@varde-flyt/vfac 0.17.0 → 0.18.1

package/README.md

@@ -253,6 +253,12 @@ file that turns the setting off. A released connection is torn down by its
 provider afterwards, and the providing resource can only be deleted once that
 teardown is done.
 
+**Two resources connected to each other hold each other**: each is the other's
+provider, so both deletes are refused. Break the loop at one link — set one of
+the two connections to `state: disconnected` and apply, wait until its teardown
+is done, delete the resource nothing holds any more, and delete the other once
+that deletion has finished.
+
 **A manifest never moves a connection in one apply**: pointing an existing
 connection at a different resource is refused rather than performed, because a
 file you re-apply on every push must not be able to silently move a running

package/dist/vfac.mjs

@@ -14216,7 +14216,7 @@ function exampleResourceKey(name) {
   const slug = name.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^[^a-z]+/, "").replace(/-+$/, "").slice(0, 63);
   return RESOURCE_KEY_PATTERN.test(slug) ? slug : "";
 }
-var DEPLOYMENT_EXAMPLE_GUARANTEE = "Product-owned configuration is complete and E2E-proven; tenant-specific secrets and Resource/provider selections are supplied by the tenant.";
+var DEPLOYMENT_EXAMPLE_GUARANTEE = "Product-owned configuration is complete and E2E-proven; tenant-specific secrets, tenant-specific values and Resource/provider selections are supplied by the tenant.";
 
 // ../product-configuration/dist/configuration-requirements.js
 function configurationRequirements(configuration) {
@@ -15077,6 +15077,7 @@ function isBlockedHost(hostname) {
 }
 
 // ../product-contracts/dist/deployment-example.schema.js
+var MAX_TENANT_INPUTS = 8;
 var DeploymentExampleSchema = external_exports.object({
   /** The heading a customer reads above the example. */
   title: external_exports.string().min(3).max(80),
@@ -15105,12 +15106,29 @@ var DeploymentExampleSchema = external_exports.object({
    * created and again only to set a new one — and never written into a
    * manifest. A secret resent on an unchanged re-apply is written again.
    */
-  secretInputs: external_exports.array(external_exports.string().regex(CONFIGURATION_PROPERTY_NAME_REGEX)).max(MAX_CONFIGURATION_CHILDREN).optional()
-}).strict().describe("The recommended deployment for this release. Required for a NEW release; optional in the schema because releases published before the field existed are immutable. " + DEPLOYMENT_EXAMPLE_GUARANTEE + " Secret settings are named in secretInputs and never given a value here.");
+  secretInputs: external_exports.array(external_exports.string().regex(CONFIGURATION_PROPERTY_NAME_REGEX)).max(MAX_CONFIGURATION_CHILDREN).optional(),
+  /**
+   * The ordinary — NOT secret — settings the tenant answers, BY NAME.
+   *
+   * A value only the tenant can know and nothing may default: the address of
+   * the person who administers the Resource first. The example carries NO
+   * value for one — the document a reader copies carries it present and
+   * empty, and the tenant types it — so an example applied unchanged is
+   * refused for that setting by name rather than deployed with a placeholder.
+   * Unlike a secret, the value belongs in the manifest.
+   *
+   * Each must be a setting every deployment must answer, with no default, that
+   * no other rule reads: whether the example is complete cannot depend on a
+   * value the publisher never gave.
+   */
+  tenantInputs: external_exports.array(external_exports.string().regex(CONFIGURATION_PROPERTY_NAME_REGEX)).max(MAX_TENANT_INPUTS).optional()
+}).strict().describe("The recommended deployment for this release. Required for a NEW release; optional in the schema because releases published before the field existed are immutable. " + DEPLOYMENT_EXAMPLE_GUARANTEE + " Secret settings are named in secretInputs and never given a value here; so are the ordinary settings the tenant answers, named in tenantInputs.");
 var SECRET_INPUT_SEGMENT = CONFIGURATION_PROPERTY_NAME_REGEX.source.slice(1, -1);
-var SecretInputV2Schema = external_exports.string().regex(new RegExp(`^(?:${SECRET_INPUT_SEGMENT}|(?:/${SECRET_INPUT_SEGMENT}){2,${MAX_CONFIGURATION_DEPTH}})$`)).refine((raw) => secretPathOf(raw) !== null, {
-  message: 'A secret input is a root setting name, or a configuration path such as "/group/setting" with no list index.'
+var settingInputV2Schema = (what) => external_exports.string().regex(new RegExp(`^(?:${SECRET_INPUT_SEGMENT}|(?:/${SECRET_INPUT_SEGMENT}){2,${MAX_CONFIGURATION_DEPTH}})$`)).refine((raw) => secretPathOf(raw) !== null, {
+  message: `A ${what} is a root setting name, or a configuration path such as "/group/setting" with no list index.`
 });
+var SecretInputV2Schema = settingInputV2Schema("secret input");
+var TenantInputV2Schema = settingInputV2Schema("tenant input");
 var DeploymentExampleV2Schema = DeploymentExampleSchema.extend({
   /**
    * The secret settings a deployment of this example supplies, BY CANONICAL
@@ -15120,7 +15138,12 @@ var DeploymentExampleV2Schema = DeploymentExampleSchema.extend({
    * here, so a reader knows every `--secret` flag the create needs before
    * running it. The values are the tenant's and never written into a manifest.
    */
-  secretInputs: external_exports.array(SecretInputV2Schema).max(MAX_CONFIGURATION_CHILDREN).optional()
+  secretInputs: external_exports.array(SecretInputV2Schema).max(MAX_CONFIGURATION_CHILDREN).optional(),
+  /**
+   * The ordinary settings the tenant answers, BY CANONICAL PATH —
+   * `/administrator/email`. See the v1 field; only the spelling differs.
+   */
+  tenantInputs: external_exports.array(TenantInputV2Schema).max(MAX_TENANT_INPUTS).optional()
 });
 
 // ../product-contracts/dist/portfolio.js
@@ -19165,7 +19188,7 @@ function renderOperation(operationId, data) {
       const cause2 = failure["cause"];
       const named = reportedSettings[0];
       lines.push(
-        retryable ? `    Another attempt can succeed: ${again}.` : named !== void 0 ? `    Correct \`${named}\` in your manifest, then \`vfac apply\` it${data["type"] === "PRODUCT_INSTANCE_UPGRADE" ? ` and ${again}` : ""}. Repeating it unchanged fails the same way.` : cause2 === "unknown" ? `    The platform could not classify this, so there is nothing here to correct. Read the whole record with \`vfac get operation ${operationId} --output json\`, and quote that id if you ask for help. Repeating it unchanged fails the same way.` : `    Repeating this unchanged fails again \u2014 fix what the lines above name, then ${again}${changeIt}.`
+        named !== void 0 ? `    Correct \`${named}\` in your manifest, then \`vfac apply\` it${data["type"] === "PRODUCT_INSTANCE_UPGRADE" ? ` and ${again}` : ""}. Repeating it unchanged fails the same way.` : retryable ? `    Another attempt can succeed: ${again}.` : cause2 === "unknown" ? `    The platform could not classify this, so there is nothing here to correct. Read the whole record with \`vfac get operation ${operationId} --output json\`, and quote that id if you ask for help. Repeating it unchanged fails the same way.` : `    Repeating this unchanged fails again \u2014 fix what the lines above name, then ${again}${changeIt}.`
       );
     }
   }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@varde-flyt/vfac",
-  "version": "0.17.0",
+  "version": "0.18.1",
   "description": "Deploy and manage Varde Flyt Products from a manifest.",
   "repository": {
     "type": "git",