@decaf-ts/integrations 0.14.2 → 0.15.3

package/lib/types/secrets/core/SecretTypes.d.mts

@@ -3,7 +3,7 @@
  * @summary Secret core types.
  * @description Shared payload, metadata, option, and configuration types for secret service implementations.
  */
-export type SecretProvider = "model" | "memory" | "filesystem" | "hashicorp-vault" | "aws-secrets-manager" | "azure-key-vault" | "gcp-secret-manager" | "1password";
+export type SecretProvider = "model" | "memory" | "filesystem" | "hashicorp-vault" | "aws-secrets-manager" | "azure-key-vault" | "gcp-secret-manager" | "1password" | "kubernetes";
 export type SecretName = string;
 export type SecretPayload = string | Record<string, unknown> | Uint8Array;
 export interface SerializedSecretPayload {
@@ -61,30 +61,42 @@ export interface StoreSecretOptions {
      * @description Principal that owns the secret.
      */
     ownerPrincipalId?: string;
+    /**
+     * @description Backend namespace or tenant partition for the secret.
+     * @summary Kubernetes uses this as the object namespace; other providers may
+     * ignore it when their backend is not namespace-scoped.
+     */
+    namespace?: string;
 }
 export interface RetrieveSecretOptions {
     version?: string;
     includeMetadata?: boolean;
+    namespace?: string;
 }
 export interface DeleteSecretOptions {
     force?: boolean;
     version?: string;
+    namespace?: string;
 }
 export interface ExistsSecretOptions {
     version?: string;
+    namespace?: string;
 }
 export interface ListSecretsOptions {
     limit?: number;
     offset?: number;
     tags?: Record<string, string>;
     enabled?: boolean;
+    namespace?: string;
 }
 export interface SecretMetadataOptions {
     version?: string;
     includeTags?: boolean;
+    namespace?: string;
 }
 export interface RotateSecretOptions {
     oldVersion?: string;
     newVersion?: string;
     keyId?: string;
+    namespace?: string;
 }

package/lib/types/secrets/kubernetes/KubernetesSecretEnvironment.d.cts

@@ -0,0 +1,34 @@
+/**
+ * @module integrations/secrets/kubernetes/environment
+ * @summary Kubernetes secret environment.
+ * @description Extends the common secrets environment with the `secrets.kubernetes`
+ * shape matching {@link KubernetesSecretServiceConfig}, so
+ * {@link KubernetesSecretService} can fall back to it when no config is passed to
+ * `initialize`.
+ */
+export interface KubernetesSecretEnvironmentConfig {
+    namespace?: string;
+    kubeconfig?: string;
+    context?: string;
+    server?: string;
+    token?: string;
+    tokenFile?: string;
+    caFile?: string;
+    caData?: string;
+    certFile?: string;
+    keyFile?: string;
+    certData?: string;
+    keyData?: string;
+    skipTLSVerify?: boolean;
+    serviceAccount?: boolean;
+}
+export interface KubernetesSecretEnvironmentShape {
+    secrets: {
+        kubernetes: KubernetesSecretEnvironmentConfig;
+    };
+}
+export declare const KubernetesSecretEnvironment: import("@decaf-ts/logging").AccumulatedEnvironment<{
+    app: string | undefined;
+} & import("@decaf-ts/logging").LoggingConfig<object> & {
+    env: any;
+} & import("..").SecretCommonEnvironmentShape & KubernetesSecretEnvironmentShape>;

package/lib/types/secrets/kubernetes/KubernetesSecretEnvironment.d.mts

@@ -0,0 +1,34 @@
+/**
+ * @module integrations/secrets/kubernetes/environment
+ * @summary Kubernetes secret environment.
+ * @description Extends the common secrets environment with the `secrets.kubernetes`
+ * shape matching {@link KubernetesSecretServiceConfig}, so
+ * {@link KubernetesSecretService} can fall back to it when no config is passed to
+ * `initialize`.
+ */
+export interface KubernetesSecretEnvironmentConfig {
+    namespace?: string;
+    kubeconfig?: string;
+    context?: string;
+    server?: string;
+    token?: string;
+    tokenFile?: string;
+    caFile?: string;
+    caData?: string;
+    certFile?: string;
+    keyFile?: string;
+    certData?: string;
+    keyData?: string;
+    skipTLSVerify?: boolean;
+    serviceAccount?: boolean;
+}
+export interface KubernetesSecretEnvironmentShape {
+    secrets: {
+        kubernetes: KubernetesSecretEnvironmentConfig;
+    };
+}
+export declare const KubernetesSecretEnvironment: import("@decaf-ts/logging").AccumulatedEnvironment<{
+    app: string | undefined;
+} & import("@decaf-ts/logging").LoggingConfig<object> & {
+    env: any;
+} & import("..").SecretCommonEnvironmentShape & KubernetesSecretEnvironmentShape>;

package/lib/types/secrets/kubernetes/KubernetesSecretService.d.cts

@@ -0,0 +1,45 @@
+import { CoreV1Api } from "@kubernetes/client-node";
+import { type MaybeContextualArg } from "@decaf-ts/core";
+import { ClientBasedSecretService, SecretProvider, SecretName, SecretPayload, SecretReference, SecretMetadata } from "../../secrets/core/index.d.cts";
+import { StoreSecretOptions, RetrieveSecretOptions, DeleteSecretOptions, ExistsSecretOptions, ListSecretsOptions, SecretMetadataOptions, RotateSecretOptions } from "../../secrets/core/index.d.cts";
+import { KubernetesSecretServiceConfig } from "./KubernetesSecretServiceConfig.d.cts";
+/**
+ * @class KubernetesSecretService
+ * @summary Native Kubernetes Secrets backend.
+ * @description Implements the {@link SecretService} contract on top of
+ * namespaced Kubernetes `Secret` objects. Each DECAF secret is stored as an
+ * `Opaque` Secret whose `payload` data key holds the serialized
+ * {@link SerializedSecretPayload} envelope, while encoding, content type, tags,
+ * logical version, and ownership hints live in `decaf-ts.io/*` annotations.
+ *
+ * Authentication uses the standard Kubernetes client resolution order:
+ * explicit `server` credentials, an explicit `kubeconfig` path, `KUBECONFIG`,
+ * `~/.kube/config`, and finally the in-cluster service account.
+ */
+export declare class KubernetesSecretService extends ClientBasedSecretService<CoreV1Api, KubernetesSecretServiceConfig> {
+    readonly provider: SecretProvider;
+    protected configFromEnvironment(): KubernetesSecretServiceConfig | undefined;
+    initialize(...args: MaybeContextualArg<any>): Promise<{
+        config: KubernetesSecretServiceConfig;
+        client: CoreV1Api;
+    }>;
+    store<T extends SecretPayload = SecretPayload>(name: SecretName, value: T, options?: StoreSecretOptions, ...args: MaybeContextualArg<any>): Promise<SecretReference>;
+    retrieve<T extends SecretPayload = SecretPayload>(nameOrRef: SecretName | SecretReference, options?: RetrieveSecretOptions, ...args: MaybeContextualArg<any>): Promise<T>;
+    delete(nameOrRef: SecretName | SecretReference, options?: DeleteSecretOptions, ...args: MaybeContextualArg<any>): Promise<void>;
+    exists(nameOrRef: SecretName | SecretReference, options?: ExistsSecretOptions, ...args: MaybeContextualArg<any>): Promise<boolean>;
+    list(options?: ListSecretsOptions, ...args: MaybeContextualArg<any>): Promise<SecretMetadata[]>;
+    metadata(nameOrRef: SecretName | SecretReference, options?: SecretMetadataOptions, ...args: MaybeContextualArg<any>): Promise<SecretMetadata | undefined>;
+    rotate<T extends SecretPayload = SecretPayload>(nameOrRef: SecretName | SecretReference, value: T, options?: RotateSecretOptions, ...args: MaybeContextualArg<any>): Promise<SecretReference>;
+    private buildKubeConfig;
+    private resolveNamespace;
+    private resolveNamespaceOption;
+    private resolveReference;
+    private normalizeName;
+    private buildSecret;
+    private readSecret;
+    private assertVersion;
+    private toMetadata;
+    private statusOf;
+    private messageOf;
+    protected parseError(error: unknown): Error;
+}

package/lib/types/secrets/kubernetes/KubernetesSecretService.d.mts

@@ -0,0 +1,45 @@
+import { CoreV1Api } from "@kubernetes/client-node";
+import { type MaybeContextualArg } from "@decaf-ts/core";
+import { ClientBasedSecretService, SecretProvider, SecretName, SecretPayload, SecretReference, SecretMetadata } from "../../secrets/core/index.d.mts";
+import { StoreSecretOptions, RetrieveSecretOptions, DeleteSecretOptions, ExistsSecretOptions, ListSecretsOptions, SecretMetadataOptions, RotateSecretOptions } from "../../secrets/core/index.d.mts";
+import { KubernetesSecretServiceConfig } from "./KubernetesSecretServiceConfig.d.mts";
+/**
+ * @class KubernetesSecretService
+ * @summary Native Kubernetes Secrets backend.
+ * @description Implements the {@link SecretService} contract on top of
+ * namespaced Kubernetes `Secret` objects. Each DECAF secret is stored as an
+ * `Opaque` Secret whose `payload` data key holds the serialized
+ * {@link SerializedSecretPayload} envelope, while encoding, content type, tags,
+ * logical version, and ownership hints live in `decaf-ts.io/*` annotations.
+ *
+ * Authentication uses the standard Kubernetes client resolution order:
+ * explicit `server` credentials, an explicit `kubeconfig` path, `KUBECONFIG`,
+ * `~/.kube/config`, and finally the in-cluster service account.
+ */
+export declare class KubernetesSecretService extends ClientBasedSecretService<CoreV1Api, KubernetesSecretServiceConfig> {
+    readonly provider: SecretProvider;
+    protected configFromEnvironment(): KubernetesSecretServiceConfig | undefined;
+    initialize(...args: MaybeContextualArg<any>): Promise<{
+        config: KubernetesSecretServiceConfig;
+        client: CoreV1Api;
+    }>;
+    store<T extends SecretPayload = SecretPayload>(name: SecretName, value: T, options?: StoreSecretOptions, ...args: MaybeContextualArg<any>): Promise<SecretReference>;
+    retrieve<T extends SecretPayload = SecretPayload>(nameOrRef: SecretName | SecretReference, options?: RetrieveSecretOptions, ...args: MaybeContextualArg<any>): Promise<T>;
+    delete(nameOrRef: SecretName | SecretReference, options?: DeleteSecretOptions, ...args: MaybeContextualArg<any>): Promise<void>;
+    exists(nameOrRef: SecretName | SecretReference, options?: ExistsSecretOptions, ...args: MaybeContextualArg<any>): Promise<boolean>;
+    list(options?: ListSecretsOptions, ...args: MaybeContextualArg<any>): Promise<SecretMetadata[]>;
+    metadata(nameOrRef: SecretName | SecretReference, options?: SecretMetadataOptions, ...args: MaybeContextualArg<any>): Promise<SecretMetadata | undefined>;
+    rotate<T extends SecretPayload = SecretPayload>(nameOrRef: SecretName | SecretReference, value: T, options?: RotateSecretOptions, ...args: MaybeContextualArg<any>): Promise<SecretReference>;
+    private buildKubeConfig;
+    private resolveNamespace;
+    private resolveNamespaceOption;
+    private resolveReference;
+    private normalizeName;
+    private buildSecret;
+    private readSecret;
+    private assertVersion;
+    private toMetadata;
+    private statusOf;
+    private messageOf;
+    protected parseError(error: unknown): Error;
+}

package/lib/types/secrets/kubernetes/KubernetesSecretServiceConfig.d.cts

@@ -0,0 +1,49 @@
+/**
+ * @module integrations/secrets/kubernetes/config
+ * @summary Kubernetes secret service configuration.
+ * @description Configuration schema for the native Kubernetes Secrets integration,
+ * including kubeconfig selection, explicit API-server credentials, and the
+ * default namespace used by every operation.
+ */
+import { SecretServiceConfig } from "../../secrets/core/index.d.cts";
+export interface KubernetesSecretServiceConfig extends SecretServiceConfig {
+    provider: "kubernetes";
+    /**
+     * @description Namespace that owns the secrets.
+     * @summary Defaults to the namespace of the active kubeconfig context, then
+     * to `default`. Individual operations may override it through their options.
+     */
+    namespace?: string;
+    /**
+     * @description Path to a kubeconfig file.
+     * @summary When omitted the client falls back to `KUBECONFIG`,
+     * `~/.kube/config`, and finally in-cluster service-account configuration.
+     */
+    kubeconfig?: string;
+    /**
+     * @description Kubeconfig context to select after loading.
+     */
+    context?: string;
+    /**
+     * @description Explicit Kubernetes API server URL.
+     * @summary When present the client is built from the explicit server,
+     * token/certificate fields, and namespace instead of a kubeconfig file.
+     */
+    server?: string;
+    token?: string;
+    tokenFile?: string;
+    caFile?: string;
+    /**
+     * @description Base64 encoded PEM certificate authority bundle.
+     */
+    caData?: string;
+    certFile?: string;
+    keyFile?: string;
+    certData?: string;
+    keyData?: string;
+    skipTLSVerify?: boolean;
+    /**
+     * @description Force loading the in-cluster service-account configuration.
+     */
+    serviceAccount?: boolean;
+}

package/lib/types/secrets/kubernetes/KubernetesSecretServiceConfig.d.mts

@@ -0,0 +1,49 @@
+/**
+ * @module integrations/secrets/kubernetes/config
+ * @summary Kubernetes secret service configuration.
+ * @description Configuration schema for the native Kubernetes Secrets integration,
+ * including kubeconfig selection, explicit API-server credentials, and the
+ * default namespace used by every operation.
+ */
+import { SecretServiceConfig } from "../../secrets/core/index.d.mts";
+export interface KubernetesSecretServiceConfig extends SecretServiceConfig {
+    provider: "kubernetes";
+    /**
+     * @description Namespace that owns the secrets.
+     * @summary Defaults to the namespace of the active kubeconfig context, then
+     * to `default`. Individual operations may override it through their options.
+     */
+    namespace?: string;
+    /**
+     * @description Path to a kubeconfig file.
+     * @summary When omitted the client falls back to `KUBECONFIG`,
+     * `~/.kube/config`, and finally in-cluster service-account configuration.
+     */
+    kubeconfig?: string;
+    /**
+     * @description Kubeconfig context to select after loading.
+     */
+    context?: string;
+    /**
+     * @description Explicit Kubernetes API server URL.
+     * @summary When present the client is built from the explicit server,
+     * token/certificate fields, and namespace instead of a kubeconfig file.
+     */
+    server?: string;
+    token?: string;
+    tokenFile?: string;
+    caFile?: string;
+    /**
+     * @description Base64 encoded PEM certificate authority bundle.
+     */
+    caData?: string;
+    certFile?: string;
+    keyFile?: string;
+    certData?: string;
+    keyData?: string;
+    skipTLSVerify?: boolean;
+    /**
+     * @description Force loading the in-cluster service-account configuration.
+     */
+    serviceAccount?: boolean;
+}

package/lib/types/secrets/kubernetes/index.d.cts

@@ -0,0 +1,9 @@
+/**
+ * @module integrations/secrets/kubernetes
+ * @summary Kubernetes secret service exports.
+ * @description Re-exports the native Kubernetes Secrets service, its configuration,
+ * and its environment slice.
+ */
+export * from "./KubernetesSecretService.d.cts";
+export * from "./KubernetesSecretServiceConfig.d.cts";
+export * from "./KubernetesSecretEnvironment.d.cts";

package/lib/types/secrets/kubernetes/index.d.mts

@@ -0,0 +1,9 @@
+/**
+ * @module integrations/secrets/kubernetes
+ * @summary Kubernetes secret service exports.
+ * @description Re-exports the native Kubernetes Secrets service, its configuration,
+ * and its environment slice.
+ */
+export * from "./KubernetesSecretService.d.mts";
+export * from "./KubernetesSecretServiceConfig.d.mts";
+export * from "./KubernetesSecretEnvironment.d.mts";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@decaf-ts/integrations",
-  "version": "0.14.2",
+  "version": "0.15.3",
   "type": "module",
   "main": "lib/index.js",
   "types": "lib/index.d.mts",
@@ -181,6 +181,17 @@
       },
       "default": "./lib/esm/secrets/vault/index.js"
     },
+    "./secrets/kubernetes": {
+      "import": {
+        "types": "./lib/types/secrets/kubernetes/index.d.mts",
+        "default": "./lib/esm/secrets/kubernetes/index.js"
+      },
+      "require": {
+        "types": "./lib/types/secrets/kubernetes/index.d.cts",
+        "default": "./lib/cjs/secrets/kubernetes/index.cjs"
+      },
+      "default": "./lib/esm/secrets/kubernetes/index.js"
+    },
     "./blob": {
       "import": {
         "types": "./lib/types/blob/index.d.mts",
@@ -616,6 +627,7 @@
     "test": "npm run build && NODE_OPTIONS=\"--experimental-vm-modules\" jest --watchman=false --runInBand --coverage --detectOpenHandles",
     "test:unit": "NODE_OPTIONS=\"--experimental-vm-modules\" jest --watchman=false --testPathPatterns=\"/tests/unit\" --passWithNoTests --detectOpenHandles",
     "test:integration": "NODE_OPTIONS=\"--experimental-vm-modules\" jest --watchman=false --testPathPatterns=\"/tests/(integration)\" --passWithNoTests --detectOpenHandles",
+    "test:integration:kubernetes": "DECAF_KUBERNETES_IT=1 NODE_OPTIONS=\"--experimental-vm-modules\" jest --watchman=false --runInBand --testPathPatterns=kubernetes-secrets --passWithNoTests --detectOpenHandles",
     "test:e2e": "NODE_OPTIONS=\"--experimental-vm-modules\" jest --watchman=false --testPathPatterns=\"/tests/(e2e)\" --passWithNoTests --detectOpenHandles",
     "test:e2e:plugins": "npx playwright test --config tests/playwright/playwright.config.ts --project chromium",
     "test:e2e:plugins:kibana": "npx playwright test --config tests/playwright/playwright.config.ts tests/playwright/kibana.e2e.ts",
@@ -627,7 +639,7 @@
     "lint-fix": "eslint --fix .",
     "prepare-pr": "npm run lint-fix && npm run build:prod && npm run coverage && npm run docs",
     "prepare-release": "npm run lint-fix && npm run build:prod",
-    "release": "./bin/tag-release.sh",
+    "release": "tag-release",
     "clean-publish": "npx clean-publish",
     "drawings": "for FILE in workdocs/drawings/*.drawio; do echo \"converting $FILE to image...\" && docker run --rm -v $(pwd):/data rlespinasse/drawio-export --format png $FILE; done && cp -rf workdocs/drawings/export/* workdocs/resources/",
     "uml": "cd workdocs/uml && for FILE in ./*.puml; do docker run --rm -v $(pwd):/work -w /work miy4/plantuml -DPLANTUML_LIMIT_SIZE=8192 -tpng $FILE; done && cd ../.. && cp -fr workdocs/uml/*.png workdocs/resources/",
@@ -637,63 +649,65 @@
     "repo:setup": "codex exec \"$(cat ./.codex/prompts/repo-setup.md)\nbase_path is ./\"",
     "repo:doc": "codex exec \"$(cat ./.codex/prompts/doc.md) $(cat ./.codex/prompts/bulk-docs.md)\nbase_path is ./\"",
     "repo:tests": "codex exec \"$(cat ./.codex/prompts/bulk-tests.md)\nbase_path is ./ and coverage is 95%\" -s workspace-write",
-    "prepare-it-tests": "docker compose -f docker/dragonfly-compose.yml up -d --wait && docker compose -f docker/postgres-compose.yml up -d --wait && docker compose -f docker/mailpit-compose.yml up -d --wait",
+    "prepare-it-tests": "npx playwright install chromium && docker compose -f docker/dragonfly-compose.yml up -d --wait && docker compose -f docker/postgres-compose.yml up -d --wait && docker compose -f docker/mailpit-compose.yml up -d --wait",
     "repo:readme": "codex exec \"$(cat ./.codex/prompts/update-readme.md)\nbase_path is ./\"",
     "repo:pr": "npm run repo:doc && npm run repo:tests && npm run repo:readme",
     "clean": "rimraf ./lib ./workdocs/coverage"
   },
   "devDependencies": {
-    "@aws-sdk/client-s3": "^3.1075.0",
-    "@aws-sdk/client-secrets-manager": "^3.758.0",
-    "@aws-sdk/s3-request-presigner": "^3.1075.0",
-    "@azure/identity": "4.13.0",
-    "@azure/keyvault-secrets": "^4.9.0",
-    "@azure/storage-blob": "^12.33.0",
-    "@decaf-ts/as-zod": "latest",
-    "@decaf-ts/cli": "latest",
-    "@decaf-ts/core": "latest",
-    "@decaf-ts/crypto": "latest",
-    "@decaf-ts/db-decorators": "latest",
-    "@decaf-ts/decoration": "latest",
-    "@decaf-ts/decorator-validation": "latest",
-    "@decaf-ts/for-http": "latest",
-    "@decaf-ts/for-nano": "latest",
-    "@decaf-ts/for-nest": "latest",
-    "@decaf-ts/injectable-decorators": "latest",
-    "@decaf-ts/logging": "latest",
-    "@decaf-ts/transactional-decorators": "latest",
-    "@decaf-ts/ui-decorators": "latest",
-    "@decaf-ts/utils": "latest",
-    "@google-cloud/secret-manager": "^5.6.0",
-    "@google-cloud/storage": "^7.21.0",
-    "@grpc/grpc-js": "^1.14.6",
-    "@nestjs/common": "^11.0.0",
-    "@nestjs/core": "^11.0.0",
-    "@nestjs/platform-express": "^11.0.0",
-    "@nestjs/swagger": "^11.4.4",
-    "@nestjs/testing": "^11.0.0",
-    "@playwright/test": "^1.61.1",
+    "@aws-sdk/client-s3": "^3.1164.0",
+    "@aws-sdk/client-secrets-manager": "^3.1164.0",
+    "@aws-sdk/s3-request-presigner": "^3.1164.0",
+    "@azure/identity": "4.14.1",
+    "@azure/keyvault-secrets": "^4.12.0",
+    "@azure/storage-blob": "^12.34.0",
+    "@decaf-ts/as-zod": "1.17.0",
+    "@decaf-ts/cli": "0.14.0",
+    "@decaf-ts/core": "0.34.0",
+    "@decaf-ts/crypto": "0.16.0",
+    "@decaf-ts/db-decorators": "0.20.0",
+    "@decaf-ts/decoration": "0.20.0",
+    "@decaf-ts/decorator-validation": "1.24.0",
+    "@decaf-ts/for-http": "0.22.0",
+    "@decaf-ts/for-nano": "0.16.0",
+    "@decaf-ts/for-nest": "0.18.0",
+    "@decaf-ts/injectable-decorators": "1.21.0",
+    "@decaf-ts/logging": "0.30.3",
+    "@decaf-ts/transactional-decorators": "0.14.0",
+    "@decaf-ts/ui-decorators": "0.22.0",
+    "@decaf-ts/utils": "2.0.6",
+    "@google-cloud/secret-manager": "^7.2.0",
+    "@google-cloud/storage": "^8.4.0",
+    "@grpc/grpc-js": "^1.14.7",
+    "@kubernetes/client-node": "^2.0.2",
+    "@nestjs/common": "^12.4.0",
+    "@nestjs/core": "^12.4.0",
+    "@nestjs/platform-express": "^12.4.0",
+    "@nestjs/swagger": "^12.1.1",
+    "@nestjs/testing": "^12.4.0",
+    "@playwright/test": "^1.65.0",
     "@types/jest": "^30.0.0",
     "@types/pg": "^8.23.1",
-    "@types/supertest": "^6.0.0",
-    "acorn": "^8.17.0",
+    "@types/supertest": "^7.2.1",
+    "acorn": "^8.19.0",
     "acorn-walk": "^8.3.5",
-    "axios": "^1.7.9",
-    "cron-parser": "^5.7.0",
+    "axios": "^1.21.0",
+    "cron-parser": "^5.10.4",
     "form-data": "^4.0.6",
-    "imapflow": "^1.7.1",
-    "isolated-vm": "^6.1.2",
+    "imapflow": "^2.11.0",
+    "isolated-vm": "^7.0.2",
     "node-fetch": "^3.3.2",
-    "nodemailer": "^10.1.7",
+    "nodemailer": "^10.3.1",
     "pg": "^8.23.1",
-    "redis": "^6.3.0",
-    "reflect-metadata": "^0.2.0",
-    "rxjs": "^7.8.0",
-    "ssh2": "^1.16.0",
-    "supertest": "^7.0.0",
-    "tslib": "^2.8.1",
-    "typescript": "^5.9.3",
-    "uuid": "^11.1.1"
+    "redis": "^6.3.1",
+    "reflect-metadata": "^0.2.2",
+    "rxjs": "^7.8.2",
+    "ssh2": "^1.17.0",
+    "supertest": "^7.3.2",
+    "tslib": "^2.9.1",
+    "typescript": "^6.0.3",
+    "uuid": "^14.0.3",
+    "@decaf-ts/for-testing": "1.3.7"
   },
   "peerDependencies": {
     "@aws-sdk/client-s3": "^3.1075.0",
@@ -714,6 +728,7 @@
     "@google-cloud/secret-manager": "^5.6.0",
     "@google-cloud/storage": "^7.21.0",
     "@grpc/grpc-js": "^1.14.6",
+    "@kubernetes/client-node": "^2.0.2",
     "@nestjs/common": "^11.0.0",
     "axios": "^1.7.9",
     "cron-parser": "^5.7.0",
@@ -779,6 +794,9 @@
     "@grpc/grpc-js": {
       "optional": true
     },
+    "@kubernetes/client-node": {
+      "optional": true
+    },
     "axios": {
       "optional": true
     },
@@ -808,7 +826,30 @@
     }
   },
   "overrides": {
-    "js-yaml": "^5.2.2",
-    "multer": "^2.5.0"
+    "jest": "$jest",
+    "open": "^11.0.0",
+    "eslint": {
+      "minimatch": "^11.0.5"
+    },
+    "dpdm": {
+      "glob": "^14.0.4",
+      "minimatch": "^11.0.5"
+    },
+    "glob": "^14.0.4",
+    "minimatch": "^11.0.5",
+    "typescript-eslint": {
+      "minimatch": "^11.0.5"
+    },
+    "deepmerge": "^4.3.1",
+    "test-exclude": {
+      ".": "^8.0.0",
+      "glob": "^14.0.4",
+      "minimatch": "^11.0.5"
+    }
+  },
+  "license": "MPL-2.0",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/decaf-ts/integrations.git"
   }
 }