@theholocron/holocron-plugin-infisical 5.0.0-alpha.25 → 5.0.0-alpha.251

package/README.md

@@ -160,7 +160,7 @@ Set the `baseUrl` option in `holocron.config.json`:
 
 ## Status
 
-**`v2.0.0-alpha.1`** — scaffolded via `holocron plugin create` (see
+**`v2.0.0-alpha.1`** — scaffolded via `holocron new plugin` (see
 `docs/wiki/specifications/tool-plugin-create.spec.md` — this is the first real
 production use of that command, doubling as its acceptance test in
 a live scenario). Not yet published on npm; capability methods are

package/dist/index.d.mts

@@ -1,16 +1,13 @@
-import { AuthError, EnsureResult, ResolveTokenInput, Vault } from "@theholocron/cli";
+import { AuthError, EnsureResult, ResolveTokenInput, Vault, VerifyTokenFailure, VerifyTokenResult, VerifyTokenResult as VerifyTokenResult$1, VerifyTokenSuccess } from "@theholocron/cli";
 import { InfisicalClient, InfisicalClient as InfisicalClient$1, InfisicalClientOptions, createInfisicalClient } from "@theholocron/infisical-client";
-//#region src/auth.d.ts
-declare const resolveToken: (input?: ResolveTokenInput) => string;
-//#endregion
-//#region src/capabilities/vault.d.ts
+export declare const resolveToken: (input?: ResolveTokenInput) => string;
 interface InfisicalVaultOptions {
   /** Default workspace (project) id — read/list/etc. operate here unless overridden. */
   workspace: string;
   /** Default environment slug — e.g., "dev", "stg", "prd". */
   environment: string;
 }
-declare class InfisicalVault implements Vault {
+export declare class InfisicalVault implements Vault {
   private readonly client;
   readonly key: "vault";
   readonly providerName = "infisical";
@@ -18,7 +15,7 @@ declare class InfisicalVault implements Vault {
   private readonly environment;
   /**
    * Cache of resolved workspace name/slug → id. `ensureEnvironment`
-   * is called once per environment during `holocron setup` (dev / stg
+   * is called once per environment during `holocron repo setup` (dev / stg
    * / prd), so a single `GET /v1/workspace` lookup covers all three
    * calls in the same run.
    */
@@ -33,54 +30,28 @@ declare class InfisicalVault implements Vault {
   ensureEnvironment(project: string, name: string): Promise<EnsureResult>;
   private resolveWorkspaceId;
 }
-//#endregion
-//#region src/verify-token.d.ts
-/**
- * `verifyToken` — plugin-level export used by `holocron auth set` +
- * `holocron auth check`. Hits `GET /v1/workspace` and interprets the
- * response permissively:
- *
- *   - 200 → token is valid AND has workspace-list scope; report the
- *     workspace count + first workspace name.
- *   - 403 → token is valid (authenticated) but doesn't have scope
- *     to list workspaces at the org level. This is normal for
- *     Universal Auth machine-identity tokens that are scoped to a
- *     specific workspace rather than org-wide. Return ok with a
- *     "scope-limited" subject — the operator's `holocron.config.json`
- *     will name the specific workspace + environment the token
- *     actually has access to.
- *   - 401 or other → token is invalid.
- */
-interface VerifyTokenSuccess {
-  ok: true;
-  subject: string;
-}
-interface VerifyTokenFailure {
-  ok: false;
-  message: string;
-}
-type VerifyTokenResult = VerifyTokenSuccess | VerifyTokenFailure;
 interface VerifyTokenOptions {
   baseUrl?: string;
   fetch?: typeof fetch;
 }
-declare function verifyToken(token: string, opts?: VerifyTokenOptions): Promise<VerifyTokenResult>;
-//#endregion
-//#region src/index.d.ts
-interface InfisicalPluginOptions extends ResolveTokenInput, InfisicalVaultOptions {
+export declare function verifyToken(token: string, opts?: VerifyTokenOptions): Promise<VerifyTokenResult$1>;
+export interface InfisicalPluginOptions extends ResolveTokenInput, InfisicalVaultOptions {
   /** Override base URL for tests (or self-hosted Infisical). */
   baseUrl?: string;
   /** Override `fetch` for tests. */
   fetch?: typeof fetch;
 }
-interface PluginContext {
+export interface PluginContext {
   options: InfisicalPluginOptions;
   client: () => InfisicalClient;
 }
-declare function createContext(options: InfisicalPluginOptions): PluginContext;
-declare function vault(ctx: PluginContext): Vault;
-declare function createPlugin(options: InfisicalPluginOptions): {
+export declare function createContext(options: InfisicalPluginOptions): PluginContext;
+export declare function vault(ctx: PluginContext): Vault;
+export declare function createPlugin(options: InfisicalPluginOptions): {
   name: string;
+  probes: {
+    connection: import("@theholocron/cli").Probe;
+  };
   capabilities: {
     vault: () => Vault;
   };
@@ -89,6 +60,5 @@ declare function createPlugin(options: InfisicalPluginOptions): {
  * One-line hint printed by `holocron auth set infisical` when no
  * token is supplied or the supplied token is rejected.
  */
-declare const AUTH_HINT: string;
-//#endregion
-export { AUTH_HINT, AuthError, type InfisicalClient, type InfisicalClientOptions, InfisicalPluginOptions, InfisicalVault, PluginContext, type ResolveTokenInput, type VerifyTokenFailure, type VerifyTokenResult, type VerifyTokenSuccess, createContext, createInfisicalClient, createPlugin, resolveToken, vault, verifyToken };
+export declare const AUTH_HINT: string;
+export { AuthError, type InfisicalClient, type InfisicalClientOptions, type ResolveTokenInput, type VerifyTokenFailure, type VerifyTokenResult, type VerifyTokenSuccess, createInfisicalClient };

package/dist/index.mjs

@@ -1,14 +1,14 @@
-import { AuthError, ProviderApiError, createResolveToken } from "@theholocron/cli";
+import { AuthError, ProviderApiError, connectionProbe, createResolveToken } from "@theholocron/cli";
 import { createInfisicalClient } from "@theholocron/infisical-client";
-//#region src/auth.ts
+import { errorMessage } from "@theholocron/misc-utils";
+// src/auth.ts
 const resolveToken = createResolveToken({
 	envName: "HOLOCRON_INFISICAL_TOKEN",
 	vendorEnvName: "INFISICAL_TOKEN",
 	keyringService: "infisical",
 	errorMessage: "no Infisical token found. Pass --token <TOKEN>, set HOLOCRON_INFISICAL_TOKEN / INFISICAL_TOKEN, or run: holocron auth set infisical <TOKEN>"
 });
-//#endregion
-//#region src/capabilities/vault.ts
+// src/capabilities/vault.ts
 var InfisicalVault = class {
 	client;
 	key = "vault";
@@ -17,7 +17,7 @@ var InfisicalVault = class {
 	environment;
 	/**
 	* Cache of resolved workspace name/slug → id. `ensureEnvironment`
-	* is called once per environment during `holocron setup` (dev / stg
+	* is called once per environment during `holocron repo setup` (dev / stg
 	* / prd), so a single `GET /v1/workspace` lookup covers all three
 	* calls in the same run.
 	*/
@@ -135,8 +135,7 @@ function hasAlreadyExistsBody(details) {
 	if (typeof details !== "string") return false;
 	return /already exists|duplicate/i.test(details);
 }
-//#endregion
-//#region src/verify-token.ts
+// src/verify-token.ts
 /**
 * `verifyToken` — plugin-level export used by `holocron auth set` +
 * `holocron auth check`. Hits `GET /v1/workspace` and interprets the
@@ -175,12 +174,11 @@ async function verifyToken(token, opts = {}) {
 		};
 		return {
 			ok: false,
-			message: err instanceof Error ? err.message : String(err)
+			message: errorMessage(err)
 		};
 	}
 }
-//#endregion
-//#region src/index.ts
+// src/index.ts
 function createContext(options) {
 	let client;
 	return {
@@ -202,6 +200,16 @@ function createPlugin(options) {
 	const ctx = createContext(options);
 	return {
 		name: "@theholocron/holocron-plugin-infisical",
+		probes: { connection: connectionProbe({
+			provider: "Infisical",
+			url: options.baseUrl ?? "https://app.infisical.com",
+			fetch: options.fetch,
+			token: () => resolveToken(options),
+			verify: (token) => verifyToken(token, {
+				baseUrl: options.baseUrl,
+				fetch: options.fetch
+			})
+		}) },
 		capabilities: { vault: () => vault(ctx) }
 	};
 }
@@ -210,5 +218,4 @@ function createPlugin(options) {
 * token is supplied or the supplied token is rejected.
 */
 const AUTH_HINT = "generate a Token Auth token on your machine identity (organization → access control → identities → your identity → add auth method → Token Auth → create token) OR a Personal API Token, then: holocron auth set infisical <TOKEN>. NOT Universal Auth's Client Secret — that needs a login exchange this plugin doesn't do yet.";
-//#endregion
 export { AUTH_HINT, AuthError, InfisicalVault, createContext, createInfisicalClient, createPlugin, resolveToken, vault, verifyToken };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@theholocron/holocron-plugin-infisical",
-  "version": "5.0.0-alpha.25",
+  "version": "5.0.0-alpha.251",
   "description": "Holocron plugin for Infisical. Implements the vault capability against Infisical's REST API, plus exports verifyToken + AUTH_HINT for `holocron auth`.",
   "keywords": [
     "holocron",
@@ -8,12 +8,12 @@
     "plugin",
     "vault"
   ],
-  "homepage": "https://github.com/theholocron/holocron/tree/main/packages/holocron-plugin-infisical#readme",
+  "homepage": "https://github.com/theholocron/holocron/tree/main/plugins/holocron-plugin-infisical#readme",
   "bugs": "https://github.com/theholocron/holocron/issues",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/theholocron/holocron.git",
-    "directory": "packages/holocron-plugin-infisical"
+    "directory": "plugins/holocron-plugin-infisical"
   },
   "license": "MIT",
   "author": "Newton Koumantzelis",
@@ -30,27 +30,29 @@
     "dist"
   ],
   "devDependencies": {
-    "@theholocron/eslint-config": "^8.0.0",
-    "@theholocron/http-client": "^1.22.0",
-    "@theholocron/infisical-client": "^1.22.0",
-    "@theholocron/tsconfig": "^8.0.0",
-    "@theholocron/tsdown-config": "^8.0.0",
-    "@theholocron/vitest-config": "^8.0.0",
+    "@theholocron/eslint-config": "^8.8.2",
+    "@theholocron/http-client": "^1.57.0",
+    "@theholocron/infisical-client": "^1.43.1",
+    "@theholocron/misc-utils": "^1.16.0",
+    "@theholocron/tsconfig": "^8.8.2",
+    "@theholocron/tsdown-config": "^8.8.2",
+    "@theholocron/vitest-config": "^8.8.2",
     "@types/node": "^26",
-    "@vitest/coverage-v8": "^4.1.11",
+    "@vitest/coverage-v8": "^5.0.5",
     "@vitest/eslint-plugin": "^1.6.27",
     "eslint": "^10.8.1",
     "eslint-plugin-n": "^18.3.0",
     "globals": "^17.11.0",
-    "tsdown": "^0.22.14",
-    "tsx": "4.23.12",
+    "tsdown": "^0.23.3",
+    "tsx": "4.23.15",
     "typescript": "^5.9.3",
-    "vitest": "^4.1.11",
-    "@theholocron/cli": "5.0.0-alpha.25"
+    "vitest": "^5.0.5",
+    "@theholocron/cli": "5.0.0-alpha.251"
   },
   "peerDependencies": {
-    "@theholocron/infisical-client": "^1.22.0",
-    "@theholocron/cli": "5.0.0-alpha.25"
+    "@theholocron/infisical-client": "^1.43.1",
+    "@theholocron/misc-utils": "^1.16.0",
+    "@theholocron/cli": "5.0.0-alpha.251"
   },
   "peerDependenciesMeta": {
     "@theholocron/infisical-client": {}