@bubltec/mycota-config 0.1.0-dev.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Genome
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/dist/cli.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+export {};
+//# sourceMappingURL=cli.d.ts.map

package/dist/cli.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":""}

package/dist/cli.js

@@ -0,0 +1,76 @@
+#!/usr/bin/env node
+import { loadSsmConfig, pushSsmConfig, cloneSsmNamespace, deleteSsmNamespace, } from './ssm-config.js';
+const USAGE = `Usage:
+  mycota-config load   --namespace <ns> --env <env> [--region <region>]
+  mycota-config push   --namespace <ns> --env <env> --key <key> --value <value>
+  mycota-config clone  --namespace <ns> --source <env> --target <env>
+  mycota-config delete --namespace <ns> --env <env>
+
+'load' prints dotenv-format KEY=VALUE lines to stdout — pipe/redirect it
+(e.g. \`mycota-config load --namespace myapp --env dev > .env\`) rather than
+reading it off the terminal, since it contains real secret values.`;
+function parseArgs(argv) {
+    const args = {};
+    for (let i = 0; i < argv.length; i += 2) {
+        const key = argv[i]?.replace(/^--/, '');
+        const value = argv[i + 1];
+        if (key && value !== undefined)
+            args[key] = value;
+    }
+    return args;
+}
+function requireArg(args, name) {
+    const value = args[name];
+    if (!value) {
+        console.error(`Missing required --${name}\n\n${USAGE}`);
+        process.exit(1);
+    }
+    return value;
+}
+async function main() {
+    const [command, ...rest] = process.argv.slice(2);
+    const args = parseArgs(rest);
+    switch (command) {
+        case 'load': {
+            const config = await loadSsmConfig({
+                namespace: requireArg(args, 'namespace'),
+                env: requireArg(args, 'env'),
+                region: args.region,
+            });
+            for (const [key, value] of Object.entries(config)) {
+                console.log(`${key.toUpperCase().replace(/-/g, '_')}=${value}`);
+            }
+            break;
+        }
+        case 'push': {
+            const written = await pushSsmConfig({ namespace: requireArg(args, 'namespace'), env: requireArg(args, 'env') }, { [requireArg(args, 'key')]: requireArg(args, 'value') });
+            console.error(written.length ? `Wrote: ${written.join(', ')}` : 'Nothing written (empty value).');
+            break;
+        }
+        case 'clone': {
+            const written = await cloneSsmNamespace({
+                namespace: requireArg(args, 'namespace'),
+                sourceEnv: requireArg(args, 'source'),
+                targetEnv: requireArg(args, 'target'),
+            });
+            console.error(`Cloned ${written.length} parameter(s):\n${written.join('\n')}`);
+            break;
+        }
+        case 'delete': {
+            const deleted = await deleteSsmNamespace({
+                namespace: requireArg(args, 'namespace'),
+                env: requireArg(args, 'env'),
+            });
+            console.error(`Deleted ${deleted.length} parameter(s):\n${deleted.join('\n')}`);
+            break;
+        }
+        default:
+            console.error(USAGE);
+            process.exit(1);
+    }
+}
+main().catch((err) => {
+    console.error(err);
+    process.exitCode = 1;
+});
+//# sourceMappingURL=cli.js.map

package/dist/cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AACA,OAAO,EACL,aAAa,EACb,aAAa,EACb,iBAAiB,EACjB,kBAAkB,GACnB,MAAM,iBAAiB,CAAC;AAEzB,MAAM,KAAK,GAAG;;;;;;;;mEAQqD,CAAC;AAEpE,SAAS,SAAS,CAAC,IAAc;IAC/B,MAAM,IAAI,GAA2B,EAAE,CAAC;IACxC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QACxC,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACxC,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QAC1B,IAAI,GAAG,IAAI,KAAK,KAAK,SAAS;YAAE,IAAI,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IACpD,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,UAAU,CAAC,IAA4B,EAAE,IAAY;IAC5D,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC;IACzB,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,CAAC,KAAK,CAAC,sBAAsB,IAAI,OAAO,KAAK,EAAE,CAAC,CAAC;QACxD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,KAAK,UAAU,IAAI;IACjB,MAAM,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACjD,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAE7B,QAAQ,OAAO,EAAE,CAAC;QAChB,KAAK,MAAM,CAAC,CAAC,CAAC;YACZ,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC;gBACjC,SAAS,EAAE,UAAU,CAAC,IAAI,EAAE,WAAW,CAAC;gBACxC,GAAG,EAAE,UAAU,CAAC,IAAI,EAAE,KAAK,CAAC;gBAC5B,MAAM,EAAE,IAAI,CAAC,MAAM;aACpB,CAAC,CAAC;YACH,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;gBAClD,OAAO,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC;YAClE,CAAC;YACD,MAAM;QACR,CAAC;QACD,KAAK,MAAM,CAAC,CAAC,CAAC;YACZ,MAAM,OAAO,GAAG,MAAM,aAAa,CACjC,EAAE,SAAS,EAAE,UAAU,CAAC,IAAI,EAAE,WAAW,CAAC,EAAE,GAAG,EAAE,UAAU,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAC1E,EAAE,CAAC,UAAU,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,CACzD,CAAC;YACF,OAAO,CAAC,KAAK,CACX,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,gCAAgC,CACnF,CAAC;YACF,MAAM;QACR,CAAC;QACD,KAAK,OAAO,CAAC,CAAC,CAAC;YACb,MAAM,OAAO,GAAG,MAAM,iBAAiB,CAAC;gBACtC,SAAS,EAAE,UAAU,CAAC,IAAI,EAAE,WAAW,CAAC;gBACxC,SAAS,EAAE,UAAU,CAAC,IAAI,EAAE,QAAQ,CAAC;gBACrC,SAAS,EAAE,UAAU,CAAC,IAAI,EAAE,QAAQ,CAAC;aACtC,CAAC,CAAC;YACH,OAAO,CAAC,KAAK,CAAC,UAAU,OAAO,CAAC,MAAM,mBAAmB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAC/E,MAAM;QACR,CAAC;QACD,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,MAAM,OAAO,GAAG,MAAM,kBAAkB,CAAC;gBACvC,SAAS,EAAE,UAAU,CAAC,IAAI,EAAE,WAAW,CAAC;gBACxC,GAAG,EAAE,UAAU,CAAC,IAAI,EAAE,KAAK,CAAC;aAC7B,CAAC,CAAC;YACH,OAAO,CAAC,KAAK,CAAC,WAAW,OAAO,CAAC,MAAM,mBAAmB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAChF,MAAM;QACR,CAAC;QACD;YACE,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YACrB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACpB,CAAC;AACH,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;IACnB,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACnB,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;AACvB,CAAC,CAAC,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,2 @@
+export { loadSsmConfig, pushSsmConfig, cloneSsmNamespace, deleteSsmNamespace, type SsmConfigOptions, type CloneSsmNamespaceOptions, type DeleteSsmNamespaceOptions, } from './ssm-config.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,aAAa,EACb,aAAa,EACb,iBAAiB,EACjB,kBAAkB,EAClB,KAAK,gBAAgB,EACrB,KAAK,wBAAwB,EAC7B,KAAK,yBAAyB,GAC/B,MAAM,iBAAiB,CAAC"}

package/dist/index.js

@@ -0,0 +1,2 @@
+export { loadSsmConfig, pushSsmConfig, cloneSsmNamespace, deleteSsmNamespace, } from './ssm-config.js';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,aAAa,EACb,aAAa,EACb,iBAAiB,EACjB,kBAAkB,GAInB,MAAM,iBAAiB,CAAC"}

package/dist/ssm-config.d.ts

@@ -0,0 +1,53 @@
+export interface SsmConfigOptions {
+    /** Top-level SSM prefix, e.g. 'btfp'. */
+    namespace: string;
+    /** Any string — 'dev', 'prod', 'pr-123', a branch name. Not a fixed enum, so ephemeral stacks need no code changes. */
+    env: string;
+    region?: string;
+    /** Also merge in /{namespace}/shared/*, env-specific wins on key collision. Default true. */
+    includeShared?: boolean;
+}
+/**
+ * Loads config for one namespace/env, merging /{namespace}/shared/* first
+ * and then /{namespace}/{env}/* on top (env wins on collision). Returns {}
+ * for an environment that hasn't been provisioned yet — never throws for
+ * that case — so a brand-new ephemeral stack still boots (degraded/
+ * placeholder) instead of crashing.
+ */
+export declare function loadSsmConfig(options: SsmConfigOptions): Promise<Record<string, string>>;
+/**
+ * Writes each non-empty value to /{namespace}/{env}/{key} as a SecureString.
+ * Empty/undefined values are skipped (mirrors "don't push a placeholder").
+ * Returns the parameter names actually written.
+ */
+export declare function pushSsmConfig(options: SsmConfigOptions, values: Record<string, string | undefined>): Promise<string[]>;
+export interface CloneSsmNamespaceOptions {
+    namespace: string;
+    sourceEnv: string;
+    targetEnv: string;
+    region?: string;
+}
+/**
+ * The ephemeral-stack bootstrap primitive: copies every parameter from
+ * /{namespace}/{sourceEnv}/* to /{namespace}/{targetEnv}/* — e.g. spin up
+ * "pr-123" pre-populated from "dev"'s values. Idempotent (Overwrite: true).
+ */
+export declare function cloneSsmNamespace(options: CloneSsmNamespaceOptions): Promise<string[]>;
+export interface DeleteSsmNamespaceOptions {
+    namespace: string;
+    env: string;
+    region?: string;
+}
+/**
+ * The ephemeral-stack teardown primitive: deletes every parameter under
+ * /{namespace}/{env}/* — call when a PR closes / a preview stack is
+ * destroyed, so its secrets don't linger indefinitely.
+ *
+ * Confirmed empirically: SSM's GetParametersByPath can lag a few seconds
+ * behind a delete — a loadSsmConfig call immediately after this resolves
+ * can still show the just-deleted values before catching up. Don't chain
+ * "delete, then immediately verify empty" in a script without a short wait;
+ * a teardown pipeline that deletes and moves on (the normal case) is fine.
+ */
+export declare function deleteSsmNamespace(options: DeleteSsmNamespaceOptions): Promise<string[]>;
+//# sourceMappingURL=ssm-config.d.ts.map

package/dist/ssm-config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ssm-config.d.ts","sourceRoot":"","sources":["../src/ssm-config.ts"],"names":[],"mappings":"AAOA,MAAM,WAAW,gBAAgB;IAC/B,yCAAyC;IACzC,SAAS,EAAE,MAAM,CAAC;IAClB,uHAAuH;IACvH,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,6FAA6F;IAC7F,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB;AAmDD;;;;;;GAMG;AACH,wBAAsB,aAAa,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAe9F;AAED;;;;GAIG;AACH,wBAAsB,aAAa,CACjC,OAAO,EAAE,gBAAgB,EACzB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,GACzC,OAAO,CAAC,MAAM,EAAE,CAAC,CAanB;AAED,MAAM,WAAW,wBAAwB;IACvC,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;;;GAIG;AACH,wBAAsB,iBAAiB,CAAC,OAAO,EAAE,wBAAwB,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAqB5F;AAED,MAAM,WAAW,yBAAyB;IACxC,SAAS,EAAE,MAAM,CAAC;IAClB,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,kBAAkB,CAAC,OAAO,EAAE,yBAAyB,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAc9F"}

package/dist/ssm-config.js

@@ -0,0 +1,119 @@
+import { GetParametersByPathCommand, PutParameterCommand, DeleteParametersCommand, SSMClient, } from '@aws-sdk/client-ssm';
+/** SSM's DeleteParameters caps at 10 names per call. */
+const DELETE_BATCH_SIZE = 10;
+function resolveRegion(region) {
+    return region ?? process.env.AWS_REGION ?? 'us-east-1';
+}
+function leafName(parameterName) {
+    return parameterName.split('/').pop() ?? parameterName;
+}
+function toLeafMap(params) {
+    return Object.fromEntries(params.map((p) => [leafName(p.name), p.value]));
+}
+/**
+ * Lists every parameter under `path`, decrypted. Returns [] for a path with
+ * no parameters at all — GetParametersByPath never throws for an empty
+ * result, unlike GetParameter for a single missing name — which is exactly
+ * what makes an unprovisioned/ephemeral environment degrade gracefully
+ * instead of failing to boot.
+ */
+async function listParametersUnderPath(client, path) {
+    const results = [];
+    let nextToken;
+    do {
+        const response = await client.send(new GetParametersByPathCommand({
+            Path: path,
+            Recursive: true,
+            WithDecryption: true,
+            NextToken: nextToken,
+        }));
+        for (const param of response.Parameters ?? []) {
+            if (param.Name && param.Value !== undefined) {
+                results.push({ name: param.Name, value: param.Value });
+            }
+        }
+        nextToken = response.NextToken;
+    } while (nextToken);
+    return results;
+}
+/**
+ * Loads config for one namespace/env, merging /{namespace}/shared/* first
+ * and then /{namespace}/{env}/* on top (env wins on collision). Returns {}
+ * for an environment that hasn't been provisioned yet — never throws for
+ * that case — so a brand-new ephemeral stack still boots (degraded/
+ * placeholder) instead of crashing.
+ */
+export async function loadSsmConfig(options) {
+    const client = new SSMClient({ region: resolveRegion(options.region) });
+    const merged = {};
+    if (options.includeShared ?? true) {
+        Object.assign(merged, toLeafMap(await listParametersUnderPath(client, `/${options.namespace}/shared/`)));
+    }
+    Object.assign(merged, toLeafMap(await listParametersUnderPath(client, `/${options.namespace}/${options.env}/`)));
+    return merged;
+}
+/**
+ * Writes each non-empty value to /{namespace}/{env}/{key} as a SecureString.
+ * Empty/undefined values are skipped (mirrors "don't push a placeholder").
+ * Returns the parameter names actually written.
+ */
+export async function pushSsmConfig(options, values) {
+    const client = new SSMClient({ region: resolveRegion(options.region) });
+    const written = [];
+    for (const [key, value] of Object.entries(values)) {
+        if (!value)
+            continue;
+        const name = `/${options.namespace}/${options.env}/${key}`;
+        await client.send(new PutParameterCommand({ Name: name, Value: value, Type: 'SecureString', Overwrite: true }));
+        written.push(name);
+    }
+    return written;
+}
+/**
+ * The ephemeral-stack bootstrap primitive: copies every parameter from
+ * /{namespace}/{sourceEnv}/* to /{namespace}/{targetEnv}/* — e.g. spin up
+ * "pr-123" pre-populated from "dev"'s values. Idempotent (Overwrite: true).
+ */
+export async function cloneSsmNamespace(options) {
+    const client = new SSMClient({ region: resolveRegion(options.region) });
+    const sourceParams = await listParametersUnderPath(client, `/${options.namespace}/${options.sourceEnv}/`);
+    const written = [];
+    for (const param of sourceParams) {
+        const targetName = `/${options.namespace}/${options.targetEnv}/${leafName(param.name)}`;
+        await client.send(new PutParameterCommand({
+            Name: targetName,
+            Value: param.value,
+            Type: 'SecureString',
+            Overwrite: true,
+        }));
+        written.push(targetName);
+    }
+    return written;
+}
+/**
+ * The ephemeral-stack teardown primitive: deletes every parameter under
+ * /{namespace}/{env}/* — call when a PR closes / a preview stack is
+ * destroyed, so its secrets don't linger indefinitely.
+ *
+ * Confirmed empirically: SSM's GetParametersByPath can lag a few seconds
+ * behind a delete — a loadSsmConfig call immediately after this resolves
+ * can still show the just-deleted values before catching up. Don't chain
+ * "delete, then immediately verify empty" in a script without a short wait;
+ * a teardown pipeline that deletes and moves on (the normal case) is fine.
+ */
+export async function deleteSsmNamespace(options) {
+    const client = new SSMClient({ region: resolveRegion(options.region) });
+    const path = `/${options.namespace}/${options.env}/`;
+    const params = await listParametersUnderPath(client, path);
+    if (params.length === 0)
+        return [];
+    const names = params.map((p) => p.name);
+    const deleted = [];
+    for (let i = 0; i < names.length; i += DELETE_BATCH_SIZE) {
+        const batch = names.slice(i, i + DELETE_BATCH_SIZE);
+        await client.send(new DeleteParametersCommand({ Names: batch }));
+        deleted.push(...batch);
+    }
+    return deleted;
+}
+//# sourceMappingURL=ssm-config.js.map

package/dist/ssm-config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ssm-config.js","sourceRoot":"","sources":["../src/ssm-config.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,0BAA0B,EAC1B,mBAAmB,EACnB,uBAAuB,EACvB,SAAS,GACV,MAAM,qBAAqB,CAAC;AAiB7B,wDAAwD;AACxD,MAAM,iBAAiB,GAAG,EAAE,CAAC;AAE7B,SAAS,aAAa,CAAC,MAAe;IACpC,OAAO,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,WAAW,CAAC;AACzD,CAAC;AAED,SAAS,QAAQ,CAAC,aAAqB;IACrC,OAAO,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,IAAI,aAAa,CAAC;AACzD,CAAC;AAED,SAAS,SAAS,CAAC,MAAkB;IACnC,OAAO,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AAC5E,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,uBAAuB,CAAC,MAAiB,EAAE,IAAY;IACpE,MAAM,OAAO,GAAe,EAAE,CAAC;IAC/B,IAAI,SAA6B,CAAC;IAClC,GAAG,CAAC;QACF,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,IAAI,CAChC,IAAI,0BAA0B,CAAC;YAC7B,IAAI,EAAE,IAAI;YACV,SAAS,EAAE,IAAI;YACf,cAAc,EAAE,IAAI;YACpB,SAAS,EAAE,SAAS;SACrB,CAAC,CACH,CAAC;QACF,KAAK,MAAM,KAAK,IAAI,QAAQ,CAAC,UAAU,IAAI,EAAE,EAAE,CAAC;YAC9C,IAAI,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;gBAC5C,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;YACzD,CAAC;QACH,CAAC;QACD,SAAS,GAAG,QAAQ,CAAC,SAAS,CAAC;IACjC,CAAC,QAAQ,SAAS,EAAE;IACpB,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,OAAyB;IAC3D,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC,EAAE,MAAM,EAAE,aAAa,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACxE,MAAM,MAAM,GAA2B,EAAE,CAAC;IAE1C,IAAI,OAAO,CAAC,aAAa,IAAI,IAAI,EAAE,CAAC;QAClC,MAAM,CAAC,MAAM,CACX,MAAM,EACN,SAAS,CAAC,MAAM,uBAAuB,CAAC,MAAM,EAAE,IAAI,OAAO,CAAC,SAAS,UAAU,CAAC,CAAC,CAClF,CAAC;IACJ,CAAC;IACD,MAAM,CAAC,MAAM,CACX,MAAM,EACN,SAAS,CAAC,MAAM,uBAAuB,CAAC,MAAM,EAAE,IAAI,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,GAAG,GAAG,CAAC,CAAC,CAC1F,CAAC;IACF,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,OAAyB,EACzB,MAA0C;IAE1C,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC,EAAE,MAAM,EAAE,aAAa,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACxE,MAAM,OAAO,GAAa,EAAE,CAAC;IAE7B,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAClD,IAAI,CAAC,KAAK;YAAE,SAAS;QACrB,MAAM,IAAI,GAAG,IAAI,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,GAAG,IAAI,GAAG,EAAE,CAAC;QAC3D,MAAM,MAAM,CAAC,IAAI,CACf,IAAI,mBAAmB,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,cAAc,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAC7F,CAAC;QACF,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACrB,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AASD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,OAAiC;IACvE,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC,EAAE,MAAM,EAAE,aAAa,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACxE,MAAM,YAAY,GAAG,MAAM,uBAAuB,CAChD,MAAM,EACN,IAAI,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,SAAS,GAAG,CAC9C,CAAC;IAEF,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,KAAK,MAAM,KAAK,IAAI,YAAY,EAAE,CAAC;QACjC,MAAM,UAAU,GAAG,IAAI,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,SAAS,IAAI,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACxF,MAAM,MAAM,CAAC,IAAI,CACf,IAAI,mBAAmB,CAAC;YACtB,IAAI,EAAE,UAAU;YAChB,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,IAAI,EAAE,cAAc;YACpB,SAAS,EAAE,IAAI;SAChB,CAAC,CACH,CAAC;QACF,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAC3B,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAQD;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,OAAkC;IACzE,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC,EAAE,MAAM,EAAE,aAAa,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACxE,MAAM,IAAI,GAAG,IAAI,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,GAAG,GAAG,CAAC;IACrD,MAAM,MAAM,GAAG,MAAM,uBAAuB,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAC3D,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAEnC,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACxC,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,IAAI,iBAAiB,EAAE,CAAC;QACzD,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,iBAAiB,CAAC,CAAC;QACpD,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,uBAAuB,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;QACjE,OAAO,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,CAAC;IACzB,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/ssm-config.spec.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=ssm-config.spec.d.ts.map

package/dist/ssm-config.spec.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ssm-config.spec.d.ts","sourceRoot":"","sources":["../src/ssm-config.spec.ts"],"names":[],"mappings":""}

package/dist/ssm-config.spec.js

@@ -0,0 +1,109 @@
+import { beforeEach, describe, expect, it } from 'vitest';
+import { mockClient } from 'aws-sdk-client-mock';
+import { SSMClient, GetParametersByPathCommand, PutParameterCommand, DeleteParametersCommand, } from '@aws-sdk/client-ssm';
+import { loadSsmConfig, pushSsmConfig, cloneSsmNamespace, deleteSsmNamespace, } from './ssm-config.js';
+const ssmMock = mockClient(SSMClient);
+beforeEach(() => {
+    ssmMock.reset();
+});
+describe('loadSsmConfig', () => {
+    it('merges shared params first, then env-specific overrides on collision', async () => {
+        ssmMock
+            .on(GetParametersByPathCommand, { Path: '/myapp/shared/', Recursive: true })
+            .resolves({
+            Parameters: [
+                { Name: '/myapp/shared/brave-search-api-key', Value: 'shared-brave-key' },
+                { Name: '/myapp/shared/jwt-secret', Value: 'shared-jwt' },
+            ],
+        })
+            .on(GetParametersByPathCommand, { Path: '/myapp/dev/', Recursive: true })
+            .resolves({
+            Parameters: [{ Name: '/myapp/dev/jwt-secret', Value: 'dev-jwt' }],
+        });
+        const result = await loadSsmConfig({ namespace: 'myapp', env: 'dev' });
+        expect(result).toEqual({
+            'brave-search-api-key': 'shared-brave-key',
+            'jwt-secret': 'dev-jwt', // env-specific wins over shared
+        });
+    });
+    it('returns {} for an unprovisioned/ephemeral environment instead of throwing', async () => {
+        ssmMock.on(GetParametersByPathCommand).resolves({ Parameters: [] });
+        const result = await loadSsmConfig({ namespace: 'myapp', env: 'pr-999', includeShared: false });
+        expect(result).toEqual({});
+    });
+    it('skips the shared lookup when includeShared is false', async () => {
+        ssmMock
+            .on(GetParametersByPathCommand, { Path: '/myapp/dev/', Recursive: true })
+            .resolves({ Parameters: [{ Name: '/myapp/dev/jwt-secret', Value: 'dev-jwt' }] });
+        const result = await loadSsmConfig({ namespace: 'myapp', env: 'dev', includeShared: false });
+        expect(result).toEqual({ 'jwt-secret': 'dev-jwt' });
+        expect(ssmMock.commandCalls(GetParametersByPathCommand, { Path: '/myapp/shared/' })).toHaveLength(0);
+    });
+    it('follows NextToken pagination', async () => {
+        ssmMock
+            .on(GetParametersByPathCommand, { Path: '/myapp/dev/', Recursive: true })
+            .resolvesOnce({
+            Parameters: [{ Name: '/myapp/dev/key-a', Value: 'a' }],
+            NextToken: 'page-2',
+        })
+            .resolves({
+            Parameters: [{ Name: '/myapp/dev/key-b', Value: 'b' }],
+        });
+        const result = await loadSsmConfig({ namespace: 'myapp', env: 'dev', includeShared: false });
+        expect(result).toEqual({ 'key-a': 'a', 'key-b': 'b' });
+    });
+});
+describe('pushSsmConfig', () => {
+    it('writes each non-empty value as a SecureString under the env path', async () => {
+        ssmMock.on(PutParameterCommand).resolves({});
+        const written = await pushSsmConfig({ namespace: 'myapp', env: 'dev' }, { 'jwt-secret': 'real-value', 'unset-key': undefined, 'empty-key': '' });
+        expect(written).toEqual(['/myapp/dev/jwt-secret']);
+        expect(ssmMock.commandCalls(PutParameterCommand)).toHaveLength(1);
+        expect(ssmMock.commandCalls(PutParameterCommand)[0]?.args[0].input).toMatchObject({
+            Name: '/myapp/dev/jwt-secret',
+            Value: 'real-value',
+            Type: 'SecureString',
+            Overwrite: true,
+        });
+    });
+});
+describe('cloneSsmNamespace', () => {
+    it('copies every source-env parameter to the target env', async () => {
+        ssmMock.on(GetParametersByPathCommand, { Path: '/myapp/dev/', Recursive: true }).resolves({
+            Parameters: [
+                { Name: '/myapp/dev/jwt-secret', Value: 'dev-jwt' },
+                { Name: '/myapp/dev/basic-auth-user', Value: 'admin' },
+            ],
+        });
+        ssmMock.on(PutParameterCommand).resolves({});
+        const written = await cloneSsmNamespace({
+            namespace: 'myapp',
+            sourceEnv: 'dev',
+            targetEnv: 'pr-123',
+        });
+        expect(written.sort()).toEqual(['/myapp/pr-123/jwt-secret', '/myapp/pr-123/basic-auth-user'].sort());
+        expect(ssmMock.commandCalls(PutParameterCommand)).toHaveLength(2);
+    });
+});
+describe('deleteSsmNamespace', () => {
+    it('returns [] without calling DeleteParameters when nothing exists', async () => {
+        ssmMock.on(GetParametersByPathCommand).resolves({ Parameters: [] });
+        const deleted = await deleteSsmNamespace({ namespace: 'myapp', env: 'pr-123' });
+        expect(deleted).toEqual([]);
+        expect(ssmMock.commandCalls(DeleteParametersCommand)).toHaveLength(0);
+    });
+    it('batches deletes at 10 names per call', async () => {
+        const names = Array.from({ length: 23 }, (_, i) => `/myapp/pr-123/key-${i}`);
+        ssmMock
+            .on(GetParametersByPathCommand, { Path: '/myapp/pr-123/', Recursive: true })
+            .resolves({ Parameters: names.map((name) => ({ Name: name, Value: 'v' })) });
+        ssmMock.on(DeleteParametersCommand).resolves({});
+        const deleted = await deleteSsmNamespace({ namespace: 'myapp', env: 'pr-123' });
+        expect(deleted).toHaveLength(23);
+        const calls = ssmMock.commandCalls(DeleteParametersCommand);
+        expect(calls).toHaveLength(3); // 10 + 10 + 3
+        expect(calls[0]?.args[0].input.Names).toHaveLength(10);
+        expect(calls[2]?.args[0].input.Names).toHaveLength(3);
+    });
+});
+//# sourceMappingURL=ssm-config.spec.js.map

package/dist/ssm-config.spec.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ssm-config.spec.js","sourceRoot":"","sources":["../src/ssm-config.spec.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC1D,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACjD,OAAO,EACL,SAAS,EACT,0BAA0B,EAC1B,mBAAmB,EACnB,uBAAuB,GACxB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,aAAa,EACb,aAAa,EACb,iBAAiB,EACjB,kBAAkB,GACnB,MAAM,iBAAiB,CAAC;AAEzB,MAAM,OAAO,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC;AAEtC,UAAU,CAAC,GAAG,EAAE;IACd,OAAO,CAAC,KAAK,EAAE,CAAC;AAClB,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,eAAe,EAAE,GAAG,EAAE;IAC7B,EAAE,CAAC,sEAAsE,EAAE,KAAK,IAAI,EAAE;QACpF,OAAO;aACJ,EAAE,CAAC,0BAA0B,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;aAC3E,QAAQ,CAAC;YACR,UAAU,EAAE;gBACV,EAAE,IAAI,EAAE,oCAAoC,EAAE,KAAK,EAAE,kBAAkB,EAAE;gBACzE,EAAE,IAAI,EAAE,0BAA0B,EAAE,KAAK,EAAE,YAAY,EAAE;aAC1D;SACF,CAAC;aACD,EAAE,CAAC,0BAA0B,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;aACxE,QAAQ,CAAC;YACR,UAAU,EAAE,CAAC,EAAE,IAAI,EAAE,uBAAuB,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;SAClE,CAAC,CAAC;QAEL,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,EAAE,SAAS,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC;QAEvE,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC;YACrB,sBAAsB,EAAE,kBAAkB;YAC1C,YAAY,EAAE,SAAS,EAAE,gCAAgC;SAC1D,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2EAA2E,EAAE,KAAK,IAAI,EAAE;QACzF,OAAO,CAAC,EAAE,CAAC,0BAA0B,CAAC,CAAC,QAAQ,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC,CAAC;QAEpE,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,EAAE,SAAS,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC,CAAC;QAEhG,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAC7B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qDAAqD,EAAE,KAAK,IAAI,EAAE;QACnE,OAAO;aACJ,EAAE,CAAC,0BAA0B,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;aACxE,QAAQ,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,IAAI,EAAE,uBAAuB,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC,CAAC;QAEnF,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,EAAE,SAAS,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC,CAAC;QAE7F,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,YAAY,EAAE,SAAS,EAAE,CAAC,CAAC;QACpD,MAAM,CACJ,OAAO,CAAC,YAAY,CAAC,0BAA0B,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAC,CAC7E,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IACpB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8BAA8B,EAAE,KAAK,IAAI,EAAE;QAC5C,OAAO;aACJ,EAAE,CAAC,0BAA0B,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;aACxE,YAAY,CAAC;YACZ,UAAU,EAAE,CAAC,EAAE,IAAI,EAAE,kBAAkB,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;YACtD,SAAS,EAAE,QAAQ;SACpB,CAAC;aACD,QAAQ,CAAC;YACR,UAAU,EAAE,CAAC,EAAE,IAAI,EAAE,kBAAkB,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;SACvD,CAAC,CAAC;QAEL,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,EAAE,SAAS,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC,CAAC;QAE7F,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC;IACzD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,eAAe,EAAE,GAAG,EAAE;IAC7B,EAAE,CAAC,kEAAkE,EAAE,KAAK,IAAI,EAAE;QAChF,OAAO,CAAC,EAAE,CAAC,mBAAmB,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QAE7C,MAAM,OAAO,GAAG,MAAM,aAAa,CACjC,EAAE,SAAS,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,EAClC,EAAE,YAAY,EAAE,YAAY,EAAE,WAAW,EAAE,SAAS,EAAE,WAAW,EAAE,EAAE,EAAE,CACxE,CAAC;QAEF,MAAM,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC;QACnD,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,mBAAmB,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAClE,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,aAAa,CAAC;YAChF,IAAI,EAAE,uBAAuB;YAC7B,KAAK,EAAE,YAAY;YACnB,IAAI,EAAE,cAAc;YACpB,SAAS,EAAE,IAAI;SAChB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,mBAAmB,EAAE,GAAG,EAAE;IACjC,EAAE,CAAC,qDAAqD,EAAE,KAAK,IAAI,EAAE;QACnE,OAAO,CAAC,EAAE,CAAC,0BAA0B,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC;YACxF,UAAU,EAAE;gBACV,EAAE,IAAI,EAAE,uBAAuB,EAAE,KAAK,EAAE,SAAS,EAAE;gBACnD,EAAE,IAAI,EAAE,4BAA4B,EAAE,KAAK,EAAE,OAAO,EAAE;aACvD;SACF,CAAC,CAAC;QACH,OAAO,CAAC,EAAE,CAAC,mBAAmB,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QAE7C,MAAM,OAAO,GAAG,MAAM,iBAAiB,CAAC;YACtC,SAAS,EAAE,OAAO;YAClB,SAAS,EAAE,KAAK;YAChB,SAAS,EAAE,QAAQ;SACpB,CAAC,CAAC;QAEH,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAC5B,CAAC,0BAA0B,EAAE,+BAA+B,CAAC,CAAC,IAAI,EAAE,CACrE,CAAC;QACF,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,mBAAmB,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IACpE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,oBAAoB,EAAE,GAAG,EAAE;IAClC,EAAE,CAAC,iEAAiE,EAAE,KAAK,IAAI,EAAE;QAC/E,OAAO,CAAC,EAAE,CAAC,0BAA0B,CAAC,CAAC,QAAQ,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC,CAAC;QAEpE,MAAM,OAAO,GAAG,MAAM,kBAAkB,CAAC,EAAE,SAAS,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC,CAAC;QAEhF,MAAM,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAC5B,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,uBAAuB,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IACxE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sCAAsC,EAAE,KAAK,IAAI,EAAE;QACpD,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,qBAAqB,CAAC,EAAE,CAAC,CAAC;QAC7E,OAAO;aACJ,EAAE,CAAC,0BAA0B,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;aAC3E,QAAQ,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;QAC/E,OAAO,CAAC,EAAE,CAAC,uBAAuB,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QAEjD,MAAM,OAAO,GAAG,MAAM,kBAAkB,CAAC,EAAE,SAAS,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC,CAAC;QAEhF,MAAM,CAAC,OAAO,CAAC,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;QACjC,MAAM,KAAK,GAAG,OAAO,CAAC,YAAY,CAAC,uBAAuB,CAAC,CAAC;QAC5D,MAAM,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,cAAc;QAC7C,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;QACvD,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/package.json

@@ -0,0 +1,36 @@
+{
+  "name": "@bubltec/mycota-config",
+  "version": "0.1.0-dev.0",
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "publishConfig": {
+    "access": "public"
+  },
+  "files": [
+    "dist"
+  ],
+  "bin": {
+    "mycota-config": "./dist/cli.js"
+  },
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "default": "./dist/index.js"
+    }
+  },
+  "dependencies": {
+    "@aws-sdk/client-ssm": "^3.716.0"
+  },
+  "devDependencies": {
+    "@types/node": "^22.10.0",
+    "aws-sdk-client-mock": "^4.1.0",
+    "typescript": "^5.8.0",
+    "vitest": "^2.1.0"
+  },
+  "scripts": {
+    "build": "tsc -b",
+    "typecheck": "tsc -b --noEmit",
+    "test": "vitest run"
+  }
+}