@varde-flyt/vfac 0.17.0 → 0.18.0

package/dist/vfac.mjs

@@ -14216,7 +14216,7 @@ function exampleResourceKey(name) {
   const slug = name.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^[^a-z]+/, "").replace(/-+$/, "").slice(0, 63);
   return RESOURCE_KEY_PATTERN.test(slug) ? slug : "";
 }
-var DEPLOYMENT_EXAMPLE_GUARANTEE = "Product-owned configuration is complete and E2E-proven; tenant-specific secrets and Resource/provider selections are supplied by the tenant.";
+var DEPLOYMENT_EXAMPLE_GUARANTEE = "Product-owned configuration is complete and E2E-proven; tenant-specific secrets, tenant-specific values and Resource/provider selections are supplied by the tenant.";
 
 // ../product-configuration/dist/configuration-requirements.js
 function configurationRequirements(configuration) {
@@ -15077,6 +15077,7 @@ function isBlockedHost(hostname) {
 }
 
 // ../product-contracts/dist/deployment-example.schema.js
+var MAX_TENANT_INPUTS = 8;
 var DeploymentExampleSchema = external_exports.object({
   /** The heading a customer reads above the example. */
   title: external_exports.string().min(3).max(80),
@@ -15105,12 +15106,29 @@ var DeploymentExampleSchema = external_exports.object({
    * created and again only to set a new one — and never written into a
    * manifest. A secret resent on an unchanged re-apply is written again.
    */
-  secretInputs: external_exports.array(external_exports.string().regex(CONFIGURATION_PROPERTY_NAME_REGEX)).max(MAX_CONFIGURATION_CHILDREN).optional()
-}).strict().describe("The recommended deployment for this release. Required for a NEW release; optional in the schema because releases published before the field existed are immutable. " + DEPLOYMENT_EXAMPLE_GUARANTEE + " Secret settings are named in secretInputs and never given a value here.");
+  secretInputs: external_exports.array(external_exports.string().regex(CONFIGURATION_PROPERTY_NAME_REGEX)).max(MAX_CONFIGURATION_CHILDREN).optional(),
+  /**
+   * The ordinary — NOT secret — settings the tenant answers, BY NAME.
+   *
+   * A value only the tenant can know and nothing may default: the address of
+   * the person who administers the Resource first. The example carries NO
+   * value for one — the document a reader copies carries it present and
+   * empty, and the tenant types it — so an example applied unchanged is
+   * refused for that setting by name rather than deployed with a placeholder.
+   * Unlike a secret, the value belongs in the manifest.
+   *
+   * Each must be a setting every deployment must answer, with no default, that
+   * no other rule reads: whether the example is complete cannot depend on a
+   * value the publisher never gave.
+   */
+  tenantInputs: external_exports.array(external_exports.string().regex(CONFIGURATION_PROPERTY_NAME_REGEX)).max(MAX_TENANT_INPUTS).optional()
+}).strict().describe("The recommended deployment for this release. Required for a NEW release; optional in the schema because releases published before the field existed are immutable. " + DEPLOYMENT_EXAMPLE_GUARANTEE + " Secret settings are named in secretInputs and never given a value here; so are the ordinary settings the tenant answers, named in tenantInputs.");
 var SECRET_INPUT_SEGMENT = CONFIGURATION_PROPERTY_NAME_REGEX.source.slice(1, -1);
-var SecretInputV2Schema = external_exports.string().regex(new RegExp(`^(?:${SECRET_INPUT_SEGMENT}|(?:/${SECRET_INPUT_SEGMENT}){2,${MAX_CONFIGURATION_DEPTH}})$`)).refine((raw) => secretPathOf(raw) !== null, {
-  message: 'A secret input is a root setting name, or a configuration path such as "/group/setting" with no list index.'
+var settingInputV2Schema = (what) => external_exports.string().regex(new RegExp(`^(?:${SECRET_INPUT_SEGMENT}|(?:/${SECRET_INPUT_SEGMENT}){2,${MAX_CONFIGURATION_DEPTH}})$`)).refine((raw) => secretPathOf(raw) !== null, {
+  message: `A ${what} is a root setting name, or a configuration path such as "/group/setting" with no list index.`
 });
+var SecretInputV2Schema = settingInputV2Schema("secret input");
+var TenantInputV2Schema = settingInputV2Schema("tenant input");
 var DeploymentExampleV2Schema = DeploymentExampleSchema.extend({
   /**
    * The secret settings a deployment of this example supplies, BY CANONICAL
@@ -15120,7 +15138,12 @@ var DeploymentExampleV2Schema = DeploymentExampleSchema.extend({
    * here, so a reader knows every `--secret` flag the create needs before
    * running it. The values are the tenant's and never written into a manifest.
    */
-  secretInputs: external_exports.array(SecretInputV2Schema).max(MAX_CONFIGURATION_CHILDREN).optional()
+  secretInputs: external_exports.array(SecretInputV2Schema).max(MAX_CONFIGURATION_CHILDREN).optional(),
+  /**
+   * The ordinary settings the tenant answers, BY CANONICAL PATH —
+   * `/administrator/email`. See the v1 field; only the spelling differs.
+   */
+  tenantInputs: external_exports.array(TenantInputV2Schema).max(MAX_TENANT_INPUTS).optional()
 });
 
 // ../product-contracts/dist/portfolio.js

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@varde-flyt/vfac",
-  "version": "0.17.0",
+  "version": "0.18.0",
   "description": "Deploy and manage Varde Flyt Products from a manifest.",
   "repository": {
     "type": "git",