@decaf-ts/integrations 0.1.1

package/lib/cjs/secrets/azure/AzureKeyVaultSecretService.cjs

@@ -0,0 +1,245 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AzureKeyVaultSecretService = void 0;
+const keyvault_secrets_1 = require("@azure/keyvault-secrets");
+const identity_1 = require("@azure/identity");
+const core_1 = require("@decaf-ts/core");
+const index_js_1 = require("./../core/index.cjs");
+const index_js_2 = require("./../core/index.cjs");
+const db_decorators_1 = require("@decaf-ts/db-decorators");
+class AzureKeyVaultSecretService extends core_1.ClientBasedService {
+    constructor() {
+        super(...arguments);
+        this.provider = "azure-key-vault";
+    }
+    async initialize(...args) {
+        const config = args[0];
+        const client = new keyvault_secrets_1.SecretClient(config.vaultUrl, config.credentials || new identity_1.DefaultAzureCredential());
+        return { config, client };
+    }
+    async store(name, value, ...args) {
+        const { log } = (await this.logCtx(args, "store", true)).for(this.store);
+        log.verbose(`Storing secret ${name}`);
+        try {
+            (0, index_js_1.validateSecretName)(name);
+        }
+        catch (error) {
+            throw this.parseError(error);
+        }
+        const normalizedName = (0, index_js_1.normalizeSecretName)(name);
+        const serialized = (0, index_js_2.serializeSecretPayload)(value);
+        try {
+            const result = await this.client.setSecret(normalizedName, serialized.value);
+            return {
+                provider: this.provider,
+                name: normalizedName,
+                version: result.properties.version,
+                metadata: {},
+            };
+        }
+        catch (error) {
+            throw this.parseError(error);
+        }
+    }
+    async retrieve(nameOrRef, ...args) {
+        const { log } = (await this.logCtx(args, "retrieve", true)).for(this.retrieve);
+        const nameStr = typeof nameOrRef === "string" ? nameOrRef : nameOrRef.name;
+        log.verbose(`Retrieving secret ${nameStr}`);
+        let name;
+        if (typeof nameOrRef === "string") {
+            name = nameOrRef;
+        }
+        else {
+            name = nameOrRef.name;
+        }
+        try {
+            (0, index_js_1.validateSecretName)(name);
+        }
+        catch (error) {
+            throw this.parseError(error);
+        }
+        const normalizedName = (0, index_js_1.normalizeSecretName)(name);
+        try {
+            const result = await this.client.getSecret(normalizedName);
+            if (result.value === undefined) {
+                throw new db_decorators_1.NotFoundError(`Secret "${normalizedName}" has no value`);
+            }
+            const payload = {
+                encoding: "utf8",
+                value: result.value,
+            };
+            return (0, index_js_2.deserializeSecretPayload)(payload);
+        }
+        catch (error) {
+            throw this.parseError(error);
+        }
+    }
+    async delete(nameOrRef, options = {}, ...args) {
+        const { log } = (await this.logCtx(args, "delete", true)).for(this.delete);
+        const nameStr = typeof nameOrRef === "string" ? nameOrRef : nameOrRef.name;
+        log.verbose(`Deleting secret ${nameStr}`);
+        let name;
+        if (typeof nameOrRef === "string") {
+            name = nameOrRef;
+        }
+        else {
+            name = nameOrRef.name;
+        }
+        try {
+            (0, index_js_1.validateSecretName)(name);
+        }
+        catch (error) {
+            throw this.parseError(error);
+        }
+        const normalizedName = (0, index_js_1.normalizeSecretName)(name);
+        try {
+            if (options.force) {
+                await this.client.beginDeleteSecret(normalizedName);
+            }
+            else {
+                // For soft-delete, just beginDelete which allows recovery
+                await this.client.beginDeleteSecret(normalizedName);
+            }
+        }
+        catch (error) {
+            throw this.parseError(error);
+        }
+    }
+    async exists(nameOrRef, ...args) {
+        const { log } = (await this.logCtx(args, "exists", true)).for(this.exists);
+        const nameStr = typeof nameOrRef === "string" ? nameOrRef : nameOrRef.name;
+        log.verbose(`Checking if secret ${nameStr} exists`);
+        let name;
+        if (typeof nameOrRef === "string") {
+            name = nameOrRef;
+        }
+        else {
+            name = nameOrRef.name;
+        }
+        try {
+            (0, index_js_1.validateSecretName)(name);
+        }
+        catch (error) {
+            throw this.parseError(error);
+        }
+        const normalizedName = (0, index_js_1.normalizeSecretName)(name);
+        try {
+            await this.client.getSecret(normalizedName);
+            return true;
+        }
+        catch (error) {
+            const err = error;
+            if (err.message.toLowerCase().includes("not found") ||
+                err.message.includes("404")) {
+                return false;
+            }
+            throw this.parseError(err);
+        }
+    }
+    async list(options = {}, ...args) {
+        const { log } = (await this.logCtx(args, "list", true)).for(this.list);
+        log.verbose("Listing secrets");
+        const result = [];
+        const search = this.client.listPropertiesOfSecrets();
+        let count = 0;
+        const limit = options.limit ?? Infinity;
+        const offset = options.offset ?? 0;
+        for await (const secretProperties of search) {
+            if (!secretProperties.name) {
+                continue;
+            }
+            if (count < offset) {
+                count++;
+                continue;
+            }
+            if (result.length >= limit) {
+                break;
+            }
+            result.push({
+                provider: this.provider,
+                name: secretProperties.name,
+                version: secretProperties.version,
+                createdAt: secretProperties.notBefore,
+                updatedAt: secretProperties.expiresOn,
+                enabled: secretProperties.enabled ?? true,
+                uri: secretProperties.id,
+            });
+            count++;
+        }
+        return result;
+    }
+    async metadata(nameOrRef, ...args) {
+        const { log } = (await this.logCtx(args, "metadata", true)).for(this.metadata);
+        const nameStr = typeof nameOrRef === "string" ? nameOrRef : nameOrRef.name;
+        log.verbose(`Getting metadata for secret ${nameStr}`);
+        let name;
+        if (typeof nameOrRef === "string") {
+            name = nameOrRef;
+        }
+        else {
+            name = nameOrRef.name;
+        }
+        try {
+            (0, index_js_1.validateSecretName)(name);
+        }
+        catch (error) {
+            throw this.parseError(error);
+        }
+        const normalizedName = (0, index_js_1.normalizeSecretName)(name);
+        try {
+            const result = await this.client.getSecret(normalizedName);
+            return {
+                provider: this.provider,
+                name: result.name,
+                version: result.properties.version,
+                createdAt: result.properties.notBefore,
+                updatedAt: result.properties.expiresOn,
+                enabled: result.properties.enabled ?? true,
+                uri: result.properties.id,
+            };
+        }
+        catch (error) {
+            const err = error;
+            if (err.message.toLowerCase().includes("not found") ||
+                err.message.includes("404")) {
+                return undefined;
+            }
+            throw this.parseError(err);
+        }
+    }
+    parseError(error) {
+        const err = error;
+        const message = err.message || err.name || "Unknown error";
+        const lowerMessage = message.toLowerCase();
+        if (lowerMessage.includes("not found") || lowerMessage.includes("404")) {
+            return new db_decorators_1.NotFoundError(message);
+        }
+        if (lowerMessage.includes("already exists") ||
+            lowerMessage.includes("conflict") ||
+            lowerMessage.includes("409")) {
+            return new db_decorators_1.ConflictError(message);
+        }
+        if (lowerMessage.includes("disabled") || lowerMessage.includes("403")) {
+            return new db_decorators_1.NotFoundError(message);
+        }
+        if (lowerMessage.includes("unauthorized") || lowerMessage.includes("401")) {
+            return new db_decorators_1.NotFoundError(message);
+        }
+        if (lowerMessage.includes("permission") || lowerMessage.includes("403")) {
+            return new db_decorators_1.NotFoundError(message);
+        }
+        if (lowerMessage.includes("rate limit") || lowerMessage.includes("429")) {
+            return new db_decorators_1.BadRequestError(message);
+        }
+        if (lowerMessage.includes("provider") ||
+            lowerMessage.includes("unavailable") ||
+            lowerMessage.includes("connection") ||
+            lowerMessage.includes("timeout")) {
+            return new db_decorators_1.InternalError(message);
+        }
+        return new db_decorators_1.InternalError(message);
+    }
+}
+exports.AzureKeyVaultSecretService = AzureKeyVaultSecretService;
+//# sourceMappingURL=AzureKeyVaultSecretService.js.map
+//# sourceMappingURL=AzureKeyVaultSecretService.js.map

package/lib/cjs/secrets/azure/AzureKeyVaultSecretService.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"AzureKeyVaultSecretService.js","sourceRoot":"","sources":["AzureKeyVaultSecretService.js"],"names":[],"mappings":";;;AAAA,8DAAuD;AACvD,8CAAyD;AACzD,yCAAqD;AACrD,iDAA6E;AAC7E,iDAAuF;AACvF,2DAAwG;AACxG,MAAa,0BAA2B,SAAQ,yBAAkB;IAC9D;QACI,KAAK,CAAC,GAAG,SAAS,CAAC,CAAC;QACpB,IAAI,CAAC,QAAQ,GAAG,iBAAiB,CAAC;IACtC,CAAC;IACD,KAAK,CAAC,UAAU,CAAC,GAAG,IAAI;QACpB,MAAM,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACvB,MAAM,MAAM,GAAG,IAAI,+BAAY,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,WAAW,IAAI,IAAI,iCAAsB,EAAE,CAAC,CAAC;QACrG,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IAC9B,CAAC;IACD,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,IAAI;QAC5B,MAAM,EAAE,GAAG,EAAE,GAAG,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACzE,GAAG,CAAC,OAAO,CAAC,kBAAkB,IAAI,EAAE,CAAC,CAAC;QACtC,IAAI,CAAC;YACD,IAAA,6BAAkB,EAAC,IAAI,CAAC,CAAC;QAC7B,CAAC;QACD,OAAO,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QACjC,CAAC;QACD,MAAM,cAAc,GAAG,IAAA,8BAAmB,EAAC,IAAI,CAAC,CAAC;QACjD,MAAM,UAAU,GAAG,IAAA,iCAAsB,EAAC,KAAK,CAAC,CAAC;QACjD,IAAI,CAAC;YACD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC;YAC7E,OAAO;gBACH,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,IAAI,EAAE,cAAc;gBACpB,OAAO,EAAE,MAAM,CAAC,UAAU,CAAC,OAAO;gBAClC,QAAQ,EAAE,EAAE;aACf,CAAC;QACN,CAAC;QACD,OAAO,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QACjC,CAAC;IACL,CAAC;IACD,KAAK,CAAC,QAAQ,CAAC,SAAS,EAAE,GAAG,IAAI;QAC7B,MAAM,EAAE,GAAG,EAAE,GAAG,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC/E,MAAM,OAAO,GAAG,OAAO,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC;QAC3E,GAAG,CAAC,OAAO,CAAC,qBAAqB,OAAO,EAAE,CAAC,CAAC;QAC5C,IAAI,IAAI,CAAC;QACT,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;YAChC,IAAI,GAAG,SAAS,CAAC;QACrB,CAAC;aACI,CAAC;YACF,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC;QAC1B,CAAC;QACD,IAAI,CAAC;YACD,IAAA,6BAAkB,EAAC,IAAI,CAAC,CAAC;QAC7B,CAAC;QACD,OAAO,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QACjC,CAAC;QACD,MAAM,cAAc,GAAG,IAAA,8BAAmB,EAAC,IAAI,CAAC,CAAC;QACjD,IAAI,CAAC;YACD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC;YAC3D,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;gBAC7B,MAAM,IAAI,6BAAa,CAAC,WAAW,cAAc,gBAAgB,CAAC,CAAC;YACvE,CAAC;YACD,MAAM,OAAO,GAAG;gBACZ,QAAQ,EAAE,MAAM;gBAChB,KAAK,EAAE,MAAM,CAAC,KAAK;aACtB,CAAC;YACF,OAAO,IAAA,mCAAwB,EAAC,OAAO,CAAC,CAAC;QAC7C,CAAC;QACD,OAAO,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QACjC,CAAC;IACL,CAAC;IACD,KAAK,CAAC,MAAM,CAAC,SAAS,EAAE,OAAO,GAAG,EAAE,EAAE,GAAG,IAAI;QACzC,MAAM,EAAE,GAAG,EAAE,GAAG,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC3E,MAAM,OAAO,GAAG,OAAO,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC;QAC3E,GAAG,CAAC,OAAO,CAAC,mBAAmB,OAAO,EAAE,CAAC,CAAC;QAC1C,IAAI,IAAI,CAAC;QACT,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;YAChC,IAAI,GAAG,SAAS,CAAC;QACrB,CAAC;aACI,CAAC;YACF,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC;QAC1B,CAAC;QACD,IAAI,CAAC;YACD,IAAA,6BAAkB,EAAC,IAAI,CAAC,CAAC;QAC7B,CAAC;QACD,OAAO,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QACjC,CAAC;QACD,MAAM,cAAc,GAAG,IAAA,8BAAmB,EAAC,IAAI,CAAC,CAAC;QACjD,IAAI,CAAC;YACD,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;gBAChB,MAAM,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,cAAc,CAAC,CAAC;YACxD,CAAC;iBACI,CAAC;gBACF,0DAA0D;gBAC1D,MAAM,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,cAAc,CAAC,CAAC;YACxD,CAAC;QACL,CAAC;QACD,OAAO,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QACjC,CAAC;IACL,CAAC;IACD,KAAK,CAAC,MAAM,CAAC,SAAS,EAAE,GAAG,IAAI;QAC3B,MAAM,EAAE,GAAG,EAAE,GAAG,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC3E,MAAM,OAAO,GAAG,OAAO,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC;QAC3E,GAAG,CAAC,OAAO,CAAC,sBAAsB,OAAO,SAAS,CAAC,CAAC;QACpD,IAAI,IAAI,CAAC;QACT,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;YAChC,IAAI,GAAG,SAAS,CAAC;QACrB,CAAC;aACI,CAAC;YACF,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC;QAC1B,CAAC;QACD,IAAI,CAAC;YACD,IAAA,6BAAkB,EAAC,IAAI,CAAC,CAAC;QAC7B,CAAC;QACD,OAAO,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QACjC,CAAC;QACD,MAAM,cAAc,GAAG,IAAA,8BAAmB,EAAC,IAAI,CAAC,CAAC;QACjD,IAAI,CAAC;YACD,MAAM,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC;YAC5C,OAAO,IAAI,CAAC;QAChB,CAAC;QACD,OAAO,KAAK,EAAE,CAAC;YACX,MAAM,GAAG,GAAG,KAAK,CAAC;YAClB,IAAI,GAAG,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,WAAW,CAAC;gBAC/C,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC9B,OAAO,KAAK,CAAC;YACjB,CAAC;YACD,MAAM,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;QAC/B,CAAC;IACL,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,OAAO,GAAG,EAAE,EAAE,GAAG,IAAI;QAC5B,MAAM,EAAE,GAAG,EAAE,GAAG,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvE,GAAG,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;QAC/B,MAAM,MAAM,GAAG,EAAE,CAAC;QAClB,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,uBAAuB,EAAE,CAAC;QACrD,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,QAAQ,CAAC;QACxC,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,CAAC,CAAC;QACnC,IAAI,KAAK,EAAE,MAAM,gBAAgB,IAAI,MAAM,EAAE,CAAC;YAC1C,IAAI,CAAC,gBAAgB,CAAC,IAAI,EAAE,CAAC;gBACzB,SAAS;YACb,CAAC;YACD,IAAI,KAAK,GAAG,MAAM,EAAE,CAAC;gBACjB,KAAK,EAAE,CAAC;gBACR,SAAS;YACb,CAAC;YACD,IAAI,MAAM,CAAC,MAAM,IAAI,KAAK,EAAE,CAAC;gBACzB,MAAM;YACV,CAAC;YACD,MAAM,CAAC,IAAI,CAAC;gBACR,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,IAAI,EAAE,gBAAgB,CAAC,IAAI;gBAC3B,OAAO,EAAE,gBAAgB,CAAC,OAAO;gBACjC,SAAS,EAAE,gBAAgB,CAAC,SAAS;gBACrC,SAAS,EAAE,gBAAgB,CAAC,SAAS;gBACrC,OAAO,EAAE,gBAAgB,CAAC,OAAO,IAAI,IAAI;gBACzC,GAAG,EAAE,gBAAgB,CAAC,EAAE;aAC3B,CAAC,CAAC;YACH,KAAK,EAAE,CAAC;QACZ,CAAC;QACD,OAAO,MAAM,CAAC;IAClB,CAAC;IACD,KAAK,CAAC,QAAQ,CAAC,SAAS,EAAE,GAAG,IAAI;QAC7B,MAAM,EAAE,GAAG,EAAE,GAAG,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC/E,MAAM,OAAO,GAAG,OAAO,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC;QAC3E,GAAG,CAAC,OAAO,CAAC,+BAA+B,OAAO,EAAE,CAAC,CAAC;QACtD,IAAI,IAAI,CAAC;QACT,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;YAChC,IAAI,GAAG,SAAS,CAAC;QACrB,CAAC;aACI,CAAC;YACF,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC;QAC1B,CAAC;QACD,IAAI,CAAC;YACD,IAAA,6BAAkB,EAAC,IAAI,CAAC,CAAC;QAC7B,CAAC;QACD,OAAO,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QACjC,CAAC;QACD,MAAM,cAAc,GAAG,IAAA,8BAAmB,EAAC,IAAI,CAAC,CAAC;QACjD,IAAI,CAAC;YACD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC;YAC3D,OAAO;gBACH,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,OAAO,EAAE,MAAM,CAAC,UAAU,CAAC,OAAO;gBAClC,SAAS,EAAE,MAAM,CAAC,UAAU,CAAC,SAAS;gBACtC,SAAS,EAAE,MAAM,CAAC,UAAU,CAAC,SAAS;gBACtC,OAAO,EAAE,MAAM,CAAC,UAAU,CAAC,OAAO,IAAI,IAAI;gBAC1C,GAAG,EAAE,MAAM,CAAC,UAAU,CAAC,EAAE;aAC5B,CAAC;QACN,CAAC;QACD,OAAO,KAAK,EAAE,CAAC;YACX,MAAM,GAAG,GAAG,KAAK,CAAC;YAClB,IAAI,GAAG,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,WAAW,CAAC;gBAC/C,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC9B,OAAO,SAAS,CAAC;YACrB,CAAC;YACD,MAAM,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;QAC/B,CAAC;IACL,CAAC;IACD,UAAU,CAAC,KAAK;QACZ,MAAM,GAAG,GAAG,KAAK,CAAC;QAClB,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,IAAI,IAAI,eAAe,CAAC;QAC3D,MAAM,YAAY,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;QAC3C,IAAI,YAAY,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACrE,OAAO,IAAI,6BAAa,CAAC,OAAO,CAAC,CAAC;QACtC,CAAC;QACD,IAAI,YAAY,CAAC,QAAQ,CAAC,gBAAgB,CAAC;YACvC,YAAY,CAAC,QAAQ,CAAC,UAAU,CAAC;YACjC,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YAC/B,OAAO,IAAI,6BAAa,CAAC,OAAO,CAAC,CAAC;QACtC,CAAC;QACD,IAAI,YAAY,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACpE,OAAO,IAAI,6BAAa,CAAC,OAAO,CAAC,CAAC;QACtC,CAAC;QACD,IAAI,YAAY,CAAC,QAAQ,CAAC,cAAc,CAAC,IAAI,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACxE,OAAO,IAAI,6BAAa,CAAC,OAAO,CAAC,CAAC;QACtC,CAAC;QACD,IAAI,YAAY,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACtE,OAAO,IAAI,6BAAa,CAAC,OAAO,CAAC,CAAC;QACtC,CAAC;QACD,IAAI,YAAY,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACtE,OAAO,IAAI,+BAAe,CAAC,OAAO,CAAC,CAAC;QACxC,CAAC;QACD,IAAI,YAAY,CAAC,QAAQ,CAAC,UAAU,CAAC;YACjC,YAAY,CAAC,QAAQ,CAAC,aAAa,CAAC;YACpC,YAAY,CAAC,QAAQ,CAAC,YAAY,CAAC;YACnC,YAAY,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;YACnC,OAAO,IAAI,6BAAa,CAAC,OAAO,CAAC,CAAC;QACtC,CAAC;QACD,OAAO,IAAI,6BAAa,CAAC,OAAO,CAAC,CAAC;IACtC,CAAC;CACJ;AAxOD,gEAwOC;AACD,sDAAsD"}

package/lib/cjs/secrets/azure/AzureKeyVaultSecretServiceConfig.cjs

@@ -0,0 +1,4 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=AzureKeyVaultSecretServiceConfig.js.map
+//# sourceMappingURL=AzureKeyVaultSecretServiceConfig.js.map

package/lib/cjs/secrets/azure/AzureKeyVaultSecretServiceConfig.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"AzureKeyVaultSecretServiceConfig.js","sourceRoot":"","sources":["AzureKeyVaultSecretServiceConfig.js"],"names":[],"mappings":";;AACA,4DAA4D"}

package/lib/cjs/secrets/azure/index.cjs

@@ -0,0 +1,25 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+/**
+ * @module integrations/secrets/azure
+ * @summary Azure Key Vault secret service exports.
+ * @description Re-exports the Azure Key Vault service and its configuration.
+ */
+__exportStar(require("./AzureKeyVaultSecretService.cjs"), exports);
+__exportStar(require("./AzureKeyVaultSecretServiceConfig.cjs"), exports);
+//# sourceMappingURL=index.js.map
+//# sourceMappingURL=index.js.map

package/lib/cjs/secrets/azure/index.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["index.js"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA;;;;GAIG;AACH,kEAAgD;AAChD,wEAAsD;AACtD,iCAAiC"}

package/lib/cjs/secrets/core/SecretErrors.cjs

@@ -0,0 +1,70 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SecretError = void 0;
+exports.translateError = translateError;
+exports.translateNameError = translateNameError;
+exports.translateSerializationError = translateSerializationError;
+exports.translateCryptoError = translateCryptoError;
+/**
+ * @module integrations/secrets/core/errors
+ * @summary Secret core errors.
+ * @description Error classes used by the secret service abstraction and provider implementations.
+ */
+const db_decorators_1 = require("@decaf-ts/db-decorators");
+class SecretError extends db_decorators_1.InternalError {
+    constructor(secretCode, message, cause) {
+        super(message);
+        this.secretCode = secretCode;
+        this.name = "SecretError";
+        if (cause) {
+            this.cause = cause;
+        }
+    }
+}
+exports.SecretError = SecretError;
+function translateError(error) {
+    const message = error.message || error.name;
+    const lowerMessage = message.toLowerCase();
+    if (lowerMessage.includes("not found") || lowerMessage.includes("404")) {
+        return new SecretError("SECRET_NOT_FOUND", `Secret not found: ${message}`, error);
+    }
+    if (lowerMessage.includes("already exists") ||
+        lowerMessage.includes("conflict") ||
+        lowerMessage.includes("409")) {
+        return new SecretError("SECRET_ALREADY_EXISTS", `Secret already exists: ${message}`, error);
+    }
+    if (lowerMessage.includes("disabled") || lowerMessage.includes("403")) {
+        return new SecretError("SECRET_DISABLED", `Secret is disabled: ${message}`, error);
+    }
+    if (lowerMessage.includes("unauthorized") || lowerMessage.includes("401")) {
+        return new SecretError("SECRET_PROVIDER_AUTH_FAILED", `Authentication failed: ${message}`, error);
+    }
+    if (lowerMessage.includes("permission") || lowerMessage.includes("403")) {
+        return new SecretError("SECRET_PROVIDER_PERMISSION_DENIED", `Permission denied: ${message}`, error);
+    }
+    if (lowerMessage.includes("rate limit") || lowerMessage.includes("429")) {
+        return new SecretError("SECRET_PROVIDER_RATE_LIMITED", `Rate limited: ${message}`, error);
+    }
+    if (lowerMessage.includes("provider") ||
+        lowerMessage.includes("unavailable") ||
+        lowerMessage.includes("connection") ||
+        lowerMessage.includes("timeout")) {
+        return new SecretError("SECRET_PROVIDER_UNAVAILABLE", `Provider unavailable: ${message}`, error);
+    }
+    return new SecretError("SECRET_PROVIDER_CONFLICT", `Provider error: ${message}`, error);
+}
+function translateNameError(error) {
+    return new SecretError("SECRET_INVALID_NAME", `Invalid secret name: ${error.message}`, error);
+}
+function translateSerializationError(error, operation) {
+    return new SecretError(operation === "serialize"
+        ? "SECRET_SERIALIZATION_FAILED"
+        : "SECRET_DESERIALIZATION_FAILED", `Payload ${operation} failed: ${error.message}`, error);
+}
+function translateCryptoError(error, operation) {
+    return new SecretError(operation === "encryption"
+        ? "SECRET_ENCRYPTION_FAILED"
+        : "SECRET_DECRYPTION_FAILED", `Crypto ${operation} failed: ${error.message}`, error);
+}
+//# sourceMappingURL=SecretErrors.js.map
+//# sourceMappingURL=SecretErrors.js.map

package/lib/cjs/secrets/core/SecretErrors.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"SecretErrors.js","sourceRoot":"","sources":["SecretErrors.js"],"names":[],"mappings":";;;AAgBA,wCA8BC;AACD,gDAEC;AACD,kEAIC;AACD,oDAIC;AA3DD;;;;GAIG;AACH,2DAAwD;AACxD,MAAa,WAAY,SAAQ,6BAAa;IAC1C,YAAY,UAAU,EAAE,OAAO,EAAE,KAAK;QAClC,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,IAAI,GAAG,aAAa,CAAC;QAC1B,IAAI,KAAK,EAAE,CAAC;YACR,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACvB,CAAC;IACL,CAAC;CACJ;AATD,kCASC;AACD,SAAgB,cAAc,CAAC,KAAK;IAChC,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC,IAAI,CAAC;IAC5C,MAAM,YAAY,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;IAC3C,IAAI,YAAY,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACrE,OAAO,IAAI,WAAW,CAAC,kBAAkB,EAAE,qBAAqB,OAAO,EAAE,EAAE,KAAK,CAAC,CAAC;IACtF,CAAC;IACD,IAAI,YAAY,CAAC,QAAQ,CAAC,gBAAgB,CAAC;QACvC,YAAY,CAAC,QAAQ,CAAC,UAAU,CAAC;QACjC,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QAC/B,OAAO,IAAI,WAAW,CAAC,uBAAuB,EAAE,0BAA0B,OAAO,EAAE,EAAE,KAAK,CAAC,CAAC;IAChG,CAAC;IACD,IAAI,YAAY,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACpE,OAAO,IAAI,WAAW,CAAC,iBAAiB,EAAE,uBAAuB,OAAO,EAAE,EAAE,KAAK,CAAC,CAAC;IACvF,CAAC;IACD,IAAI,YAAY,CAAC,QAAQ,CAAC,cAAc,CAAC,IAAI,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACxE,OAAO,IAAI,WAAW,CAAC,6BAA6B,EAAE,0BAA0B,OAAO,EAAE,EAAE,KAAK,CAAC,CAAC;IACtG,CAAC;IACD,IAAI,YAAY,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACtE,OAAO,IAAI,WAAW,CAAC,mCAAmC,EAAE,sBAAsB,OAAO,EAAE,EAAE,KAAK,CAAC,CAAC;IACxG,CAAC;IACD,IAAI,YAAY,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACtE,OAAO,IAAI,WAAW,CAAC,8BAA8B,EAAE,iBAAiB,OAAO,EAAE,EAAE,KAAK,CAAC,CAAC;IAC9F,CAAC;IACD,IAAI,YAAY,CAAC,QAAQ,CAAC,UAAU,CAAC;QACjC,YAAY,CAAC,QAAQ,CAAC,aAAa,CAAC;QACpC,YAAY,CAAC,QAAQ,CAAC,YAAY,CAAC;QACnC,YAAY,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QACnC,OAAO,IAAI,WAAW,CAAC,6BAA6B,EAAE,yBAAyB,OAAO,EAAE,EAAE,KAAK,CAAC,CAAC;IACrG,CAAC;IACD,OAAO,IAAI,WAAW,CAAC,0BAA0B,EAAE,mBAAmB,OAAO,EAAE,EAAE,KAAK,CAAC,CAAC;AAC5F,CAAC;AACD,SAAgB,kBAAkB,CAAC,KAAK;IACpC,OAAO,IAAI,WAAW,CAAC,qBAAqB,EAAE,wBAAwB,KAAK,CAAC,OAAO,EAAE,EAAE,KAAK,CAAC,CAAC;AAClG,CAAC;AACD,SAAgB,2BAA2B,CAAC,KAAK,EAAE,SAAS;IACxD,OAAO,IAAI,WAAW,CAAC,SAAS,KAAK,WAAW;QAC5C,CAAC,CAAC,6BAA6B;QAC/B,CAAC,CAAC,+BAA+B,EAAE,WAAW,SAAS,YAAY,KAAK,CAAC,OAAO,EAAE,EAAE,KAAK,CAAC,CAAC;AACnG,CAAC;AACD,SAAgB,oBAAoB,CAAC,KAAK,EAAE,SAAS;IACjD,OAAO,IAAI,WAAW,CAAC,SAAS,KAAK,YAAY;QAC7C,CAAC,CAAC,0BAA0B;QAC5B,CAAC,CAAC,0BAA0B,EAAE,UAAU,SAAS,YAAY,KAAK,CAAC,OAAO,EAAE,EAAE,KAAK,CAAC,CAAC;AAC7F,CAAC;AACD,wCAAwC"}

package/lib/cjs/secrets/core/SecretName.cjs

@@ -0,0 +1,54 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.validateSecretName = validateSecretName;
+exports.normalizeSecretName = normalizeSecretName;
+/**
+ * @module integrations/secrets/core/name
+ * @summary Secret name helpers.
+ * @description Validation and normalization helpers for secret names.
+ */
+const SecretErrors_js_1 = require("./SecretErrors.cjs");
+const MAX_NAME_LENGTH = 255;
+const SAFE_PATTERN = /^[a-zA-Z0-9_-]+$/;
+function hasControlCharacters(value) {
+    for (const char of value) {
+        const code = char.charCodeAt(0);
+        if (code <= 31 || code === 127) {
+            return true;
+        }
+    }
+    return false;
+}
+function validateSecretName(name) {
+    if (!name || typeof name !== "string") {
+        return false;
+    }
+    const trimmed = name.trim();
+    if (trimmed.length === 0) {
+        return false;
+    }
+    if (trimmed.length > MAX_NAME_LENGTH) {
+        return false;
+    }
+    if (hasControlCharacters(trimmed)) {
+        return false;
+    }
+    if (trimmed.includes("..")) {
+        return false;
+    }
+    if (trimmed.includes("   ")) {
+        return false;
+    }
+    if (!SAFE_PATTERN.test(trimmed)) {
+        return false;
+    }
+    return true;
+}
+function normalizeSecretName(name) {
+    if (!validateSecretName(name)) {
+        throw new SecretErrors_js_1.SecretError("SECRET_INVALID_NAME", `Invalid secret name: ${name}`);
+    }
+    return name.trim();
+}
+//# sourceMappingURL=SecretName.js.map
+//# sourceMappingURL=SecretName.js.map

package/lib/cjs/secrets/core/SecretName.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"SecretName.js","sourceRoot":"","sources":["SecretName.js"],"names":[],"mappings":";;AAiBA,gDAwBC;AACD,kDAKC;AA/CD;;;;GAIG;AACH,uDAAgD;AAChD,MAAM,eAAe,GAAG,GAAG,CAAC;AAC5B,MAAM,YAAY,GAAG,kBAAkB,CAAC;AACxC,SAAS,oBAAoB,CAAC,KAAK;IAC/B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACvB,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QAChC,IAAI,IAAI,IAAI,EAAE,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YAC7B,OAAO,IAAI,CAAC;QAChB,CAAC;IACL,CAAC;IACD,OAAO,KAAK,CAAC;AACjB,CAAC;AACD,SAAgB,kBAAkB,CAAC,IAAI;IACnC,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QACpC,OAAO,KAAK,CAAC;IACjB,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IAC5B,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,OAAO,KAAK,CAAC;IACjB,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,GAAG,eAAe,EAAE,CAAC;QACnC,OAAO,KAAK,CAAC;IACjB,CAAC;IACD,IAAI,oBAAoB,CAAC,OAAO,CAAC,EAAE,CAAC;QAChC,OAAO,KAAK,CAAC;IACjB,CAAC;IACD,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC;IACjB,CAAC;IACD,IAAI,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,KAAK,CAAC;IACjB,CAAC;IACD,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QAC9B,OAAO,KAAK,CAAC;IACjB,CAAC;IACD,OAAO,IAAI,CAAC;AAChB,CAAC;AACD,SAAgB,mBAAmB,CAAC,IAAI;IACpC,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,6BAAW,CAAC,qBAAqB,EAAE,wBAAwB,IAAI,EAAE,CAAC,CAAC;IACjF,CAAC;IACD,OAAO,IAAI,CAAC,IAAI,EAAE,CAAC;AACvB,CAAC;AACD,sCAAsC"}

package/lib/cjs/secrets/core/SecretReference.cjs

@@ -0,0 +1,51 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.parseSecretReference = parseSecretReference;
+exports.constructSecretReference = constructSecretReference;
+exports.isValidSecretReference = isValidSecretReference;
+const SecretErrors_js_1 = require("./SecretErrors.cjs");
+const URI_PATTERN = /^secrets\/(?<provider>[a-z-]+)\/(?<name>[a-zA-Z0-9_-]+)(?:\/version\/(?<version>[a-zA-Z0-9_-]+))?$/;
+function parseSecretReference(ref) {
+    const match = ref.match(URI_PATTERN);
+    if (!match || !match.groups) {
+        throw new SecretErrors_js_1.SecretError("SECRET_INVALID_NAME", `Invalid secret reference format: ${ref}`);
+    }
+    const { provider, name, version } = match.groups;
+    if (!isValidProvider(provider)) {
+        throw new SecretErrors_js_1.SecretError("SECRET_INVALID_NAME", `Invalid provider in reference: ${provider}`);
+    }
+    return {
+        provider: provider,
+        name,
+        version,
+    };
+}
+function constructSecretReference(provider, name, version) {
+    if (version) {
+        return `secrets/${provider}/${name}/version/${version}`;
+    }
+    return `secrets/${provider}/${name}`;
+}
+function isValidSecretReference(ref) {
+    try {
+        parseSecretReference(ref);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+function isValidProvider(provider) {
+    const validProviders = [
+        "model",
+        "memory",
+        "hashicorp-vault",
+        "aws-secrets-manager",
+        "azure-key-vault",
+        "gcp-secret-manager",
+        "1password",
+    ];
+    return validProviders.includes(provider);
+}
+//# sourceMappingURL=SecretReference.js.map
+//# sourceMappingURL=SecretReference.js.map

package/lib/cjs/secrets/core/SecretReference.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"SecretReference.js","sourceRoot":"","sources":["SecretReference.js"],"names":[],"mappings":";;AAEA,oDAcC;AACD,4DAKC;AACD,wDAQC;AA/BD,uDAAgD;AAChD,MAAM,WAAW,GAAG,oGAAoG,CAAC;AACzH,SAAgB,oBAAoB,CAAC,GAAG;IACpC,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IACrC,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;QAC1B,MAAM,IAAI,6BAAW,CAAC,qBAAqB,EAAE,oCAAoC,GAAG,EAAE,CAAC,CAAC;IAC5F,CAAC;IACD,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC,MAAM,CAAC;IACjD,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC7B,MAAM,IAAI,6BAAW,CAAC,qBAAqB,EAAE,kCAAkC,QAAQ,EAAE,CAAC,CAAC;IAC/F,CAAC;IACD,OAAO;QACH,QAAQ,EAAE,QAAQ;QAClB,IAAI;QACJ,OAAO;KACV,CAAC;AACN,CAAC;AACD,SAAgB,wBAAwB,CAAC,QAAQ,EAAE,IAAI,EAAE,OAAO;IAC5D,IAAI,OAAO,EAAE,CAAC;QACV,OAAO,WAAW,QAAQ,IAAI,IAAI,YAAY,OAAO,EAAE,CAAC;IAC5D,CAAC;IACD,OAAO,WAAW,QAAQ,IAAI,IAAI,EAAE,CAAC;AACzC,CAAC;AACD,SAAgB,sBAAsB,CAAC,GAAG;IACtC,IAAI,CAAC;QACD,oBAAoB,CAAC,GAAG,CAAC,CAAC;QAC1B,OAAO,IAAI,CAAC;IAChB,CAAC;IACD,MAAM,CAAC;QACH,OAAO,KAAK,CAAC;IACjB,CAAC;AACL,CAAC;AACD,SAAS,eAAe,CAAC,QAAQ;IAC7B,MAAM,cAAc,GAAG;QACnB,OAAO;QACP,QAAQ;QACR,iBAAiB;QACjB,qBAAqB;QACrB,iBAAiB;QACjB,oBAAoB;QACpB,WAAW;KACd,CAAC;IACF,OAAO,cAAc,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;AAC7C,CAAC;AACD,2CAA2C"}

package/lib/cjs/secrets/core/SecretSerialization.cjs

@@ -0,0 +1,52 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.serializeSecretPayload = serializeSecretPayload;
+exports.deserializeSecretPayload = deserializeSecretPayload;
+/**
+ * @module integrations/secrets/core/serialization
+ * @summary Secret serialization helpers.
+ * @description Utilities for converting secret payloads to and from transport-safe encodings.
+ */
+const SecretErrors_js_1 = require("./SecretErrors.cjs");
+function serializeSecretPayload(payload) {
+    if (typeof payload === "string") {
+        return { encoding: "utf8", value: payload };
+    }
+    if (payload instanceof Uint8Array) {
+        return {
+            encoding: "base64",
+            value: Buffer.from(payload).toString("base64"),
+        };
+    }
+    if (typeof payload === "object" && payload !== null) {
+        try {
+            return {
+                encoding: "json",
+                value: JSON.stringify(payload),
+            };
+        }
+        catch (error) {
+            throw new SecretErrors_js_1.SecretError("SECRET_SERIALIZATION_FAILED", `Failed to serialize payload as JSON: ${error.message}`, error);
+        }
+    }
+    throw new SecretErrors_js_1.SecretError("SECRET_INVALID_PAYLOAD", `Invalid payload type: ${typeof payload}`);
+}
+function deserializeSecretPayload(serialized) {
+    switch (serialized.encoding) {
+        case "utf8":
+            return serialized.value;
+        case "json":
+            try {
+                return JSON.parse(serialized.value);
+            }
+            catch (error) {
+                throw new SecretErrors_js_1.SecretError("SECRET_DESERIALIZATION_FAILED", `Failed to deserialize JSON payload: ${error.message}`, error);
+            }
+        case "base64":
+            return Buffer.from(serialized.value, "base64");
+        default:
+            throw new SecretErrors_js_1.SecretError("SECRET_DESERIALIZATION_FAILED", `Unknown encoding: ${serialized.encoding}`);
+    }
+}
+//# sourceMappingURL=SecretSerialization.js.map
+//# sourceMappingURL=SecretSerialization.js.map

package/lib/cjs/secrets/core/SecretSerialization.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"SecretSerialization.js","sourceRoot":"","sources":["SecretSerialization.js"],"names":[],"mappings":";;AAMA,wDAsBC;AACD,4DAgBC;AA7CD;;;;GAIG;AACH,uDAAgD;AAChD,SAAgB,sBAAsB,CAAC,OAAO;IAC1C,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;IAChD,CAAC;IACD,IAAI,OAAO,YAAY,UAAU,EAAE,CAAC;QAChC,OAAO;YACH,QAAQ,EAAE,QAAQ;YAClB,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;SACjD,CAAC;IACN,CAAC;IACD,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QAClD,IAAI,CAAC;YACD,OAAO;gBACH,QAAQ,EAAE,MAAM;gBAChB,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;aACjC,CAAC;QACN,CAAC;QACD,OAAO,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,6BAAW,CAAC,6BAA6B,EAAE,wCAAwC,KAAK,CAAC,OAAO,EAAE,EAAE,KAAK,CAAC,CAAC;QACzH,CAAC;IACL,CAAC;IACD,MAAM,IAAI,6BAAW,CAAC,wBAAwB,EAAE,yBAAyB,OAAO,OAAO,EAAE,CAAC,CAAC;AAC/F,CAAC;AACD,SAAgB,wBAAwB,CAAC,UAAU;IAC/C,QAAQ,UAAU,CAAC,QAAQ,EAAE,CAAC;QAC1B,KAAK,MAAM;YACP,OAAO,UAAU,CAAC,KAAK,CAAC;QAC5B,KAAK,MAAM;YACP,IAAI,CAAC;gBACD,OAAO,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;YACxC,CAAC;YACD,OAAO,KAAK,EAAE,CAAC;gBACX,MAAM,IAAI,6BAAW,CAAC,+BAA+B,EAAE,uCAAuC,KAAK,CAAC,OAAO,EAAE,EAAE,KAAK,CAAC,CAAC;YAC1H,CAAC;QACL,KAAK,QAAQ;YACT,OAAO,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;QACnD;YACI,MAAM,IAAI,6BAAW,CAAC,+BAA+B,EAAE,qBAAqB,UAAU,CAAC,QAAQ,EAAE,CAAC,CAAC;IAC3G,CAAC;AACL,CAAC;AACD,+CAA+C"}

package/lib/cjs/secrets/core/SecretService.cjs

@@ -0,0 +1,19 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SecretService = void 0;
+const core_1 = require("@decaf-ts/core");
+/**
+ * @class SecretService
+ * @summary Base abstraction for secret backends.
+ * @description Defines the shared CRUD and metadata contract implemented by the model-backed and provider-backed secret services.
+ */
+class SecretService extends core_1.Service {
+    constructor(config) {
+        super();
+        this.config = Object.freeze({ ...config });
+        this.provider = config.provider;
+    }
+}
+exports.SecretService = SecretService;
+//# sourceMappingURL=SecretService.js.map
+//# sourceMappingURL=SecretService.js.map

package/lib/cjs/secrets/core/SecretService.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"SecretService.js","sourceRoot":"","sources":["SecretService.js"],"names":[],"mappings":";;;AAAA,yCAAyC;AACzC;;;;GAIG;AACH,MAAa,aAAc,SAAQ,cAAO;IACtC,YAAY,MAAM;QACd,KAAK,EAAE,CAAC;QACR,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC;QAC3C,IAAI,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;IACpC,CAAC;CACJ;AAND,sCAMC;AACD,yCAAyC"}

package/lib/cjs/secrets/core/SecretTypes.cjs

@@ -0,0 +1,4 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=SecretTypes.js.map
+//# sourceMappingURL=SecretTypes.js.map

package/lib/cjs/secrets/core/SecretTypes.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"SecretTypes.js","sourceRoot":"","sources":["SecretTypes.js"],"names":[],"mappings":";;AACA,uCAAuC"}

package/lib/cjs/secrets/core/index.cjs

@@ -0,0 +1,29 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+/**
+ * @module integrations/secrets/core
+ * @summary Secret core exports.
+ * @description Re-exports the secret core types, errors, serialization helpers, and name/reference utilities.
+ */
+__exportStar(require("./SecretTypes.cjs"), exports);
+__exportStar(require("./SecretErrors.cjs"), exports);
+__exportStar(require("./SecretSerialization.cjs"), exports);
+__exportStar(require("./SecretName.cjs"), exports);
+__exportStar(require("./SecretReference.cjs"), exports);
+__exportStar(require("./SecretService.cjs"), exports);
+//# sourceMappingURL=index.js.map
+//# sourceMappingURL=index.js.map

package/lib/cjs/secrets/core/index.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["index.js"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA;;;;GAIG;AACH,mDAAiC;AACjC,oDAAkC;AAClC,2DAAyC;AACzC,kDAAgC;AAChC,uDAAqC;AACrC,qDAAmC;AACnC,iCAAiC"}