@axiom-lattice/local-stores 3.2.1 → 3.2.3

package/dist/index.mjs

@@ -1993,6 +1993,7 @@ function encryptPasswordInConfig(config) {
 
 // src/stores/LocalConnectionStore.ts
 import { v4 as uuid } from "uuid";
+import { encryptConfigFields, decryptConfigFields } from "@axiom-lattice/core";
 var DDL9 = `
 CREATE TABLE IF NOT EXISTS connection_configs (
   id TEXT NOT NULL,
@@ -2002,6 +2003,7 @@ CREATE TABLE IF NOT EXISTS connection_configs (
   name TEXT NOT NULL,
   description TEXT,
   config TEXT NOT NULL,
+  secret_fields TEXT,
   created_at TEXT NOT NULL,
   updated_at TEXT NOT NULL,
   PRIMARY KEY (tenant_id, id),
@@ -2009,10 +2011,28 @@ CREATE TABLE IF NOT EXISTS connection_configs (
 );
 CREATE INDEX IF NOT EXISTS idx_conn_type ON connection_configs(tenant_id, type);
 `;
+function parseSecretFields(raw) {
+  if (!raw) return void 0;
+  try {
+    const parsed = JSON.parse(raw);
+    if (Array.isArray(parsed) && parsed.every((v) => typeof v === "string") && parsed.length > 0) {
+      return parsed;
+    }
+  } catch {
+  }
+  return void 0;
+}
 var LocalConnectionStore = class {
   constructor(db) {
     this.db = db;
     ensureTable(db, DDL9);
+    this.ensureColumn("connection_configs", "secret_fields", "secret_fields TEXT");
+  }
+  ensureColumn(table, column, ddl2) {
+    const cols = this.db.prepare(`PRAGMA table_info(${table})`).all();
+    if (!cols.some((c) => c.name === column)) {
+      this.db.exec(`ALTER TABLE ${table} ADD COLUMN ${ddl2}`);
+    }
   }
   async listByTenant(tenantId) {
     const rows2 = this.db.prepare(
@@ -2035,11 +2055,23 @@ var LocalConnectionStore = class {
   async create(entry) {
     const id = uuid();
     const now = nowISO();
+    const secretFields = entry.secretFields?.length ? entry.secretFields : void 0;
     this.db.prepare(
-      `INSERT INTO connection_configs (id, tenant_id, type, key, name, description, config, created_at, updated_at)
-       VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?)`
-    ).run(id, entry.tenantId, entry.type, entry.key, entry.name, entry.description || null, JSON.stringify(entry.config), now, now);
-    return { id, ...entry, createdAt: now, updatedAt: now };
+      `INSERT INTO connection_configs (id, tenant_id, type, key, name, description, config, secret_fields, created_at, updated_at)
+       VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`
+    ).run(
+      id,
+      entry.tenantId,
+      entry.type,
+      entry.key,
+      entry.name,
+      entry.description || null,
+      JSON.stringify(encryptConfigFields(entry.config, secretFields)),
+      secretFields ? JSON.stringify(secretFields) : null,
+      now,
+      now
+    );
+    return { id, ...entry, secretFields, createdAt: now, updatedAt: now };
   }
   async update(tenantId, type, key, updates) {
     const existing = await this.getByKey(tenantId, type, key);
@@ -2055,8 +2087,11 @@ var LocalConnectionStore = class {
       values.push(updates.description || null);
     }
     if (updates.config !== void 0) {
+      const secretFields = updates.secretFields?.length ? updates.secretFields : existing.secretFields?.length ? existing.secretFields : void 0;
       setClauses.push("config = ?");
-      values.push(JSON.stringify(updates.config));
+      values.push(JSON.stringify(encryptConfigFields(updates.config, secretFields)));
+      setClauses.push("secret_fields = ?");
+      values.push(secretFields ? JSON.stringify(secretFields) : null);
     }
     if (setClauses.length === 0) return existing;
     const now = nowISO();
@@ -2075,6 +2110,8 @@ var LocalConnectionStore = class {
     return result.changes > 0;
   }
   mapRow(row) {
+    const secretFields = parseSecretFields(row.secret_fields);
+    const storedConfig = JSON.parse(row.config);
     return {
       id: row.id,
       tenantId: row.tenant_id,
@@ -2082,7 +2119,8 @@ var LocalConnectionStore = class {
       key: row.key,
       name: row.name,
       description: row.description || void 0,
-      config: JSON.parse(row.config),
+      config: decryptConfigFields(storedConfig, secretFields),
+      secretFields,
       createdAt: row.created_at,
       updatedAt: row.updated_at
     };