@ant.sh/colony 0.1.0

package/dist/cjs/parser.js

@@ -0,0 +1,319 @@
+var __create = Object.create;
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __getProtoOf = Object.getPrototypeOf;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
+  // If the importer is in node compatibility mode or this is not an ESM
+  // file that has been converted to a CommonJS file using a Babel-
+  // compatible transform (i.e. "__esModule" has not been set), then set
+  // "default" to the CommonJS "module.exports" for node compatibility.
+  isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
+  mod
+));
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var parser_exports = {};
+__export(parser_exports, {
+  parseColony: () => parseColony
+});
+module.exports = __toCommonJS(parser_exports);
+var import_json5 = __toESM(require("json5"), 1);
+const RX_DIMS = /^@dims\s+([^;]+);/;
+const RX_INCLUDE = /^@include\s+(.+);/;
+const RX_REQUIRE = /^@require\s+([^;]+);/;
+const RX_ENVDEFAULTS = /^@envDefaults\s+([^;]+);/;
+const RX_RULE = /^(.+?)\s*(\:=|\|\=|\+\=|\-\=|\=)\s*([\s\S]+)\s*;$/;
+const RX_HEREDOC_START = /<<([A-Z_][A-Z0-9_]*)\s*$/;
+function stripBlockComments(text) {
+  const result = [];
+  const lineMap = [];
+  let inComment = false;
+  let commentDepth = 0;
+  const lines = text.split(/\r?\n/);
+  for (let i = 0; i < lines.length; i++) {
+    const originalLineNo = i + 1;
+    let line = lines[i];
+    let cleanLine = "";
+    let j = 0;
+    while (j < line.length) {
+      if (!inComment) {
+        if (line[j] === "/" && line[j + 1] === "*") {
+          inComment = true;
+          commentDepth = 1;
+          j += 2;
+          continue;
+        }
+        cleanLine += line[j];
+        j++;
+      } else {
+        if (line[j] === "/" && line[j + 1] === "*") {
+          commentDepth++;
+          j += 2;
+        } else if (line[j] === "*" && line[j + 1] === "/") {
+          commentDepth--;
+          if (commentDepth === 0) {
+            inComment = false;
+          }
+          j += 2;
+        } else {
+          j++;
+        }
+      }
+    }
+    result.push(cleanLine);
+    lineMap.push(originalLineNo);
+  }
+  return { text: result.join("\n"), lineMap };
+}
+function parseKeyPath(keyRaw) {
+  const segments = [];
+  let current = "";
+  let i = 0;
+  while (i < keyRaw.length) {
+    if (keyRaw[i] === "\\" && keyRaw[i + 1] === ".") {
+      current += ".";
+      i += 2;
+    } else if (keyRaw[i] === ".") {
+      if (current.trim()) segments.push(current.trim());
+      current = "";
+      i++;
+    } else {
+      current += keyRaw[i];
+      i++;
+    }
+  }
+  if (current.trim()) segments.push(current.trim());
+  return segments;
+}
+function formatParseError(message, lines, lineNo, col, filePath) {
+  const idx = lineNo - 1;
+  const contextLines = [];
+  for (let i = Math.max(0, idx - 2); i < idx; i++) {
+    contextLines.push(`  ${String(i + 1).padStart(4)} | ${lines[i]}`);
+  }
+  if (idx >= 0 && idx < lines.length) {
+    contextLines.push(`> ${String(lineNo).padStart(4)} | ${lines[idx]}`);
+    if (typeof col === "number" && col >= 0) {
+      const padding = " ".repeat(col + 9);
+      contextLines.push(`${padding}^`);
+    }
+  }
+  if (idx + 1 < lines.length) {
+    contextLines.push(`  ${String(idx + 2).padStart(4)} | ${lines[idx + 1]}`);
+  }
+  return `${filePath}:${lineNo}: ${message}
+
+${contextLines.join("\n")}`;
+}
+function parseColony(text, { filePath = "<memory>", parseOnlyDirectives = false } = {}) {
+  const { text: cleanedText, lineMap } = stripBlockComments(text);
+  const lines = cleanedText.split(/\r?\n/);
+  const originalLines = text.split(/\r?\n/);
+  const rules = [];
+  const includes = [];
+  const requires = [];
+  const envDefaults = {};
+  let dims = null;
+  let buf = "";
+  let bufStartLine = 0;
+  let bufStartOriginalLine = 0;
+  let inHeredoc = false;
+  let heredocDelimiter = "";
+  let heredocContent = "";
+  let heredocStartLine = 0;
+  let heredocKey = "";
+  let heredocOp = "";
+  const getOriginalLine = (lineNo) => lineMap[lineNo - 1] || lineNo;
+  const flush = () => {
+    const raw = buf.trim();
+    buf = "";
+    if (!raw) return;
+    const origLine = bufStartOriginalLine;
+    const mDims = raw.match(RX_DIMS);
+    if (mDims) {
+      dims = mDims[1].split(",").map((s) => s.trim()).filter(Boolean);
+      return;
+    }
+    const mInc = raw.match(RX_INCLUDE);
+    if (mInc) {
+      includes.push(stripQuotes(mInc[1].trim()));
+      return;
+    }
+    const mReq = raw.match(RX_REQUIRE);
+    if (mReq) {
+      const keys = mReq[1].split(",").map((s) => s.trim()).filter(Boolean);
+      requires.push(...keys);
+      return;
+    }
+    const mEnvDef = raw.match(RX_ENVDEFAULTS);
+    if (mEnvDef) {
+      const parts = mEnvDef[1].split(",").map((s) => s.trim()).filter(Boolean);
+      for (const p of parts) {
+        const idx = p.indexOf("=");
+        if (idx === -1) {
+          throw new Error(formatParseError(
+            `Bad @envDefaults entry: ${p}`,
+            originalLines,
+            origLine,
+            void 0,
+            filePath
+          ));
+        }
+        const k = p.slice(0, idx).trim();
+        const vRaw = p.slice(idx + 1).trim();
+        envDefaults[k] = stripQuotes(vRaw);
+      }
+      return;
+    }
+    if (parseOnlyDirectives) return;
+    const mRule = raw.match(RX_RULE);
+    if (!mRule) {
+      throw new Error(formatParseError(
+        "Invalid statement",
+        originalLines,
+        origLine,
+        void 0,
+        filePath
+      ));
+    }
+    const keyRaw = mRule[1].trim();
+    const op = mRule[2];
+    const valueRaw = mRule[3].trim();
+    const keySegments = parseKeyPath(keyRaw);
+    if (keySegments.length === 0) {
+      throw new Error(formatParseError(
+        "Empty key",
+        originalLines,
+        origLine,
+        0,
+        filePath
+      ));
+    }
+    const value = parseValue(valueRaw, { filePath, line: origLine, lines: originalLines });
+    rules.push({
+      filePath,
+      line: origLine,
+      col: 0,
+      keyRaw,
+      keySegments,
+      op,
+      value
+    });
+  };
+  for (let i = 0; i < lines.length; i++) {
+    const lineNo = i + 1;
+    const originalLineNo = getOriginalLine(lineNo);
+    const line = lines[i];
+    const trimmed = line.trim();
+    if (inHeredoc) {
+      if (trimmed === heredocDelimiter) {
+        const keySegments = parseKeyPath(heredocKey);
+        if (keySegments.length === 0) {
+          throw new Error(formatParseError(
+            "Empty key in heredoc",
+            originalLines,
+            heredocStartLine,
+            0,
+            filePath
+          ));
+        }
+        rules.push({
+          filePath,
+          line: heredocStartLine,
+          col: 0,
+          keyRaw: heredocKey,
+          keySegments,
+          op: heredocOp,
+          value: heredocContent
+        });
+        inHeredoc = false;
+        heredocContent = "";
+        continue;
+      }
+      heredocContent += (heredocContent ? "\n" : "") + line;
+      continue;
+    }
+    if (!trimmed || trimmed.startsWith("#") || trimmed.startsWith("//")) continue;
+    const heredocMatch = trimmed.match(/^(.+?)\s*(\:=|\|\=|\+\=|\-\=|\=)\s*<<([A-Z_][A-Z0-9_]*)$/);
+    if (heredocMatch) {
+      inHeredoc = true;
+      heredocKey = heredocMatch[1].trim();
+      heredocOp = heredocMatch[2];
+      heredocDelimiter = heredocMatch[3];
+      heredocStartLine = originalLineNo;
+      heredocContent = "";
+      continue;
+    }
+    if (!buf) {
+      bufStartLine = lineNo;
+      bufStartOriginalLine = originalLineNo;
+    }
+    buf += (buf ? "\n" : "") + line;
+    if (trimmed.endsWith(";")) flush();
+  }
+  if (inHeredoc) {
+    throw new Error(formatParseError(
+      `Unterminated heredoc (missing ${heredocDelimiter})`,
+      originalLines,
+      heredocStartLine,
+      void 0,
+      filePath
+    ));
+  }
+  if (buf.trim()) {
+    throw new Error(formatParseError(
+      "Unterminated statement (missing ';')",
+      originalLines,
+      bufStartOriginalLine,
+      void 0,
+      filePath
+    ));
+  }
+  return { dims, includes, requires, envDefaults, rules };
+}
+function parseValue(raw, { filePath, line, lines }) {
+  const r = raw.trim();
+  if (/^(true|false|null)$/.test(r)) return import_json5.default.parse(r);
+  if (/^-?\d+(\.\d+)?$/.test(r)) return Number(r);
+  const starts = r[0];
+  const ends = r[r.length - 1];
+  const looksJsonish = starts === "{" && ends === "}" || starts === "[" && ends === "]" || starts === `"` && ends === `"` || starts === `'` && ends === `'`;
+  if (looksJsonish) {
+    try {
+      return import_json5.default.parse(r);
+    } catch (e) {
+      throw new Error(formatParseError(
+        `Bad JSON5 value: ${e.message}`,
+        lines,
+        line,
+        void 0,
+        filePath
+      ));
+    }
+  }
+  return r;
+}
+function stripQuotes(s) {
+  if (s.startsWith('"') && s.endsWith('"') || s.startsWith("'") && s.endsWith("'")) {
+    return s.slice(1, -1);
+  }
+  return s;
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  parseColony
+});
+//# sourceMappingURL=parser.js.map

package/dist/cjs/parser.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../src/parser.js"],
+  "sourcesContent": ["import JSON5 from \"json5\";\n\nconst RX_DIMS = /^@dims\\s+([^;]+);/;\nconst RX_INCLUDE = /^@include\\s+(.+);/;\nconst RX_REQUIRE = /^@require\\s+([^;]+);/;\nconst RX_ENVDEFAULTS = /^@envDefaults\\s+([^;]+);/;\n\n// Rule: <scoped.key.path> <op> <value>;\n// Using [\\s\\S] instead of . to match newlines in multi-line values\nconst RX_RULE = /^(.+?)\\s*(\\:=|\\|\\=|\\+\\=|\\-\\=|\\=)\\s*([\\s\\S]+)\\s*;$/;\n\n// Heredoc: <<EOF ... EOF\nconst RX_HEREDOC_START = /<<([A-Z_][A-Z0-9_]*)\\s*$/;\n\n/**\n * Remove block comments from text (slash-star to star-slash)\n * @param {string} text\n * @returns {{ text: string, lineMap: number[] }} - cleaned text and mapping from new line numbers to original\n */\nfunction stripBlockComments(text) {\n  const result = [];\n  const lineMap = []; // lineMap[newLineNo] = originalLineNo\n  let inComment = false;\n  let commentDepth = 0;\n  const lines = text.split(/\\r?\\n/);\n\n  for (let i = 0; i < lines.length; i++) {\n    const originalLineNo = i + 1;\n    let line = lines[i];\n    let cleanLine = \"\";\n    let j = 0;\n\n    while (j < line.length) {\n      if (!inComment) {\n        // Check for comment start\n        if (line[j] === \"/\" && line[j + 1] === \"*\") {\n          inComment = true;\n          commentDepth = 1;\n          j += 2;\n          continue;\n        }\n        cleanLine += line[j];\n        j++;\n      } else {\n        // Inside block comment\n        if (line[j] === \"/\" && line[j + 1] === \"*\") {\n          commentDepth++;\n          j += 2;\n        } else if (line[j] === \"*\" && line[j + 1] === \"/\") {\n          commentDepth--;\n          if (commentDepth === 0) {\n            inComment = false;\n          }\n          j += 2;\n        } else {\n          j++;\n        }\n      }\n    }\n\n    result.push(cleanLine);\n    lineMap.push(originalLineNo);\n  }\n\n  return { text: result.join(\"\\n\"), lineMap };\n}\n\n/**\n * Parse a key path with escaped dots\n * \"foo\\.bar.baz\" => [\"foo.bar\", \"baz\"]\n * @param {string} keyRaw\n * @returns {string[]}\n */\nfunction parseKeyPath(keyRaw) {\n  const segments = [];\n  let current = \"\";\n  let i = 0;\n\n  while (i < keyRaw.length) {\n    if (keyRaw[i] === \"\\\\\" && keyRaw[i + 1] === \".\") {\n      // Escaped dot - include literal dot\n      current += \".\";\n      i += 2;\n    } else if (keyRaw[i] === \".\") {\n      // Segment separator\n      if (current.trim()) segments.push(current.trim());\n      current = \"\";\n      i++;\n    } else {\n      current += keyRaw[i];\n      i++;\n    }\n  }\n\n  if (current.trim()) segments.push(current.trim());\n  return segments;\n}\n\n/**\n * Format a parse error with line context and caret\n * @param {string} message\n * @param {string[]} lines\n * @param {number} lineNo - 1-indexed line number\n * @param {number=} col - 0-indexed column (optional)\n * @param {string} filePath\n * @returns {string}\n */\nfunction formatParseError(message, lines, lineNo, col, filePath) {\n  const idx = lineNo - 1;\n  const contextLines = [];\n\n  // Show up to 2 lines before\n  for (let i = Math.max(0, idx - 2); i < idx; i++) {\n    contextLines.push(`  ${String(i + 1).padStart(4)} | ${lines[i]}`);\n  }\n\n  // Show the error line\n  if (idx >= 0 && idx < lines.length) {\n    contextLines.push(`> ${String(lineNo).padStart(4)} | ${lines[idx]}`);\n\n    // Show caret if column is specified\n    if (typeof col === \"number\" && col >= 0) {\n      const padding = \" \".repeat(col + 9); // account for \"> XXXX | \"\n      contextLines.push(`${padding}^`);\n    }\n  }\n\n  // Show up to 1 line after\n  if (idx + 1 < lines.length) {\n    contextLines.push(`  ${String(idx + 2).padStart(4)} | ${lines[idx + 1]}`);\n  }\n\n  return `${filePath}:${lineNo}: ${message}\\n\\n${contextLines.join(\"\\n\")}`;\n}\n\nexport function parseColony(text, { filePath = \"<memory>\", parseOnlyDirectives = false } = {}) {\n  // Strip block comments first, keeping track of original line numbers\n  const { text: cleanedText, lineMap } = stripBlockComments(text);\n  const lines = cleanedText.split(/\\r?\\n/);\n  const originalLines = text.split(/\\r?\\n/);\n\n  const rules = [];\n  const includes = [];\n  const requires = [];\n  const envDefaults = {};\n  let dims = null;\n\n  let buf = \"\";\n  let bufStartLine = 0;\n  let bufStartOriginalLine = 0;\n\n  // Heredoc state\n  let inHeredoc = false;\n  let heredocDelimiter = \"\";\n  let heredocContent = \"\";\n  let heredocStartLine = 0;\n  let heredocKey = \"\";\n  let heredocOp = \"\";\n\n  const getOriginalLine = (lineNo) => lineMap[lineNo - 1] || lineNo;\n\n  const flush = () => {\n    const raw = buf.trim();\n    buf = \"\";\n    if (!raw) return;\n\n    const origLine = bufStartOriginalLine;\n\n    const mDims = raw.match(RX_DIMS);\n    if (mDims) {\n      dims = mDims[1].split(\",\").map((s) => s.trim()).filter(Boolean);\n      return;\n    }\n\n    const mInc = raw.match(RX_INCLUDE);\n    if (mInc) {\n      includes.push(stripQuotes(mInc[1].trim()));\n      return;\n    }\n\n    const mReq = raw.match(RX_REQUIRE);\n    if (mReq) {\n      const keys = mReq[1]\n        .split(\",\")\n        .map((s) => s.trim())\n        .filter(Boolean);\n      requires.push(...keys);\n      return;\n    }\n\n    const mEnvDef = raw.match(RX_ENVDEFAULTS);\n    if (mEnvDef) {\n      const parts = mEnvDef[1]\n        .split(\",\")\n        .map((s) => s.trim())\n        .filter(Boolean);\n\n      for (const p of parts) {\n        const idx = p.indexOf(\"=\");\n        if (idx === -1) {\n          throw new Error(formatParseError(\n            `Bad @envDefaults entry: ${p}`,\n            originalLines,\n            origLine,\n            undefined,\n            filePath\n          ));\n        }\n        const k = p.slice(0, idx).trim();\n        const vRaw = p.slice(idx + 1).trim();\n        envDefaults[k] = stripQuotes(vRaw);\n      }\n      return;\n    }\n\n    if (parseOnlyDirectives) return;\n\n    const mRule = raw.match(RX_RULE);\n    if (!mRule) {\n      throw new Error(formatParseError(\n        \"Invalid statement\",\n        originalLines,\n        origLine,\n        undefined,\n        filePath\n      ));\n    }\n\n    const keyRaw = mRule[1].trim();\n    const op = mRule[2];\n    const valueRaw = mRule[3].trim();\n\n    const keySegments = parseKeyPath(keyRaw);\n    if (keySegments.length === 0) {\n      throw new Error(formatParseError(\n        \"Empty key\",\n        originalLines,\n        origLine,\n        0,\n        filePath\n      ));\n    }\n\n    const value = parseValue(valueRaw, { filePath, line: origLine, lines: originalLines });\n\n    rules.push({\n      filePath,\n      line: origLine,\n      col: 0,\n      keyRaw,\n      keySegments,\n      op,\n      value,\n    });\n  };\n\n  for (let i = 0; i < lines.length; i++) {\n    const lineNo = i + 1;\n    const originalLineNo = getOriginalLine(lineNo);\n    const line = lines[i];\n    const trimmed = line.trim();\n\n    // Handle heredoc mode\n    if (inHeredoc) {\n      if (trimmed === heredocDelimiter) {\n        // End of heredoc\n        const keySegments = parseKeyPath(heredocKey);\n        if (keySegments.length === 0) {\n          throw new Error(formatParseError(\n            \"Empty key in heredoc\",\n            originalLines,\n            heredocStartLine,\n            0,\n            filePath\n          ));\n        }\n\n        rules.push({\n          filePath,\n          line: heredocStartLine,\n          col: 0,\n          keyRaw: heredocKey,\n          keySegments,\n          op: heredocOp,\n          value: heredocContent,\n        });\n\n        inHeredoc = false;\n        heredocContent = \"\";\n        continue;\n      }\n\n      // Add line to heredoc content\n      heredocContent += (heredocContent ? \"\\n\" : \"\") + line;\n      continue;\n    }\n\n    // Skip empty lines and line comments\n    if (!trimmed || trimmed.startsWith(\"#\") || trimmed.startsWith(\"//\")) continue;\n\n    // Check for heredoc start: key = <<EOF\n    const heredocMatch = trimmed.match(/^(.+?)\\s*(\\:=|\\|\\=|\\+\\=|\\-\\=|\\=)\\s*<<([A-Z_][A-Z0-9_]*)$/);\n    if (heredocMatch) {\n      inHeredoc = true;\n      heredocKey = heredocMatch[1].trim();\n      heredocOp = heredocMatch[2];\n      heredocDelimiter = heredocMatch[3];\n      heredocStartLine = originalLineNo;\n      heredocContent = \"\";\n      continue;\n    }\n\n    if (!buf) {\n      bufStartLine = lineNo;\n      bufStartOriginalLine = originalLineNo;\n    }\n    buf += (buf ? \"\\n\" : \"\") + line;\n\n    if (trimmed.endsWith(\";\")) flush();\n  }\n\n  if (inHeredoc) {\n    throw new Error(formatParseError(\n      `Unterminated heredoc (missing ${heredocDelimiter})`,\n      originalLines,\n      heredocStartLine,\n      undefined,\n      filePath\n    ));\n  }\n\n  if (buf.trim()) {\n    throw new Error(formatParseError(\n      \"Unterminated statement (missing ';')\",\n      originalLines,\n      bufStartOriginalLine,\n      undefined,\n      filePath\n    ));\n  }\n\n  return { dims, includes, requires, envDefaults, rules };\n}\n\nfunction parseValue(raw, { filePath, line, lines }) {\n  const r = raw.trim();\n\n  if (/^(true|false|null)$/.test(r)) return JSON5.parse(r);\n  if (/^-?\\d+(\\.\\d+)?$/.test(r)) return Number(r);\n\n  const starts = r[0];\n  const ends = r[r.length - 1];\n  const looksJsonish =\n    (starts === \"{\" && ends === \"}\") ||\n    (starts === \"[\" && ends === \"]\") ||\n    (starts === `\"` && ends === `\"`) ||\n    (starts === `'` && ends === `'`);\n\n  if (looksJsonish) {\n    try {\n      return JSON5.parse(r);\n    } catch (e) {\n      throw new Error(formatParseError(\n        `Bad JSON5 value: ${e.message}`,\n        lines,\n        line,\n        undefined,\n        filePath\n      ));\n    }\n  }\n\n  return r; // bareword => string\n}\n\nfunction stripQuotes(s) {\n  if ((s.startsWith('\"') && s.endsWith('\"')) || (s.startsWith(\"'\") && s.endsWith(\"'\"))) {\n    return s.slice(1, -1);\n  }\n  return s;\n}\n"],
+  "mappings": ";;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,mBAAkB;AAElB,MAAM,UAAU;AAChB,MAAM,aAAa;AACnB,MAAM,aAAa;AACnB,MAAM,iBAAiB;AAIvB,MAAM,UAAU;AAGhB,MAAM,mBAAmB;AAOzB,SAAS,mBAAmB,MAAM;AAChC,QAAM,SAAS,CAAC;AAChB,QAAM,UAAU,CAAC;AACjB,MAAI,YAAY;AAChB,MAAI,eAAe;AACnB,QAAM,QAAQ,KAAK,MAAM,OAAO;AAEhC,WAAS,IAAI,GAAG,IAAI,MAAM,QAAQ,KAAK;AACrC,UAAM,iBAAiB,IAAI;AAC3B,QAAI,OAAO,MAAM,CAAC;AAClB,QAAI,YAAY;AAChB,QAAI,IAAI;AAER,WAAO,IAAI,KAAK,QAAQ;AACtB,UAAI,CAAC,WAAW;AAEd,YAAI,KAAK,CAAC,MAAM,OAAO,KAAK,IAAI,CAAC,MAAM,KAAK;AAC1C,sBAAY;AACZ,yBAAe;AACf,eAAK;AACL;AAAA,QACF;AACA,qBAAa,KAAK,CAAC;AACnB;AAAA,MACF,OAAO;AAEL,YAAI,KAAK,CAAC,MAAM,OAAO,KAAK,IAAI,CAAC,MAAM,KAAK;AAC1C;AACA,eAAK;AAAA,QACP,WAAW,KAAK,CAAC,MAAM,OAAO,KAAK,IAAI,CAAC,MAAM,KAAK;AACjD;AACA,cAAI,iBAAiB,GAAG;AACtB,wBAAY;AAAA,UACd;AACA,eAAK;AAAA,QACP,OAAO;AACL;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAEA,WAAO,KAAK,SAAS;AACrB,YAAQ,KAAK,cAAc;AAAA,EAC7B;AAEA,SAAO,EAAE,MAAM,OAAO,KAAK,IAAI,GAAG,QAAQ;AAC5C;AAQA,SAAS,aAAa,QAAQ;AAC5B,QAAM,WAAW,CAAC;AAClB,MAAI,UAAU;AACd,MAAI,IAAI;AAER,SAAO,IAAI,OAAO,QAAQ;AACxB,QAAI,OAAO,CAAC,MAAM,QAAQ,OAAO,IAAI,CAAC,MAAM,KAAK;AAE/C,iBAAW;AACX,WAAK;AAAA,IACP,WAAW,OAAO,CAAC,MAAM,KAAK;AAE5B,UAAI,QAAQ,KAAK,EAAG,UAAS,KAAK,QAAQ,KAAK,CAAC;AAChD,gBAAU;AACV;AAAA,IACF,OAAO;AACL,iBAAW,OAAO,CAAC;AACnB;AAAA,IACF;AAAA,EACF;AAEA,MAAI,QAAQ,KAAK,EAAG,UAAS,KAAK,QAAQ,KAAK,CAAC;AAChD,SAAO;AACT;AAWA,SAAS,iBAAiB,SAAS,OAAO,QAAQ,KAAK,UAAU;AAC/D,QAAM,MAAM,SAAS;AACrB,QAAM,eAAe,CAAC;AAGtB,WAAS,IAAI,KAAK,IAAI,GAAG,MAAM,CAAC,GAAG,IAAI,KAAK,KAAK;AAC/C,iBAAa,KAAK,KAAK,OAAO,IAAI,CAAC,EAAE,SAAS,CAAC,CAAC,MAAM,MAAM,CAAC,CAAC,EAAE;AAAA,EAClE;AAGA,MAAI,OAAO,KAAK,MAAM,MAAM,QAAQ;AAClC,iBAAa,KAAK,KAAK,OAAO,MAAM,EAAE,SAAS,CAAC,CAAC,MAAM,MAAM,GAAG,CAAC,EAAE;AAGnE,QAAI,OAAO,QAAQ,YAAY,OAAO,GAAG;AACvC,YAAM,UAAU,IAAI,OAAO,MAAM,CAAC;AAClC,mBAAa,KAAK,GAAG,OAAO,GAAG;AAAA,IACjC;AAAA,EACF;AAGA,MAAI,MAAM,IAAI,MAAM,QAAQ;AAC1B,iBAAa,KAAK,KAAK,OAAO,MAAM,CAAC,EAAE,SAAS,CAAC,CAAC,MAAM,MAAM,MAAM,CAAC,CAAC,EAAE;AAAA,EAC1E;AAEA,SAAO,GAAG,QAAQ,IAAI,MAAM,KAAK,OAAO;AAAA;AAAA,EAAO,aAAa,KAAK,IAAI,CAAC;AACxE;AAEO,SAAS,YAAY,MAAM,EAAE,WAAW,YAAY,sBAAsB,MAAM,IAAI,CAAC,GAAG;AAE7F,QAAM,EAAE,MAAM,aAAa,QAAQ,IAAI,mBAAmB,IAAI;AAC9D,QAAM,QAAQ,YAAY,MAAM,OAAO;AACvC,QAAM,gBAAgB,KAAK,MAAM,OAAO;AAExC,QAAM,QAAQ,CAAC;AACf,QAAM,WAAW,CAAC;AAClB,QAAM,WAAW,CAAC;AAClB,QAAM,cAAc,CAAC;AACrB,MAAI,OAAO;AAEX,MAAI,MAAM;AACV,MAAI,eAAe;AACnB,MAAI,uBAAuB;AAG3B,MAAI,YAAY;AAChB,MAAI,mBAAmB;AACvB,MAAI,iBAAiB;AACrB,MAAI,mBAAmB;AACvB,MAAI,aAAa;AACjB,MAAI,YAAY;AAEhB,QAAM,kBAAkB,CAAC,WAAW,QAAQ,SAAS,CAAC,KAAK;AAE3D,QAAM,QAAQ,MAAM;AAClB,UAAM,MAAM,IAAI,KAAK;AACrB,UAAM;AACN,QAAI,CAAC,IAAK;AAEV,UAAM,WAAW;AAEjB,UAAM,QAAQ,IAAI,MAAM,OAAO;AAC/B,QAAI,OAAO;AACT,aAAO,MAAM,CAAC,EAAE,MAAM,GAAG,EAAE,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,OAAO,OAAO;AAC9D;AAAA,IACF;AAEA,UAAM,OAAO,IAAI,MAAM,UAAU;AACjC,QAAI,MAAM;AACR,eAAS,KAAK,YAAY,KAAK,CAAC,EAAE,KAAK,CAAC,CAAC;AACzC;AAAA,IACF;AAEA,UAAM,OAAO,IAAI,MAAM,UAAU;AACjC,QAAI,MAAM;AACR,YAAM,OAAO,KAAK,CAAC,EAChB,MAAM,GAAG,EACT,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,EACnB,OAAO,OAAO;AACjB,eAAS,KAAK,GAAG,IAAI;AACrB;AAAA,IACF;AAEA,UAAM,UAAU,IAAI,MAAM,cAAc;AACxC,QAAI,SAAS;AACX,YAAM,QAAQ,QAAQ,CAAC,EACpB,MAAM,GAAG,EACT,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,EACnB,OAAO,OAAO;AAEjB,iBAAW,KAAK,OAAO;AACrB,cAAM,MAAM,EAAE,QAAQ,GAAG;AACzB,YAAI,QAAQ,IAAI;AACd,gBAAM,IAAI,MAAM;AAAA,YACd,2BAA2B,CAAC;AAAA,YAC5B;AAAA,YACA;AAAA,YACA;AAAA,YACA;AAAA,UACF,CAAC;AAAA,QACH;AACA,cAAM,IAAI,EAAE,MAAM,GAAG,GAAG,EAAE,KAAK;AAC/B,cAAM,OAAO,EAAE,MAAM,MAAM,CAAC,EAAE,KAAK;AACnC,oBAAY,CAAC,IAAI,YAAY,IAAI;AAAA,MACnC;AACA;AAAA,IACF;AAEA,QAAI,oBAAqB;AAEzB,UAAM,QAAQ,IAAI,MAAM,OAAO;AAC/B,QAAI,CAAC,OAAO;AACV,YAAM,IAAI,MAAM;AAAA,QACd;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,MACF,CAAC;AAAA,IACH;AAEA,UAAM,SAAS,MAAM,CAAC,EAAE,KAAK;AAC7B,UAAM,KAAK,MAAM,CAAC;AAClB,UAAM,WAAW,MAAM,CAAC,EAAE,KAAK;AAE/B,UAAM,cAAc,aAAa,MAAM;AACvC,QAAI,YAAY,WAAW,GAAG;AAC5B,YAAM,IAAI,MAAM;AAAA,QACd;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,MACF,CAAC;AAAA,IACH;AAEA,UAAM,QAAQ,WAAW,UAAU,EAAE,UAAU,MAAM,UAAU,OAAO,cAAc,CAAC;AAErF,UAAM,KAAK;AAAA,MACT;AAAA,MACA,MAAM;AAAA,MACN,KAAK;AAAA,MACL;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF,CAAC;AAAA,EACH;AAEA,WAAS,IAAI,GAAG,IAAI,MAAM,QAAQ,KAAK;AACrC,UAAM,SAAS,IAAI;AACnB,UAAM,iBAAiB,gBAAgB,MAAM;AAC7C,UAAM,OAAO,MAAM,CAAC;AACpB,UAAM,UAAU,KAAK,KAAK;AAG1B,QAAI,WAAW;AACb,UAAI,YAAY,kBAAkB;AAEhC,cAAM,cAAc,aAAa,UAAU;AAC3C,YAAI,YAAY,WAAW,GAAG;AAC5B,gBAAM,IAAI,MAAM;AAAA,YACd;AAAA,YACA;AAAA,YACA;AAAA,YACA;AAAA,YACA;AAAA,UACF,CAAC;AAAA,QACH;AAEA,cAAM,KAAK;AAAA,UACT;AAAA,UACA,MAAM;AAAA,UACN,KAAK;AAAA,UACL,QAAQ;AAAA,UACR;AAAA,UACA,IAAI;AAAA,UACJ,OAAO;AAAA,QACT,CAAC;AAED,oBAAY;AACZ,yBAAiB;AACjB;AAAA,MACF;AAGA,yBAAmB,iBAAiB,OAAO,MAAM;AACjD;AAAA,IACF;AAGA,QAAI,CAAC,WAAW,QAAQ,WAAW,GAAG,KAAK,QAAQ,WAAW,IAAI,EAAG;AAGrE,UAAM,eAAe,QAAQ,MAAM,0DAA0D;AAC7F,QAAI,cAAc;AAChB,kBAAY;AACZ,mBAAa,aAAa,CAAC,EAAE,KAAK;AAClC,kBAAY,aAAa,CAAC;AAC1B,yBAAmB,aAAa,CAAC;AACjC,yBAAmB;AACnB,uBAAiB;AACjB;AAAA,IACF;AAEA,QAAI,CAAC,KAAK;AACR,qBAAe;AACf,6BAAuB;AAAA,IACzB;AACA,YAAQ,MAAM,OAAO,MAAM;AAE3B,QAAI,QAAQ,SAAS,GAAG,EAAG,OAAM;AAAA,EACnC;AAEA,MAAI,WAAW;AACb,UAAM,IAAI,MAAM;AAAA,MACd,iCAAiC,gBAAgB;AAAA,MACjD;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF,CAAC;AAAA,EACH;AAEA,MAAI,IAAI,KAAK,GAAG;AACd,UAAM,IAAI,MAAM;AAAA,MACd;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF,CAAC;AAAA,EACH;AAEA,SAAO,EAAE,MAAM,UAAU,UAAU,aAAa,MAAM;AACxD;AAEA,SAAS,WAAW,KAAK,EAAE,UAAU,MAAM,MAAM,GAAG;AAClD,QAAM,IAAI,IAAI,KAAK;AAEnB,MAAI,sBAAsB,KAAK,CAAC,EAAG,QAAO,aAAAA,QAAM,MAAM,CAAC;AACvD,MAAI,kBAAkB,KAAK,CAAC,EAAG,QAAO,OAAO,CAAC;AAE9C,QAAM,SAAS,EAAE,CAAC;AAClB,QAAM,OAAO,EAAE,EAAE,SAAS,CAAC;AAC3B,QAAM,eACH,WAAW,OAAO,SAAS,OAC3B,WAAW,OAAO,SAAS,OAC3B,WAAW,OAAO,SAAS,OAC3B,WAAW,OAAO,SAAS;AAE9B,MAAI,cAAc;AAChB,QAAI;AACF,aAAO,aAAAA,QAAM,MAAM,CAAC;AAAA,IACtB,SAAS,GAAG;AACV,YAAM,IAAI,MAAM;AAAA,QACd,oBAAoB,EAAE,OAAO;AAAA,QAC7B;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,MACF,CAAC;AAAA,IACH;AAAA,EACF;AAEA,SAAO;AACT;AAEA,SAAS,YAAY,GAAG;AACtB,MAAK,EAAE,WAAW,GAAG,KAAK,EAAE,SAAS,GAAG,KAAO,EAAE,WAAW,GAAG,KAAK,EAAE,SAAS,GAAG,GAAI;AACpF,WAAO,EAAE,MAAM,GAAG,EAAE;AAAA,EACtB;AACA,SAAO;AACT;",
+  "names": ["JSON5"]
+}

package/dist/cjs/providers/aws.js

@@ -0,0 +1,115 @@
+var __create = Object.create;
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __getProtoOf = Object.getPrototypeOf;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
+  // If the importer is in node compatibility mode or this is not an ESM
+  // file that has been converted to a CommonJS file using a Babel-
+  // compatible transform (i.e. "__esModule" has not been set), then set
+  // "default" to the CommonJS "module.exports" for node compatibility.
+  isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
+  mod
+));
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var aws_exports = {};
+__export(aws_exports, {
+  AwsSecretsProvider: () => AwsSecretsProvider
+});
+module.exports = __toCommonJS(aws_exports);
+class AwsSecretsProvider {
+  prefix = "AWS";
+  /**
+   * @param {object} options
+   * @param {string=} options.region - AWS region (default: process.env.AWS_REGION or "us-east-1")
+   */
+  constructor(options = {}) {
+    this.region = options.region ?? process.env.AWS_REGION ?? "us-east-1";
+    this.client = null;
+    this.clientPromise = null;
+    this.GetSecretValueCommand = null;
+  }
+  /**
+   * Get or create the AWS client (lazy initialization)
+   * @returns {Promise<object>}
+   */
+  async getClient() {
+    if (this.client) return this.client;
+    if (this.clientPromise) return this.clientPromise;
+    this.clientPromise = (async () => {
+      const { SecretsManagerClient, GetSecretValueCommand } = await import("@aws-sdk/client-secrets-manager");
+      this.client = new SecretsManagerClient({ region: this.region });
+      this.GetSecretValueCommand = GetSecretValueCommand;
+      return this.client;
+    })();
+    return this.clientPromise;
+  }
+  /**
+   * Fetch a secret value
+   * @param {string} key - Secret key, optionally with JSON path: "secret-name#json.path"
+   * @returns {Promise<string>}
+   */
+  async fetch(key) {
+    const client = await this.getClient();
+    const [secretId, jsonPath] = key.split("#");
+    const command = new this.GetSecretValueCommand({ SecretId: secretId });
+    const response = await client.send(command);
+    let value = response.SecretString;
+    if (!value && response.SecretBinary) {
+      value = Buffer.from(response.SecretBinary).toString("utf-8");
+    }
+    if (jsonPath && value) {
+      try {
+        const parsed = JSON.parse(value);
+        value = getJsonPath(parsed, jsonPath);
+      } catch {
+      }
+    }
+    return value ?? "";
+  }
+  /**
+   * Validate provider configuration
+   * @returns {Promise<void>}
+   */
+  async validate() {
+    await this.getClient();
+  }
+  /**
+   * Cleanup resources
+   * @returns {Promise<void>}
+   */
+  async dispose() {
+    if (this.client?.destroy) {
+      this.client.destroy();
+    }
+    this.client = null;
+    this.clientPromise = null;
+  }
+}
+function getJsonPath(obj, path) {
+  const parts = path.split(".");
+  let current = obj;
+  for (const part of parts) {
+    if (current === null || current === void 0) return void 0;
+    current = current[part];
+  }
+  return typeof current === "string" ? current : JSON.stringify(current);
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  AwsSecretsProvider
+});
+//# sourceMappingURL=aws.js.map

package/dist/cjs/providers/aws.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../src/providers/aws.js"],
+  "sourcesContent": ["/**\n * AWS Secrets Manager provider for colony\n */\n\n/**\n * @class AwsSecretsProvider\n * @property {string} prefix - Provider prefix (\"AWS\")\n */\nexport class AwsSecretsProvider {\n  prefix = \"AWS\";\n\n  /**\n   * @param {object} options\n   * @param {string=} options.region - AWS region (default: process.env.AWS_REGION or \"us-east-1\")\n   */\n  constructor(options = {}) {\n    this.region = options.region ?? process.env.AWS_REGION ?? \"us-east-1\";\n    this.client = null;\n    this.clientPromise = null;\n    this.GetSecretValueCommand = null;\n  }\n\n  /**\n   * Get or create the AWS client (lazy initialization)\n   * @returns {Promise<object>}\n   */\n  async getClient() {\n    if (this.client) return this.client;\n    if (this.clientPromise) return this.clientPromise;\n\n    this.clientPromise = (async () => {\n      // Dynamic import to avoid requiring AWS SDK if not used\n      const { SecretsManagerClient, GetSecretValueCommand } = await import(\n        \"@aws-sdk/client-secrets-manager\"\n      );\n      this.client = new SecretsManagerClient({ region: this.region });\n      this.GetSecretValueCommand = GetSecretValueCommand;\n      return this.client;\n    })();\n\n    return this.clientPromise;\n  }\n\n  /**\n   * Fetch a secret value\n   * @param {string} key - Secret key, optionally with JSON path: \"secret-name#json.path\"\n   * @returns {Promise<string>}\n   */\n  async fetch(key) {\n    const client = await this.getClient();\n\n    // Support key with JSON path: secret-name#json.path\n    const [secretId, jsonPath] = key.split(\"#\");\n\n    const command = new this.GetSecretValueCommand({ SecretId: secretId });\n    const response = await client.send(command);\n\n    let value = response.SecretString;\n    if (!value && response.SecretBinary) {\n      value = Buffer.from(response.SecretBinary).toString(\"utf-8\");\n    }\n\n    // Extract JSON path if specified\n    if (jsonPath && value) {\n      try {\n        const parsed = JSON.parse(value);\n        value = getJsonPath(parsed, jsonPath);\n      } catch {\n        // Not JSON or invalid path, return as-is\n      }\n    }\n\n    return value ?? \"\";\n  }\n\n  /**\n   * Validate provider configuration\n   * @returns {Promise<void>}\n   */\n  async validate() {\n    // Try to initialize client to verify SDK is available\n    await this.getClient();\n  }\n\n  /**\n   * Cleanup resources\n   * @returns {Promise<void>}\n   */\n  async dispose() {\n    if (this.client?.destroy) {\n      this.client.destroy();\n    }\n    this.client = null;\n    this.clientPromise = null;\n  }\n}\n\n/**\n * Get a value from an object using dot notation path\n * @param {object} obj - Object to traverse\n * @param {string} path - Dot-separated path (e.g., \"database.password\")\n * @returns {string|undefined}\n */\nfunction getJsonPath(obj, path) {\n  const parts = path.split(\".\");\n  let current = obj;\n  for (const part of parts) {\n    if (current === null || current === undefined) return undefined;\n    current = current[part];\n  }\n  return typeof current === \"string\" ? current : JSON.stringify(current);\n}\n"],
+  "mappings": ";;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAQO,MAAM,mBAAmB;AAAA,EAC9B,SAAS;AAAA;AAAA;AAAA;AAAA;AAAA,EAMT,YAAY,UAAU,CAAC,GAAG;AACxB,SAAK,SAAS,QAAQ,UAAU,QAAQ,IAAI,cAAc;AAC1D,SAAK,SAAS;AACd,SAAK,gBAAgB;AACrB,SAAK,wBAAwB;AAAA,EAC/B;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,YAAY;AAChB,QAAI,KAAK,OAAQ,QAAO,KAAK;AAC7B,QAAI,KAAK,cAAe,QAAO,KAAK;AAEpC,SAAK,iBAAiB,YAAY;AAEhC,YAAM,EAAE,sBAAsB,sBAAsB,IAAI,MAAM,OAC5D,iCACF;AACA,WAAK,SAAS,IAAI,qBAAqB,EAAE,QAAQ,KAAK,OAAO,CAAC;AAC9D,WAAK,wBAAwB;AAC7B,aAAO,KAAK;AAAA,IACd,GAAG;AAEH,WAAO,KAAK;AAAA,EACd;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,MAAM,KAAK;AACf,UAAM,SAAS,MAAM,KAAK,UAAU;AAGpC,UAAM,CAAC,UAAU,QAAQ,IAAI,IAAI,MAAM,GAAG;AAE1C,UAAM,UAAU,IAAI,KAAK,sBAAsB,EAAE,UAAU,SAAS,CAAC;AACrE,UAAM,WAAW,MAAM,OAAO,KAAK,OAAO;AAE1C,QAAI,QAAQ,SAAS;AACrB,QAAI,CAAC,SAAS,SAAS,cAAc;AACnC,cAAQ,OAAO,KAAK,SAAS,YAAY,EAAE,SAAS,OAAO;AAAA,IAC7D;AAGA,QAAI,YAAY,OAAO;AACrB,UAAI;AACF,cAAM,SAAS,KAAK,MAAM,KAAK;AAC/B,gBAAQ,YAAY,QAAQ,QAAQ;AAAA,MACtC,QAAQ;AAAA,MAER;AAAA,IACF;AAEA,WAAO,SAAS;AAAA,EAClB;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,WAAW;AAEf,UAAM,KAAK,UAAU;AAAA,EACvB;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,UAAU;AACd,QAAI,KAAK,QAAQ,SAAS;AACxB,WAAK,OAAO,QAAQ;AAAA,IACtB;AACA,SAAK,SAAS;AACd,SAAK,gBAAgB;AAAA,EACvB;AACF;AAQA,SAAS,YAAY,KAAK,MAAM;AAC9B,QAAM,QAAQ,KAAK,MAAM,GAAG;AAC5B,MAAI,UAAU;AACd,aAAW,QAAQ,OAAO;AACxB,QAAI,YAAY,QAAQ,YAAY,OAAW,QAAO;AACtD,cAAU,QAAQ,IAAI;AAAA,EACxB;AACA,SAAO,OAAO,YAAY,WAAW,UAAU,KAAK,UAAU,OAAO;AACvE;",
+  "names": []
+}

package/dist/cjs/providers/openbao.js

@@ -0,0 +1,49 @@
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var openbao_exports = {};
+__export(openbao_exports, {
+  OpenBaoProvider: () => OpenBaoProvider
+});
+module.exports = __toCommonJS(openbao_exports);
+var import_vault_base = require("./vault-base.js");
+class OpenBaoProvider extends import_vault_base.VaultCompatibleProvider {
+  /**
+   * @param {object} options
+   * @param {string=} options.addr - OpenBao address (default: process.env.BAO_ADDR or "http://127.0.0.1:8200")
+   * @param {string=} options.token - OpenBao token (default: process.env.BAO_TOKEN)
+   * @param {string=} options.namespace - OpenBao namespace (default: process.env.BAO_NAMESPACE)
+   * @param {number=} options.timeout - Request timeout in ms (default: 30000)
+   */
+  constructor(options = {}) {
+    super(
+      {
+        prefix: "OPENBAO",
+        addrEnvVar: "BAO_ADDR",
+        tokenEnvVar: "BAO_TOKEN",
+        namespaceEnvVar: "BAO_NAMESPACE",
+        errorPrefix: "OpenBao"
+      },
+      options
+    );
+  }
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  OpenBaoProvider
+});
+//# sourceMappingURL=openbao.js.map

package/dist/cjs/providers/openbao.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../src/providers/openbao.js"],
+  "sourcesContent": ["/**\n * OpenBao provider for colony\n * OpenBao is an API-compatible fork of HashiCorp Vault\n */\n\nimport { VaultCompatibleProvider } from \"./vault-base.js\";\n\n/**\n * @class OpenBaoProvider\n * @property {string} prefix - Provider prefix (\"OPENBAO\")\n */\nexport class OpenBaoProvider extends VaultCompatibleProvider {\n  /**\n   * @param {object} options\n   * @param {string=} options.addr - OpenBao address (default: process.env.BAO_ADDR or \"http://127.0.0.1:8200\")\n   * @param {string=} options.token - OpenBao token (default: process.env.BAO_TOKEN)\n   * @param {string=} options.namespace - OpenBao namespace (default: process.env.BAO_NAMESPACE)\n   * @param {number=} options.timeout - Request timeout in ms (default: 30000)\n   */\n  constructor(options = {}) {\n    super(\n      {\n        prefix: \"OPENBAO\",\n        addrEnvVar: \"BAO_ADDR\",\n        tokenEnvVar: \"BAO_TOKEN\",\n        namespaceEnvVar: \"BAO_NAMESPACE\",\n        errorPrefix: \"OpenBao\",\n      },\n      options\n    );\n  }\n}\n"],
+  "mappings": ";;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAKA,wBAAwC;AAMjC,MAAM,wBAAwB,0CAAwB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQ3D,YAAY,UAAU,CAAC,GAAG;AACxB;AAAA,MACE;AAAA,QACE,QAAQ;AAAA,QACR,YAAY;AAAA,QACZ,aAAa;AAAA,QACb,iBAAiB;AAAA,QACjB,aAAa;AAAA,MACf;AAAA,MACA;AAAA,IACF;AAAA,EACF;AACF;",
+  "names": []
+}

package/dist/cjs/providers/vault-base.js

@@ -0,0 +1,98 @@
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var vault_base_exports = {};
+__export(vault_base_exports, {
+  VaultCompatibleProvider: () => VaultCompatibleProvider
+});
+module.exports = __toCommonJS(vault_base_exports);
+class VaultCompatibleProvider {
+  /**
+   * @param {object} config
+   * @param {string} config.prefix - Provider prefix (e.g., "VAULT", "OPENBAO")
+   * @param {string} config.addrEnvVar - Environment variable for address
+   * @param {string} config.tokenEnvVar - Environment variable for token
+   * @param {string} config.namespaceEnvVar - Environment variable for namespace
+   * @param {string} config.errorPrefix - Prefix for error messages
+   * @param {object} options - User options
+   * @param {string=} options.addr - Server address
+   * @param {string=} options.token - Auth token
+   * @param {string=} options.namespace - Namespace
+   * @param {number=} options.timeout - Request timeout in ms (default: 30000)
+   */
+  constructor(config, options = {}) {
+    this.prefix = config.prefix;
+    this.errorPrefix = config.errorPrefix;
+    this.addr = options.addr ?? process.env[config.addrEnvVar] ?? "http://127.0.0.1:8200";
+    this.token = options.token ?? process.env[config.tokenEnvVar];
+    this.namespace = options.namespace ?? process.env[config.namespaceEnvVar];
+    this.timeout = options.timeout ?? 3e4;
+    this.tokenEnvVar = config.tokenEnvVar;
+  }
+  /**
+   * Fetch a secret value
+   * @param {string} key - Secret path, optionally with field: "secret/data/myapp#password"
+   * @returns {Promise<string>}
+   */
+  async fetch(key) {
+    const [path, field] = key.split("#");
+    const url = `${this.addr}/v1/${path}`;
+    const headers = {
+      "X-Vault-Token": this.token
+    };
+    if (this.namespace) {
+      headers["X-Vault-Namespace"] = this.namespace;
+    }
+    const response = await fetch(url, {
+      headers,
+      signal: AbortSignal.timeout(this.timeout)
+    });
+    if (response.status === 404) {
+      const err = new Error(`Secret not found: ${key}`);
+      err.code = "NOT_FOUND";
+      throw err;
+    }
+    if (!response.ok) {
+      throw new Error(`${this.errorPrefix} error: ${response.status} ${response.statusText}`);
+    }
+    const data = await response.json();
+    const secretData = data.data?.data ?? data.data;
+    if (field) {
+      return String(secretData?.[field] ?? "");
+    }
+    if (typeof secretData === "object" && secretData !== null) {
+      const values = Object.values(secretData);
+      if (values.length === 1) return String(values[0]);
+      return JSON.stringify(secretData);
+    }
+    return String(secretData ?? "");
+  }
+  /**
+   * Validate provider configuration
+   * @returns {Promise<void>}
+   */
+  async validate() {
+    if (!this.token) {
+      throw new Error(`${this.tokenEnvVar} is required`);
+    }
+  }
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  VaultCompatibleProvider
+});
+//# sourceMappingURL=vault-base.js.map

package/dist/cjs/providers/vault-base.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../src/providers/vault-base.js"],
+  "sourcesContent": ["/**\n * Base class for Vault-compatible secret providers (Vault, OpenBao)\n * Both use the same HTTP API, differing only in environment variables and naming.\n */\n\n/**\n * @class VaultCompatibleProvider\n * @property {string} prefix - Provider prefix\n */\nexport class VaultCompatibleProvider {\n  /**\n   * @param {object} config\n   * @param {string} config.prefix - Provider prefix (e.g., \"VAULT\", \"OPENBAO\")\n   * @param {string} config.addrEnvVar - Environment variable for address\n   * @param {string} config.tokenEnvVar - Environment variable for token\n   * @param {string} config.namespaceEnvVar - Environment variable for namespace\n   * @param {string} config.errorPrefix - Prefix for error messages\n   * @param {object} options - User options\n   * @param {string=} options.addr - Server address\n   * @param {string=} options.token - Auth token\n   * @param {string=} options.namespace - Namespace\n   * @param {number=} options.timeout - Request timeout in ms (default: 30000)\n   */\n  constructor(config, options = {}) {\n    this.prefix = config.prefix;\n    this.errorPrefix = config.errorPrefix;\n    this.addr = options.addr ?? process.env[config.addrEnvVar] ?? \"http://127.0.0.1:8200\";\n    this.token = options.token ?? process.env[config.tokenEnvVar];\n    this.namespace = options.namespace ?? process.env[config.namespaceEnvVar];\n    this.timeout = options.timeout ?? 30000;\n    this.tokenEnvVar = config.tokenEnvVar;\n  }\n\n  /**\n   * Fetch a secret value\n   * @param {string} key - Secret path, optionally with field: \"secret/data/myapp#password\"\n   * @returns {Promise<string>}\n   */\n  async fetch(key) {\n    const [path, field] = key.split(\"#\");\n\n    const url = `${this.addr}/v1/${path}`;\n    const headers = {\n      \"X-Vault-Token\": this.token,\n    };\n    if (this.namespace) {\n      headers[\"X-Vault-Namespace\"] = this.namespace;\n    }\n\n    const response = await fetch(url, {\n      headers,\n      signal: AbortSignal.timeout(this.timeout),\n    });\n\n    if (response.status === 404) {\n      const err = new Error(`Secret not found: ${key}`);\n      err.code = \"NOT_FOUND\";\n      throw err;\n    }\n\n    if (!response.ok) {\n      throw new Error(`${this.errorPrefix} error: ${response.status} ${response.statusText}`);\n    }\n\n    const data = await response.json();\n\n    // KV v2 returns data.data.data, KV v1 returns data.data\n    const secretData = data.data?.data ?? data.data;\n\n    if (field) {\n      return String(secretData?.[field] ?? \"\");\n    }\n\n    if (typeof secretData === \"object\" && secretData !== null) {\n      const values = Object.values(secretData);\n      if (values.length === 1) return String(values[0]);\n      return JSON.stringify(secretData);\n    }\n\n    return String(secretData ?? \"\");\n  }\n\n  /**\n   * Validate provider configuration\n   * @returns {Promise<void>}\n   */\n  async validate() {\n    if (!this.token) {\n      throw new Error(`${this.tokenEnvVar} is required`);\n    }\n  }\n}\n"],
+  "mappings": ";;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AASO,MAAM,wBAAwB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAcnC,YAAY,QAAQ,UAAU,CAAC,GAAG;AAChC,SAAK,SAAS,OAAO;AACrB,SAAK,cAAc,OAAO;AAC1B,SAAK,OAAO,QAAQ,QAAQ,QAAQ,IAAI,OAAO,UAAU,KAAK;AAC9D,SAAK,QAAQ,QAAQ,SAAS,QAAQ,IAAI,OAAO,WAAW;AAC5D,SAAK,YAAY,QAAQ,aAAa,QAAQ,IAAI,OAAO,eAAe;AACxE,SAAK,UAAU,QAAQ,WAAW;AAClC,SAAK,cAAc,OAAO;AAAA,EAC5B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,MAAM,KAAK;AACf,UAAM,CAAC,MAAM,KAAK,IAAI,IAAI,MAAM,GAAG;AAEnC,UAAM,MAAM,GAAG,KAAK,IAAI,OAAO,IAAI;AACnC,UAAM,UAAU;AAAA,MACd,iBAAiB,KAAK;AAAA,IACxB;AACA,QAAI,KAAK,WAAW;AAClB,cAAQ,mBAAmB,IAAI,KAAK;AAAA,IACtC;AAEA,UAAM,WAAW,MAAM,MAAM,KAAK;AAAA,MAChC;AAAA,MACA,QAAQ,YAAY,QAAQ,KAAK,OAAO;AAAA,IAC1C,CAAC;AAED,QAAI,SAAS,WAAW,KAAK;AAC3B,YAAM,MAAM,IAAI,MAAM,qBAAqB,GAAG,EAAE;AAChD,UAAI,OAAO;AACX,YAAM;AAAA,IACR;AAEA,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,IAAI,MAAM,GAAG,KAAK,WAAW,WAAW,SAAS,MAAM,IAAI,SAAS,UAAU,EAAE;AAAA,IACxF;AAEA,UAAM,OAAO,MAAM,SAAS,KAAK;AAGjC,UAAM,aAAa,KAAK,MAAM,QAAQ,KAAK;AAE3C,QAAI,OAAO;AACT,aAAO,OAAO,aAAa,KAAK,KAAK,EAAE;AAAA,IACzC;AAEA,QAAI,OAAO,eAAe,YAAY,eAAe,MAAM;AACzD,YAAM,SAAS,OAAO,OAAO,UAAU;AACvC,UAAI,OAAO,WAAW,EAAG,QAAO,OAAO,OAAO,CAAC,CAAC;AAChD,aAAO,KAAK,UAAU,UAAU;AAAA,IAClC;AAEA,WAAO,OAAO,cAAc,EAAE;AAAA,EAChC;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,WAAW;AACf,QAAI,CAAC,KAAK,OAAO;AACf,YAAM,IAAI,MAAM,GAAG,KAAK,WAAW,cAAc;AAAA,IACnD;AAAA,EACF;AACF;",
+  "names": []
+}