@walkeros/core 4.2.1 → 4.2.2-next-1782892388850

package/dist/index.d.mts

@@ -691,7 +691,9 @@ declare namespace context {
 /**
  * Shared credentials types for steps that authenticate against an external
  * service. A step's `Types['credentials']` points at one of these (or its own
- * shape); the value resolves via `$env` like any other config field.
+ * shape). The value resolves like any other config field; back it with a
+ * managed secret via `$secret.NAME` (credentials, tokens, and private keys
+ * must use `$secret`, not `$env`, so the deploy pipeline injects them).
  */
 /**
  * Google-style service account credentials. The common shape for GCP-family
@@ -704,8 +706,8 @@ interface ServiceAccount {
     project_id?: string;
 }
 /**
- * A credential value: either a JSON string (often a `$env` reference) or the
- * already-parsed object form `T`.
+ * A credential value: either a JSON string (often a `$secret.NAME` reference to
+ * a managed secret) or the already-parsed object form `T`.
  */
 type Credential<T> = string | T;
 
@@ -836,7 +838,8 @@ interface Config$5<T extends TypesGeneric$3 = Types$4> {
     /** Implementation-specific configuration passed to the init function. */
     settings?: InitSettings$3<T>;
     /**
-     * Optional, strictly-typed credentials slot ($env-resolved). The package
+     * Optional, strictly-typed credentials slot. Back it with a managed secret
+     * via `$secret.NAME` (credentials use `$secret`, not `$env`). The package
      * defines the shape via `Types['credentials']`. `settings.<sdk>` stays the
      * escape hatch for raw SDK options.
      */
@@ -2446,7 +2449,8 @@ interface Config$1<T extends TypesGeneric$1 = Types$1> extends Config$7<Mapping<
     /** Implementation-specific configuration passed to the init function. */
     settings?: InitSettings$1<T>;
     /**
-     * Optional, strictly-typed credentials slot ($env-resolved). The package
+     * Optional, strictly-typed credentials slot. Back it with a managed secret
+     * via `$secret.NAME` (credentials use `$secret`, not `$env`). The package
      * defines the shape via `Types['credentials']`. `settings.<sdk>` stays the
      * escape hatch for raw SDK options.
      */
@@ -2664,7 +2668,8 @@ type TypesOf<I> = I extends Instance$1<infer T> ? T : never;
 interface Config<T extends TypesGeneric = Types> {
     settings?: InitSettings<T>;
     /**
-     * Optional, strictly-typed credentials slot ($env-resolved). The package
+     * Optional, strictly-typed credentials slot. Back it with a managed secret
+     * via `$secret.NAME` (credentials use `$secret`, not `$env`). The package
      * defines the shape via `Types['credentials']`. `settings.<sdk>` stays the
      * escape hatch for raw SDK options.
      */

package/dist/index.d.ts

@@ -691,7 +691,9 @@ declare namespace context {
 /**
  * Shared credentials types for steps that authenticate against an external
  * service. A step's `Types['credentials']` points at one of these (or its own
- * shape); the value resolves via `$env` like any other config field.
+ * shape). The value resolves like any other config field; back it with a
+ * managed secret via `$secret.NAME` (credentials, tokens, and private keys
+ * must use `$secret`, not `$env`, so the deploy pipeline injects them).
  */
 /**
  * Google-style service account credentials. The common shape for GCP-family
@@ -704,8 +706,8 @@ interface ServiceAccount {
     project_id?: string;
 }
 /**
- * A credential value: either a JSON string (often a `$env` reference) or the
- * already-parsed object form `T`.
+ * A credential value: either a JSON string (often a `$secret.NAME` reference to
+ * a managed secret) or the already-parsed object form `T`.
  */
 type Credential<T> = string | T;
 
@@ -836,7 +838,8 @@ interface Config$5<T extends TypesGeneric$3 = Types$4> {
     /** Implementation-specific configuration passed to the init function. */
     settings?: InitSettings$3<T>;
     /**
-     * Optional, strictly-typed credentials slot ($env-resolved). The package
+     * Optional, strictly-typed credentials slot. Back it with a managed secret
+     * via `$secret.NAME` (credentials use `$secret`, not `$env`). The package
      * defines the shape via `Types['credentials']`. `settings.<sdk>` stays the
      * escape hatch for raw SDK options.
      */
@@ -2446,7 +2449,8 @@ interface Config$1<T extends TypesGeneric$1 = Types$1> extends Config$7<Mapping<
     /** Implementation-specific configuration passed to the init function. */
     settings?: InitSettings$1<T>;
     /**
-     * Optional, strictly-typed credentials slot ($env-resolved). The package
+     * Optional, strictly-typed credentials slot. Back it with a managed secret
+     * via `$secret.NAME` (credentials use `$secret`, not `$env`). The package
      * defines the shape via `Types['credentials']`. `settings.<sdk>` stays the
      * escape hatch for raw SDK options.
      */
@@ -2664,7 +2668,8 @@ type TypesOf<I> = I extends Instance$1<infer T> ? T : never;
 interface Config<T extends TypesGeneric = Types> {
     settings?: InitSettings<T>;
     /**
-     * Optional, strictly-typed credentials slot ($env-resolved). The package
+     * Optional, strictly-typed credentials slot. Back it with a managed secret
+     * via `$secret.NAME` (credentials use `$secret`, not `$env`). The package
      * defines the shape via `Types['credentials']`. `settings.<sdk>` stays the
      * escape hatch for raw SDK options.
      */