@sequenceholdings/orm 2.9.0 → 2.11.0

package/dist/cli.d.cts

@@ -5,6 +5,13 @@ declare const TOKEN_ENV = "SEQUENCE_ORM_TOKEN";
 declare const SOURCE_ENV = "SEQUENCE_ORM_SOURCE";
 /** Namespace-admin override reason for an apply whose source does not verify; set by `seq-studio orm apply --unverified-source`. */
 declare const UNVERIFIED_SOURCE_REASON_ENV = "SEQUENCE_ORM_UNVERIFIED_SOURCE_REASON";
+/**
+ * The caller's token for the source claim's `source_environment`; set by `seq-studio orm apply --source-env`.
+ * Only the apply request carries it (as `x-sequence-source-authorization`), so Atlas can read the source there.
+ */
+declare const SOURCE_AUTHORIZATION_ENV = "SEQUENCE_ORM_SOURCE_AUTHORIZATION";
+/** The apply request's source environment credential header, when the delegate supplied one. */
+declare function applySourceHeaders(env?: NodeJS.ProcessEnv): Record<string, string>;
 /** The apply body's `source` claim, when the delegate supplied one. Atlas verifies it; it never authorizes anything. */
 declare function applySourceFromEnv(env?: NodeJS.ProcessEnv): {
     source?: Record<string, unknown>;
@@ -39,6 +46,8 @@ declare function errorDetail(payload: unknown): string | null;
 interface RegistryActivation {
     id: string;
     provenance_class: string;
+    /** Absent on an older Atlas; null for this deployment's own Git Service. */
+    source_environment?: string | null;
     source_commit: string | null;
     source_branch: string | null;
     source_path: string | null;
@@ -47,4 +56,4 @@ interface RegistryActivation {
     activated_at: string;
 }
 
-export { BASE_URL_ENV, ORM_MODULE_PATH_ENV, type RegistryActivation, SOURCE_ENV, TOKEN_ENV, UNVERIFIED_SOURCE_REASON_ENV, applySourceFromEnv, describeActivation, errorDetail, parseApplyWait, runCli, setTokenProvider };
+export { BASE_URL_ENV, ORM_MODULE_PATH_ENV, type RegistryActivation, SOURCE_AUTHORIZATION_ENV, SOURCE_ENV, TOKEN_ENV, UNVERIFIED_SOURCE_REASON_ENV, applySourceFromEnv, applySourceHeaders, describeActivation, errorDetail, parseApplyWait, runCli, setTokenProvider };

package/dist/cli.d.ts

@@ -5,6 +5,13 @@ declare const TOKEN_ENV = "SEQUENCE_ORM_TOKEN";
 declare const SOURCE_ENV = "SEQUENCE_ORM_SOURCE";
 /** Namespace-admin override reason for an apply whose source does not verify; set by `seq-studio orm apply --unverified-source`. */
 declare const UNVERIFIED_SOURCE_REASON_ENV = "SEQUENCE_ORM_UNVERIFIED_SOURCE_REASON";
+/**
+ * The caller's token for the source claim's `source_environment`; set by `seq-studio orm apply --source-env`.
+ * Only the apply request carries it (as `x-sequence-source-authorization`), so Atlas can read the source there.
+ */
+declare const SOURCE_AUTHORIZATION_ENV = "SEQUENCE_ORM_SOURCE_AUTHORIZATION";
+/** The apply request's source environment credential header, when the delegate supplied one. */
+declare function applySourceHeaders(env?: NodeJS.ProcessEnv): Record<string, string>;
 /** The apply body's `source` claim, when the delegate supplied one. Atlas verifies it; it never authorizes anything. */
 declare function applySourceFromEnv(env?: NodeJS.ProcessEnv): {
     source?: Record<string, unknown>;
@@ -39,6 +46,8 @@ declare function errorDetail(payload: unknown): string | null;
 interface RegistryActivation {
     id: string;
     provenance_class: string;
+    /** Absent on an older Atlas; null for this deployment's own Git Service. */
+    source_environment?: string | null;
     source_commit: string | null;
     source_branch: string | null;
     source_path: string | null;
@@ -47,4 +56,4 @@ interface RegistryActivation {
     activated_at: string;
 }
 
-export { BASE_URL_ENV, ORM_MODULE_PATH_ENV, type RegistryActivation, SOURCE_ENV, TOKEN_ENV, UNVERIFIED_SOURCE_REASON_ENV, applySourceFromEnv, describeActivation, errorDetail, parseApplyWait, runCli, setTokenProvider };
+export { BASE_URL_ENV, ORM_MODULE_PATH_ENV, type RegistryActivation, SOURCE_AUTHORIZATION_ENV, SOURCE_ENV, TOKEN_ENV, UNVERIFIED_SOURCE_REASON_ENV, applySourceFromEnv, applySourceHeaders, describeActivation, errorDetail, parseApplyWait, runCli, setTokenProvider };