@aloma.io/integration-sdk 3.7.49 → 3.8.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (39) hide show
  1. package/build/internal/connector/config.d.mts +9 -0
  2. package/build/internal/connector/config.mjs +50 -0
  3. package/build/internal/connector/index.d.mts +16 -0
  4. package/build/internal/connector/index.mjs +39 -0
  5. package/build/internal/connector/metrics.d.mts +5 -0
  6. package/build/internal/connector/metrics.mjs +27 -0
  7. package/build/internal/connector/server/index.d.mts +10 -0
  8. package/build/internal/connector/server/index.mjs +29 -0
  9. package/build/internal/connector/server/on-connect/decrypt-config.d.mts +5 -0
  10. package/build/internal/connector/server/on-connect/decrypt-config.mjs +24 -0
  11. package/build/internal/connector/server/on-connect/finish-oauth.d.mts +9 -0
  12. package/build/internal/connector/server/on-connect/finish-oauth.mjs +90 -0
  13. package/build/internal/connector/server/on-connect/index.d.mts +8 -0
  14. package/build/internal/connector/server/on-connect/index.mjs +95 -0
  15. package/build/internal/connector/server/on-connect/make-oauth.d.mts +9 -0
  16. package/build/internal/connector/server/on-connect/make-oauth.mjs +77 -0
  17. package/build/internal/connector/server/on-connect/start-oauth.d.mts +4 -0
  18. package/build/internal/connector/server/on-connect/start-oauth.mjs +27 -0
  19. package/build/internal/connector/server/on-connect.d.mts +8 -0
  20. package/build/internal/connector/server/on-connect.mjs +297 -0
  21. package/build/internal/connector/server/on-message.d.mts +1 -0
  22. package/build/internal/connector/server/on-message.mjs +14 -0
  23. package/build/internal/dispatcher/index.d.mts +12 -2
  24. package/build/internal/dispatcher/index.mjs +4 -3
  25. package/build/internal/index.d.mts +1 -16
  26. package/build/internal/index.mjs +1 -423
  27. package/package.json +1 -1
  28. package/src/internal/connector/config.mts +57 -0
  29. package/src/internal/connector/index.mts +48 -0
  30. package/src/internal/connector/metrics.mts +35 -0
  31. package/src/internal/connector/server/index.mts +39 -0
  32. package/src/internal/connector/server/on-connect/decrypt-config.mts +27 -0
  33. package/src/internal/connector/server/on-connect/finish-oauth.mts +111 -0
  34. package/src/internal/connector/server/on-connect/index.mts +142 -0
  35. package/src/internal/connector/server/on-connect/make-oauth.mts +101 -0
  36. package/src/internal/connector/server/on-connect/start-oauth.mts +35 -0
  37. package/src/internal/connector/server/on-message.mts +11 -0
  38. package/src/internal/dispatcher/index.mts +7 -3
  39. package/src/internal/index.mts +1 -536
@@ -1,424 +1,2 @@
1
- import { init } from "@paralleldrive/cuid2";
2
- import express from "express";
3
- import PromClient from "prom-client";
4
- import { Dispatcher } from "./dispatcher/index.mjs";
5
- import Fetcher from "./fetcher/fetcher.mjs";
6
- import { OAuth } from "./fetcher/oauth-fetcher.mjs";
7
- import { handlePacketError, reply } from "./util/index.mjs";
8
- import JWE from "./util/jwe/index.mjs";
9
- import { Config } from "./websocket/config.mjs";
10
- import { WebsocketConnector } from "./websocket/index.mjs";
11
- const cuid = init({ length: 32 });
12
- class Connector {
13
- id;
14
- version;
15
- name;
16
- icon;
17
- dispatcher;
18
- constructor({ version, id, name, icon }) {
19
- this.id = id;
20
- this.version = version;
21
- this.name = name;
22
- this.icon = icon;
23
- }
24
- configure() {
25
- return (this.dispatcher = new Dispatcher());
26
- }
27
- async run() {
28
- var local = this;
29
- const makeMetrics = () => {
30
- const metrics = PromClient;
31
- const defaultLabels = {
32
- service: local.name,
33
- connectorId: local.id,
34
- connectorVersion: local.version,
35
- node: process.env.HOSTNAME || "test",
36
- };
37
- metrics.register.setDefaultLabels(defaultLabels);
38
- metrics.collectDefaultMetrics();
39
- return metrics;
40
- };
41
- const makeMetricsServer = (metrics) => {
42
- const app = express();
43
- app.get("/metrics", async (request, response, next) => {
44
- response.status(200);
45
- response.set("Content-type", metrics.contentType);
46
- response.send(await metrics.register.metrics());
47
- response.end();
48
- });
49
- return app;
50
- };
51
- makeMetricsServer(makeMetrics()).listen(4050, "0.0.0.0");
52
- const { processPacket, start, introspect, configSchema } = this.dispatcher.build();
53
- const config = new Config({
54
- id: this.id,
55
- version: this.version,
56
- name: process.env.HOSTNAME || this.name,
57
- registrationToken: process.env.REGISTRATION_TOKEN,
58
- endpoint: process.env.DEVICE_ENDPOINT || "https://connect.aloma.io/",
59
- wsEndpoint: process.env.WEBSOCKET_ENDPOINT || "wss://connect.aloma.io/transport/",
60
- privateKey: process.env.PRIVATE_KEY,
61
- publicKey: process.env.PUBLIC_KEY,
62
- introspect,
63
- configSchema,
64
- icon: this.icon,
65
- });
66
- if (Object.keys(configSchema().fields).length) {
67
- try {
68
- await config.validateKeys();
69
- }
70
- catch (e) {
71
- const haveKey = !!process.env.PRIVATE_KEY;
72
- const jwe = new JWE({});
73
- var text = "Please double check the env variables";
74
- if (!haveKey) {
75
- await jwe.newPair();
76
- text =
77
- "fresh keys generated, set environment variables: \n\nPRIVATE_KEY: " +
78
- (await jwe.exportPrivateAsBase64()) +
79
- "\n\nPUBLIC_KEY: " +
80
- (await jwe.exportPublicAsBase64()) +
81
- "\n";
82
- }
83
- console.log(`
84
- Error:
85
-
86
- public (env.PUBLIC_KEY) and private key (env.PRIVATE_KEY) could not be loaded.
87
-
88
- ${text}
89
- `);
90
- return;
91
- }
92
- }
93
- const server = new WebsocketConnector({
94
- config,
95
- onConnect: (transport) => {
96
- // @ts-ignore
97
- local.dispatcher.onConfig = async function (secrets) {
98
- const decrypted = {};
99
- const fields = configSchema().fields;
100
- const keys = Object.keys(secrets);
101
- const jwe = await config.validateKeys("RSA-OAEP-256");
102
- for (var i = 0; i < keys.length; ++i) {
103
- const key = keys[i];
104
- const value = secrets[key];
105
- if (!value)
106
- continue;
107
- if (fields[key]?.plain || ["endpointUrl"].includes(key)) {
108
- decrypted[key] = value;
109
- }
110
- else {
111
- try {
112
- decrypted[key] = await jwe.decrypt(value, config.id());
113
- }
114
- catch (e) {
115
- console.log("failed to decrypt key", key, config.id(), e);
116
- }
117
- }
118
- }
119
- // @ts-ignore
120
- this.startOAuth = async function (args) {
121
- if (!this._oauth)
122
- throw new Error("oauth not configured");
123
- const authorizationURL = process.env.OAUTH_AUTHORIZATION_URL ||
124
- decrypted.authorizationURL ||
125
- that._oauth.authorizationURL;
126
- if (!authorizationURL)
127
- throw new Error("authorizationURL not configured");
128
- const clientId = decrypted.clientId ||
129
- process.env.OAUTH_CLIENT_ID ||
130
- this._oauth.clientId;
131
- if (!clientId)
132
- throw new Error("clientId not configured");
133
- const scopes = process.env.OAUTH_SCOPE ||
134
- decrypted.scope ||
135
- this._oauth.scope ||
136
- "";
137
- const useCodeChallenge = !!that._oauth.useCodeChallenge;
138
- return {
139
- url: authorizationURL
140
- .replace(/\{\{clientId\}\}/gi, encodeURIComponent(clientId))
141
- .replace(/\{\{scope\}\}/gi, encodeURIComponent(scopes)),
142
- useCodeChallenge,
143
- };
144
- };
145
- // @ts-ignore
146
- this.finishOAuth = async function (arg) {
147
- var that = this;
148
- const tokenURL = process.env.OAUTH_TOKEN_URL ||
149
- decrypted.tokenURL ||
150
- that._oauth.tokenURL;
151
- if (!this._oauth)
152
- throw new Error("oauth not configured");
153
- if (!tokenURL && !this._oauth.finishOAuth)
154
- throw new Error("need tokenURL or finishOAuth(arg)");
155
- var data = null;
156
- const doFinish = async () => {
157
- if (!arg.code || !arg.redirectURI)
158
- throw new Error("need code and redirectUri");
159
- const clientId = decrypted.clientId ||
160
- process.env.OAUTH_CLIENT_ID ||
161
- that._oauth.clientId;
162
- if (!clientId)
163
- throw new Error("clientId not configured");
164
- const clientSecret = decrypted.clientSecret ||
165
- process.env.OAUTH_CLIENT_SECRET ||
166
- that._oauth.clientSecret;
167
- if (!clientSecret)
168
- throw new Error("clientSecret not configured");
169
- const additionalTokenArgs = that._oauth.additionalTokenArgs || {};
170
- const useAuthHeader = !!that._oauth.useAuthHeader;
171
- const useCodeChallenge = !!that._oauth.useCodeChallenge;
172
- let body = {
173
- grant_type: "authorization_code",
174
- ...additionalTokenArgs,
175
- code: arg.code,
176
- redirect_uri: arg.redirectURI,
177
- };
178
- if (useCodeChallenge) {
179
- body.code_verifier = arg.codeVerifier;
180
- }
181
- let headers = {
182
- "Content-Type": "application/x-www-form-urlencoded;charset=UTF-8",
183
- Accept: "application/json",
184
- };
185
- if (useAuthHeader) {
186
- headers = {
187
- ...headers,
188
- Authorization: `Basic ${btoa(`${clientId}:${clientSecret}`)}`,
189
- };
190
- }
191
- else {
192
- body = {
193
- ...body,
194
- client_id: clientId,
195
- client_secret: clientSecret,
196
- };
197
- }
198
- const response = await fetch(tokenURL, {
199
- method: "POST",
200
- body: new URLSearchParams(body),
201
- headers,
202
- signal: AbortSignal.timeout(60 * 1000),
203
- });
204
- const status = await response.status;
205
- const text = await response.text();
206
- if (status === 200) {
207
- const ret = JSON.parse(text);
208
- if (ret.error) {
209
- throw new Error(`${status} ${ret.error} ${ret.error_description || ""}`);
210
- }
211
- else if (ret.access_token) {
212
- return { ...ret };
213
- }
214
- else {
215
- throw new Error(status + " response has no access_token - " + text);
216
- }
217
- }
218
- else {
219
- throw new Error(status + " " + text);
220
- }
221
- };
222
- if (this._oauth.finishOAuth) {
223
- data = await this._oauth.finishOAuth({
224
- arg,
225
- doFinish,
226
- transport,
227
- });
228
- }
229
- else {
230
- data = await doFinish();
231
- }
232
- const jwe = await config.validateKeys("RSA-OAEP-256");
233
- return { value: await jwe.encrypt(data, "none", config.id()) };
234
- };
235
- const saveOAuthResult = async (what) => {
236
- const jwe = await config.validateKeys("RSA-OAEP-256");
237
- const value = await jwe.encrypt(what, "none", config.id());
238
- const packet = transport.newPacket({});
239
- packet.method("connector.config-update");
240
- packet.args({
241
- value,
242
- });
243
- transport.send(packet);
244
- };
245
- const that = this;
246
- const getRefreshToken = async (refreshToken) => {
247
- const tokenURL = process.env.OAUTH_TOKEN_URL ||
248
- decrypted.tokenURL ||
249
- that._oauth.tokenURL;
250
- const clientId = decrypted.clientId ||
251
- process.env.OAUTH_CLIENT_ID ||
252
- that._oauth.clientId;
253
- if (!clientId)
254
- throw new Error("clientId not configured");
255
- const clientSecret = decrypted.clientSecret ||
256
- process.env.OAUTH_CLIENT_SECRET ||
257
- that._oauth.clientSecret;
258
- if (!clientSecret)
259
- throw new Error("clientSecret not configured");
260
- const useAuthHeader = !!that._oauth.useAuthHeader;
261
- let headers = {};
262
- if (useAuthHeader) {
263
- headers = {
264
- ...headers,
265
- Authorization: `Basic ${btoa(`${clientId}:${clientSecret}`)}`,
266
- };
267
- }
268
- const response = await fetch(tokenURL, {
269
- method: "POST",
270
- body: new URLSearchParams({
271
- grant_type: "refresh_token",
272
- refresh_token: refreshToken,
273
- client_id: clientId,
274
- client_secret: clientSecret,
275
- }),
276
- headers: {
277
- "Content-Type": "application/x-www-form-urlencoded;charset=UTF-8",
278
- Accept: "application/json",
279
- ...headers,
280
- },
281
- signal: AbortSignal.timeout(60 * 1000),
282
- });
283
- const status = await response.status;
284
- const text = await response.text();
285
- if (status === 200) {
286
- return JSON.parse(text);
287
- }
288
- else {
289
- throw new Error("could not get refresh token " + status + " " + text);
290
- }
291
- };
292
- const theOAuth = that._oauth
293
- ? new OAuth(decrypted.oauthResult, saveOAuthResult, getRefreshToken)
294
- : null;
295
- if (theOAuth) {
296
- // @ts-ignore
297
- clearInterval(this._refreshOAuthToken);
298
- if (!(this._oauth.noPeriodicTokenRefresh === false)) {
299
- // @ts-ignore
300
- this._refreshOAuthToken = setInterval(async () => {
301
- try {
302
- console.log("refreshing oauth token");
303
- await theOAuth.periodicRefresh();
304
- }
305
- catch (e) {
306
- console.log("periodic refresh", e);
307
- }
308
- }, this._oauth.tokenRefreshPeriod || 4 * 60 * 60 * 15000);
309
- }
310
- }
311
- const getBlob = (id) => {
312
- return new Promise((resolve, reject) => {
313
- const packet = transport.newPacket({}, (ret) => (ret?.error ? reject(ret.error) : resolve(ret)), `_req-${cuid()}`);
314
- packet.method("connector.blob.get");
315
- packet.args({
316
- id,
317
- });
318
- transport.send(packet);
319
- });
320
- };
321
- const getBlobContent = (id) => {
322
- return new Promise((resolve, reject) => {
323
- const packet = transport.newPacket({}, (ret) => ret?.error ? reject(ret.error) : resolve(ret?.content), `_req-${cuid()}`);
324
- packet.method("connector.blob.get-content");
325
- packet.args({
326
- id,
327
- });
328
- transport.send(packet);
329
- });
330
- };
331
- const createBlob = (args = {}) => {
332
- return new Promise((resolve, reject) => {
333
- const packet = transport.newPacket({}, (ret) => (ret?.error ? reject(ret.error) : resolve(ret?.id)), `_req-${cuid()}`);
334
- packet.method("connector.blob.create");
335
- packet.args(args);
336
- transport.send(packet);
337
- });
338
- };
339
- let oauthClient;
340
- start({
341
- config: decrypted,
342
- oauth: theOAuth,
343
- getBlob,
344
- getBlobContent,
345
- createBlob,
346
- healthCheck: async (controller) => {
347
- let result = { ok: true, error: null };
348
- try {
349
- if (oauthClient) {
350
- await oauthClient.__healthCheck();
351
- }
352
- await controller.__healthCheck();
353
- }
354
- catch (e) {
355
- result.ok = false;
356
- result.error = e.message;
357
- }
358
- const packet = transport.newPacket({});
359
- packet.method("connector.health.check");
360
- packet.args(result);
361
- transport.send(packet);
362
- },
363
- getClient: (arg) => theOAuth
364
- ? (oauthClient = theOAuth.getClient(arg))
365
- : new Fetcher(arg),
366
- newTask: (name, data) => {
367
- return new Promise((resolve, reject) => {
368
- const packet = transport.newPacket({}, (ret) => (ret?.error ? reject(ret.error) : resolve(ret)), `_req-${cuid()}`);
369
- packet.method("connector.task.new");
370
- packet.args({
371
- name,
372
- a: data,
373
- });
374
- transport.send(packet);
375
- });
376
- },
377
- updateTask: (id, data) => {
378
- return new Promise((resolve, reject) => {
379
- const packet = transport.newPacket({}, (ret) => (ret?.error ? reject(ret.error) : resolve(ret)), `_req-${cuid()}`);
380
- packet.method("connector.task.update");
381
- packet.args({
382
- id,
383
- a: data,
384
- });
385
- transport.send(packet);
386
- });
387
- },
388
- });
389
- };
390
- },
391
- onMessage: async (packet, transport) => {
392
- try {
393
- const ret = await processPacket(packet);
394
- if (ret)
395
- reply(ret, packet, transport);
396
- }
397
- catch (e) {
398
- console.log(e);
399
- handlePacketError(packet, e, transport);
400
- }
401
- },
402
- });
403
- const term = async () => {
404
- await server.leaving();
405
- await new Promise((resolve) => {
406
- setTimeout(async () => {
407
- await server.close();
408
- resolve(null);
409
- }, 10000);
410
- });
411
- process.exit(0);
412
- };
413
- process.on("uncaughtException", (e) => {
414
- console.log(e);
415
- });
416
- process.on("unhandledRejection", (e) => {
417
- console.log(e);
418
- });
419
- process.on("SIGTERM", term);
420
- process.on("SIGINT", term);
421
- await server.start();
422
- }
423
- }
1
+ import { Connector } from './connector/index.mjs';
424
2
  export { Connector };
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@aloma.io/integration-sdk",
3
- "version": "3.7.49",
3
+ "version": "3.8.0",
4
4
  "description": "",
5
5
  "author": "aloma.io",
6
6
  "license": "Apache-2.0",
@@ -0,0 +1,57 @@
1
+ import JWE from "../util/jwe/index.mjs";
2
+ import { Config } from "../websocket/config.mjs";
3
+
4
+ export const makeConfig = async ({id, version, name, introspect, configSchema, icon}): Promise<Config> => {
5
+ const config = new Config({
6
+ id: id,
7
+ version: version,
8
+ name: process.env.HOSTNAME || name,
9
+ registrationToken: process.env.REGISTRATION_TOKEN,
10
+ endpoint: process.env.DEVICE_ENDPOINT || "https://connect.aloma.io/",
11
+ wsEndpoint:
12
+ process.env.WEBSOCKET_ENDPOINT || "wss://connect.aloma.io/transport/",
13
+ privateKey: process.env.PRIVATE_KEY,
14
+ publicKey: process.env.PUBLIC_KEY,
15
+ introspect,
16
+ configSchema,
17
+ icon: icon,
18
+ });
19
+
20
+ if (Object.keys(configSchema().fields).length) {
21
+ try {
22
+ await config.validateKeys();
23
+ } catch (e) {
24
+ const haveKey = !!process.env.PRIVATE_KEY;
25
+ const jwe = new JWE({});
26
+ var text = "Please double check the env variables";
27
+
28
+ if (!haveKey) {
29
+ await jwe.newPair();
30
+ text =
31
+ "fresh keys generated, set environment variables: \n\nPRIVATE_KEY: " +
32
+ (await jwe.exportPrivateAsBase64()) +
33
+ "\n\nPUBLIC_KEY: " +
34
+ (await jwe.exportPublicAsBase64()) +
35
+ "\n";
36
+ }
37
+
38
+ console.log(`
39
+ Error:
40
+
41
+ public (env.PUBLIC_KEY) and private key (env.PRIVATE_KEY) could not be loaded.
42
+
43
+ ${text}
44
+ `);
45
+
46
+ await new Promise((resolve) => {
47
+ setTimeout(() => {
48
+ resolve(null);
49
+ }, 2 * 60 * 1000);
50
+ });
51
+
52
+ throw new Error('could not start');
53
+ }
54
+ }
55
+
56
+ return config;
57
+ }
@@ -0,0 +1,48 @@
1
+ import { Dispatcher } from "../dispatcher/index.mjs";
2
+ import { makeConfig } from "./config.mjs";
3
+ import { makeMetrics } from "./metrics.mjs";
4
+ import { makeServer } from "./server/index.mjs";
5
+
6
+ export class Connector {
7
+ id: any;
8
+ version: any;
9
+ name: any;
10
+ icon: any;
11
+ dispatcher?: Dispatcher;
12
+ constructor({ version, id, name, icon }) {
13
+ this.id = id;
14
+ this.version = version;
15
+ this.name = name;
16
+ this.icon = icon;
17
+ }
18
+
19
+ configure() {
20
+ return (this.dispatcher = new Dispatcher());
21
+ }
22
+
23
+ async run() {
24
+ console.log(`Running ${this.name}`);
25
+
26
+ const { processPacket, start, introspect, configSchema } = this.dispatcher!.build();
27
+
28
+ const config = await makeConfig({
29
+ id: this.id,
30
+ version: this.version,
31
+ name: this.name,
32
+ introspect,
33
+ configSchema,
34
+ icon: this.icon,
35
+ });
36
+
37
+ await makeMetrics({
38
+ id: this.id,
39
+ name: this.name,
40
+ version: this.version,
41
+ });
42
+
43
+ const server = await makeServer({config, configSchema, start, processPacket, dispatcher: this.dispatcher!})
44
+
45
+ await server.start();
46
+ }
47
+ }
48
+
@@ -0,0 +1,35 @@
1
+ import express from "express";
2
+ import PromClient from "prom-client";
3
+
4
+ export const makeMetrics = async ({id, name, version}): Promise<void> => {
5
+ const newMetrics = () => {
6
+ const metrics = PromClient;
7
+
8
+ const defaultLabels = {
9
+ service: name,
10
+ connectorId: id,
11
+ connectorVersion: version,
12
+ node: process.env.HOSTNAME || "test",
13
+ };
14
+ metrics.register.setDefaultLabels(defaultLabels);
15
+ metrics.collectDefaultMetrics();
16
+
17
+ return metrics;
18
+ };
19
+
20
+ const makeMetricsServer = (metrics) => {
21
+ const app = express();
22
+
23
+ app.get("/metrics", async (request, response, next) => {
24
+ response.status(200);
25
+ response.set("Content-type", metrics.contentType);
26
+ response.send(await metrics.register.metrics());
27
+ response.end();
28
+ });
29
+
30
+ return app;
31
+ };
32
+
33
+ makeMetricsServer(newMetrics()).listen(4050, "0.0.0.0");
34
+
35
+ }
@@ -0,0 +1,39 @@
1
+ import Dispatcher from "../../dispatcher/index.mjs";
2
+ import { Config } from "../../websocket/config.mjs";
3
+ import { WebsocketConnector } from "../../websocket/index.mjs";
4
+ import { onConnect } from "./on-connect/index.mjs";
5
+ import { onMessage } from "./on-message.mjs";
6
+
7
+ export const makeServer = async ({config, configSchema, start, processPacket, dispatcher}: {config: Config, configSchema: any, start: any, processPacket: any, dispatcher: Dispatcher}): Promise<WebsocketConnector> => {
8
+ const server = new WebsocketConnector({
9
+ config,
10
+ onConnect: onConnect({config, configSchema, dispatcher, start}),
11
+ onMessage: onMessage(processPacket)
12
+ });
13
+
14
+ const term = async () => {
15
+ await server.leaving();
16
+
17
+ await new Promise((resolve) => {
18
+ setTimeout(async () => {
19
+ await server.close();
20
+ resolve(null);
21
+ }, 10000);
22
+ });
23
+
24
+ process.exit(0);
25
+ };
26
+
27
+ process.on("uncaughtException", (e) => {
28
+ console.log(e);
29
+ });
30
+
31
+ process.on("unhandledRejection", (e) => {
32
+ console.log(e);
33
+ });
34
+
35
+ process.on("SIGTERM", term);
36
+ process.on("SIGINT", term);
37
+
38
+ return server;
39
+ }
@@ -0,0 +1,27 @@
1
+
2
+ export const decryptConfig = async ({configSchema, config, secrets}) => {
3
+ const decrypted: any = {};
4
+
5
+ const fields = configSchema().fields;
6
+
7
+ const keys = Object.keys(secrets);
8
+ const jwe = await config.validateKeys("RSA-OAEP-256");
9
+
10
+ for (var i = 0; i < keys.length; ++i) {
11
+ const key = keys[i];
12
+ const value = secrets[key];
13
+ if (!value) continue;
14
+
15
+ if (fields[key]?.plain || ["endpointUrl"].includes(key)) {
16
+ decrypted[key] = value;
17
+ } else {
18
+ try {
19
+ decrypted[key] = await jwe.decrypt(value, config.id());
20
+ } catch (e) {
21
+ console.log("failed to decrypt key", key, config.id(), e);
22
+ }
23
+ }
24
+ }
25
+
26
+ return decrypted;
27
+ }