@breadstone-infrastructure/nx-tasks 0.0.230 → 0.0.232

package/executors/secrets-config-sync/providers/secrets-provider.factory.d.ts

@@ -0,0 +1,17 @@
+import type { ISecretsProvider } from './secrets-provider.interface';
+/**
+ * The supported secrets provider types.
+ *
+ * @public
+ */
+export type SecretsProviderType = 'doppler' | 'azure-keyvault';
+/**
+ * Creates an {@link ISecretsProvider} instance for the given provider type.
+ *
+ * @param type - The provider type to instantiate.
+ * @returns The corresponding secrets provider.
+ *
+ * @public
+ */
+export declare function createSecretsProvider(type: SecretsProviderType): ISecretsProvider;
+//# sourceMappingURL=secrets-provider.factory.d.ts.map

package/executors/secrets-config-sync/providers/secrets-provider.factory.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"secrets-provider.factory.d.ts","sourceRoot":"","sources":["../../../../src/executors/secrets-config-sync/providers/secrets-provider.factory.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AAIrE;;;;GAIG;AACH,MAAM,MAAM,mBAAmB,GAAG,SAAS,GAAG,gBAAgB,CAAC;AAE/D;;;;;;;GAOG;AACH,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,mBAAmB,GAAG,gBAAgB,CASjF"}

package/executors/secrets-config-sync/providers/secrets-provider.factory.js

@@ -0,0 +1,25 @@
+"use strict";
+// #region Imports
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createSecretsProvider = createSecretsProvider;
+const azure_keyvault_provider_1 = require("./azure-keyvault.provider");
+const doppler_provider_1 = require("./doppler.provider");
+/**
+ * Creates an {@link ISecretsProvider} instance for the given provider type.
+ *
+ * @param type - The provider type to instantiate.
+ * @returns The corresponding secrets provider.
+ *
+ * @public
+ */
+function createSecretsProvider(type) {
+    switch (type) {
+        case 'doppler':
+            return new doppler_provider_1.DopplerSecretsProvider();
+        case 'azure-keyvault':
+            return new azure_keyvault_provider_1.AzureKeyVaultSecretsProvider();
+        default:
+            throw new Error(`Unknown secrets provider type: "${type}". Supported: doppler, azure-keyvault.`);
+    }
+}
+//# sourceMappingURL=secrets-provider.factory.js.map

package/executors/secrets-config-sync/providers/secrets-provider.factory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secrets-provider.factory.js","sourceRoot":"","sources":["../../../../src/executors/secrets-config-sync/providers/secrets-provider.factory.ts"],"names":[],"mappings":";AAAA,kBAAkB;;AAuBlB,sDASC;AA9BD,uEAAyE;AACzE,yDAA4D;AAY5D;;;;;;;GAOG;AACH,SAAgB,qBAAqB,CAAC,IAAyB;IAC3D,QAAQ,IAAI,EAAE,CAAC;QACX,KAAK,SAAS;YACV,OAAO,IAAI,yCAAsB,EAAE,CAAC;QACxC,KAAK,gBAAgB;YACjB,OAAO,IAAI,sDAA4B,EAAE,CAAC;QAC9C;YACI,MAAM,IAAI,KAAK,CAAC,mCAAmC,IAAI,wCAAwC,CAAC,CAAC;IACzG,CAAC;AACL,CAAC"}

package/executors/secrets-config-sync/providers/secrets-provider.interface.d.ts

@@ -0,0 +1,28 @@
+import type { ILogger } from '@breadstone-infrastructure/utilities';
+/**
+ * Abstraction for a secrets provider that can authenticate and fetch secrets.
+ *
+ * @public
+ */
+export interface ISecretsProvider {
+    /**
+     * Authenticates with the provider and returns an access token.
+     *
+     * @param apiKey - An optional API key or access token. If provided, it is used directly.
+     * @param interactive - Whether to prompt the user for credentials if none are provided.
+     * @returns The resolved access token.
+     */
+    authenticate(apiKey?: string, interactive?: boolean): Promise<string>;
+    /**
+     * Fetches all secrets from the provider.
+     *
+     * @param token - The access token obtained from {@link authenticate}.
+     * @param project - The project identifier (Doppler project name, or ignored for Azure Key Vault).
+     * @param config - The config identifier (Doppler config name, or ignored for Azure Key Vault).
+     * @param logger - Logger instance for status output.
+     * @param vaultUrl - The Azure Key Vault URL (only used by the azure-keyvault provider).
+     * @returns A flat record of secret key-value pairs.
+     */
+    fetchSecrets(token: string, project: string, config: string, logger: ILogger, vaultUrl?: string): Promise<Record<string, string>>;
+}
+//# sourceMappingURL=secrets-provider.interface.d.ts.map

package/executors/secrets-config-sync/providers/secrets-provider.interface.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"secrets-provider.interface.d.ts","sourceRoot":"","sources":["../../../../src/executors/secrets-config-sync/providers/secrets-provider.interface.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,sCAAsC,CAAC;AAIpE;;;;GAIG;AACH,MAAM,WAAW,gBAAgB;IAE7B;;;;;;OAMG;IACH,YAAY,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAEtE;;;;;;;;;OASG;IACH,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;CACrI"}

package/executors/secrets-config-sync/providers/secrets-provider.interface.js

@@ -0,0 +1,4 @@
+"use strict";
+// #region Imports
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=secrets-provider.interface.js.map

package/executors/secrets-config-sync/providers/secrets-provider.interface.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secrets-provider.interface.js","sourceRoot":"","sources":["../../../../src/executors/secrets-config-sync/providers/secrets-provider.interface.ts"],"names":[],"mappings":";AAAA,kBAAkB"}

package/executors/secrets-config-sync/schema.json

@@ -0,0 +1,44 @@
+{
+  "$schema": "http://json-schema.org/draft-07/schema",
+  "cli": "nx",
+  "title": "Secrets Config Sync",
+  "description": "Fetches secrets from a configurable provider (Doppler, Azure Key Vault) and writes them to local .env files.",
+  "type": "object",
+  "properties": {
+    "provider": {
+      "type": "string",
+      "description": "The secrets provider to use.",
+      "enum": [
+        "doppler",
+        "azure-keyvault"
+      ],
+      "default": "doppler"
+    },
+    "project": {
+      "type": "string",
+      "description": "The project identifier (e.g. Doppler project name)."
+    },
+    "config": {
+      "type": "string",
+      "description": "The configuration identifier (e.g. Doppler config name: dev, prev, prod)."
+    },
+    "envFile": {
+      "type": "string",
+      "description": "The relative path to the .env file to write secrets to."
+    },
+    "apiKey": {
+      "type": "string",
+      "description": "The API key or access token for the secrets provider. If omitted, the user is prompted interactively."
+    },
+    "vaultUrl": {
+      "type": "string",
+      "description": "The Azure Key Vault URL (e.g. https://my-vault.vault.azure.net). Required when provider is azure-keyvault."
+    }
+  },
+  "required": [
+    "project",
+    "config",
+    "envFile"
+  ],
+  "additionalProperties": false
+}

package/executors/secrets-vercel-sync/executor.d.ts

@@ -0,0 +1,11 @@
+import type { ExecutorContext } from '@nx/devkit';
+import type { SecretsVercelSyncExecutorOptions } from './executor.options';
+/**
+ * Nx executor that synchronizes secrets from a configurable provider to Vercel.
+ *
+ * @public
+ */
+export default function runExecutor(options: SecretsVercelSyncExecutorOptions, context: ExecutorContext): Promise<{
+    success: boolean;
+}>;
+//# sourceMappingURL=executor.d.ts.map

package/executors/secrets-vercel-sync/executor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"executor.d.ts","sourceRoot":"","sources":["../../../src/executors/secrets-vercel-sync/executor.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAElD,OAAO,KAAK,EAAE,gCAAgC,EAAE,MAAM,oBAAoB,CAAC;AAI3E;;;;GAIG;AACH,wBAA8B,WAAW,CAAC,OAAO,EAAE,gCAAgC,EAAE,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC;IAAE,OAAO,EAAE,OAAO,CAAA;CAAE,CAAC,CA8B5I"}

package/executors/secrets-vercel-sync/executor.js

@@ -0,0 +1,74 @@
+"use strict";
+// #region Imports
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.default = runExecutor;
+const getProjectRoot_1 = require("../../utils/getProjectRoot");
+// #endregion
+/**
+ * Nx executor that synchronizes secrets from a configurable provider to Vercel.
+ *
+ * @public
+ */
+async function runExecutor(options, context) {
+    try {
+        const task = (await Promise.resolve().then(() => __importStar(require('./executor.task')))).SecretsVercelSyncTask;
+        await task.run({
+            cwd: (0, getProjectRoot_1.getProjectRoot)(context),
+            provider: options.provider,
+            secretsProject: options.secretsProject,
+            secretsConfig: options.secretsConfig,
+            vaultUrl: options.vaultUrl,
+            apiKey: options.apiKey,
+            vercelTeam: options.vercelTeam,
+            vercelProject: options.vercelProject,
+            vercelEnvironment: options.vercelEnvironment,
+            vercelVariableType: options.vercelVariableType,
+            conflictStrategy: options.conflictStrategy,
+            dryRun: options.dryRun,
+            deleteMissing: options.deleteMissing,
+            includeKeys: options.includeKeys,
+            excludeKeys: options.excludeKeys,
+            redeploy: options.redeploy,
+            interactive: options.interactive
+        });
+        return { success: true };
+    }
+    catch (error) {
+        console.error(error);
+        return { success: false };
+    }
+}
+//# sourceMappingURL=executor.js.map

package/executors/secrets-vercel-sync/executor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"executor.js","sourceRoot":"","sources":["../../../src/executors/secrets-vercel-sync/executor.ts"],"names":[],"mappings":";AAAA,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAalB,8BA8BC;AAxCD,+DAA4D;AAG5D,aAAa;AAEb;;;;GAIG;AACY,KAAK,UAAU,WAAW,CAAC,OAAyC,EAAE,OAAwB;IACzG,IAAI,CAAC;QACD,MAAM,IAAI,GAAG,CAAC,wDAAa,iBAAiB,GAAC,CAAC,CAAC,qBAAqB,CAAC;QAErE,MAAM,IAAI,CAAC,GAAG,CAAC;YACX,GAAG,EAAE,IAAA,+BAAc,EAAC,OAAO,CAAC;YAC5B,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,cAAc,EAAE,OAAO,CAAC,cAAc;YACtC,aAAa,EAAE,OAAO,CAAC,aAAa;YACpC,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,aAAa,EAAE,OAAO,CAAC,aAAa;YACpC,iBAAiB,EAAE,OAAO,CAAC,iBAAiB;YAC5C,kBAAkB,EAAE,OAAO,CAAC,kBAAkB;YAC9C,gBAAgB,EAAE,OAAO,CAAC,gBAAgB;YAC1C,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,aAAa,EAAE,OAAO,CAAC,aAAa;YACpC,WAAW,EAAE,OAAO,CAAC,WAAW;YAChC,WAAW,EAAE,OAAO,CAAC,WAAW;YAChC,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,WAAW,EAAE,OAAO,CAAC,WAAW;SACnC,CAAC,CAAC;QAEH,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC7B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAErB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC9B,CAAC;AACL,CAAC"}

package/executors/secrets-vercel-sync/executor.options.d.ts

@@ -0,0 +1,8 @@
+import type { SecretsVercelSyncTask } from './executor.task';
+/**
+ * Executor options for the secrets-vercel-sync executor.
+ *
+ * @public
+ */
+export type SecretsVercelSyncExecutorOptions = Omit<SecretsVercelSyncTask.ISecretsVercelSyncTaskOptions, 'cwd'>;
+//# sourceMappingURL=executor.options.d.ts.map

package/executors/secrets-vercel-sync/executor.options.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"executor.options.d.ts","sourceRoot":"","sources":["../../../src/executors/secrets-vercel-sync/executor.options.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AAI7D;;;;GAIG;AACH,MAAM,MAAM,gCAAgC,GAAG,IAAI,CAAC,qBAAqB,CAAC,6BAA6B,EAAE,KAAK,CAAC,CAAC"}

package/executors/secrets-vercel-sync/executor.options.js

@@ -0,0 +1,4 @@
+"use strict";
+// #region Imports
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=executor.options.js.map

package/executors/secrets-vercel-sync/executor.options.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"executor.options.js","sourceRoot":"","sources":["../../../src/executors/secrets-vercel-sync/executor.options.ts"],"names":[],"mappings":";AAAA,kBAAkB"}

package/executors/secrets-vercel-sync/executor.task.d.ts

@@ -0,0 +1,34 @@
+import type { SecretsProviderType } from './providers/secrets-provider.factory';
+export declare namespace SecretsVercelSyncTask {
+    const VALID_VERCEL_ENVIRONMENTS: readonly ["development", "preview", "production"];
+    const VALID_VERCEL_VARIABLE_TYPES: readonly ["encrypted", "sensitive"];
+    const VALID_CONFLICT_STRATEGIES: readonly ["none", "prefer-source", "prefer-vercel"];
+    type VercelEnvironment = typeof VALID_VERCEL_ENVIRONMENTS[number];
+    type VercelVariableType = typeof VALID_VERCEL_VARIABLE_TYPES[number];
+    type ConflictStrategy = typeof VALID_CONFLICT_STRATEGIES[number];
+    export interface ISecretsVercelSyncTaskOptions {
+        cwd: string;
+        provider: SecretsProviderType;
+        secretsProject: string;
+        secretsConfig: string;
+        vaultUrl?: string;
+        apiKey?: string;
+        vercelTeam: string;
+        vercelProject: string;
+        vercelEnvironment: VercelEnvironment;
+        vercelVariableType?: VercelVariableType;
+        conflictStrategy?: ConflictStrategy;
+        dryRun?: boolean;
+        deleteMissing?: boolean;
+        includeKeys?: Array<string>;
+        excludeKeys?: Array<string>;
+        redeploy?: boolean;
+        interactive?: boolean;
+    }
+    /**
+     * Executes the Secrets Provider -> Vercel sync.
+     */
+    export function run(options: ISecretsVercelSyncTaskOptions): Promise<void>;
+    export {};
+}
+//# sourceMappingURL=executor.task.d.ts.map

package/executors/secrets-vercel-sync/executor.task.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"executor.task.d.ts","sourceRoot":"","sources":["../../../src/executors/secrets-vercel-sync/executor.task.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,sCAAsC,CAAC;AAKhF,yBAAiB,qBAAqB,CAAC;IAMnC,MAAM,yBAAyB,mDAAoD,CAAC;IAEpF,MAAM,2BAA2B,qCAAsC,CAAC;IAExE,MAAM,yBAAyB,qDAAsD,CAAC;IAgBtF,KAAK,iBAAiB,GAAG,OAAO,yBAAyB,CAAC,MAAM,CAAC,CAAC;IAElE,KAAK,kBAAkB,GAAG,OAAO,2BAA2B,CAAC,MAAM,CAAC,CAAC;IAErE,KAAK,gBAAgB,GAAG,OAAO,yBAAyB,CAAC,MAAM,CAAC,CAAC;IAQjE,MAAM,WAAW,6BAA6B;QAC1C,GAAG,EAAE,MAAM,CAAC;QACZ,QAAQ,EAAE,mBAAmB,CAAC;QAC9B,cAAc,EAAE,MAAM,CAAC;QACvB,aAAa,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,UAAU,EAAE,MAAM,CAAC;QACnB,aAAa,EAAE,MAAM,CAAC;QACtB,iBAAiB,EAAE,iBAAiB,CAAC;QACrC,kBAAkB,CAAC,EAAE,kBAAkB,CAAC;QACxC,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;QACpC,MAAM,CAAC,EAAE,OAAO,CAAC;QACjB,aAAa,CAAC,EAAE,OAAO,CAAC;QACxB,WAAW,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;QAC5B,WAAW,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;QAC5B,QAAQ,CAAC,EAAE,OAAO,CAAC;QACnB,WAAW,CAAC,EAAE,OAAO,CAAC;KACzB;IAqhBD;;OAEG;IACH,gBAAsB,GAAG,CAAC,OAAO,EAAE,6BAA6B,GAAG,OAAO,CAAC,IAAI,CAAC,CA2F/E;;CAIJ"}