@postman/sdk-config 0.2.0 → 0.3.0

package/dist/index.js

@@ -2538,19 +2538,74 @@ var commonPublishShape2 = {
    * SDK Config IR; the external publisher or orchestrator resolves this reference before use.
    */
   credentialsRef: nonEmptyStringSchema.optional(),
+  /**
+   * Registry-specific package version override. If omitted, the external publisher/orchestrator may
+   * fall back to target.sdkVersion.
+   */
+  version: nonEmptyStringSchema.optional(),
   releaseBranch: nonEmptyStringSchema.optional(),
-  tolerateRepublish: z.boolean().optional()
+  tolerateRepublish: z.boolean().optional(),
+  /** Generate registry publishing workflow files when publishing through GitHub delivery. */
+  shouldGeneratePublishWorkflow: z.boolean().optional()
 };
+var trustedPublishingShape = {
+  /** Use registry trusted publishing / OIDC instead of a static token secret. */
+  trustedPublishing: z.boolean().optional()
+};
+var mavenCoordinateSchema = nonEmptyStringSchema.regex(
+  /^[A-Za-z0-9_.-]+:[A-Za-z0-9_.-]+$/,
+  "Maven coordinate must be in groupId:artifactId form"
+);
+var mavenSignatureEnvironmentSchema = z.strictObject({
+  keyIdEnvironmentVariable: nonEmptyStringSchema.optional(),
+  passwordEnvironmentVariable: nonEmptyStringSchema.optional(),
+  secretKeyEnvironmentVariable: nonEmptyStringSchema.optional()
+});
 var publishConfigSchema = z.discriminatedUnion("registry", [
-  z.strictObject({ registry: z.literal("npm"), ...commonPublishShape2 }),
-  z.strictObject({ registry: z.literal("pypi"), ...commonPublishShape2 }),
-  z.strictObject({ registry: z.literal("nuget"), ...commonPublishShape2 }),
-  z.strictObject({ registry: z.literal("rubygems"), ...commonPublishShape2 }),
-  z.strictObject({ registry: z.literal("crates"), ...commonPublishShape2 }),
+  z.strictObject({
+    registry: z.literal("npm"),
+    /** Environment variable name containing the npm registry token. */
+    tokenEnvironmentVariable: nonEmptyStringSchema.optional(),
+    /** Write npm package metadata as private when the publisher creates/updates package.json. */
+    isPackagePrivate: z.boolean().optional(),
+    /** Also publish the TypeScript package to JSR from the npm publishing path. */
+    publishToJsr: z.boolean().optional(),
+    ...trustedPublishingShape,
+    ...commonPublishShape2
+  }),
+  z.strictObject({
+    registry: z.literal("pypi"),
+    usernameEnvironmentVariable: nonEmptyStringSchema.optional(),
+    passwordEnvironmentVariable: nonEmptyStringSchema.optional(),
+    ...trustedPublishingShape,
+    ...commonPublishShape2
+  }),
+  z.strictObject({
+    registry: z.literal("nuget"),
+    apiKeyEnvironmentVariable: nonEmptyStringSchema.optional(),
+    ...trustedPublishingShape,
+    ...commonPublishShape2
+  }),
+  z.strictObject({
+    registry: z.literal("rubygems"),
+    apiKeyEnvironmentVariable: nonEmptyStringSchema.optional(),
+    ...commonPublishShape2
+  }),
+  z.strictObject({
+    registry: z.literal("crates"),
+    tokenEnvironmentVariable: nonEmptyStringSchema.optional(),
+    ...commonPublishShape2
+  }),
   z.strictObject({ registry: z.literal("go"), ...commonPublishShape2 }),
   z.strictObject({ registry: z.literal("composer"), ...commonPublishShape2 }),
   z.strictObject({
     registry: z.literal("maven"),
+    /** Maven coordinate in groupId:artifactId form when consumers need the combined value. */
+    coordinate: mavenCoordinateSchema.optional(),
+    usernameEnvironmentVariable: nonEmptyStringSchema.optional(),
+    passwordEnvironmentVariable: nonEmptyStringSchema.optional(),
+    mavenUrlEnvironmentVariable: nonEmptyStringSchema.optional(),
+    signatureEnvironmentVariables: mavenSignatureEnvironmentSchema.optional(),
     /**
      * Reference to Maven signing credentials. Raw signing keys are intentionally not part of SDK
      * Config IR; the external publisher or orchestrator resolves this reference before use.
@@ -2790,6 +2845,13 @@ var sdkConfigIrV1Schema = z.strictObject({
   }
   if (output.publish) {
     validatePublishingIdentity2(packageConfig, output.publish.registry, context);
+    if (output.delivery !== "github" && output.publish.shouldGeneratePublishWorkflow === true) {
+      context.addIssue({
+        code: "custom",
+        message: "output.publish.shouldGeneratePublishWorkflow requires GitHub delivery",
+        path: ["output", "publish", "shouldGeneratePublishWorkflow"]
+      });
+    }
   }
   if (compatibility?.legacyInput) {
     const expectedKind = target.sourceOrigin === "postman" ? "postman-build-parameters" : "fern-generator-invocation";