@decaf-ts/integrations 0.1.1

package/lib/esm/secrets/model/ModelSecretCrypto.js

@@ -0,0 +1,73 @@
+// @ts-expect-error - crypto is a peer dependency with exports field
+import { getCrypto, getSubtle } from "@decaf-ts/crypto/integration";
+import { InternalError } from "@decaf-ts/db-decorators";
+const ALGORITHM = { name: "AES-GCM", length: 256 };
+const IV_LENGTH = 12;
+export async function encryptPayload(payload, keyId, key) {
+    try {
+        const crypto = (await getCrypto());
+        const subtle = await getSubtle();
+        const salt = crypto.randomBytes(IV_LENGTH);
+        const keyBuffer = Buffer.from(key, "base64");
+        const importedKey = await subtle.importKey("raw", keyBuffer, ALGORITHM, false, ["encrypt"]);
+        const encoder = new TextEncoder();
+        const data = encoder.encode(payload);
+        const encryptedBuffer = await subtle.encrypt({
+            ...ALGORITHM,
+            iv: salt,
+        }, importedKey, data);
+        const encryptedBytes = new Uint8Array(encryptedBuffer);
+        const combined = new Uint8Array(IV_LENGTH + encryptedBytes.length);
+        combined.set(salt);
+        combined.set(encryptedBytes, IV_LENGTH);
+        return {
+            encryptedData: Buffer.from(combined).toString("base64"),
+            metadata: {
+                keyId,
+                iv: salt.toString("base64"),
+            },
+        };
+    }
+    catch (error) {
+        throw new InternalError(`Failed to encrypt payload: ${error.message}`);
+    }
+}
+export async function decryptPayload(encryptedData, key) {
+    try {
+        const subtle = await getSubtle();
+        const combined = Buffer.from(encryptedData, "base64");
+        const iv = combined.slice(0, IV_LENGTH);
+        const cipherText = combined.slice(IV_LENGTH);
+        const keyBuffer = Buffer.from(key, "base64");
+        const importedKey = await subtle.importKey("raw", keyBuffer, ALGORITHM, false, ["decrypt"]);
+        const decryptedBuffer = await subtle.decrypt({
+            ...ALGORITHM,
+            iv: iv,
+        }, importedKey, cipherText);
+        const decoder = new TextDecoder();
+        return decoder.decode(decryptedBuffer);
+    }
+    catch (error) {
+        throw new InternalError(`Failed to decrypt payload: ${error.message}`);
+    }
+}
+export async function deriveKeyFromSecret(secret, salt) {
+    try {
+        const crypto = (await getCrypto());
+        const saltBuffer = salt
+            ? Buffer.from(salt, "base64")
+            : crypto.randomBytes(16);
+        const key = crypto.pbkdf2Sync(secret, saltBuffer, 100_000, 32, "sha256");
+        return Buffer.concat([saltBuffer, key]).toString("base64");
+    }
+    catch (error) {
+        throw new InternalError(`Failed to derive key: ${error.message}`);
+    }
+}
+export function extractKeyFromDerivedKey(derivedKey) {
+    const buffer = Buffer.from(derivedKey, "base64");
+    const salt = buffer.slice(0, 16).toString("base64");
+    const key = buffer.slice(16).toString("base64");
+    return { salt, key };
+}
+//# sourceMappingURL=ModelSecretCrypto.js.map

package/lib/esm/secrets/model/ModelSecretCrypto.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ModelSecretCrypto.js","sourceRoot":"","sources":["../../../../src/secrets/model/ModelSecretCrypto.ts"],"names":[],"mappings":"AAAA,oEAAoE;AACpE,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,8BAA8B,CAAC;AACpE,OAAO,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAGxD,MAAM,SAAS,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AACnD,MAAM,SAAS,GAAG,EAAE,CAAC;AAErB,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,OAAe,EACf,KAAa,EACb,GAAW;IAEX,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,CAAC,MAAM,SAAS,EAAE,CAAQ,CAAC;QAC1C,MAAM,MAAM,GAAG,MAAM,SAAS,EAAE,CAAC;QAEjC,MAAM,IAAI,GAAG,MAAM,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;QAC3C,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QAC7C,MAAM,WAAW,GAAG,MAAM,MAAM,CAAC,SAAS,CACxC,KAAK,EACL,SAAS,EACT,SAAS,EACT,KAAK,EACL,CAAC,SAAS,CAAC,CACZ,CAAC;QAEF,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;QAClC,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACrC,MAAM,eAAe,GAAG,MAAM,MAAM,CAAC,OAAO,CAC1C;YACE,GAAG,SAAS;YACZ,EAAE,EAAE,IAAI;SACT,EACD,WAAW,EACX,IAAI,CACL,CAAC;QAEF,MAAM,cAAc,GAAG,IAAI,UAAU,CAAC,eAAe,CAAC,CAAC;QACvD,MAAM,QAAQ,GAAG,IAAI,UAAU,CAAC,SAAS,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;QACnE,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACnB,QAAQ,CAAC,GAAG,CAAC,cAAc,EAAE,SAAS,CAAC,CAAC;QAExC,OAAO;YACL,aAAa,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;YACvD,QAAQ,EAAE;gBACR,KAAK;gBACL,EAAE,EAAE,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC;aAC5B;SACF,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,aAAa,CACrB,8BAA+B,KAAe,CAAC,OAAO,EAAE,CACzD,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,aAAqB,EACrB,GAAW;IAEX,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,SAAS,EAAE,CAAC;QAEjC,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAC;QACtD,MAAM,EAAE,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;QACxC,MAAM,UAAU,GAAG,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QAE7C,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QAC7C,MAAM,WAAW,GAAG,MAAM,MAAM,CAAC,SAAS,CACxC,KAAK,EACL,SAAS,EACT,SAAS,EACT,KAAK,EACL,CAAC,SAAS,CAAC,CACZ,CAAC;QAEF,MAAM,eAAe,GAAG,MAAM,MAAM,CAAC,OAAO,CAC1C;YACE,GAAG,SAAS;YACZ,EAAE,EAAE,EAAE;SACP,EACD,WAAW,EACX,UAAU,CACX,CAAC;QAEF,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;QAClC,OAAO,OAAO,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;IACzC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,aAAa,CACrB,8BAA+B,KAAe,CAAC,OAAO,EAAE,CACzD,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,MAAc,EACd,IAAa;IAEb,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,CAAC,MAAM,SAAS,EAAE,CAAQ,CAAC;QAC1C,MAAM,UAAU,GAAG,IAAI;YACrB,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC;YAC7B,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;QAC3B,MAAM,GAAG,GAAG,MAAM,CAAC,UAAU,CAAC,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,EAAE,EAAE,QAAQ,CAAC,CAAC;QACzE,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC7D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,aAAa,CACrB,yBAA0B,KAAe,CAAC,OAAO,EAAE,CACpD,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,UAAkB;IAIzD,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;IACjD,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACpD,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAChD,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;AACvB,CAAC"}

package/lib/esm/secrets/model/ModelSecretService.js

@@ -0,0 +1,266 @@
+import { SecretError } from "./../core/index.js";
+import { validateSecretName, normalizeSecretName } from "./../core/index.js";
+import { serializeSecretPayload, deserializeSecretPayload, } from "./../core/index.js";
+import { Secret } from "./Secret.js";
+import { ClientBasedService, Repository, } from "@decaf-ts/core";
+import { Condition } from "@decaf-ts/core";
+import { CryptoService } from "@decaf-ts/crypto/integration/services";
+import { InternalError, NotFoundError } from "@decaf-ts/db-decorators";
+const DEFAULT_KEY_ID = "default-key";
+export class ModelSecretService extends ClientBasedService {
+    constructor() {
+        super(...arguments);
+        this.provider = "model";
+    }
+    async initialize(...args) {
+        const config = args[0];
+        const repository = args[1] ||
+            new Repository(undefined, Secret);
+        this.cryptoService = new CryptoService();
+        await this.cryptoService.initialize(config);
+        return { config, client: repository };
+    }
+    async store(name, value, options = {}, ...args) {
+        const { log } = (await this.logCtx(args, "store", true)).for(this.store);
+        log.verbose(`Storing secret ${name}`);
+        try {
+            validateSecretName(name);
+        }
+        catch (error) {
+            throw this.parseError(error);
+        }
+        const normalizedName = normalizeSecretName(name);
+        const serialized = serializeSecretPayload(value);
+        const derivedKey = await this.cryptoService.deriveKeyFromSecret(this.config.keySecret);
+        const { encryptedData, metadata } = await this.cryptoService.encryptPayload(serialized.value, this.config.keyId || DEFAULT_KEY_ID, this.cryptoService.extractKeyFromDerivedKey(derivedKey).key);
+        const now = new Date();
+        const secret = new Secret({
+            name: normalizedName,
+            provider: this.provider,
+            encryptedPayload: encryptedData,
+            encryption: {
+                keyId: metadata.keyId,
+                iv: metadata.iv,
+            },
+            contentType: options.contentType,
+            tags: options.tags,
+            enabled: true,
+            version: options.version,
+        });
+        try {
+            await this.client.create(secret);
+        }
+        catch (error) {
+            if (error?.message?.toLowerCase()?.includes?.("already") ||
+                error?.name === "ConflictError") {
+                throw this.parseError(error);
+            }
+            throw this.parseError(error);
+        }
+        return {
+            provider: this.provider,
+            name: normalizedName,
+            version: options.version,
+            metadata: {
+                createdAt: now.toISOString(),
+            },
+        };
+    }
+    async retrieve(nameOrRef, options = {}, ...args) {
+        const { log } = (await this.logCtx(args, "retrieve", true)).for(this.retrieve);
+        const nameStr = typeof nameOrRef === "string" ? nameOrRef : nameOrRef.name;
+        log.verbose(`Retrieving secret ${nameStr}`);
+        let name;
+        let version;
+        if (typeof nameOrRef === "string") {
+            name = nameOrRef;
+            version = options.version;
+        }
+        else {
+            name = nameOrRef.name;
+            version = nameOrRef.version;
+        }
+        try {
+            validateSecretName(name);
+        }
+        catch (error) {
+            throw this.parseError(error);
+        }
+        const normalizedName = normalizeSecretName(name);
+        let condition = Condition.attr("name").eq(normalizedName);
+        if (version) {
+            condition = condition.and(Condition.attr("version").eq(version));
+        }
+        condition = condition.and(Condition.attr("enabled").eq(true));
+        const results = await this.client.select().where(condition).execute();
+        const existing = results[0];
+        if (!existing) {
+            throw new NotFoundError(`Secret "${normalizedName}" not found`);
+        }
+        const derivedKey = await this.cryptoService.deriveKeyFromSecret(this.config.keySecret);
+        let decryptedValue;
+        try {
+            decryptedValue = await this.cryptoService.decryptPayload(existing.encryptedPayload, this.cryptoService.extractKeyFromDerivedKey(derivedKey).key);
+        }
+        catch (error) {
+            throw new InternalError(`Failed to decrypt secret "${normalizedName}": ${error.message}`);
+        }
+        const payload = {
+            encoding: "utf8",
+            value: decryptedValue,
+        };
+        return deserializeSecretPayload(payload);
+    }
+    async delete(nameOrRef, options = {}, ...args) {
+        const { log } = (await this.logCtx(args, "delete", true)).for(this.delete);
+        const nameStr = typeof nameOrRef === "string" ? nameOrRef : nameOrRef.name;
+        log.verbose(`Deleting secret ${nameStr}`);
+        let name;
+        if (typeof nameOrRef === "string") {
+            name = nameOrRef;
+        }
+        else {
+            name = nameOrRef.name;
+        }
+        try {
+            validateSecretName(name);
+        }
+        catch (error) {
+            throw this.parseError(error);
+        }
+        const normalizedName = normalizeSecretName(name);
+        let filter = Condition.attr("name").eq(normalizedName);
+        const version = options.version;
+        if (version) {
+            filter = filter.and(Condition.attr("version").eq(version));
+        }
+        const results = await this.client.select().where(filter).execute();
+        const existing = results[0];
+        if (!existing) {
+            return;
+        }
+        if (options.force) {
+            await this.client.delete(normalizedName);
+        }
+        else {
+            existing.enabled = false;
+            existing.updatedAt = new Date();
+            await this.client.update(existing);
+        }
+    }
+    async exists(nameOrRef, options = {}, ...args) {
+        const { log } = (await this.logCtx(args, "exists", true)).for(this.exists);
+        const nameStr = typeof nameOrRef === "string" ? nameOrRef : nameOrRef.name;
+        log.verbose(`Checking if secret ${nameStr} exists`);
+        let name;
+        if (typeof nameOrRef === "string") {
+            name = nameOrRef;
+        }
+        else {
+            name = nameOrRef.name;
+        }
+        try {
+            validateSecretName(name);
+        }
+        catch (error) {
+            throw this.parseError(error);
+        }
+        const normalizedName = normalizeSecretName(name);
+        let filter = Condition.attr("name").eq(normalizedName);
+        filter = filter.and(Condition.attr("enabled").eq(true));
+        const version = options.version ??
+            (typeof nameOrRef === "object" ? nameOrRef.version : undefined);
+        if (version) {
+            filter = filter.and(Condition.attr("version").eq(version));
+        }
+        const count = await this.client.count().where(filter).execute();
+        return count > 0;
+    }
+    async list(options = {}, ...args) {
+        const { log } = (await this.logCtx(args, "list", true)).for(this.list);
+        log.verbose("Listing secrets");
+        let condition = null;
+        if (options.enabled !== undefined) {
+            condition = Condition.attr("enabled").eq(options.enabled);
+        }
+        const secrets = await this.client
+            .select()
+            .where(condition || Condition.attr("name").dif(null))
+            .execute();
+        return secrets.map((secret) => ({
+            provider: secret.provider,
+            name: secret.name,
+            version: secret.version,
+            createdAt: secret.createdAt,
+            updatedAt: secret.updatedAt,
+            enabled: secret.enabled,
+            contentType: secret.contentType,
+            tags: secret.tags,
+        }));
+    }
+    async metadata(nameOrRef, options = {}, ...args) {
+        const { log } = (await this.logCtx(args, "metadata", true)).for(this.metadata);
+        const nameStr = typeof nameOrRef === "string" ? nameOrRef : nameOrRef.name;
+        log.verbose(`Getting metadata for secret ${nameStr}`);
+        let name;
+        if (typeof nameOrRef === "string") {
+            name = nameOrRef;
+        }
+        else {
+            name = nameOrRef.name;
+        }
+        try {
+            validateSecretName(name);
+        }
+        catch (error) {
+            throw this.parseError(error);
+        }
+        const normalizedName = normalizeSecretName(name);
+        let filter = Condition.attr("name").eq(normalizedName);
+        const version = options.version ??
+            (typeof nameOrRef === "object" ? nameOrRef.version : undefined);
+        if (version) {
+            filter = filter.and(Condition.attr("version").eq(version));
+        }
+        const results = await this.client
+            .select()
+            .where(filter)
+            .execute();
+        const secret = results[0];
+        if (!secret) {
+            return undefined;
+        }
+        const meta = {
+            provider: secret.provider,
+            name: secret.name,
+            version: secret.version,
+            createdAt: secret.createdAt,
+            updatedAt: secret.updatedAt,
+            enabled: secret.enabled,
+            contentType: secret.contentType,
+        };
+        if (options.includeTags) {
+            meta.tags = secret.tags;
+        }
+        return meta;
+    }
+    parseError(error) {
+        const err = error;
+        const message = err.message || err.name || "Unknown error";
+        const lowerMessage = message.toLowerCase();
+        if (lowerMessage.includes("not found") || lowerMessage.includes("404")) {
+            return new SecretError("SECRET_NOT_FOUND", `Secret not found: ${message}`, err);
+        }
+        if (lowerMessage.includes("already exists") ||
+            lowerMessage.includes("conflict") ||
+            lowerMessage.includes("409")) {
+            return new SecretError("SECRET_ALREADY_EXISTS", `Secret already exists: ${message}`, err);
+        }
+        if (lowerMessage.includes("decryption") ||
+            lowerMessage.includes("decrypt")) {
+            return new SecretError("SECRET_DECRYPTION_FAILED", `Decryption failed: ${message}`, err);
+        }
+        return new SecretError("SECRET_PROVIDER_CONFLICT", `Provider error: ${message}`, err);
+    }
+}
+//# sourceMappingURL=ModelSecretService.js.map

package/lib/esm/secrets/model/ModelSecretService.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ModelSecretService.js","sourceRoot":"","sources":["../../../../src/secrets/model/ModelSecretService.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAkB,2BAAgB;AAetD,OAAO,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,2BAAgB;AAClE,OAAO,EACL,sBAAsB,EACtB,wBAAwB,GAEzB,2BAAgB;AACjB,OAAO,EAAE,MAAM,EAAE,oBAAiB;AAClC,OAAO,EACL,kBAAkB,EAGlB,UAAU,GACX,MAAM,gBAAgB,CAAC;AAExB,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAC3C,OAAO,EAAE,aAAa,EAAE,MAAM,uCAAuC,CAAC;AACtE,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAEvE,MAAM,cAAc,GAAG,aAAa,CAAC;AAErC,MAAM,OAAO,kBAAmB,SAAQ,kBAGvC;IAHD;;QAIW,aAAQ,GAAmB,OAAO,CAAC;IAkX9C,CAAC;IA/WC,KAAK,CAAC,UAAU,CACd,GAAG,IAAyB;QAK5B,MAAM,MAAM,GAAG,IAAI,CAAC,CAAC,CAA6B,CAAC;QACnD,MAAM,UAAU,GACb,IAAI,CAAC,CAAC,CAAyC;YAChD,IAAI,UAAU,CAAc,SAAS,EAAE,MAAM,CAAC,CAAC;QACjD,IAAI,CAAC,aAAa,GAAG,IAAI,aAAa,EAAE,CAAC;QACzC,MAAM,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QAC5C,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;IACxC,CAAC;IAED,KAAK,CAAC,KAAK,CACT,IAAgB,EAChB,KAAQ,EACR,UAA8B,EAAE,EAChC,GAAG,IAA6B;QAEhC,MAAM,EAAE,GAAG,EAAE,GAAG,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACzE,GAAG,CAAC,OAAO,CAAC,kBAAkB,IAAI,EAAE,CAAC,CAAC;QACtC,IAAI,CAAC;YACH,kBAAkB,CAAC,IAAI,CAAC,CAAC;QAC3B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,CAAC,UAAU,CAAC,KAAc,CAAC,CAAC;QACxC,CAAC;QAED,MAAM,cAAc,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC;QACjD,MAAM,UAAU,GAAG,sBAAsB,CAAC,KAAK,CAAC,CAAC;QACjD,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,mBAAmB,CAC7D,IAAI,CAAC,MAAM,CAAC,SAAmB,CAChC,CAAC;QACF,MAAM,EAAE,aAAa,EAAE,QAAQ,EAAE,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,cAAc,CACzE,UAAU,CAAC,KAAK,EAChB,IAAI,CAAC,MAAM,CAAC,KAAK,IAAI,cAAc,EACnC,IAAI,CAAC,aAAa,CAAC,wBAAwB,CAAC,UAAU,CAAC,CAAC,GAAG,CAC5D,CAAC;QAEF,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,MAAM,GAAG,IAAI,MAAM,CAAC;YACxB,IAAI,EAAE,cAAc;YACpB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,gBAAgB,EAAE,aAAa;YAC/B,UAAU,EAAE;gBACV,KAAK,EAAE,QAAQ,CAAC,KAAK;gBACrB,EAAE,EAAE,QAAQ,CAAC,EAAE;aAChB;YACD,WAAW,EAAE,OAAO,CAAC,WAAW;YAChC,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,OAAO,EAAE,IAAI;YACb,OAAO,EAAE,OAAO,CAAC,OAAO;SACzB,CAAC,CAAC;QAEH,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACnC,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACpB,IACE,KAAK,EAAE,OAAO,EAAE,WAAW,EAAE,EAAE,QAAQ,EAAE,CAAC,SAAS,CAAC;gBACpD,KAAK,EAAE,IAAI,KAAK,eAAe,EAC/B,CAAC;gBACD,MAAM,IAAI,CAAC,UAAU,CAAC,KAAc,CAAC,CAAC;YACxC,CAAC;YACD,MAAM,IAAI,CAAC,UAAU,CAAC,KAAc,CAAC,CAAC;QACxC,CAAC;QAED,OAAO;YACL,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,IAAI,EAAE,cAAc;YACpB,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,QAAQ,EAAE;gBACR,SAAS,EAAE,GAAG,CAAC,WAAW,EAAE;aAC7B;SACF,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,QAAQ,CACZ,SAAuC,EACvC,UAAiC,EAAE,EACnC,GAAG,IAA6B;QAEhC,MAAM,EAAE,GAAG,EAAE,GAAG,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,CAAC,CAAC,CAAC,GAAG,CAC7D,IAAI,CAAC,QAAQ,CACd,CAAC;QACF,MAAM,OAAO,GAAG,OAAO,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC;QAC3E,GAAG,CAAC,OAAO,CAAC,qBAAqB,OAAO,EAAE,CAAC,CAAC;QAE5C,IAAI,IAAY,CAAC;QACjB,IAAI,OAA2B,CAAC;QAEhC,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;YAClC,IAAI,GAAG,SAAS,CAAC;YACjB,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;QAC5B,CAAC;aAAM,CAAC;YACN,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC;YACtB,OAAO,GAAG,SAAS,CAAC,OAAO,CAAC;QAC9B,CAAC;QAED,IAAI,CAAC;YACH,kBAAkB,CAAC,IAAI,CAAC,CAAC;QAC3B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,CAAC,UAAU,CAAC,KAAc,CAAC,CAAC;QACxC,CAAC;QAED,MAAM,cAAc,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC;QAEjD,IAAI,SAAS,GAAG,SAAS,CAAC,IAAI,CAAS,MAAM,CAAC,CAAC,EAAE,CAAC,cAAc,CAAC,CAAC;QAElE,IAAI,OAAO,EAAE,CAAC;YACZ,SAAS,GAAG,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAS,SAAS,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;QAC3E,CAAC;QAED,SAAS,GAAG,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAS,SAAS,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;QAEtE,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,CAAC;QACtE,MAAM,QAAQ,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QAE5B,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,IAAI,aAAa,CAAC,WAAW,cAAc,aAAa,CAAC,CAAC;QAClE,CAAC;QAED,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,mBAAmB,CAC7D,IAAI,CAAC,MAAM,CAAC,SAAmB,CAChC,CAAC;QACF,IAAI,cAAsB,CAAC;QAC3B,IAAI,CAAC;YACH,cAAc,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,cAAc,CACtD,QAAQ,CAAC,gBAAgB,EACzB,IAAI,CAAC,aAAa,CAAC,wBAAwB,CAAC,UAAU,CAAC,CAAC,GAAG,CAC5D,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,aAAa,CACrB,6BAA6B,cAAc,MAAO,KAAe,CAAC,OAAO,EAAE,CAC5E,CAAC;QACJ,CAAC;QAED,MAAM,OAAO,GAA4B;YACvC,QAAQ,EAAE,MAAM;YAChB,KAAK,EAAE,cAAc;SACtB,CAAC;QAEF,OAAO,wBAAwB,CAAC,OAAO,CAAM,CAAC;IAChD,CAAC;IAED,KAAK,CAAC,MAAM,CACV,SAAuC,EACvC,UAA+B,EAAE,EACjC,GAAG,IAA6B;QAEhC,MAAM,EAAE,GAAG,EAAE,GAAG,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC3E,MAAM,OAAO,GAAG,OAAO,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC;QAC3E,GAAG,CAAC,OAAO,CAAC,mBAAmB,OAAO,EAAE,CAAC,CAAC;QAE1C,IAAI,IAAY,CAAC;QAEjB,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;YAClC,IAAI,GAAG,SAAS,CAAC;QACnB,CAAC;aAAM,CAAC;YACN,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC;QACxB,CAAC;QAED,IAAI,CAAC;YACH,kBAAkB,CAAC,IAAI,CAAC,CAAC;QAC3B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,CAAC,UAAU,CAAC,KAAc,CAAC,CAAC;QACxC,CAAC;QAED,MAAM,cAAc,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC;QAEjD,IAAI,MAAM,GAAG,SAAS,CAAC,IAAI,CAAS,MAAM,CAAC,CAAC,EAAE,CAAC,cAAc,CAAC,CAAC;QAC/D,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;QAChC,IAAI,OAAO,EAAE,CAAC;YACZ,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAS,SAAS,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;QACrE,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,CAAC;QACnE,MAAM,QAAQ,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QAE5B,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO;QACT,CAAC;QAED,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;YAClB,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;QAC3C,CAAC;aAAM,CAAC;YACN,QAAQ,CAAC,OAAO,GAAG,KAAK,CAAC;YACzB,QAAQ,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC;YAChC,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACrC,CAAC;IACH,CAAC;IAED,KAAK,CAAC,MAAM,CACV,SAAuC,EACvC,UAA+B,EAAE,EACjC,GAAG,IAA6B;QAEhC,MAAM,EAAE,GAAG,EAAE,GAAG,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC3E,MAAM,OAAO,GAAG,OAAO,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC;QAC3E,GAAG,CAAC,OAAO,CAAC,sBAAsB,OAAO,SAAS,CAAC,CAAC;QAEpD,IAAI,IAAY,CAAC;QAEjB,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;YAClC,IAAI,GAAG,SAAS,CAAC;QACnB,CAAC;aAAM,CAAC;YACN,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC;QACxB,CAAC;QAED,IAAI,CAAC;YACH,kBAAkB,CAAC,IAAI,CAAC,CAAC;QAC3B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,CAAC,UAAU,CAAC,KAAc,CAAC,CAAC;QACxC,CAAC;QAED,MAAM,cAAc,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC;QAEjD,IAAI,MAAM,GAAG,SAAS,CAAC,IAAI,CAAS,MAAM,CAAC,CAAC,EAAE,CAAC,cAAc,CAAC,CAAC;QAC/D,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAS,SAAS,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;QAEhE,MAAM,OAAO,GACX,OAAO,CAAC,OAAO;YACf,CAAC,OAAO,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QAClE,IAAI,OAAO,EAAE,CAAC;YACZ,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAS,SAAS,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;QACrE,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,CAAC;QAEhE,OAAO,KAAK,GAAG,CAAC,CAAC;IACnB,CAAC;IAED,KAAK,CAAC,IAAI,CACR,UAA8B,EAAE,EAChC,GAAG,IAA6B;QAEhC,MAAM,EAAE,GAAG,EAAE,GAAG,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvE,GAAG,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;QAE/B,IAAI,SAAS,GAA6B,IAAI,CAAC;QAE/C,IAAI,OAAO,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;YAClC,SAAS,GAAG,SAAS,CAAC,IAAI,CAAS,SAAS,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QACpE,CAAC;QAED,MAAM,OAAO,GAAa,MAAM,IAAI,CAAC,MAAM;aACxC,MAAM,EAAE;aACR,KAAK,CAAC,SAAS,IAAI,SAAS,CAAC,IAAI,CAAS,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;aAC5D,OAAO,EAAE,CAAC;QAEb,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,MAAc,EAAE,EAAE,CAAC,CAAC;YACtC,QAAQ,EAAE,MAAM,CAAC,QAA0B;YAC3C,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,IAAI,EAAE,MAAM,CAAC,IAAI;SAClB,CAAC,CAAC,CAAC;IACN,CAAC;IAED,KAAK,CAAC,QAAQ,CACZ,SAAuC,EACvC,UAAiC,EAAE,EACnC,GAAG,IAA6B;QAEhC,MAAM,EAAE,GAAG,EAAE,GAAG,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,CAAC,CAAC,CAAC,GAAG,CAC7D,IAAI,CAAC,QAAQ,CACd,CAAC;QACF,MAAM,OAAO,GAAG,OAAO,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC;QAC3E,GAAG,CAAC,OAAO,CAAC,+BAA+B,OAAO,EAAE,CAAC,CAAC;QAEtD,IAAI,IAAY,CAAC;QAEjB,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;YAClC,IAAI,GAAG,SAAS,CAAC;QACnB,CAAC;aAAM,CAAC;YACN,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC;QACxB,CAAC;QAED,IAAI,CAAC;YACH,kBAAkB,CAAC,IAAI,CAAC,CAAC;QAC3B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,CAAC,UAAU,CAAC,KAAc,CAAC,CAAC;QACxC,CAAC;QAED,MAAM,cAAc,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC;QAEjD,IAAI,MAAM,GAAG,SAAS,CAAC,IAAI,CAAS,MAAM,CAAC,CAAC,EAAE,CAAC,cAAc,CAAC,CAAC;QAE/D,MAAM,OAAO,GACX,OAAO,CAAC,OAAO;YACf,CAAC,OAAO,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QAClE,IAAI,OAAO,EAAE,CAAC;YACZ,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAS,SAAS,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;QACrE,CAAC;QAED,MAAM,OAAO,GAAa,MAAM,IAAI,CAAC,MAAM;aACxC,MAAM,EAAE;aACR,KAAK,CAAC,MAAM,CAAC;aACb,OAAO,EAAE,CAAC;QACb,MAAM,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QAE1B,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,MAAM,IAAI,GAAmB;YAC3B,QAAQ,EAAE,MAAM,CAAC,QAA0B;YAC3C,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,WAAW,EAAE,MAAM,CAAC,WAAW;SAChC,CAAC;QAEF,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;YACxB,IAAI,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;QAC1B,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAES,UAAU,CAAC,KAAc;QACjC,MAAM,GAAG,GAAG,KAAc,CAAC;QAC3B,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,IAAI,IAAI,eAAe,CAAC;QAC3D,MAAM,YAAY,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;QAE3C,IAAI,YAAY,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACvE,OAAO,IAAI,WAAW,CACpB,kBAAkB,EAClB,qBAAqB,OAAO,EAAE,EAC9B,GAAG,CACJ,CAAC;QACJ,CAAC;QAED,IACE,YAAY,CAAC,QAAQ,CAAC,gBAAgB,CAAC;YACvC,YAAY,CAAC,QAAQ,CAAC,UAAU,CAAC;YACjC,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,EAC5B,CAAC;YACD,OAAO,IAAI,WAAW,CACpB,uBAAuB,EACvB,0BAA0B,OAAO,EAAE,EACnC,GAAG,CACJ,CAAC;QACJ,CAAC;QAED,IACE,YAAY,CAAC,QAAQ,CAAC,YAAY,CAAC;YACnC,YAAY,CAAC,QAAQ,CAAC,SAAS,CAAC,EAChC,CAAC;YACD,OAAO,IAAI,WAAW,CACpB,0BAA0B,EAC1B,sBAAsB,OAAO,EAAE,EAC/B,GAAG,CACJ,CAAC;QACJ,CAAC;QAED,OAAO,IAAI,WAAW,CACpB,0BAA0B,EAC1B,mBAAmB,OAAO,EAAE,EAC5B,GAAG,CACJ,CAAC;IACJ,CAAC;CACF"}

package/lib/esm/secrets/model/ModelSecretServiceConfig.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=ModelSecretServiceConfig.js.map

package/lib/esm/secrets/model/ModelSecretServiceConfig.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ModelSecretServiceConfig.js","sourceRoot":"","sources":["../../../../src/secrets/model/ModelSecretServiceConfig.ts"],"names":[],"mappings":""}

package/lib/esm/secrets/model/Secret.js

@@ -0,0 +1,39 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+/**
+ * @module integrations/secrets/model/secret
+ * @summary Encrypted secret model types.
+ * @description Model payload and metadata types used by the encrypted-at-rest secret service.
+ */
+import { BaseModel } from "@decaf-ts/core";
+import { required } from "@decaf-ts/decorator-validation";
+export class Secret extends BaseModel {
+    constructor(data) {
+        super(data);
+        this.enabled = true;
+    }
+}
+__decorate([
+    required(),
+    __metadata("design:type", String)
+], Secret.prototype, "name", void 0);
+__decorate([
+    required(),
+    __metadata("design:type", String)
+], Secret.prototype, "provider", void 0);
+__decorate([
+    required(),
+    __metadata("design:type", String)
+], Secret.prototype, "encryptedPayload", void 0);
+__decorate([
+    required(),
+    __metadata("design:type", Object)
+], Secret.prototype, "encryption", void 0);
+//# sourceMappingURL=Secret.js.map

package/lib/esm/secrets/model/Secret.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Secret.js","sourceRoot":"","sources":["../../../../src/secrets/model/Secret.ts"],"names":[],"mappings":";;;;;;;;;AAAA;;;;GAIG;AACH,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAC3C,OAAO,EAAE,QAAQ,EAAE,MAAM,gCAAgC,CAAC;AAQ1D,MAAM,OAAO,MAAO,SAAQ,SAAS;IAoBnC,YAAY,IAAsB;QAChC,KAAK,CAAC,IAAI,CAAC,CAAC;QANd,YAAO,GAAY,IAAI,CAAC;IAOxB,CAAC;CACF;AArBC;IADC,QAAQ,EAAE;;oCACG;AAGd;IADC,QAAQ,EAAE;;wCACO;AAGlB;IADC,QAAQ,EAAE;;gDACe;AAG1B;IADC,QAAQ,EAAE;;0CAC2B"}

package/lib/esm/secrets/model/index.js

@@ -0,0 +1,9 @@
+/**
+ * @module integrations/secrets/model
+ * @summary Model-backed secret service exports.
+ * @description Re-exports the encrypted-at-rest secret model, config, and service.
+ */
+export * from "./Secret.js";
+export * from "./ModelSecretServiceConfig.js";
+export * from "./ModelSecretService.js";
+//# sourceMappingURL=index.js.map

package/lib/esm/secrets/model/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/secrets/model/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,4BAAyB;AACzB,8CAA2C;AAC3C,wCAAqC"}