@axiom-lattice/pg-stores 3.3.1 → 3.3.3

package/dist/index.mjs

@@ -1250,6 +1250,7 @@ var PostgreSQLDatabaseConfigStore = class {
 
 // src/stores/PostgreSQLConnectionStore.ts
 import { v4 as uuid } from "uuid";
+import { encryptConfigFields, decryptConfigFields } from "@axiom-lattice/core";
 var TABLE = "lattice_connection_configs";
 var PostgreSQLConnectionStore = class {
   constructor(db) {
@@ -1280,9 +1281,10 @@ var PostgreSQLConnectionStore = class {
   async create(entry) {
     const id = uuid();
     const now = (/* @__PURE__ */ new Date()).toISOString();
+    const secretFields = entry.secretFields?.length ? entry.secretFields : void 0;
     await this.db.query(
-      `INSERT INTO ${TABLE} (id, tenant_id, type, key, name, description, config, status, created_at, updated_at)
-       VALUES ($1, $2, $3, $4, $5, $6, $7, 'active', $8::timestamp, $9::timestamp)`,
+      `INSERT INTO ${TABLE} (id, tenant_id, type, key, name, description, config, secret_fields, status, created_at, updated_at)
+       VALUES ($1, $2, $3, $4, $5, $6, $7, $8::jsonb, 'active', $9::timestamp, $10::timestamp)`,
       [
         id,
         entry.tenantId,
@@ -1290,12 +1292,13 @@ var PostgreSQLConnectionStore = class {
         entry.key,
         entry.name,
         entry.description || null,
-        JSON.stringify(entry.config),
+        JSON.stringify(encryptConfigFields(entry.config, secretFields)),
+        secretFields ? JSON.stringify(secretFields) : null,
         now,
         now
       ]
     );
-    return { id, ...entry, createdAt: now, updatedAt: now };
+    return { id, ...entry, secretFields, createdAt: now, updatedAt: now };
   }
   async update(tenantId, type, key, updates) {
     const existing = await this.getByKey(tenantId, type, key);
@@ -1312,8 +1315,11 @@ var PostgreSQLConnectionStore = class {
       values.push(updates.description || null);
     }
     if (updates.config !== void 0) {
+      const secretFields = updates.secretFields?.length ? updates.secretFields : existing.secretFields?.length ? existing.secretFields : void 0;
       setClauses.push(`config = $${paramIndex++}`);
-      values.push(JSON.stringify(updates.config));
+      values.push(JSON.stringify(encryptConfigFields(updates.config, secretFields)));
+      setClauses.push(`secret_fields = $${paramIndex++}::jsonb`);
+      values.push(secretFields ? JSON.stringify(secretFields) : null);
     }
     if (setClauses.length === 0) return existing;
     setClauses.push(`updated_at = $${paramIndex++}::timestamp`);
@@ -1336,6 +1342,9 @@ var PostgreSQLConnectionStore = class {
     return (result.rowCount ?? 0) > 0;
   }
   mapRow(row) {
+    const parsedSecretFields = typeof row.secret_fields === "string" ? JSON.parse(row.secret_fields) : row.secret_fields;
+    const secretFields = Array.isArray(parsedSecretFields) && parsedSecretFields.length > 0 ? parsedSecretFields.filter((field) => typeof field === "string") : void 0;
+    const storedConfig = typeof row.config === "string" ? JSON.parse(row.config) : row.config;
     return {
       id: row.id,
       tenantId: row.tenant_id,
@@ -1343,7 +1352,8 @@ var PostgreSQLConnectionStore = class {
       key: row.key,
       name: row.name,
       description: row.description || void 0,
-      config: typeof row.config === "string" ? JSON.parse(row.config) : row.config,
+      config: decryptConfigFields(storedConfig, secretFields),
+      secretFields,
       createdAt: row.created_at instanceof Date ? row.created_at.toISOString() : String(row.created_at),
       updatedAt: row.updated_at instanceof Date ? row.updated_at.toISOString() : String(row.updated_at)
     };
@@ -9815,6 +9825,22 @@ var createConnectionConfigsTable = {
     await client.query("DROP TABLE IF EXISTS lattice_connection_configs");
   }
 };
+var addConnectionSecretFields = {
+  version: 188,
+  name: "add_connection_secret_fields",
+  up: async (client) => {
+    await client.query(`
+      ALTER TABLE lattice_connection_configs
+        ADD COLUMN IF NOT EXISTS secret_fields JSONB
+    `);
+  },
+  down: async (client) => {
+    await client.query(`
+      ALTER TABLE lattice_connection_configs
+        DROP COLUMN IF EXISTS secret_fields
+    `);
+  }
+};
 
 // src/migrations/add_share_open_grants.ts
 var addShareOpenGrants = {
@@ -11980,6 +12006,7 @@ async function createPgStoreConfig(connectionString) {
   mm.register(addModelProviderModelStale);
   mm.register(createDistributedLeases);
   mm.register(createOutboxTable);
+  mm.register(addConnectionSecretFields);
   await mm.migrate();
   const checkpoint = PostgresSaver.fromConnString(connectionString);
   checkpoint.setup().catch((err) => {