@absolutejs/secrets 0.7.0 → 0.7.2

package/dist/index.js

@@ -15,59 +15,6 @@ var __export = (target, all) => {
 };
 var __require = import.meta.require;
 
-// node_modules/@absolutejs/telemetry/dist/index.js
-var NOOP_SPAN_CONTEXT = {
-  spanId: "0000000000000000",
-  traceFlags: 0,
-  traceId: "00000000000000000000000000000000"
-};
-var noopSpan = {
-  addEvent: () => noopSpan,
-  end: () => {},
-  isRecording: () => false,
-  recordException: () => {},
-  setAttribute: () => noopSpan,
-  setAttributes: () => noopSpan,
-  setStatus: () => noopSpan,
-  spanContext: () => NOOP_SPAN_CONTEXT,
-  updateName: () => noopSpan
-};
-var startActiveSpanNoop = (_name, optionsOrFn, maybeFn) => {
-  const fn = typeof optionsOrFn === "function" ? optionsOrFn : maybeFn;
-  return fn(noopSpan);
-};
-var noopTracer = {
-  startActiveSpan: startActiveSpanNoop,
-  startSpan: () => noopSpan
-};
-var tracerOrNoop = (provider, name, version) => provider !== undefined ? provider.getTracer(name, version) : noopTracer;
-var ABS_ATTRS = {
-  tenant: "abs.tenant",
-  shardId: "abs.shard.id",
-  engineId: "abs.engine.id",
-  collection: "abs.collection",
-  mutation: "abs.mutation",
-  mutationAttempt: "abs.mutation.attempt",
-  subscriptionId: "abs.subscription.id",
-  batchSize: "abs.batch.size",
-  clusterMessageOrigin: "abs.cluster.origin",
-  jobId: "abs.job.id",
-  jobKind: "abs.job.kind",
-  jobAttempt: "abs.job.attempt",
-  jobMaxAttempts: "abs.job.max_attempts",
-  workerId: "abs.worker.id",
-  runtimeKey: "abs.runtime.key",
-  runtimePid: "abs.runtime.pid",
-  runtimePort: "abs.runtime.port",
-  runtimeExitReason: "abs.runtime.exit_reason",
-  runtimeReadinessMs: "abs.runtime.readiness_ms",
-  routeShard: "abs.route.shard",
-  routeDecision: "abs.route.decision",
-  secretName: "abs.secret.name",
-  secretFingerprint: "abs.secret.fingerprint",
-  auditKind: "abs.audit.kind"
-};
-
 // node_modules/@absolutejs/agency/dist/index.js
 var normalize = (value) => {
   if (Array.isArray(value))
@@ -274,7 +221,10 @@ CREATE TABLE IF NOT EXISTS ${ns}.pending_operations (
   created_at timestamptz NOT NULL DEFAULT now(), data jsonb NOT NULL
 );`;
 };
-var createPostgresCredentialGrantStore = ({ client, namespace = "secrets" }) => {
+var createPostgresCredentialGrantStore = ({
+  client,
+  namespace = "secrets"
+}) => {
   const ns = namespaceOf(namespace);
   return {
     consume: async (grantId, now) => {
@@ -286,7 +236,16 @@ var createPostgresCredentialGrantStore = ({ client, namespace = "secrets" }) =>
     put: async (grant) => {
       if (grant.maximumUses < 1 || grant.used < 0 || grant.used > grant.maximumUses)
         throw new Error("Invalid credential grant usage");
-      await client.query(`INSERT INTO ${ns}.credential_grants (grant_id, agent_id, user_id, provider, expires_at, maximum_uses, used, data) VALUES ($1,$2,$3,$4,$5,$6,$7,$8::jsonb) ON CONFLICT (grant_id) DO UPDATE SET expires_at=EXCLUDED.expires_at, maximum_uses=EXCLUDED.maximum_uses, used=EXCLUDED.used, data=EXCLUDED.data`, [grant.grantId, grant.agentId, grant.userId, grant.provider, grant.expiresAt, grant.maximumUses, grant.used, JSON.stringify(grant)]);
+      await client.query(`INSERT INTO ${ns}.credential_grants (grant_id, agent_id, user_id, provider, expires_at, maximum_uses, used, data) VALUES ($1,$2,$3,$4,$5,$6,$7,$8::jsonb) ON CONFLICT (grant_id) DO UPDATE SET expires_at=EXCLUDED.expires_at, maximum_uses=EXCLUDED.maximum_uses, used=EXCLUDED.used, data=EXCLUDED.data`, [
+        grant.grantId,
+        grant.agentId,
+        grant.userId,
+        grant.provider,
+        grant.expiresAt,
+        grant.maximumUses,
+        grant.used,
+        JSON.stringify(grant)
+      ]);
     },
     putPending: async (pending) => {
       await client.query(`INSERT INTO ${ns}.pending_operations (action_id, grant_id, data) VALUES ($1,$2,$3::jsonb) ON CONFLICT (action_id) DO UPDATE SET data=EXCLUDED.data`, [pending.actionId, pending.input.grantId, JSON.stringify(pending)]);
@@ -294,8 +253,60 @@ var createPostgresCredentialGrantStore = ({ client, namespace = "secrets" }) =>
     revoke: async (grantId) => (await client.query(`DELETE FROM ${ns}.credential_grants WHERE grant_id = $1`, [grantId])).rowCount === 1
   };
 };
+// node_modules/@absolutejs/telemetry/dist/index.js
+var NOOP_SPAN_CONTEXT = {
+  spanId: "0000000000000000",
+  traceFlags: 0,
+  traceId: "00000000000000000000000000000000"
+};
+var noopSpan = {
+  addEvent: () => noopSpan,
+  end: () => {},
+  isRecording: () => false,
+  recordException: () => {},
+  setAttribute: () => noopSpan,
+  setAttributes: () => noopSpan,
+  setStatus: () => noopSpan,
+  spanContext: () => NOOP_SPAN_CONTEXT,
+  updateName: () => noopSpan
+};
+var startActiveSpanNoop = (_name, optionsOrFn, maybeFn) => {
+  const fn = typeof optionsOrFn === "function" ? optionsOrFn : maybeFn;
+  return fn(noopSpan);
+};
+var noopTracer = {
+  startActiveSpan: startActiveSpanNoop,
+  startSpan: () => noopSpan
+};
+var tracerOrNoop = (provider, name, version) => provider !== undefined ? provider.getTracer(name, version) : noopTracer;
+var ABS_ATTRS = {
+  tenant: "abs.tenant",
+  shardId: "abs.shard.id",
+  engineId: "abs.engine.id",
+  collection: "abs.collection",
+  mutation: "abs.mutation",
+  mutationAttempt: "abs.mutation.attempt",
+  subscriptionId: "abs.subscription.id",
+  batchSize: "abs.batch.size",
+  clusterMessageOrigin: "abs.cluster.origin",
+  jobId: "abs.job.id",
+  jobKind: "abs.job.kind",
+  jobAttempt: "abs.job.attempt",
+  jobMaxAttempts: "abs.job.max_attempts",
+  workerId: "abs.worker.id",
+  runtimeKey: "abs.runtime.key",
+  runtimePid: "abs.runtime.pid",
+  runtimePort: "abs.runtime.port",
+  runtimeExitReason: "abs.runtime.exit_reason",
+  runtimeReadinessMs: "abs.runtime.readiness_ms",
+  routeShard: "abs.route.shard",
+  routeDecision: "abs.route.decision",
+  secretName: "abs.secret.name",
+  secretFingerprint: "abs.secret.fingerprint",
+  auditKind: "abs.audit.kind"
+};
 
-// src/index.ts
+// src/broker.ts
 class BrokerDrainedError extends Error {
   constructor() {
     super("[secrets] Broker is draining \u2014 resolve/rotate refused. " + "Use the broker before the shutdown handler fires.");
@@ -848,7 +859,12 @@ var createSecretBroker = (options) => {
         counters.resolveHits += 1;
         span.setAttribute(ABS_ATTRS.secretFingerprint, cached.fingerprint);
         span.setAttribute("secrets.cache", "hit");
-        fireAudit({ at: now, event: "resolve.hit", fingerprint: cached.fingerprint, name });
+        fireAudit({
+          at: now,
+          event: "resolve.hit",
+          fingerprint: cached.fingerprint,
+          name
+        });
         span.setStatus({ code: 1 });
         return { fingerprint: cached.fingerprint, value: cached.value };
       }
@@ -864,7 +880,12 @@ var createSecretBroker = (options) => {
       }
       const entry = cacheEntry(name, value, now);
       span.setAttribute(ABS_ATTRS.secretFingerprint, entry.fingerprint);
-      fireAudit({ at: now, event: "resolve.miss", fingerprint: entry.fingerprint, name });
+      fireAudit({
+        at: now,
+        event: "resolve.miss",
+        fingerprint: entry.fingerprint,
+        name
+      });
       span.setStatus({ code: 1 });
       return { fingerprint: entry.fingerprint, value: entry.value };
     } catch (error) {
@@ -903,7 +924,12 @@ var createSecretBroker = (options) => {
       counters.rotates += 1;
       span.setAttribute(ABS_ATTRS.secretFingerprint, entry.fingerprint);
       span.setStatus({ code: 1 });
-      fireAudit({ at: now, event: "rotate", fingerprint: entry.fingerprint, name });
+      fireAudit({
+        at: now,
+        event: "rotate",
+        fingerprint: entry.fingerprint,
+        name
+      });
       fireRotation(name, entry.value, entry.fingerprint, now);
       return { fingerprint: entry.fingerprint, value: entry.value };
     } catch (error) {
@@ -1037,5 +1063,5 @@ export {
   BrokerDrainedError
 };
 
-//# debugId=0694F56E375AD55B64756E2164756E21
+//# debugId=A90019DE57677EBB64756E2164756E21
 //# sourceMappingURL=index.js.map