@opsen/vault-fact-store@0.4.0

Minor Changes

• a2a0f94: Add grouped secret facts and secret resolver to FactsPool
  • secretGroup() factory for defining multiple named secret values under a single group name
  • pool.getSecret()/pool.requireSecret() resolve camelCase names by exact match or group+property split (e.g. netbirdApiKey → group netbird, property apiKey)
  • Vault fact store now reads/writes grouped secret specs and coerces number values to strings

Patch Changes

• Updated dependencies [a2a0f94]
  • @opsen/base-ops@0.3.0

@opsen/base-ops@0.3.0

Minor Changes

• a2a0f94: Add grouped secret facts and secret resolver to FactsPool
  • secretGroup() factory for defining multiple named secret values under a single group name
  • pool.getSecret()/pool.requireSecret() resolve camelCase names by exact match or group+property split (e.g. netbirdApiKey → group netbird, property apiKey)
  • Vault fact store now reads/writes grouped secret specs and coerces number values to strings

@opsen/azure-fact-store@0.2.2

Patch Changes

• Updated dependencies [a2a0f94]
  • @opsen/base-ops@0.3.0

@opsen/docker-compose@0.2.4

Patch Changes

• ee9729d: Fix MirrorStateProvider dynamic provider module resolution to survive Pulumi closure serialization

@opsen/docker-compose@0.2.3

Patch Changes

• 33d4889: Fix AgentInstaller failing in Pulumi preview (plan) mode when binary has not been built yet by creating an empty placeholder file for FileAsset hash computation.

  Fix docker-compose MirrorState dynamic provider to use lazy require() imports, avoiding Pulumi closure serialization failures with pnpm store paths.

@opsen/agent@0.2.2

Patch Changes

• 33d4889: Fix AgentInstaller failing in Pulumi preview (plan) mode when binary has not been built yet by creating an empty placeholder file for FileAsset hash computation.

  Fix docker-compose MirrorState dynamic provider to use lazy require() imports, avoiding Pulumi closure serialization failures with pnpm store paths.

@opsen/agent@0.2.1

Patch Changes

• 6e55360: Stop running agent service before uploading new binary to prevent SFTP ETXTBSY failure

@opsen/agent@0.2.0

Minor Changes

• 1e95d91: Add bind address support to ingress routes for binding to specific IPs (e.g. internal-only routes)

@opsen/vault-fact-store@0.3.0

Minor Changes

• dab3b18: feat(vault-fact-store): resilient read and owner filtering
  • Skip malformed or inaccessible secrets during read instead of failing (Vault paths may contain non-opsen secrets)
  • Add optional owners list to limit which owners' facts are read
  • Validate simple secret value is a string before including it

@opsen/base-ops@0.2.2

Patch Changes

• 8a889b3: Fix exposed facts losing their owner after Pulumi output resolution by applying default owner at resolution time.