@autonomaai/security-utils 1.0.0

package/dist/secret-manager.js

@@ -0,0 +1,312 @@
+/**
+ * Secret Management System for autonoma
+ *
+ * Provides secure secret storage, runtime injection, and rotation capabilities
+ * for sensitive configuration values like API keys and database credentials.
+ */
+import { CredentialManager } from './credential-manager.js';
+import { readFileSync, writeFileSync, existsSync } from 'fs';
+import { join } from 'path';
+import { randomBytes } from 'crypto';
+export class SecretManager {
+    credentialManager;
+    secrets = new Map();
+    secretsFile;
+    constructor(encryptionKey, secretsFile) {
+        this.credentialManager = new CredentialManager({
+            encryptionKey,
+            environment: process.env.NODE_ENV || 'development'
+        });
+        this.secretsFile = secretsFile || join(process.cwd(), '.secrets.enc');
+        this.loadSecrets();
+    }
+    /**
+     * Store a secret with optional rotation policy
+     */
+    async setSecret(name, value, options) {
+        const secret = {
+            name,
+            value,
+            description: options?.description,
+            rotationPolicy: options?.rotationPolicy,
+            tags: options?.tags || [],
+            createdAt: new Date(),
+            updatedAt: new Date(),
+            expiresAt: options?.expiresAt
+        };
+        this.secrets.set(name, secret);
+        await this.saveSecrets();
+    }
+    /**
+     * Retrieve a secret value
+     */
+    async getSecret(name) {
+        const secret = this.secrets.get(name);
+        if (!secret) {
+            return null;
+        }
+        // Check if secret has expired
+        if (secret.expiresAt && secret.expiresAt < new Date()) {
+            console.warn(`Secret '${name}' has expired`);
+            return null;
+        }
+        return secret.value;
+    }
+    /**
+     * Get secret metadata without exposing the value
+     */
+    getSecretMetadata(name) {
+        const secret = this.secrets.get(name);
+        if (!secret) {
+            return null;
+        }
+        return {
+            name: secret.name,
+            description: secret.description,
+            tags: secret.tags,
+            createdAt: secret.createdAt,
+            updatedAt: secret.updatedAt,
+            expiresAt: secret.expiresAt,
+            rotationPolicy: secret.rotationPolicy
+        };
+    }
+    /**
+     * List all secret names and metadata
+     */
+    listSecrets() {
+        return Array.from(this.secrets.values()).map(secret => ({
+            name: secret.name,
+            description: secret.description,
+            tags: secret.tags,
+            createdAt: secret.createdAt,
+            updatedAt: secret.updatedAt,
+            expiresAt: secret.expiresAt,
+            rotationPolicy: secret.rotationPolicy
+        }));
+    }
+    /**
+     * Rotate a secret value
+     */
+    async rotateSecret(name, newValue) {
+        const secret = this.secrets.get(name);
+        if (!secret) {
+            throw new Error(`Secret '${name}' not found`);
+        }
+        secret.value = newValue;
+        secret.updatedAt = new Date();
+        // Update expiry based on rotation policy
+        if (secret.rotationPolicy?.enabled && secret.rotationPolicy.intervalDays > 0) {
+            secret.expiresAt = new Date(Date.now() + secret.rotationPolicy.intervalDays * 24 * 60 * 60 * 1000);
+        }
+        await this.saveSecrets();
+    }
+    /**
+     * Delete a secret
+     */
+    async deleteSecret(name) {
+        const deleted = this.secrets.delete(name);
+        if (deleted) {
+            await this.saveSecrets();
+        }
+        return deleted;
+    }
+    /**
+     * Get secrets that need rotation
+     */
+    getSecretsNeedingRotation() {
+        const now = new Date();
+        return this.listSecrets().filter(secret => {
+            if (!secret.rotationPolicy?.enabled)
+                return false;
+            if (!secret.expiresAt)
+                return false;
+            const notifyDate = new Date(secret.expiresAt.getTime() -
+                (secret.rotationPolicy.notifyBeforeExpiry * 24 * 60 * 60 * 1000));
+            return now >= notifyDate;
+        });
+    }
+    /**
+     * Inject secrets into environment variables
+     */
+    async injectSecretsIntoEnv() {
+        for (const [name, secret] of this.secrets) {
+            // Only inject if environment variable is not already set
+            if (!process.env[name]) {
+                process.env[name] = secret.value;
+            }
+        }
+    }
+    /**
+     * Generate secure random secret value
+     */
+    generateSecretValue(length = 32) {
+        return randomBytes(length).toString('hex');
+    }
+    /**
+     * Validate secret strength
+     */
+    validateSecretStrength(value) {
+        const feedback = [];
+        let score = 0;
+        // Length check
+        if (value.length >= 32) {
+            score += 25;
+        }
+        else if (value.length >= 16) {
+            score += 15;
+            feedback.push('Consider using a longer secret (32+ characters)');
+        }
+        else {
+            feedback.push('Secret should be at least 16 characters long');
+        }
+        // Character variety
+        const hasUpper = /[A-Z]/.test(value);
+        const hasLower = /[a-z]/.test(value);
+        const hasNumbers = /\d/.test(value);
+        const hasSpecial = /[!@#$%^&*(),.?":{}|<>]/.test(value);
+        const varietyCount = [hasUpper, hasLower, hasNumbers, hasSpecial].filter(Boolean).length;
+        score += varietyCount * 10;
+        if (varietyCount < 3) {
+            feedback.push('Secret should include uppercase, lowercase, numbers, and special characters');
+        }
+        // Entropy check (simplified)
+        const uniqueChars = new Set(value).size;
+        const entropyScore = (uniqueChars / value.length) * 25;
+        score += entropyScore;
+        if (uniqueChars < value.length * 0.5) {
+            feedback.push('Secret has too many repeated characters');
+        }
+        // Common patterns check
+        const commonPatterns = [
+            /123456/,
+            /password/i,
+            /admin/i,
+            /qwerty/i,
+            /(.)\1{3,}/ // 4+ repeated characters
+        ];
+        let hasCommonPattern = false;
+        for (const pattern of commonPatterns) {
+            if (pattern.test(value)) {
+                hasCommonPattern = true;
+                break;
+            }
+        }
+        if (hasCommonPattern) {
+            score -= 20;
+            feedback.push('Secret contains common patterns that should be avoided');
+        }
+        const isStrong = score >= 70 && !hasCommonPattern;
+        return {
+            isStrong,
+            score: Math.max(0, Math.min(100, score)),
+            feedback: feedback.length > 0 ? feedback : ['Secret strength is good']
+        };
+    }
+    /**
+     * Load secrets from encrypted file
+     */
+    loadSecrets() {
+        if (!existsSync(this.secretsFile)) {
+            return;
+        }
+        try {
+            const encryptedData = readFileSync(this.secretsFile, 'utf8');
+            const decryptedData = this.credentialManager['decrypt'](encryptedData);
+            const secretsData = JSON.parse(decryptedData);
+            for (const secretData of secretsData) {
+                this.secrets.set(secretData.name, {
+                    ...secretData,
+                    createdAt: new Date(secretData.createdAt),
+                    updatedAt: new Date(secretData.updatedAt),
+                    expiresAt: secretData.expiresAt ? new Date(secretData.expiresAt) : undefined
+                });
+            }
+        }
+        catch (error) {
+            console.warn(`Failed to load secrets: ${error instanceof Error ? error.message : 'Unknown error'}`);
+        }
+    }
+    /**
+     * Save secrets to encrypted file
+     */
+    async saveSecrets() {
+        try {
+            const secretsArray = Array.from(this.secrets.values());
+            const jsonData = JSON.stringify(secretsArray, null, 2);
+            const encryptedData = this.credentialManager['encrypt'](jsonData);
+            writeFileSync(this.secretsFile, encryptedData, 'utf8');
+        }
+        catch (error) {
+            throw new Error(`Failed to save secrets: ${error instanceof Error ? error.message : 'Unknown error'}`);
+        }
+    }
+}
+/**
+ * Runtime secret injection utility
+ */
+export class RuntimeSecretInjector {
+    secretManager;
+    constructor(secretManager) {
+        this.secretManager = secretManager;
+    }
+    /**
+     * Replace placeholders in configuration with actual secret values
+     */
+    async injectSecrets(config) {
+        const injectedConfig = JSON.parse(JSON.stringify(config)); // Deep clone
+        await this.recursivelyInjectSecrets(injectedConfig);
+        return injectedConfig;
+    }
+    /**
+     * Recursively find and replace secret placeholders
+     */
+    async recursivelyInjectSecrets(obj) {
+        if (typeof obj === 'string') {
+            return;
+        }
+        if (Array.isArray(obj)) {
+            for (let i = 0; i < obj.length; i++) {
+                if (typeof obj[i] === 'string' && obj[i].startsWith('{{') && obj[i].endsWith('}}')) {
+                    const secretName = obj[i].slice(2, -2).trim();
+                    const secretValue = await this.secretManager.getSecret(secretName);
+                    if (secretValue !== null) {
+                        obj[i] = secretValue;
+                    }
+                }
+                else if (typeof obj[i] === 'object') {
+                    await this.recursivelyInjectSecrets(obj[i]);
+                }
+            }
+            return;
+        }
+        if (typeof obj === 'object' && obj !== null) {
+            for (const [key, value] of Object.entries(obj)) {
+                if (typeof value === 'string' && value.startsWith('{{') && value.endsWith('}}')) {
+                    const secretName = value.slice(2, -2).trim();
+                    const secretValue = await this.secretManager.getSecret(secretName);
+                    if (secretValue !== null) {
+                        obj[key] = secretValue;
+                    }
+                }
+                else if (typeof value === 'object') {
+                    await this.recursivelyInjectSecrets(value);
+                }
+            }
+        }
+    }
+    /**
+     * Create environment variable mapping from secrets
+     */
+    async createEnvMapping() {
+        const secrets = this.secretManager.listSecrets();
+        const mapping = {};
+        for (const secretMeta of secrets) {
+            const value = await this.secretManager.getSecret(secretMeta.name);
+            if (value !== null) {
+                mapping[secretMeta.name] = value;
+            }
+        }
+        return mapping;
+    }
+}
+//# sourceMappingURL=secret-manager.js.map

package/dist/secret-manager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secret-manager.js","sourceRoot":"","sources":["../src/secret-manager.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAC5D,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,IAAI,CAAC;AAC7D,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,WAAW,EAAc,MAAM,QAAQ,CAAC;AA8BjD,MAAM,OAAO,aAAa;IACP,iBAAiB,CAAoB;IACrC,OAAO,GAAG,IAAI,GAAG,EAAwB,CAAC;IAC1C,WAAW,CAAS;IAErC,YAAY,aAAsB,EAAE,WAAoB;QACtD,IAAI,CAAC,iBAAiB,GAAG,IAAI,iBAAiB,CAAC;YAC7C,aAAa;YACb,WAAW,EAAG,OAAO,CAAC,GAAG,CAAC,QAAkD,IAAI,aAAa;SAC9F,CAAC,CAAC;QAEH,IAAI,CAAC,WAAW,GAAG,WAAW,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,cAAc,CAAC,CAAC;QACtE,IAAI,CAAC,WAAW,EAAE,CAAC;IACrB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,SAAS,CAAC,IAAY,EAAE,KAAa,EAAE,OAK5C;QACC,MAAM,MAAM,GAAiB;YAC3B,IAAI;YACJ,KAAK;YACL,WAAW,EAAE,OAAO,EAAE,WAAW;YACjC,cAAc,EAAE,OAAO,EAAE,cAAc;YACvC,IAAI,EAAE,OAAO,EAAE,IAAI,IAAI,EAAE;YACzB,SAAS,EAAE,IAAI,IAAI,EAAE;YACrB,SAAS,EAAE,IAAI,IAAI,EAAE;YACrB,SAAS,EAAE,OAAO,EAAE,SAAS;SAC9B,CAAC;QAEF,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC/B,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;IAC3B,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,SAAS,CAAC,IAAY;QAC1B,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACtC,IAAI,CAAC,MAAM,EAAE;YACX,OAAO,IAAI,CAAC;SACb;QAED,8BAA8B;QAC9B,IAAI,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,EAAE;YACrD,OAAO,CAAC,IAAI,CAAC,WAAW,IAAI,eAAe,CAAC,CAAC;YAC7C,OAAO,IAAI,CAAC;SACb;QAED,OAAO,MAAM,CAAC,KAAK,CAAC;IACtB,CAAC;IAED;;OAEG;IACH,iBAAiB,CAAC,IAAY;QAC5B,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACtC,IAAI,CAAC,MAAM,EAAE;YACX,OAAO,IAAI,CAAC;SACb;QAED,OAAO;YACL,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,cAAc,EAAE,MAAM,CAAC,cAAc;SACtC,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,WAAW;QACT,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YACtD,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,cAAc,EAAE,MAAM,CAAC,cAAc;SACtC,CAAC,CAAC,CAAC;IACN,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,YAAY,CAAC,IAAY,EAAE,QAAgB;QAC/C,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACtC,IAAI,CAAC,MAAM,EAAE;YACX,MAAM,IAAI,KAAK,CAAC,WAAW,IAAI,aAAa,CAAC,CAAC;SAC/C;QAED,MAAM,CAAC,KAAK,GAAG,QAAQ,CAAC;QACxB,MAAM,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC;QAE9B,yCAAyC;QACzC,IAAI,MAAM,CAAC,cAAc,EAAE,OAAO,IAAI,MAAM,CAAC,cAAc,CAAC,YAAY,GAAG,CAAC,EAAE;YAC5E,MAAM,CAAC,SAAS,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,cAAc,CAAC,YAAY,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;SACpG;QAED,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;IAC3B,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,YAAY,CAAC,IAAY;QAC7B,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC1C,IAAI,OAAO,EAAE;YACX,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;SAC1B;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;OAEG;IACH,yBAAyB;QACvB,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,OAAO,IAAI,CAAC,WAAW,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE;YACxC,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,OAAO;gBAAE,OAAO,KAAK,CAAC;YAClD,IAAI,CAAC,MAAM,CAAC,SAAS;gBAAE,OAAO,KAAK,CAAC;YAEpC,MAAM,UAAU,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,EAAE;gBACpD,CAAC,MAAM,CAAC,cAAc,CAAC,kBAAkB,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC;YAEpE,OAAO,GAAG,IAAI,UAAU,CAAC;QAC3B,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,oBAAoB;QACxB,KAAK,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE;YACzC,yDAAyD;YACzD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE;gBACtB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC;aAClC;SACF;IACH,CAAC;IAED;;OAEG;IACH,mBAAmB,CAAC,SAAiB,EAAE;QACrC,OAAO,WAAW,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC7C,CAAC;IAED;;OAEG;IACH,sBAAsB,CAAC,KAAa;QAKlC,MAAM,QAAQ,GAAa,EAAE,CAAC;QAC9B,IAAI,KAAK,GAAG,CAAC,CAAC;QAEd,eAAe;QACf,IAAI,KAAK,CAAC,MAAM,IAAI,EAAE,EAAE;YACtB,KAAK,IAAI,EAAE,CAAC;SACb;aAAM,IAAI,KAAK,CAAC,MAAM,IAAI,EAAE,EAAE;YAC7B,KAAK,IAAI,EAAE,CAAC;YACZ,QAAQ,CAAC,IAAI,CAAC,iDAAiD,CAAC,CAAC;SAClE;aAAM;YACL,QAAQ,CAAC,IAAI,CAAC,8CAA8C,CAAC,CAAC;SAC/D;QAED,oBAAoB;QACpB,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrC,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrC,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACpC,MAAM,UAAU,GAAG,wBAAwB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAExD,MAAM,YAAY,GAAG,CAAC,QAAQ,EAAE,QAAQ,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC;QACzF,KAAK,IAAI,YAAY,GAAG,EAAE,CAAC;QAE3B,IAAI,YAAY,GAAG,CAAC,EAAE;YACpB,QAAQ,CAAC,IAAI,CAAC,6EAA6E,CAAC,CAAC;SAC9F;QAED,6BAA6B;QAC7B,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC;QACxC,MAAM,YAAY,GAAG,CAAC,WAAW,GAAG,KAAK,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC;QACvD,KAAK,IAAI,YAAY,CAAC;QAEtB,IAAI,WAAW,GAAG,KAAK,CAAC,MAAM,GAAG,GAAG,EAAE;YACpC,QAAQ,CAAC,IAAI,CAAC,yCAAyC,CAAC,CAAC;SAC1D;QAED,wBAAwB;QACxB,MAAM,cAAc,GAAG;YACrB,QAAQ;YACR,WAAW;YACX,QAAQ;YACR,SAAS;YACT,WAAW,CAAC,yBAAyB;SACtC,CAAC;QAEF,IAAI,gBAAgB,GAAG,KAAK,CAAC;QAC7B,KAAK,MAAM,OAAO,IAAI,cAAc,EAAE;YACpC,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE;gBACvB,gBAAgB,GAAG,IAAI,CAAC;gBACxB,MAAM;aACP;SACF;QAED,IAAI,gBAAgB,EAAE;YACpB,KAAK,IAAI,EAAE,CAAC;YACZ,QAAQ,CAAC,IAAI,CAAC,wDAAwD,CAAC,CAAC;SACzE;QAED,MAAM,QAAQ,GAAG,KAAK,IAAI,EAAE,IAAI,CAAC,gBAAgB,CAAC;QAElD,OAAO;YACL,QAAQ;YACR,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YACxC,QAAQ,EAAE,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,yBAAyB,CAAC;SACvE,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,WAAW;QACjB,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE;YACjC,OAAO;SACR;QAED,IAAI;YACF,MAAM,aAAa,GAAG,YAAY,CAAC,IAAI,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;YAC7D,MAAM,aAAa,GAAG,IAAI,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC,aAAa,CAAC,CAAC;YACvE,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;YAE9C,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE;gBACpC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,EAAE;oBAChC,GAAG,UAAU;oBACb,SAAS,EAAE,IAAI,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC;oBACzC,SAAS,EAAE,IAAI,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC;oBACzC,SAAS,EAAE,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS;iBAC7E,CAAC,CAAC;aACJ;SACF;QAAC,OAAO,KAAK,EAAE;YACd,OAAO,CAAC,IAAI,CAAC,2BAA2B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,EAAE,CAAC,CAAC;SACrG;IACH,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,WAAW;QACvB,IAAI;YACF,MAAM,YAAY,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;YACvD,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;YACvD,MAAM,aAAa,GAAG,IAAI,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,CAAC;YAElE,aAAa,CAAC,IAAI,CAAC,WAAW,EAAE,aAAa,EAAE,MAAM,CAAC,CAAC;SACxD;QAAC,OAAO,KAAK,EAAE;YACd,MAAM,IAAI,KAAK,CAAC,2BAA2B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,EAAE,CAAC,CAAC;SACxG;IACH,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,qBAAqB;IACf,aAAa,CAAgB;IAE9C,YAAY,aAA4B;QACtC,IAAI,CAAC,aAAa,GAAG,aAAa,CAAC;IACrC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,aAAa,CAAC,MAA2B;QAC7C,MAAM,cAAc,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,aAAa;QAExE,MAAM,IAAI,CAAC,wBAAwB,CAAC,cAAc,CAAC,CAAC;QAEpD,OAAO,cAAc,CAAC;IACxB,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,wBAAwB,CAAC,GAAQ;QAC7C,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE;YAC3B,OAAO;SACR;QAED,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE;YACtB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE;gBACnC,IAAI,OAAO,GAAG,CAAC,CAAC,CAAC,KAAK,QAAQ,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE;oBAClF,MAAM,UAAU,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;oBAC9C,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;oBACnE,IAAI,WAAW,KAAK,IAAI,EAAE;wBACxB,GAAG,CAAC,CAAC,CAAC,GAAG,WAAW,CAAC;qBACtB;iBACF;qBAAM,IAAI,OAAO,GAAG,CAAC,CAAC,CAAC,KAAK,QAAQ,EAAE;oBACrC,MAAM,IAAI,CAAC,wBAAwB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;iBAC7C;aACF;YACD,OAAO;SACR;QAED,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,EAAE;YAC3C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE;gBAC9C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE;oBAC/E,MAAM,UAAU,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;oBAC7C,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;oBACnE,IAAI,WAAW,KAAK,IAAI,EAAE;wBACxB,GAAG,CAAC,GAAG,CAAC,GAAG,WAAW,CAAC;qBACxB;iBACF;qBAAM,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE;oBACpC,MAAM,IAAI,CAAC,wBAAwB,CAAC,KAAK,CAAC,CAAC;iBAC5C;aACF;SACF;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,gBAAgB;QACpB,MAAM,OAAO,GAAG,IAAI,CAAC,aAAa,CAAC,WAAW,EAAE,CAAC;QACjD,MAAM,OAAO,GAA2B,EAAE,CAAC;QAE3C,KAAK,MAAM,UAAU,IAAI,OAAO,EAAE;YAChC,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;YAClE,IAAI,KAAK,KAAK,IAAI,EAAE;gBAClB,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;aAClC;SACF;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;CACF"}

package/package.json

@@ -0,0 +1,52 @@
+{
+  "name": "@autonomaai/security-utils",
+  "version": "1.0.0",
+  "description": "Security utilities for credential management and encryption",
+  "main": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "scripts": {
+    "build": "tsc",
+    "dev": "tsc --watch",
+    "test": "jest",
+    "clean": "rm -rf dist",
+    "lint": "eslint src/**/*.ts",
+    "format": "prettier --write src/**/*.ts"
+  },
+  "dependencies": {
+    "dotenv": "^16.0.3",
+    "jsonwebtoken": "^9.0.2",
+    "bcrypt": "^5.1.1"
+  },
+  "devDependencies": {
+    "@types/node": "^18.0.0",
+    "@types/jsonwebtoken": "^9.0.3",
+    "@types/bcrypt": "^5.0.0",
+    "typescript": "^4.9.5",
+    "eslint": "^8.57.1",
+    "prettier": "^3.0.0",
+    "jest": "^29.0.0",
+    "@types/jest": "^29.0.0"
+  },
+  "keywords": [
+    "security",
+    "encryption",
+    "credentials",
+    "environment",
+    "authentication",
+    "authorization",
+    "jwt"
+  ],
+  "author": "autonoma Team",
+  "license": "MIT",
+  "files": [
+    "dist/**/*",
+    "README.md"
+  ],
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/Stack3Labs/autonoma-typescript-packages"
+  },
+  "publishConfig": {
+    "access": "public"
+  }
+}