@decaf-ts/integrations 0.1.1

package/lib/esm/secrets/vault/VaultSecretService.js

@@ -0,0 +1,312 @@
+import { validateSecretName, normalizeSecretName } from "./../core/index.js";
+import { serializeSecretPayload, deserializeSecretPayload, } from "./../core/index.js";
+import { ClientBasedService } from "@decaf-ts/core";
+import { BadRequestError, ConflictError, InternalError, NotFoundError, } from "@decaf-ts/db-decorators";
+export class VaultKvV2Client {
+    constructor(config) {
+        this.baseUrl = config.baseUrl.replace(/\/+$/, "");
+        this.token = config.token;
+        this.mountPath = config.mountPath.replace(/^\/+/, "").replace(/\/+$/, "");
+        this.namespace = config.namespace;
+    }
+    async request(method, path, body) {
+        const url = `${this.baseUrl}/v1/${path}`;
+        const headers = {
+            "X-Vault-Token": this.token,
+            "Content-Type": "application/json",
+        };
+        if (this.namespace) {
+            headers["X-Vault-Namespace"] = this.namespace;
+        }
+        const response = await fetch(url, {
+            method,
+            headers,
+            body: body ? JSON.stringify(body) : undefined,
+        });
+        if (!response.ok) {
+            const errorData = (await response
+                .json()
+                .catch(() => ({ errors: [] })));
+            const message = errorData.errors?.join(", ") || response.statusText;
+            const err = new Error(message);
+            err.name = `VaultError`;
+            throw err;
+        }
+        if (response.status === 204) {
+            return undefined;
+        }
+        const text = await response.text();
+        if (!text) {
+            return undefined;
+        }
+        const data = JSON.parse(text);
+        return data.data;
+    }
+    async read(path) {
+        return this.request("GET", `${this.mountPath}/data/${path}`);
+    }
+    async write(path, data) {
+        await this.request("POST", `${this.mountPath}/data/${path}`, {
+            data,
+        });
+    }
+    async delete(path) {
+        await this.request("DELETE", `${this.mountPath}/data/${path}`);
+    }
+    async list(path) {
+        const result = await this.request("LIST", `${this.mountPath}/metadata/${path}`);
+        return result.keys || [];
+    }
+    async metadata(path) {
+        return this.request("GET", `${this.mountPath}/metadata/${path}`);
+    }
+}
+export class VaultSecretService extends ClientBasedService {
+    constructor() {
+        super(...arguments);
+        this.provider = "hashicorp-vault";
+    }
+    async initialize(...args) {
+        const { ctxArgs } = (await this.logCtx(args, "initialize", true)).for(this.initialize);
+        const config = ctxArgs[0];
+        const client = new VaultKvV2Client({
+            baseUrl: config.address,
+            token: config.token,
+            mountPath: config.path,
+            namespace: config.namespace,
+        });
+        this._config = config;
+        this._client = client;
+        return { config, client };
+    }
+    async store(name, value, options = {}, ...args) {
+        const { log } = (await this.logCtx(args, "store", true)).for(this.store);
+        log.verbose(`Storing secret ${name}`);
+        try {
+            validateSecretName(name);
+        }
+        catch (error) {
+            throw this.parseError(error);
+        }
+        const normalizedName = normalizeSecretName(name);
+        const serialized = serializeSecretPayload(value);
+        try {
+            await this.client.write(normalizedName, {
+                value: serialized.value,
+                encoding: serialized.encoding,
+                contentType: options.contentType,
+                tags: options.tags,
+            });
+            return {
+                provider: this.provider,
+                name: normalizedName,
+                version: options.version,
+            };
+        }
+        catch (error) {
+            if (error?.name?.toLowerCase().includes("already") ||
+                error?.message?.toLowerCase()?.includes("already")) {
+                throw new ConflictError(`Secret "${normalizedName}" already exists`);
+            }
+            throw this.parseError(error);
+        }
+    }
+    async retrieve(nameOrRef, ...args) {
+        const { log } = (await this.logCtx(args, "retrieve", true)).for(this.retrieve);
+        const nameStr = typeof nameOrRef === "string" ? nameOrRef : nameOrRef.name;
+        log.verbose(`Retrieving secret ${nameStr}`);
+        let name;
+        if (typeof nameOrRef === "string") {
+            name = nameOrRef;
+        }
+        else {
+            name = nameOrRef.name;
+        }
+        try {
+            validateSecretName(name);
+        }
+        catch (error) {
+            throw this.parseError(error);
+        }
+        const normalizedName = normalizeSecretName(name);
+        try {
+            const response = await this.client.read(normalizedName);
+            if (!response?.data?.value) {
+                throw new NotFoundError(`Secret "${normalizedName}" has no value`);
+            }
+            const payload = {
+                encoding: response.data.encoding ?? "utf8",
+                value: response.data.value,
+            };
+            return deserializeSecretPayload(payload);
+        }
+        catch (error) {
+            if (error?.name?.toLowerCase().includes("not found") ||
+                error?.message?.toLowerCase()?.includes("not found")) {
+                throw new NotFoundError(`Secret "${normalizedName}" not found`);
+            }
+            throw this.parseError(error);
+        }
+    }
+    async delete(nameOrRef, ...args) {
+        const { log } = (await this.logCtx(args, "delete", true)).for(this.delete);
+        const nameStr = typeof nameOrRef === "string" ? nameOrRef : nameOrRef.name;
+        log.verbose(`Deleting secret ${nameStr}`);
+        let name;
+        if (typeof nameOrRef === "string") {
+            name = nameOrRef;
+        }
+        else {
+            name = nameOrRef.name;
+        }
+        try {
+            validateSecretName(name);
+        }
+        catch (error) {
+            throw this.parseError(error);
+        }
+        const normalizedName = normalizeSecretName(name);
+        try {
+            await this.client.delete(normalizedName);
+        }
+        catch (error) {
+            throw this.parseError(error);
+        }
+    }
+    async exists(nameOrRef, ...args) {
+        const { log } = (await this.logCtx(args, "exists", true)).for(this.exists);
+        const nameStr = typeof nameOrRef === "string" ? nameOrRef : nameOrRef.name;
+        log.verbose(`Checking if secret ${nameStr} exists`);
+        let name;
+        if (typeof nameOrRef === "string") {
+            name = nameOrRef;
+        }
+        else {
+            name = nameOrRef.name;
+        }
+        try {
+            validateSecretName(name);
+        }
+        catch (error) {
+            throw this.parseError(error);
+        }
+        const normalizedName = normalizeSecretName(name);
+        try {
+            await this.client.read(normalizedName);
+            return true;
+        }
+        catch (error) {
+            if (error?.name?.toLowerCase().includes("not found") ||
+                error?.message?.toLowerCase()?.includes("not found")) {
+                return false;
+            }
+            throw this.parseError(error);
+        }
+    }
+    async list(options = {}, ...args) {
+        const { log } = (await this.logCtx(args, "list", true)).for(this.list);
+        log.verbose("Listing secrets");
+        const result = [];
+        try {
+            const keys = await this.client.list("");
+            for (const key of keys) {
+                if (options.limit && result.length >= options.limit) {
+                    break;
+                }
+                const meta = await this.client.metadata(key);
+                if (meta) {
+                    result.push({
+                        provider: this.provider,
+                        name: key,
+                        createdAt: meta.created_time
+                            ? new Date(meta.created_time)
+                            : undefined,
+                        updatedAt: meta.updated_time
+                            ? new Date(meta.updated_time)
+                            : undefined,
+                        enabled: true,
+                        tags: meta.custom_metadata ?? undefined,
+                    });
+                }
+            }
+        }
+        catch (error) {
+            throw this.parseError(error);
+        }
+        return result;
+    }
+    async metadata(nameOrRef, ...args) {
+        const { log } = (await this.logCtx(args, "metadata", true)).for(this.metadata);
+        const nameStr = typeof nameOrRef === "string" ? nameOrRef : nameOrRef.name;
+        log.verbose(`Getting metadata for secret ${nameStr}`);
+        let name;
+        if (typeof nameOrRef === "string") {
+            name = nameOrRef;
+        }
+        else {
+            name = nameOrRef.name;
+        }
+        try {
+            validateSecretName(name);
+        }
+        catch (error) {
+            throw this.parseError(error);
+        }
+        const normalizedName = normalizeSecretName(name);
+        try {
+            const meta = await this.client.metadata(normalizedName);
+            if (!meta) {
+                return undefined;
+            }
+            const result = {
+                provider: this.provider,
+                name: normalizedName,
+                createdAt: meta.created_time ? new Date(meta.created_time) : undefined,
+                updatedAt: meta.updated_time ? new Date(meta.updated_time) : undefined,
+                enabled: true,
+                tags: meta.custom_metadata ?? undefined,
+            };
+            return result;
+        }
+        catch (error) {
+            if (error?.name?.toLowerCase().includes("not found") ||
+                error?.message?.toLowerCase()?.includes("not found")) {
+                return undefined;
+            }
+            throw this.parseError(error);
+        }
+    }
+    parseError(error) {
+        const err = error;
+        const message = err.message || err.name || "Unknown error";
+        const lowerMessage = message.toLowerCase();
+        if (lowerMessage.includes("not found") || lowerMessage.includes("404")) {
+            return new NotFoundError(message);
+        }
+        if (lowerMessage.includes("already exists") ||
+            lowerMessage.includes("conflict") ||
+            lowerMessage.includes("409")) {
+            return new ConflictError(message);
+        }
+        if (lowerMessage.includes("disabled") || lowerMessage.includes("403")) {
+            return new NotFoundError(message);
+        }
+        if (lowerMessage.includes("unauthorized") || lowerMessage.includes("401")) {
+            return new NotFoundError(message);
+        }
+        if (lowerMessage.includes("permission") || lowerMessage.includes("403")) {
+            return new NotFoundError(message);
+        }
+        if (lowerMessage.includes("rate limit") || lowerMessage.includes("429")) {
+            return new BadRequestError(message);
+        }
+        if (lowerMessage.includes("provider") ||
+            lowerMessage.includes("unavailable") ||
+            lowerMessage.includes("connection") ||
+            lowerMessage.includes("timeout")) {
+            return new InternalError(message);
+        }
+        return new InternalError(message);
+    }
+}
+//# sourceMappingURL=VaultSecretService.js.map

package/lib/esm/secrets/vault/VaultSecretService.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"VaultSecretService.js","sourceRoot":"","sources":["../../../../src/secrets/vault/VaultSecretService.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,2BAA2B;AAC7E,OAAO,EACL,sBAAsB,EACtB,wBAAwB,GAEzB,2BAA2B;AAC5B,OAAO,EAAE,kBAAkB,EAA2B,MAAM,gBAAgB,CAAC;AAE7E,OAAO,EACL,eAAe,EACf,aAAa,EACb,aAAa,EACb,aAAa,GACd,MAAM,yBAAyB,CAAC;AAEjC,MAAM,OAAO,eAAe;IAM1B,YAAY,MAKX;QACC,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAClD,IAAI,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;QAC1B,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAC1E,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC;IACpC,CAAC;IAEO,KAAK,CAAC,OAAO,CACnB,MAAc,EACd,IAAY,EACZ,IAAU;QAEV,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,OAAO,OAAO,IAAI,EAAE,CAAC;QACzC,MAAM,OAAO,GAA2B;YACtC,eAAe,EAAE,IAAI,CAAC,KAAK;YAC3B,cAAc,EAAE,kBAAkB;SACnC,CAAC;QAEF,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACnB,OAAO,CAAC,mBAAmB,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC;QAChD,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YAChC,MAAM;YACN,OAAO;YACP,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS;SAC9C,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,SAAS,GAAG,CAAC,MAAM,QAAQ;iBAC9B,IAAI,EAAE;iBACN,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC,CAA0B,CAAC;YAC3D,MAAM,OAAO,GAAG,SAAS,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,QAAQ,CAAC,UAAU,CAAC;YACpE,MAAM,GAAG,GAAG,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC;YAC/B,GAAG,CAAC,IAAI,GAAG,YAAY,CAAC;YACxB,MAAM,GAAG,CAAC;QACZ,CAAC;QAED,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YAC5B,OAAO,SAAc,CAAC;QACxB,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QACnC,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO,SAAc,CAAC;QACxB,CAAC;QAED,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAiB,CAAC;QAC9C,OAAO,IAAI,CAAC,IAAS,CAAC;IACxB,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,IAAY;QACrB,OAAO,IAAI,CAAC,OAAO,CAAM,KAAK,EAAE,GAAG,IAAI,CAAC,SAAS,SAAS,IAAI,EAAE,CAAC,CAAC;IACpE,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,IAAY,EAAE,IAAS;QACjC,MAAM,IAAI,CAAC,OAAO,CAAO,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,SAAS,IAAI,EAAE,EAAE;YACjE,IAAI;SACL,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,IAAY;QACvB,MAAM,IAAI,CAAC,OAAO,CAAO,QAAQ,EAAE,GAAG,IAAI,CAAC,SAAS,SAAS,IAAI,EAAE,CAAC,CAAC;IACvE,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,IAAY;QACrB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAC/B,MAAM,EACN,GAAG,IAAI,CAAC,SAAS,aAAa,IAAI,EAAE,CACrC,CAAC;QACF,OAAO,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;IAC3B,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,IAAY;QACzB,OAAO,IAAI,CAAC,OAAO,CAAM,KAAK,EAAE,GAAG,IAAI,CAAC,SAAS,aAAa,IAAI,EAAE,CAAC,CAAC;IACxE,CAAC;CACF;AAED,MAAM,OAAO,kBAAmB,SAAQ,kBAGvC;IAHD;;QAIW,aAAQ,GAAmB,iBAAiB,CAAC;IA8TxD,CAAC;IA5TC,KAAK,CAAC,UAAU,CACd,GAAG,IAA6B;QAEhC,MAAM,EAAE,OAAO,EAAE,GAAG,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,YAAY,EAAE,IAAI,CAAC,CAAC,CAAC,GAAG,CACnE,IAAI,CAAC,UAAU,CAChB,CAAC;QACF,MAAM,MAAM,GAAG,OAAO,CAAC,CAAC,CAA6B,CAAC;QACtD,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC;YACjC,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,SAAS,EAAE,MAAM,CAAC,IAAI;YACtB,SAAS,EAAE,MAAM,CAAC,SAAS;SAC5B,CAAC,CAAC;QACH,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC;QACtB,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC;QACtB,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IAC5B,CAAC;IAED,KAAK,CAAC,KAAK,CACT,IAAgB,EAChB,KAAQ,EACR,UAA8B,EAAE,EAChC,GAAG,IAA6B;QAEhC,MAAM,EAAE,GAAG,EAAE,GAAG,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACzE,GAAG,CAAC,OAAO,CAAC,kBAAkB,IAAI,EAAE,CAAC,CAAC;QACtC,IAAI,CAAC;YACH,kBAAkB,CAAC,IAAI,CAAC,CAAC;QAC3B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,CAAC,UAAU,CAAC,KAAc,CAAC,CAAC;QACxC,CAAC;QAED,MAAM,cAAc,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC;QACjD,MAAM,UAAU,GAAG,sBAAsB,CAAC,KAAK,CAAC,CAAC;QAEjD,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,cAAc,EAAE;gBACtC,KAAK,EAAE,UAAU,CAAC,KAAK;gBACvB,QAAQ,EAAE,UAAU,CAAC,QAAQ;gBAC7B,WAAW,EAAE,OAAO,CAAC,WAAW;gBAChC,IAAI,EAAE,OAAO,CAAC,IAAI;aACnB,CAAC,CAAC;YAEH,OAAO;gBACL,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,IAAI,EAAE,cAAc;gBACpB,OAAO,EAAE,OAAO,CAAC,OAAO;aACzB,CAAC;QACJ,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACpB,IACE,KAAK,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC;gBAC9C,KAAK,EAAE,OAAO,EAAE,WAAW,EAAE,EAAE,QAAQ,CAAC,SAAS,CAAC,EAClD,CAAC;gBACD,MAAM,IAAI,aAAa,CAAC,WAAW,cAAc,kBAAkB,CAAC,CAAC;YACvE,CAAC;YACD,MAAM,IAAI,CAAC,UAAU,CAAC,KAAc,CAAC,CAAC;QACxC,CAAC;IACH,CAAC;IAED,KAAK,CAAC,QAAQ,CACZ,SAAuC,EACvC,GAAG,IAA6B;QAEhC,MAAM,EAAE,GAAG,EAAE,GAAG,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,CAAC,CAAC,CAAC,GAAG,CAC7D,IAAI,CAAC,QAAQ,CACd,CAAC;QACF,MAAM,OAAO,GAAG,OAAO,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC;QAC3E,GAAG,CAAC,OAAO,CAAC,qBAAqB,OAAO,EAAE,CAAC,CAAC;QAE5C,IAAI,IAAY,CAAC;QAEjB,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;YAClC,IAAI,GAAG,SAAS,CAAC;QACnB,CAAC;aAAM,CAAC;YACN,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC;QACxB,CAAC;QAED,IAAI,CAAC;YACH,kBAAkB,CAAC,IAAI,CAAC,CAAC;QAC3B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,CAAC,UAAU,CAAC,KAAc,CAAC,CAAC;QACxC,CAAC;QAED,MAAM,cAAc,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC;QAEjD,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;YAExD,IAAI,CAAC,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;gBAC3B,MAAM,IAAI,aAAa,CAAC,WAAW,cAAc,gBAAgB,CAAC,CAAC;YACrE,CAAC;YAED,MAAM,OAAO,GAA4B;gBACvC,QAAQ,EAAE,QAAQ,CAAC,IAAI,CAAC,QAAQ,IAAI,MAAM;gBAC1C,KAAK,EAAE,QAAQ,CAAC,IAAI,CAAC,KAAK;aAC3B,CAAC;YAEF,OAAO,wBAAwB,CAAC,OAAO,CAAM,CAAC;QAChD,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACpB,IACE,KAAK,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,QAAQ,CAAC,WAAW,CAAC;gBAChD,KAAK,EAAE,OAAO,EAAE,WAAW,EAAE,EAAE,QAAQ,CAAC,WAAW,CAAC,EACpD,CAAC;gBACD,MAAM,IAAI,aAAa,CAAC,WAAW,cAAc,aAAa,CAAC,CAAC;YAClE,CAAC;YACD,MAAM,IAAI,CAAC,UAAU,CAAC,KAAc,CAAC,CAAC;QACxC,CAAC;IACH,CAAC;IAED,KAAK,CAAC,MAAM,CACV,SAAuC,EACvC,GAAG,IAA6B;QAEhC,MAAM,EAAE,GAAG,EAAE,GAAG,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC3E,MAAM,OAAO,GAAG,OAAO,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC;QAC3E,GAAG,CAAC,OAAO,CAAC,mBAAmB,OAAO,EAAE,CAAC,CAAC;QAE1C,IAAI,IAAY,CAAC;QAEjB,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;YAClC,IAAI,GAAG,SAAS,CAAC;QACnB,CAAC;aAAM,CAAC;YACN,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC;QACxB,CAAC;QAED,IAAI,CAAC;YACH,kBAAkB,CAAC,IAAI,CAAC,CAAC;QAC3B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,CAAC,UAAU,CAAC,KAAc,CAAC,CAAC;QACxC,CAAC;QAED,MAAM,cAAc,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC;QAEjD,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;QAC3C,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACpB,MAAM,IAAI,CAAC,UAAU,CAAC,KAAc,CAAC,CAAC;QACxC,CAAC;IACH,CAAC;IAED,KAAK,CAAC,MAAM,CACV,SAAuC,EACvC,GAAG,IAA6B;QAEhC,MAAM,EAAE,GAAG,EAAE,GAAG,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC3E,MAAM,OAAO,GAAG,OAAO,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC;QAC3E,GAAG,CAAC,OAAO,CAAC,sBAAsB,OAAO,SAAS,CAAC,CAAC;QAEpD,IAAI,IAAY,CAAC;QAEjB,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;YAClC,IAAI,GAAG,SAAS,CAAC;QACnB,CAAC;aAAM,CAAC;YACN,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC;QACxB,CAAC;QAED,IAAI,CAAC;YACH,kBAAkB,CAAC,IAAI,CAAC,CAAC;QAC3B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,CAAC,UAAU,CAAC,KAAc,CAAC,CAAC;QACxC,CAAC;QAED,MAAM,cAAc,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC;QAEjD,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;YACvC,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACpB,IACE,KAAK,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,QAAQ,CAAC,WAAW,CAAC;gBAChD,KAAK,EAAE,OAAO,EAAE,WAAW,EAAE,EAAE,QAAQ,CAAC,WAAW,CAAC,EACpD,CAAC;gBACD,OAAO,KAAK,CAAC;YACf,CAAC;YACD,MAAM,IAAI,CAAC,UAAU,CAAC,KAAc,CAAC,CAAC;QACxC,CAAC;IACH,CAAC;IAED,KAAK,CAAC,IAAI,CACR,UAA8B,EAAE,EAChC,GAAG,IAA6B;QAEhC,MAAM,EAAE,GAAG,EAAE,GAAG,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvE,GAAG,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;QAC/B,MAAM,MAAM,GAAqB,EAAE,CAAC;QAEpC,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAExC,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;gBACvB,IAAI,OAAO,CAAC,KAAK,IAAI,MAAM,CAAC,MAAM,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;oBACpD,MAAM;gBACR,CAAC;gBAED,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;gBAE7C,IAAI,IAAI,EAAE,CAAC;oBACT,MAAM,CAAC,IAAI,CAAC;wBACV,QAAQ,EAAE,IAAI,CAAC,QAAQ;wBACvB,IAAI,EAAE,GAAG;wBACT,SAAS,EAAE,IAAI,CAAC,YAAY;4BAC1B,CAAC,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC;4BAC7B,CAAC,CAAC,SAAS;wBACb,SAAS,EAAE,IAAI,CAAC,YAAY;4BAC1B,CAAC,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC;4BAC7B,CAAC,CAAC,SAAS;wBACb,OAAO,EAAE,IAAI;wBACb,IAAI,EAAE,IAAI,CAAC,eAAe,IAAI,SAAS;qBACxC,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACpB,MAAM,IAAI,CAAC,UAAU,CAAC,KAAc,CAAC,CAAC;QACxC,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,KAAK,CAAC,QAAQ,CACZ,SAAuC,EACvC,GAAG,IAA6B;QAEhC,MAAM,EAAE,GAAG,EAAE,GAAG,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,CAAC,CAAC,CAAC,GAAG,CAC7D,IAAI,CAAC,QAAQ,CACd,CAAC;QACF,MAAM,OAAO,GAAG,OAAO,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC;QAC3E,GAAG,CAAC,OAAO,CAAC,+BAA+B,OAAO,EAAE,CAAC,CAAC;QAEtD,IAAI,IAAY,CAAC;QAEjB,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;YAClC,IAAI,GAAG,SAAS,CAAC;QACnB,CAAC;aAAM,CAAC;YACN,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC;QACxB,CAAC;QAED,IAAI,CAAC;YACH,kBAAkB,CAAC,IAAI,CAAC,CAAC;QAC3B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,CAAC,UAAU,CAAC,KAAc,CAAC,CAAC;QACxC,CAAC;QAED,MAAM,cAAc,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC;QAEjD,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC;YAExD,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,OAAO,SAAS,CAAC;YACnB,CAAC;YAED,MAAM,MAAM,GAAmB;gBAC7B,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,IAAI,EAAE,cAAc;gBACpB,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,SAAS;gBACtE,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,SAAS;gBACtE,OAAO,EAAE,IAAI;gBACb,IAAI,EAAE,IAAI,CAAC,eAAe,IAAI,SAAS;aACxC,CAAC;YAEF,OAAO,MAAM,CAAC;QAChB,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACpB,IACE,KAAK,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,QAAQ,CAAC,WAAW,CAAC;gBAChD,KAAK,EAAE,OAAO,EAAE,WAAW,EAAE,EAAE,QAAQ,CAAC,WAAW,CAAC,EACpD,CAAC;gBACD,OAAO,SAAS,CAAC;YACnB,CAAC;YACD,MAAM,IAAI,CAAC,UAAU,CAAC,KAAc,CAAC,CAAC;QACxC,CAAC;IACH,CAAC;IAES,UAAU,CAAC,KAAc;QACjC,MAAM,GAAG,GAAG,KAAc,CAAC;QAC3B,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,IAAI,IAAI,eAAe,CAAC;QAC3D,MAAM,YAAY,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;QAE3C,IAAI,YAAY,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACvE,OAAO,IAAI,aAAa,CAAC,OAAO,CAAC,CAAC;QACpC,CAAC;QAED,IACE,YAAY,CAAC,QAAQ,CAAC,gBAAgB,CAAC;YACvC,YAAY,CAAC,QAAQ,CAAC,UAAU,CAAC;YACjC,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,EAC5B,CAAC;YACD,OAAO,IAAI,aAAa,CAAC,OAAO,CAAC,CAAC;QACpC,CAAC;QAED,IAAI,YAAY,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACtE,OAAO,IAAI,aAAa,CAAC,OAAO,CAAC,CAAC;QACpC,CAAC;QAED,IAAI,YAAY,CAAC,QAAQ,CAAC,cAAc,CAAC,IAAI,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YAC1E,OAAO,IAAI,aAAa,CAAC,OAAO,CAAC,CAAC;QACpC,CAAC;QAED,IAAI,YAAY,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACxE,OAAO,IAAI,aAAa,CAAC,OAAO,CAAC,CAAC;QACpC,CAAC;QAED,IAAI,YAAY,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACxE,OAAO,IAAI,eAAe,CAAC,OAAO,CAAC,CAAC;QACtC,CAAC;QAED,IACE,YAAY,CAAC,QAAQ,CAAC,UAAU,CAAC;YACjC,YAAY,CAAC,QAAQ,CAAC,aAAa,CAAC;YACpC,YAAY,CAAC,QAAQ,CAAC,YAAY,CAAC;YACnC,YAAY,CAAC,QAAQ,CAAC,SAAS,CAAC,EAChC,CAAC;YACD,OAAO,IAAI,aAAa,CAAC,OAAO,CAAC,CAAC;QACpC,CAAC;QAED,OAAO,IAAI,aAAa,CAAC,OAAO,CAAC,CAAC;IACpC,CAAC;CACF"}

package/lib/esm/secrets/vault/VaultSecretServiceConfig.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=VaultSecretServiceConfig.js.map

package/lib/esm/secrets/vault/VaultSecretServiceConfig.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"VaultSecretServiceConfig.js","sourceRoot":"","sources":["../../../../src/secrets/vault/VaultSecretServiceConfig.ts"],"names":[],"mappings":""}

package/lib/esm/secrets/vault/index.js

@@ -0,0 +1,8 @@
+/**
+ * @module integrations/secrets/vault
+ * @summary HashiCorp Vault secret service exports.
+ * @description Re-exports the Vault KV v2 service and its configuration.
+ */
+export * from "./VaultSecretService.js";
+export * from "./VaultSecretServiceConfig.js";
+//# sourceMappingURL=index.js.map

package/lib/esm/secrets/vault/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/secrets/vault/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,wCAAqC;AACrC,8CAA2C"}

package/lib/esm/utils.js

@@ -0,0 +1,39 @@
+/**
+ * @module integrations/utils
+ * @summary Shared integration utilities.
+ * @description Utility helpers used across the integrations package.
+ */
+import { exec } from "child_process";
+import { LogLevel } from "@decaf-ts/logging";
+import { InternalError } from "@decaf-ts/db-decorators";
+export async function execWithLogging(command, options, log, level = LogLevel.info) {
+    log.debug(`Executing: ${command}`);
+    return new Promise((resolve, reject) => {
+        const child = exec(command, options);
+        let stdout = "";
+        let stderr = "";
+        child.stdout?.on("data", (data) => {
+            stdout += data;
+            log[level](data.trim());
+        });
+        child.stderr?.on("data", (data) => {
+            stderr += data;
+            log.error(data.trim());
+        });
+        child.on("close", (code) => {
+            if (code === 0) {
+                log.silly(`Command completed successfully`);
+                resolve({ stdout, stderr });
+            }
+            else {
+                log.critical(`Command failed with code ${code}`, stderr);
+                reject(new InternalError(`Command failed with code ${code}: ${stderr}`));
+            }
+        });
+        child.on("error", (err) => {
+            log.critical(`Command execution error`, err);
+            reject(err);
+        });
+    });
+}
+//# sourceMappingURL=utils.js.map

package/lib/esm/utils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"utils.js","sourceRoot":"","sources":["../../src/utils.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,IAAI,EAAE,MAAM,eAAe,CAAC;AACrC,OAAO,EAAU,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAExD,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,OAAe,EACf,OAAwB,EACxB,GAAW,EACX,QAAkB,QAAQ,CAAC,IAAI;IAE/B,GAAG,CAAC,KAAK,CAAC,cAAc,OAAO,EAAE,CAAC,CAAC;IAEnC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAErC,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,MAAM,GAAG,EAAE,CAAC;QAEhB,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,IAAY,EAAE,EAAE;YACxC,MAAM,IAAI,IAAI,CAAC;YACf,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QAC1B,CAAC,CAAC,CAAC;QAEH,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,IAAY,EAAE,EAAE;YACxC,MAAM,IAAI,IAAI,CAAC;YACf,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QACzB,CAAC,CAAC,CAAC;QAEH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAY,EAAE,EAAE;YACjC,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC;gBACf,GAAG,CAAC,KAAK,CAAC,gCAAgC,CAAC,CAAC;gBAC5C,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;YAC9B,CAAC;iBAAM,CAAC;gBACN,GAAG,CAAC,QAAQ,CAAC,4BAA4B,IAAI,EAAE,EAAE,MAAa,CAAC,CAAC;gBAChE,MAAM,CACJ,IAAI,aAAa,CAAC,4BAA4B,IAAI,KAAK,MAAM,EAAE,CAAC,CACjE,CAAC;YACJ,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAU,EAAE,EAAE;YAC/B,GAAG,CAAC,QAAQ,CAAC,yBAAyB,EAAE,GAAG,CAAC,CAAC;YAC7C,MAAM,CAAC,GAAG,CAAC,CAAC;QACd,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC"}

package/lib/types/docker/DockerComposeService.d.cts

@@ -0,0 +1,53 @@
+import { ClientBasedService, ContextualArgs, MaybeContextualArg } from "@decaf-ts/core";
+interface DockerComposeServiceConfig {
+    composeFile: string;
+    workingDir?: string;
+}
+interface DockerHealthCheckOptions {
+    maxAttempts?: number;
+    interval?: number;
+}
+export declare class DockerComposeService extends ClientBasedService<void, DockerComposeServiceConfig> {
+    constructor();
+    initialize(...args: ContextualArgs<any>): Promise<{
+        config: DockerComposeServiceConfig;
+        client: void;
+    }>;
+    /**
+     * Get the working directory for docker compose commands
+     */
+    protected get workingDir(): string;
+    /**
+     * Get the basename of the compose file
+     */
+    protected get composeFileName(): string;
+    /**
+     * Start Docker Compose services
+     */
+    up(detached?: boolean, ...args: MaybeContextualArg<any>): Promise<void>;
+    /**
+     * Stop Docker Compose services
+     */
+    down(...args: MaybeContextualArg<any>): Promise<void>;
+    /**
+     * Restart Docker Compose services
+     */
+    restart(...args: MaybeContextualArg<any>): Promise<void>;
+    /**
+     * Wait for service health check
+     */
+    waitForHealth(url: string, options?: DockerHealthCheckOptions, ...args: MaybeContextualArg<any>): Promise<boolean>;
+    /**
+     * Execute a command in a specific container
+     */
+    execInContainer(containerName: string, command: string, ...args: MaybeContextualArg<any>): Promise<string>;
+    /**
+     * Get container logs
+     */
+    getLogs(containerName?: string, tail?: number, ...args: MaybeContextualArg<any>): Promise<string>;
+    /**
+     * Check if a container is running
+     */
+    isRunning(containerName: string, ...args: MaybeContextualArg<any>): Promise<boolean>;
+}
+export {};

package/lib/types/docker/DockerComposeService.d.mts

@@ -0,0 +1,53 @@
+import { ClientBasedService, ContextualArgs, MaybeContextualArg } from "@decaf-ts/core";
+interface DockerComposeServiceConfig {
+    composeFile: string;
+    workingDir?: string;
+}
+interface DockerHealthCheckOptions {
+    maxAttempts?: number;
+    interval?: number;
+}
+export declare class DockerComposeService extends ClientBasedService<void, DockerComposeServiceConfig> {
+    constructor();
+    initialize(...args: ContextualArgs<any>): Promise<{
+        config: DockerComposeServiceConfig;
+        client: void;
+    }>;
+    /**
+     * Get the working directory for docker compose commands
+     */
+    protected get workingDir(): string;
+    /**
+     * Get the basename of the compose file
+     */
+    protected get composeFileName(): string;
+    /**
+     * Start Docker Compose services
+     */
+    up(detached?: boolean, ...args: MaybeContextualArg<any>): Promise<void>;
+    /**
+     * Stop Docker Compose services
+     */
+    down(...args: MaybeContextualArg<any>): Promise<void>;
+    /**
+     * Restart Docker Compose services
+     */
+    restart(...args: MaybeContextualArg<any>): Promise<void>;
+    /**
+     * Wait for service health check
+     */
+    waitForHealth(url: string, options?: DockerHealthCheckOptions, ...args: MaybeContextualArg<any>): Promise<boolean>;
+    /**
+     * Execute a command in a specific container
+     */
+    execInContainer(containerName: string, command: string, ...args: MaybeContextualArg<any>): Promise<string>;
+    /**
+     * Get container logs
+     */
+    getLogs(containerName?: string, tail?: number, ...args: MaybeContextualArg<any>): Promise<string>;
+    /**
+     * Check if a container is running
+     */
+    isRunning(containerName: string, ...args: MaybeContextualArg<any>): Promise<boolean>;
+}
+export {};

package/lib/types/docker/index.d.cts

@@ -0,0 +1,6 @@
+/**
+ * @module integrations/docker
+ * @summary Docker Compose service helpers.
+ * @description Re-exports the Docker Compose orchestration service for local containerized environments.
+ */
+export * from "./DockerComposeService.d.cts";

package/lib/types/docker/index.d.mts

@@ -0,0 +1,6 @@
+/**
+ * @module integrations/docker
+ * @summary Docker Compose service helpers.
+ * @description Re-exports the Docker Compose orchestration service for local containerized environments.
+ */
+export * from "./DockerComposeService.d.mts";

package/lib/types/index.d.cts

@@ -0,0 +1,10 @@
+/**
+ * @module integrations
+ * @summary Package entry point for shared integration helpers.
+ * @description Exposes the package utilities and build-time version metadata for `@decaf-ts/integrations`.
+ */
+export * from "./utils.d.cts";
+export declare const VERSION: string;
+export declare const COMMIT = "9134d75";
+export declare const FULL_VERSION = "0.1.0-9134d75";
+export declare const PACKAGE_NAME: string;

package/lib/types/index.d.mts

@@ -0,0 +1,10 @@
+/**
+ * @module integrations
+ * @summary Package entry point for shared integration helpers.
+ * @description Exposes the package utilities and build-time version metadata for `@decaf-ts/integrations`.
+ */
+export * from "./utils.d.mts";
+export declare const VERSION: string;
+export declare const COMMIT = "9134d75";
+export declare const FULL_VERSION = "0.1.0-9134d75";
+export declare const PACKAGE_NAME: string;

package/lib/types/keycloak/index.d.cts

@@ -0,0 +1,8 @@
+export * from "./types.d.cts";
+export * from "./services/index.d.cts";
+/**
+ * @summary Keycloak integrations.
+ * @description Helpers for provisioning and managing Keycloak tenants.
+ * @namespace keycloak
+ * @memberOf module:integrations
+ */

package/lib/types/keycloak/index.d.mts

@@ -0,0 +1,8 @@
+export * from "./types.d.mts";
+export * from "./services/index.d.mts";
+/**
+ * @summary Keycloak integrations.
+ * @description Helpers for provisioning and managing Keycloak tenants.
+ * @namespace keycloak
+ * @memberOf module:integrations
+ */

package/lib/types/keycloak/services/KeycloakAuthService.d.cts

@@ -0,0 +1,20 @@
+import { MaybeContextualArg } from "@decaf-ts/core";
+import { ClientBasedService } from "@decaf-ts/core";
+import type { KeycloakSetupConfig, KeycloakUser } from "../types.d.cts";
+import { AxiosInstance } from "axios";
+export declare class KeycloakAuthService extends ClientBasedService<AxiosInstance, KeycloakSetupConfig> {
+    initialize(...args: MaybeContextualArg<any>): Promise<{
+        config: KeycloakSetupConfig;
+        client: AxiosInstance;
+    }>;
+    getAccessToken(keycloakUser: KeycloakUser, ...args: MaybeContextualArg<any>): Promise<string>;
+    refreshAccessToken(refreshToken: string, clientId: string, clientSecret: string, ...args: MaybeContextualArg<any>): Promise<string>;
+    validateAccessToken(accessToken: string, ...args: MaybeContextualArg<any>): Promise<boolean>;
+    logout(keycloakUser: KeycloakUser, refreshToken: string, ...args: MaybeContextualArg<any>): Promise<void>;
+    private createHttpClient;
+    private isProduction;
+    private request;
+    private handleHttpResponse;
+    protected parseError(error: Error): Error;
+    private parseJsonResponse;
+}

package/lib/types/keycloak/services/KeycloakAuthService.d.mts

@@ -0,0 +1,20 @@
+import { MaybeContextualArg } from "@decaf-ts/core";
+import { ClientBasedService } from "@decaf-ts/core";
+import type { KeycloakSetupConfig, KeycloakUser } from "../types.d.mts";
+import { AxiosInstance } from "axios";
+export declare class KeycloakAuthService extends ClientBasedService<AxiosInstance, KeycloakSetupConfig> {
+    initialize(...args: MaybeContextualArg<any>): Promise<{
+        config: KeycloakSetupConfig;
+        client: AxiosInstance;
+    }>;
+    getAccessToken(keycloakUser: KeycloakUser, ...args: MaybeContextualArg<any>): Promise<string>;
+    refreshAccessToken(refreshToken: string, clientId: string, clientSecret: string, ...args: MaybeContextualArg<any>): Promise<string>;
+    validateAccessToken(accessToken: string, ...args: MaybeContextualArg<any>): Promise<boolean>;
+    logout(keycloakUser: KeycloakUser, refreshToken: string, ...args: MaybeContextualArg<any>): Promise<void>;
+    private createHttpClient;
+    private isProduction;
+    private request;
+    private handleHttpResponse;
+    protected parseError(error: Error): Error;
+    private parseJsonResponse;
+}

package/lib/types/keycloak/services/KeycloakClientService.d.cts

@@ -0,0 +1,25 @@
+import { MaybeContextualArg } from "@decaf-ts/core";
+import { ClientBasedService } from "@decaf-ts/core";
+import type { KeycloakClientConfig, KeycloakClientRoleConfig, KeycloakSetupConfig } from "../types.d.cts";
+import { AxiosInstance } from "axios";
+export declare class KeycloakClientService extends ClientBasedService<AxiosInstance, KeycloakSetupConfig> {
+    initialize(...args: MaybeContextualArg<any>): Promise<{
+        config: KeycloakSetupConfig;
+        client: AxiosInstance;
+    }>;
+    createClient(keycloakSetupConfig: KeycloakSetupConfig, overrides: Partial<KeycloakClientConfig> | undefined, ...args: MaybeContextualArg<any>): Promise<string>;
+    updateClient(keycloakSetupConfig: KeycloakSetupConfig, overrides: Partial<KeycloakClientConfig> | undefined, ...args: MaybeContextualArg<any>): Promise<void>;
+    getClientUUID(accessToken: string, realmName: string, clientId: string, ...args: MaybeContextualArg<any>): Promise<string>;
+    createClientRoles(keycloakSetupConfig: KeycloakSetupConfig, roleConfigs: KeycloakClientRoleConfig[] | undefined, ...args: MaybeContextualArg<any>): Promise<void>;
+    private createHttpClient;
+    private isProduction;
+    private getRealmAccessToken;
+    private getAccessToken;
+    private normalizeClientConfig;
+    private buildClientPayload;
+    private request;
+    private handleHttpResponse;
+    protected parseError(error: Error): Error;
+    private extractUUIDfromResponse;
+    private parseJsonResponse;
+}

package/lib/types/keycloak/services/KeycloakClientService.d.mts

@@ -0,0 +1,25 @@
+import { MaybeContextualArg } from "@decaf-ts/core";
+import { ClientBasedService } from "@decaf-ts/core";
+import type { KeycloakClientConfig, KeycloakClientRoleConfig, KeycloakSetupConfig } from "../types.d.mts";
+import { AxiosInstance } from "axios";
+export declare class KeycloakClientService extends ClientBasedService<AxiosInstance, KeycloakSetupConfig> {
+    initialize(...args: MaybeContextualArg<any>): Promise<{
+        config: KeycloakSetupConfig;
+        client: AxiosInstance;
+    }>;
+    createClient(keycloakSetupConfig: KeycloakSetupConfig, overrides: Partial<KeycloakClientConfig> | undefined, ...args: MaybeContextualArg<any>): Promise<string>;
+    updateClient(keycloakSetupConfig: KeycloakSetupConfig, overrides: Partial<KeycloakClientConfig> | undefined, ...args: MaybeContextualArg<any>): Promise<void>;
+    getClientUUID(accessToken: string, realmName: string, clientId: string, ...args: MaybeContextualArg<any>): Promise<string>;
+    createClientRoles(keycloakSetupConfig: KeycloakSetupConfig, roleConfigs: KeycloakClientRoleConfig[] | undefined, ...args: MaybeContextualArg<any>): Promise<void>;
+    private createHttpClient;
+    private isProduction;
+    private getRealmAccessToken;
+    private getAccessToken;
+    private normalizeClientConfig;
+    private buildClientPayload;
+    private request;
+    private handleHttpResponse;
+    protected parseError(error: Error): Error;
+    private extractUUIDfromResponse;
+    private parseJsonResponse;
+}