['provisionSpec']),
         'workingDirectory': value['workingDirectory'],
         'hooks': EnvironmentHooksToJSON(value['hooks']),

package/node_modules/@orchestraworks/client/dist/esm/models/EnvironmentCredential.d.ts

@@ -0,0 +1,38 @@
+/**
+ * Orchestra platform API
+ * No description provided (generated by Openapi Generator https://github.com/openapitools/openapi-generator)
+ *
+ * The version of the OpenAPI document: 0.1.0
+ *
+ *
+ * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).
+ * https://openapi-generator.tech
+ * Do not edit the class manually.
+ */
+/**
+ *
+ * @export
+ * @interface EnvironmentCredential
+ */
+export interface EnvironmentCredential {
+    /**
+     * The credential, as secret/<id> or connection/<id>
+     * @type {string}
+     * @memberof EnvironmentCredential
+     */
+    credential: string;
+    /**
+     * Whether the credential replaces a value the request already carries in a header the credential sets. False leaves such a request as it was sent. Absent means true.
+     * @type {boolean}
+     * @memberof EnvironmentCredential
+     */
+    replace?: boolean;
+}
+/**
+ * Check if a given object implements the EnvironmentCredential interface.
+ */
+export declare function instanceOfEnvironmentCredential(value: object): value is EnvironmentCredential;
+export declare function EnvironmentCredentialFromJSON(json: any): EnvironmentCredential;
+export declare function EnvironmentCredentialFromJSONTyped(json: any, ignoreDiscriminator: boolean): EnvironmentCredential;
+export declare function EnvironmentCredentialToJSON(json: any): EnvironmentCredential;
+export declare function EnvironmentCredentialToJSONTyped(value?: EnvironmentCredential | null, ignoreDiscriminator?: boolean): any;

package/node_modules/@orchestraworks/client/dist/esm/models/EnvironmentCredential.js

@@ -0,0 +1,45 @@
+/* tslint:disable */
+/* eslint-disable */
+/**
+ * Orchestra platform API
+ * No description provided (generated by Openapi Generator https://github.com/openapitools/openapi-generator)
+ *
+ * The version of the OpenAPI document: 0.1.0
+ *
+ *
+ * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).
+ * https://openapi-generator.tech
+ * Do not edit the class manually.
+ */
+/**
+ * Check if a given object implements the EnvironmentCredential interface.
+ */
+export function instanceOfEnvironmentCredential(value) {
+    if (!('credential' in value) || value['credential'] === undefined)
+        return false;
+    return true;
+}
+export function EnvironmentCredentialFromJSON(json) {
+    return EnvironmentCredentialFromJSONTyped(json, false);
+}
+export function EnvironmentCredentialFromJSONTyped(json, ignoreDiscriminator) {
+    if (json == null) {
+        return json;
+    }
+    return {
+        'credential': json['credential'],
+        'replace': json['replace'] == null ? undefined : json['replace'],
+    };
+}
+export function EnvironmentCredentialToJSON(json) {
+    return EnvironmentCredentialToJSONTyped(json, false);
+}
+export function EnvironmentCredentialToJSONTyped(value, ignoreDiscriminator = false) {
+    if (value == null) {
+        return value;
+    }
+    return {
+        'credential': value['credential'],
+        'replace': value['replace'],
+    };
+}

package/node_modules/@orchestraworks/client/dist/esm/models/EnvironmentProvisionSpec.d.ts

@@ -42,7 +42,7 @@ export interface EnvironmentProvisionSpec {
      */
     volumeMounts: Array<EnvironmentMount>;
     /**
-     * Environment variables set on every machine created from this environment, and forwarded into the agent process itself. NOT A SECRET STORE: values are stored unencrypted on the environment row and returned verbatim by every read of it, so anyone who can read the environment can read them. Put credentials in a Secret referenced by an egress allow rule instead - the broker injects those into the outbound request at the egress edge and the agent process never holds them. Names beginning SFDK_ or ORCHESTRA_ are platform-owned and rejected, and the platform writes its own reserved variables last, overriding anything you declare. Names beginning ORCHESTRA_FDK_, the inputs of an agent-as-code kit, are accepted in exactly that spelling as ordinary variables of your own. The other exception is six worker settings, accepted in exactly this spelling: SFDK_WORKER_RESTART_AFTER_IDLE, SFDK_WORKER_RELEASE_FETCH_TIMEOUT and SFDK_WORKER_RELEASE_CHECK_INTERVAL, each a positive duration such as 30s or 5m; SFDK_WORKER_RELEASE_REGISTRY_URL, an http or https URL; and SFDK_WORKER_AUTO_UPGRADE and SFDK_WORKER_AUTO_RESTART, each exactly true or false, which turn the worker's move to a newer release and its restart into that release on or off. They reach the machine's worker, where each one set wins over the platform's release settings, and never an agent process. HOME and USERPROFILE are not among them: the platform sets neither, the account inside the image decides where the home directory is, and a HOME you declare here is passed to the harness to conform to or complain about. Declare a volume mount at /home if you want that home directory to be durable. On a Windows environment names are matched case-insensitively, the way Windows itself matches them - sfdk_x and orchestra_fdk_x are rejected reserved names there, and Home and HOME are one variable - while a POSIX environment matches names exactly. At most 64 entries; a key matches [A-Za-z_][A-Za-z0-9_]* and is at most 128 characters; a value is at most 4096 characters.
+     * Environment variables set on every machine created from this environment, and forwarded into the agent process itself. NOT A SECRET STORE: values are stored unencrypted on the environment row and returned verbatim by every read of it, so anyone who can read the environment can read them. Put credentials in a Secret referenced by an egress allow rule instead - the broker injects those into the outbound request at the egress edge and the agent process never holds them. Names beginning SFDK_ or ORCHESTRA_ are platform-owned and rejected, and the platform writes its own reserved variables last, overriding anything you declare. Names beginning ORCHESTRA_FDK_, the inputs of an agent-as-code kit, are accepted in exactly that spelling as ordinary variables of your own. The other exception is six worker settings, accepted in exactly this spelling: ORCHESTRA_WORKER_RESTART_AFTER_IDLE, ORCHESTRA_WORKER_RELEASE_FETCH_TIMEOUT and ORCHESTRA_WORKER_RELEASE_CHECK_INTERVAL, each a positive duration such as 30s or 5m; ORCHESTRA_WORKER_RELEASE_REGISTRY_URL, an http or https URL; and ORCHESTRA_WORKER_AUTO_UPGRADE and ORCHESTRA_WORKER_AUTO_RESTART, each exactly true or false, which turn the worker's move to a newer release and its restart into that release on or off. Their former spellings beginning SFDK_WORKER_ are refused. They reach the machine's worker, where each one set wins over the platform's release settings, and never an agent process. HOME and USERPROFILE are not among them: the platform sets neither, the account inside the image decides where the home directory is, and a HOME you declare here is passed to the harness to conform to or complain about. Declare a volume mount at /home if you want that home directory to be durable. On a Windows environment names are matched case-insensitively, the way Windows itself matches them - sfdk_x and orchestra_fdk_x are rejected reserved names there, and Home and HOME are one variable - while a POSIX environment matches names exactly. At most 64 entries; a key matches [A-Za-z_][A-Za-z0-9_]* and is at most 128 characters; a value is at most 4096 characters.
      * @type {{ [key: string]: string; }}
      * @memberof EnvironmentProvisionSpec
      */

package/node_modules/@orchestraworks/client/dist/esm/models/EnvironmentProvisionSpecRequest.d.ts

@@ -55,7 +55,7 @@ export interface EnvironmentProvisionSpecRequest {
      */
     setup?: string;
     /**
-     * Declared environment variables; a supplied map replaces the stored one entirely, and an absent one leaves it unchanged. Environment variables set on every machine created from this environment, and forwarded into the agent process itself. NOT A SECRET STORE: values are stored unencrypted on the environment row and returned verbatim by every read of it, so anyone who can read the environment can read them. Put credentials in a Secret referenced by an egress allow rule instead - the broker injects those into the outbound request at the egress edge and the agent process never holds them. Names beginning SFDK_ or ORCHESTRA_ are platform-owned and rejected, and the platform writes its own reserved variables last, overriding anything you declare. Names beginning ORCHESTRA_FDK_, the inputs of an agent-as-code kit, are accepted in exactly that spelling as ordinary variables of your own. The other exception is six worker settings, accepted in exactly this spelling: SFDK_WORKER_RESTART_AFTER_IDLE, SFDK_WORKER_RELEASE_FETCH_TIMEOUT and SFDK_WORKER_RELEASE_CHECK_INTERVAL, each a positive duration such as 30s or 5m; SFDK_WORKER_RELEASE_REGISTRY_URL, an http or https URL; and SFDK_WORKER_AUTO_UPGRADE and SFDK_WORKER_AUTO_RESTART, each exactly true or false, which turn the worker's move to a newer release and its restart into that release on or off. They reach the machine's worker, where each one set wins over the platform's release settings, and never an agent process. HOME and USERPROFILE are not among them: the platform sets neither, the account inside the image decides where the home directory is, and a HOME you declare here is passed to the harness to conform to or complain about. Declare a volume mount at /home if you want that home directory to be durable. On a Windows environment names are matched case-insensitively, the way Windows itself matches them - sfdk_x and orchestra_fdk_x are rejected reserved names there, and Home and HOME are one variable - while a POSIX environment matches names exactly. At most 64 entries; a key matches [A-Za-z_][A-Za-z0-9_]* and is at most 128 characters; a value is at most 4096 characters.
+     * Declared environment variables; a supplied map replaces the stored one entirely, and an absent one leaves it unchanged. Environment variables set on every machine created from this environment, and forwarded into the agent process itself. NOT A SECRET STORE: values are stored unencrypted on the environment row and returned verbatim by every read of it, so anyone who can read the environment can read them. Put credentials in a Secret referenced by an egress allow rule instead - the broker injects those into the outbound request at the egress edge and the agent process never holds them. Names beginning SFDK_ or ORCHESTRA_ are platform-owned and rejected, and the platform writes its own reserved variables last, overriding anything you declare. Names beginning ORCHESTRA_FDK_, the inputs of an agent-as-code kit, are accepted in exactly that spelling as ordinary variables of your own. The other exception is six worker settings, accepted in exactly this spelling: ORCHESTRA_WORKER_RESTART_AFTER_IDLE, ORCHESTRA_WORKER_RELEASE_FETCH_TIMEOUT and ORCHESTRA_WORKER_RELEASE_CHECK_INTERVAL, each a positive duration such as 30s or 5m; ORCHESTRA_WORKER_RELEASE_REGISTRY_URL, an http or https URL; and ORCHESTRA_WORKER_AUTO_UPGRADE and ORCHESTRA_WORKER_AUTO_RESTART, each exactly true or false, which turn the worker's move to a newer release and its restart into that release on or off. Their former spellings beginning SFDK_WORKER_ are refused. They reach the machine's worker, where each one set wins over the platform's release settings, and never an agent process. HOME and USERPROFILE are not among them: the platform sets neither, the account inside the image decides where the home directory is, and a HOME you declare here is passed to the harness to conform to or complain about. Declare a volume mount at /home if you want that home directory to be durable. On a Windows environment names are matched case-insensitively, the way Windows itself matches them - sfdk_x and orchestra_fdk_x are rejected reserved names there, and Home and HOME are one variable - while a POSIX environment matches names exactly. At most 64 entries; a key matches [A-Za-z_][A-Za-z0-9_]* and is at most 128 characters; a value is at most 4096 characters.
      * @type {{ [key: string]: string; }}
      * @memberof EnvironmentProvisionSpecRequest
      */

package/node_modules/@orchestraworks/client/dist/esm/models/EnvironmentSnapshot.d.ts

@@ -107,7 +107,7 @@ export interface EnvironmentSnapshot {
      */
     setup?: string;
     /**
-     * Environment variables set on every machine created from this environment, and forwarded into the agent process itself. NOT A SECRET STORE: values are stored unencrypted on the environment row and returned verbatim by every read of it, so anyone who can read the environment can read them. Put credentials in a Secret referenced by an egress allow rule instead - the broker injects those into the outbound request at the egress edge and the agent process never holds them. Names beginning SFDK_ or ORCHESTRA_ are platform-owned and rejected, and the platform writes its own reserved variables last, overriding anything you declare. Names beginning ORCHESTRA_FDK_, the inputs of an agent-as-code kit, are accepted in exactly that spelling as ordinary variables of your own. The other exception is six worker settings, accepted in exactly this spelling: SFDK_WORKER_RESTART_AFTER_IDLE, SFDK_WORKER_RELEASE_FETCH_TIMEOUT and SFDK_WORKER_RELEASE_CHECK_INTERVAL, each a positive duration such as 30s or 5m; SFDK_WORKER_RELEASE_REGISTRY_URL, an http or https URL; and SFDK_WORKER_AUTO_UPGRADE and SFDK_WORKER_AUTO_RESTART, each exactly true or false, which turn the worker's move to a newer release and its restart into that release on or off. They reach the machine's worker, where each one set wins over the platform's release settings, and never an agent process. HOME and USERPROFILE are not among them: the platform sets neither, the account inside the image decides where the home directory is, and a HOME you declare here is passed to the harness to conform to or complain about. Declare a volume mount at /home if you want that home directory to be durable. On a Windows environment names are matched case-insensitively, the way Windows itself matches them - sfdk_x and orchestra_fdk_x are rejected reserved names there, and Home and HOME are one variable - while a POSIX environment matches names exactly. At most 64 entries; a key matches [A-Za-z_][A-Za-z0-9_]* and is at most 128 characters; a value is at most 4096 characters.
+     * Environment variables set on every machine created from this environment, and forwarded into the agent process itself. NOT A SECRET STORE: values are stored unencrypted on the environment row and returned verbatim by every read of it, so anyone who can read the environment can read them. Put credentials in a Secret referenced by an egress allow rule instead - the broker injects those into the outbound request at the egress edge and the agent process never holds them. Names beginning SFDK_ or ORCHESTRA_ are platform-owned and rejected, and the platform writes its own reserved variables last, overriding anything you declare. Names beginning ORCHESTRA_FDK_, the inputs of an agent-as-code kit, are accepted in exactly that spelling as ordinary variables of your own. The other exception is six worker settings, accepted in exactly this spelling: ORCHESTRA_WORKER_RESTART_AFTER_IDLE, ORCHESTRA_WORKER_RELEASE_FETCH_TIMEOUT and ORCHESTRA_WORKER_RELEASE_CHECK_INTERVAL, each a positive duration such as 30s or 5m; ORCHESTRA_WORKER_RELEASE_REGISTRY_URL, an http or https URL; and ORCHESTRA_WORKER_AUTO_UPGRADE and ORCHESTRA_WORKER_AUTO_RESTART, each exactly true or false, which turn the worker's move to a newer release and its restart into that release on or off. Their former spellings beginning SFDK_WORKER_ are refused. They reach the machine's worker, where each one set wins over the platform's release settings, and never an agent process. HOME and USERPROFILE are not among them: the platform sets neither, the account inside the image decides where the home directory is, and a HOME you declare here is passed to the harness to conform to or complain about. Declare a volume mount at /home if you want that home directory to be durable. On a Windows environment names are matched case-insensitively, the way Windows itself matches them - sfdk_x and orchestra_fdk_x are rejected reserved names there, and Home and HOME are one variable - while a POSIX environment matches names exactly. At most 64 entries; a key matches [A-Za-z_][A-Za-z0-9_]* and is at most 128 characters; a value is at most 4096 characters.
      * @type {{ [key: string]: string; }}
      * @memberof EnvironmentSnapshot
      */

package/node_modules/@orchestraworks/client/dist/esm/models/InjectionRecipe.d.ts

@@ -28,6 +28,12 @@ export interface InjectionRecipe {
      * @memberof InjectionRecipe
      */
     removeHeaders: Array<string>;
+    /**
+     * Host patterns this secret is presented on, in egress rule host syntax (exact host, *.suffix, or *); empty or omitted covers no host. A non-empty list needs at least one header, and no pattern may name the platform API host or the object store host.
+     * @type {Array<string>}
+     * @memberof InjectionRecipe
+     */
+    hosts?: Array<string>;
 }
 /**
  * Check if a given object implements the InjectionRecipe interface.

package/node_modules/@orchestraworks/client/dist/esm/models/InjectionRecipe.js

@@ -30,6 +30,7 @@ export function InjectionRecipeFromJSONTyped(json, ignoreDiscriminator) {
     return {
         'headers': json['headers'] == null ? undefined : (json['headers'].map(InjectionHeaderFromJSON)),
         'removeHeaders': json['removeHeaders'],
+        'hosts': json['hosts'] == null ? undefined : json['hosts'],
     };
 }
 export function InjectionRecipeToJSON(json) {
@@ -42,5 +43,6 @@ export function InjectionRecipeToJSONTyped(value, ignoreDiscriminator = false) {
     return {
         'headers': value['headers'] == null ? undefined : (value['headers'].map(InjectionHeaderToJSON)),
         'removeHeaders': value['removeHeaders'],
+        'hosts': value['hosts'],
     };
 }

package/node_modules/@orchestraworks/client/dist/esm/models/OAuthTokenRequest.d.ts

@@ -46,7 +46,7 @@ export interface OAuthTokenRequest {
      */
     refreshToken?: string;
     /**
-     * Public client identifier; omit it or send sfdk-public
+     * Public client identifier; omit it or send orchestra-public
      * @type {string}
      * @memberof OAuthTokenRequest
      */

package/node_modules/@orchestraworks/client/dist/esm/models/Secret.d.ts

@@ -80,17 +80,11 @@ export interface Secret {
      */
     expiresAt?: Date;
     /**
-     * Optional injection recipe describing the request mutations the broker applies from this secret
+     * Optional injection recipe: the request mutations the broker applies from this secret, and the hosts it applies them on. A secret without one is stored only: the broker presents it on no request. For git over HTTPS, store base64 of <user>:<token> as the value, such as the output of printf 'x-access-token:%s' "$TOKEN" | base64 | tr -d '\n' for a GitHub token, and present it as Authorization: Basic ${secret}.
      * @type {InjectionRecipe}
      * @memberof Secret
      */
     injection?: InjectionRecipe;
-    /**
-     * Host patterns this secret is presented on, in egress rule host syntax (exact host, *.suffix, or *); empty covers no host
-     * @type {Array<string>}
-     * @memberof Secret
-     */
-    hosts: Array<string>;
     /**
      * The agents you can see that may use this secret, as IAM decides at this read. Present on the singular read only; a list row leaves it out.
      * @type {Array<Agent>}

package/node_modules/@orchestraworks/client/dist/esm/models/Secret.js

@@ -33,8 +33,6 @@ export function instanceOfSecret(value) {
         return false;
     if (!('updatedAt' in value) || value['updatedAt'] === undefined)
         return false;
-    if (!('hosts' in value) || value['hosts'] === undefined)
-        return false;
     return true;
 }
 export function SecretFromJSON(json) {
@@ -56,7 +54,6 @@ export function SecretFromJSONTyped(json, ignoreDiscriminator) {
         'updatedAt': (new Date(json['updatedAt'])),
         'expiresAt': json['expiresAt'] == null ? undefined : (new Date(json['expiresAt'])),
         'injection': json['injection'] == null ? undefined : InjectionRecipeFromJSON(json['injection']),
-        'hosts': json['hosts'],
         'usableBy': json['usableBy'] == null ? undefined : (json['usableBy'].map(AgentFromJSON)),
     };
 }
@@ -79,6 +76,5 @@ export function SecretToJSONTyped(value, ignoreDiscriminator = false) {
         'updatedAt': value['updatedAt'].toISOString(),
         'expiresAt': value['expiresAt'] == null ? value['expiresAt'] : value['expiresAt'].toISOString(),
         'injection': InjectionRecipeToJSON(value['injection']),
-        'hosts': value['hosts'],
     };
 }

package/node_modules/@orchestraworks/client/dist/esm/models/UpdateEnvironmentRequest.d.ts

@@ -10,6 +10,7 @@
  * Do not edit the class manually.
  */
 import type { EnvironmentIngressPolicy } from './EnvironmentIngressPolicy';
+import type { EnvironmentCredential } from './EnvironmentCredential';
 import type { EnvironmentPlatformRequest } from './EnvironmentPlatformRequest';
 import type { EnvironmentEgressPolicy } from './EnvironmentEgressPolicy';
 import type { EnvironmentProvisionSpecRequest } from './EnvironmentProvisionSpecRequest';
@@ -44,6 +45,12 @@ export interface UpdateEnvironmentRequest {
      * @memberof UpdateEnvironmentRequest
      */
     ingressPolicy?: EnvironmentIngressPolicy | null;
+    /**
+     * The credentials this environment's machines get on a request that names none, in order: the first one covering the request's host is added, whatever the agent. Each entry is a Secret or Connection of this organization by id, and adding one needs the caller's own use of it. A request naming a credential gets that one instead. A provided list replaces the stored one, and absent leaves it.
+     * @type {Array<EnvironmentCredential>}
+     * @memberof UpdateEnvironmentRequest
+     */
+    credentials?: Array<EnvironmentCredential>;
     /**
      * The launch spec — every fact that applies only when the platform controls the machine. Rejected on an enrolled environment, whose machine the platform never launches.
      * @type {EnvironmentProvisionSpecRequest}

package/node_modules/@orchestraworks/client/dist/esm/models/UpdateEnvironmentRequest.js

@@ -12,6 +12,7 @@
  * Do not edit the class manually.
  */
 import { EnvironmentIngressPolicyFromJSON, EnvironmentIngressPolicyToJSON, } from './EnvironmentIngressPolicy';
+import { EnvironmentCredentialFromJSON, EnvironmentCredentialToJSON, } from './EnvironmentCredential';
 import { EnvironmentPlatformRequestFromJSON, EnvironmentPlatformRequestToJSON, } from './EnvironmentPlatformRequest';
 import { EnvironmentEgressPolicyFromJSON, EnvironmentEgressPolicyToJSON, } from './EnvironmentEgressPolicy';
 import { EnvironmentProvisionSpecRequestFromJSON, EnvironmentProvisionSpecRequestToJSON, } from './EnvironmentProvisionSpecRequest';
@@ -34,6 +35,7 @@ export function UpdateEnvironmentRequestFromJSONTyped(json, ignoreDiscriminator)
         'platform': json['platform'] == null ? undefined : EnvironmentPlatformRequestFromJSON(json['platform']),
         'egressPolicy': json['egressPolicy'] == null ? undefined : EnvironmentEgressPolicyFromJSON(json['egressPolicy']),
         'ingressPolicy': json['ingressPolicy'] == null ? undefined : EnvironmentIngressPolicyFromJSON(json['ingressPolicy']),
+        'credentials': json['credentials'] == null ? undefined : (json['credentials'].map(EnvironmentCredentialFromJSON)),
         'provisionSpec': json['provisionSpec'] == null ? undefined : EnvironmentProvisionSpecRequestFromJSON(json['provisionSpec']),
         'workingDirectory': json['workingDirectory'] == null ? undefined : json['workingDirectory'],
         'hooks': json['hooks'] == null ? undefined : EnvironmentHooksRequestFromJSON(json['hooks']),
@@ -52,6 +54,7 @@ export function UpdateEnvironmentRequestToJSONTyped(value, ignoreDiscriminator =
         'platform': EnvironmentPlatformRequestToJSON(value['platform']),
         'egressPolicy': EnvironmentEgressPolicyToJSON(value['egressPolicy']),
         'ingressPolicy': EnvironmentIngressPolicyToJSON(value['ingressPolicy']),
+        'credentials': value['credentials'] == null ? undefined : (value['credentials'].map(EnvironmentCredentialToJSON)),
         'provisionSpec': EnvironmentProvisionSpecRequestToJSON(value['provisionSpec']),
         'workingDirectory': value['workingDirectory'],
         'hooks': EnvironmentHooksRequestToJSON(value['hooks']),

package/node_modules/@orchestraworks/client/dist/esm/models/UpdateSecretRequest.d.ts

@@ -29,7 +29,7 @@ export interface UpdateSecretRequest {
      */
     description?: string;
     /**
-     * Secret value. This is write-only and is never returned by management APIs.
+     * Secret value. This is write-only and is never returned by management APIs. For git over HTTPS, store base64 of <user>:<token> as the value, such as the output of printf 'x-access-token:%s' "$TOKEN" | base64 | tr -d '\n' for a GitHub token, and present it as Authorization: Basic ${secret}.
      * @type {string}
      * @memberof UpdateSecretRequest
      */
@@ -41,7 +41,7 @@ export interface UpdateSecretRequest {
      */
     expiresAt?: Date;
     /**
-     * Injection recipe update: absent = unchanged, null = clear the recipe, value = replace it
+     * Injection recipe update: absent = unchanged, null = clear the recipe and its hosts, leaving the secret stored only, value = replace the recipe and its hosts. Optional injection recipe: the request mutations the broker applies from this secret, and the hosts it applies them on. A secret without one is stored only: the broker presents it on no request. For git over HTTPS, store base64 of <user>:<token> as the value, such as the output of printf 'x-access-token:%s' "$TOKEN" | base64 | tr -d '\n' for a GitHub token, and present it as Authorization: Basic ${secret}.
      * @type {InjectionRecipe}
      * @memberof UpdateSecretRequest
      */
@@ -55,9 +55,10 @@ export interface UpdateSecretRequest {
         [key: string]: string | null;
     };
     /**
-     * Whole-list replacement of the host patterns this secret is presented on; absent = unchanged, [] covers no host. A non-empty list needs an injection recipe with a header, and no pattern may name the platform API host or the object store host.
+     * Deprecated: write injection.hosts instead. Accepted for one release and moved into the recipe's hosts; a request whose recipe names other hosts is refused. Absent leaves the recipe's hosts unchanged; a list replaces them.
      * @type {Array<string>}
      * @memberof UpdateSecretRequest
+     * @deprecated
      */
     hosts?: Array<string>;
 }