@agent-vm/secret-management 0.0.91 → 0.0.93

package/dist/index.d.ts

@@ -53,4 +53,14 @@ declare function createOpCliSecretResolver(options: {
   readonly serviceAccountToken: string;
 }, dependencies?: Pick<CreateSecretResolverDependencies, 'execFileAsync'>): Promise<SecretResolver>;
 //#endregion
-export { CreateSecretResolverDependencies, ExecFileOptions, ExecFileResult, MediatedSecretSpec, SecretRef, SecretResolver, SecretResolverClient, type TokenSource, createCompositeSecretResolver, createOpCliSecretResolver, createSecretResolver, createStaticSecretResolver, resolveServiceAccountToken };
+//#region src/onepassword-e2e-test-config.d.ts
+interface OnePasswordE2eTestConfig {
+  readonly secretReferences: readonly string[];
+  readonly serviceAccountToken: string;
+  readonly vaultPrefix: string;
+}
+type OnePasswordE2eTestEnvironment = Partial<Record<'AGENT_VM_TEST_OP_REFS' | 'AGENT_VM_TEST_OP_SERVICE_ACCOUNT_TOKEN' | 'AGENT_VM_TEST_OP_VAULT_PREFIX', string>>;
+declare const defaultOnePasswordE2eVaultPrefix = "op://agent-vm-testing/";
+declare function readOnePasswordE2eTestConfig(env?: OnePasswordE2eTestEnvironment): OnePasswordE2eTestConfig;
+//#endregion
+export { CreateSecretResolverDependencies, ExecFileOptions, ExecFileResult, MediatedSecretSpec, OnePasswordE2eTestConfig, OnePasswordE2eTestEnvironment, SecretRef, SecretResolver, SecretResolverClient, type TokenSource, createCompositeSecretResolver, createOpCliSecretResolver, createSecretResolver, createStaticSecretResolver, defaultOnePasswordE2eVaultPrefix, readOnePasswordE2eTestConfig, resolveServiceAccountToken };

package/dist/index.js

@@ -548,4 +548,27 @@ async function createOpCliSecretResolver(options, dependencies = {}) {
 	};
 }
 //#endregion
-export { createCompositeSecretResolver, createOpCliSecretResolver, createSecretResolver, createStaticSecretResolver, resolveServiceAccountToken };
+//#region src/onepassword-e2e-test-config.ts
+const defaultOnePasswordE2eVaultPrefix = "op://agent-vm-testing/";
+function readSecretReferences(rawReferences) {
+	if (typeof rawReferences !== "string" || rawReferences.trim().length === 0) throw new Error("Set AGENT_VM_TEST_OP_REFS to at least one op:// test-vault reference.");
+	return rawReferences.split(",").map((secretReference) => secretReference.trim()).filter((secretReference) => secretReference.length > 0);
+}
+function readOnePasswordE2eTestConfig(env = process.env) {
+	const serviceAccountToken = env.AGENT_VM_TEST_OP_SERVICE_ACCOUNT_TOKEN;
+	const vaultPrefix = env.AGENT_VM_TEST_OP_VAULT_PREFIX ?? "op://agent-vm-testing/";
+	const secretReferences = readSecretReferences(env.AGENT_VM_TEST_OP_REFS);
+	if (typeof serviceAccountToken !== "string" || serviceAccountToken.length === 0) throw new Error("Set AGENT_VM_TEST_OP_SERVICE_ACCOUNT_TOKEN when AGENT_VM_1PASSWORD_E2E=1.");
+	if (!vaultPrefix.startsWith("op://")) throw new Error("AGENT_VM_TEST_OP_VAULT_PREFIX must start with op://.");
+	for (const secretReference of secretReferences) {
+		if (!secretReference.startsWith("op://")) throw new Error("Every AGENT_VM_TEST_OP_REFS entry must be an op:// reference.");
+		if (!secretReference.startsWith(vaultPrefix)) throw new Error(`Every AGENT_VM_TEST_OP_REFS entry must start with ${vaultPrefix} to avoid deployment vaults.`);
+	}
+	return {
+		secretReferences,
+		serviceAccountToken,
+		vaultPrefix
+	};
+}
+//#endregion
+export { createCompositeSecretResolver, createOpCliSecretResolver, createSecretResolver, createStaticSecretResolver, defaultOnePasswordE2eVaultPrefix, readOnePasswordE2eTestConfig, resolveServiceAccountToken };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agent-vm/secret-management",
-  "version": "0.0.91",
+  "version": "0.0.93",
   "description": "Shared secret reference contracts and resolvers for agent-vm packages.",
   "homepage": "https://github.com/ShravanSunder/agent-vm#readme",
   "bugs": {