@postman/sdk-config 0.4.0 → 0.5.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (33) hide show
  1. package/README.md +7 -4
  2. package/dist/index.cjs +401 -76
  3. package/dist/index.cjs.map +1 -1
  4. package/dist/index.d.cts +2 -2
  5. package/dist/index.d.ts +2 -2
  6. package/dist/index.js +400 -77
  7. package/dist/index.js.map +1 -1
  8. package/dist/sdk-config/index.cjs +393 -69
  9. package/dist/sdk-config/index.cjs.map +1 -1
  10. package/dist/sdk-config/index.d.cts +1 -1
  11. package/dist/sdk-config/index.d.ts +1 -1
  12. package/dist/sdk-config/index.js +393 -70
  13. package/dist/sdk-config/index.js.map +1 -1
  14. package/dist/sdk-config/v1/index.cjs +393 -69
  15. package/dist/sdk-config/v1/index.cjs.map +1 -1
  16. package/dist/sdk-config/v1/index.d.cts +707 -4147
  17. package/dist/sdk-config/v1/index.d.ts +707 -4147
  18. package/dist/sdk-config/v1/index.js +393 -70
  19. package/dist/sdk-config/v1/index.js.map +1 -1
  20. package/dist/sdk-config-ir/index.cjs +60 -1
  21. package/dist/sdk-config-ir/index.cjs.map +1 -1
  22. package/dist/sdk-config-ir/index.d.cts +1 -1
  23. package/dist/sdk-config-ir/index.d.ts +1 -1
  24. package/dist/sdk-config-ir/index.js +60 -2
  25. package/dist/sdk-config-ir/index.js.map +1 -1
  26. package/dist/sdk-config-ir/v1/index.cjs +60 -1
  27. package/dist/sdk-config-ir/v1/index.cjs.map +1 -1
  28. package/dist/sdk-config-ir/v1/index.d.cts +179 -1
  29. package/dist/sdk-config-ir/v1/index.d.ts +179 -1
  30. package/dist/sdk-config-ir/v1/index.js +60 -2
  31. package/dist/sdk-config-ir/v1/index.js.map +1 -1
  32. package/package.json +1 -1
  33. package/src/sdk-config/v1/README.md +9 -4
package/README.md CHANGED
@@ -73,10 +73,13 @@ if (!result.success) {
73
73
  ```
74
74
 
75
75
  SDK Config objects are strict. Unknown fields, duplicate language targets, incompatible package
76
- publication settings, and non-exact generator versions are rejected. Publishing credentials and
77
- signing material may be provided under `output.publish.credentials`, Maven
78
- `output.publish.signature`, or `output.github.credentials`; these fields can contain raw secrets and
79
- must be handled accordingly by clients and servers.
76
+ publication settings, and non-exact generator versions are rejected. npm and crates use
77
+ `output.publish.token`, PyPI and Maven use flat `username` and `password` fields, and Maven may also
78
+ use a complete `signature` object. Configure these fields with environment expressions such as
79
+ `${NPM_TOKEN}` rather than literal credentials. Clients must resolve and transport credentials using
80
+ a dedicated secret channel and remove them from generation payloads, logs, and stored artifacts.
81
+ Fern migration preserves a credential only when the raw `generators.yml` value is exactly an
82
+ environment expression; normalized, resolved, or literal values are omitted with a warning.
80
83
 
81
84
  `SdkConfigV1` accepts customer-facing local source paths and HTTP(S) source URLs, but not
82
85
  server-owned signed URLs or artifact metadata. See the