@theholocron/holocron-plugin-doppler 5.0.0-alpha.4 → 5.0.0-alpha.40

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (2) hide show
  1. package/dist/index.mjs +16 -1
  2. package/package.json +6 -5
package/dist/index.mjs CHANGED
@@ -9,6 +9,21 @@ const resolveToken = createResolveToken({
9
9
  });
10
10
  //#endregion
11
11
  //#region src/capabilities/vault.ts
12
+ /**
13
+ * Doppler auto-injects these into every config's secrets download —
14
+ * bookkeeping about the config itself, not something any caller
15
+ * defined. `readEnvironment()` fans its result out to real destinations
16
+ * (`holocron secrets sync` → CI secrets, deploy env vars); shipping
17
+ * these alongside real secrets is pure noise there (theholocron/holocron#742
18
+ * — found via Sentinel's deploy picking them up as if they were its own
19
+ * env). Confirmed stable, documented Doppler behavior — not
20
+ * project/config-specific, so safe to filter by name unconditionally.
21
+ */
22
+ const DOPPLER_INJECTED_KEYS = /* @__PURE__ */ new Set([
23
+ "DOPPLER_PROJECT",
24
+ "DOPPLER_CONFIG",
25
+ "DOPPLER_ENVIRONMENT"
26
+ ]);
12
27
  var DopplerVault = class {
13
28
  client;
14
29
  key = "vault";
@@ -41,7 +56,7 @@ var DopplerVault = class {
41
56
  async readEnvironment(environmentId) {
42
57
  const res = await this.client().secrets.download(this.project, environmentId);
43
58
  const out = {};
44
- for (const [k, v] of Object.entries(res)) if (typeof v === "string") out[k] = v;
59
+ for (const [k, v] of Object.entries(res)) if (typeof v === "string" && !DOPPLER_INJECTED_KEYS.has(k)) out[k] = v;
45
60
  return out;
46
61
  }
47
62
  async ensureProject(name) {
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@theholocron/holocron-plugin-doppler",
3
- "version": "5.0.0-alpha.4",
3
+ "version": "5.0.0-alpha.40",
4
4
  "description": "Holocron plugin for Doppler. Implements the vault capability against Doppler's REST API — projects, configs, secrets, plus verifyToken + AUTH_HINT for `holocron auth`.",
5
5
  "keywords": [
6
6
  "doppler",
@@ -30,8 +30,9 @@
30
30
  "dist"
31
31
  ],
32
32
  "devDependencies": {
33
- "@theholocron/doppler-client": "^1.14.2",
33
+ "@theholocron/doppler-client": "^1.24.0",
34
34
  "@theholocron/eslint-config": "^8.0.0",
35
+ "@theholocron/http-client": "^1.24.0",
35
36
  "@theholocron/tsconfig": "^8.0.0",
36
37
  "@theholocron/tsdown-config": "^8.0.0",
37
38
  "@theholocron/vitest-config": "^8.0.0",
@@ -45,11 +46,11 @@
45
46
  "tsx": "4.23.12",
46
47
  "typescript": "^5.9.3",
47
48
  "vitest": "^4.1.11",
48
- "@theholocron/cli": "5.0.0-alpha.4"
49
+ "@theholocron/cli": "5.0.0-alpha.40"
49
50
  },
50
51
  "peerDependencies": {
51
- "@theholocron/doppler-client": "^1.14.2",
52
- "@theholocron/cli": "5.0.0-alpha.4"
52
+ "@theholocron/doppler-client": "^1.24.0",
53
+ "@theholocron/cli": "5.0.0-alpha.40"
53
54
  },
54
55
  "engines": {
55
56
  "node": ">=22"