@develit-services/bank 0.5.0 → 0.6.0

package/dist/export/worker.cjs

@@ -1,10 +1,9 @@
 'use strict';
 
 const backendSdk = require('@develit-io/backend-sdk');
+const drizzle = require('../shared/bank.DEvSNsEs.cjs');
 const cloudflare_workers = require('cloudflare:workers');
 const d1 = require('drizzle-orm/d1');
-const drizzle = require('../shared/bank.DEvSNsEs.cjs');
-const mock_connector = require('../shared/bank.CfSZTfWS.cjs');
 const zod = require('zod');
 const payment_schema = require('../shared/bank.BeIpkWR-.cjs');
 const generalCodes = require('@develit-io/general-codes');
@@ -12,6 +11,7 @@ require('date-fns');
 require('jose');
 const drizzleOrm = require('drizzle-orm');
 require('node:crypto');
+const mock_connector = require('../shared/bank.BJroS_i3.cjs');
 require('../shared/bank.c38V_FCq.cjs');
 require('drizzle-orm/relations');
 require('drizzle-orm/sqlite-core');
@@ -455,7 +455,11 @@ let BankServiceBase = class extends backendSdk.develitWorker(cloudflare_workers.
     }
     let connectedAccounts = [];
     if (!skipAccounts) {
-      const encryptionKey = await drizzle.importAesKey(this.env.ENCRYPTION_KEY);
+      const encryptionKey = await drizzle.importAesKey(
+        (await this.env.SECRETS_STORE.get({
+          secretName: "BANK_SERVICE_ENCRYPTION_KEY"
+        })).data?.secretValue || ""
+      );
       const accounts = await this._getConnectedAccounts();
       const accountsForConnector = accounts.filter(
         (acc) => acc.connectorKey === connectorKey
@@ -906,7 +910,11 @@ let BankServiceBase = class extends backendSdk.develitWorker(cloudflare_workers.
             accountId: acc.id
           }).command
         );
-        const encryptionKey = await drizzle.importAesKey(this.env.ENCRYPTION_KEY);
+        const encryptionKey = await drizzle.importAesKey(
+          (await this.env.SECRETS_STORE.get({
+            secretName: "BANK_SERVICE_ENCRYPTION_KEY"
+          })).data?.secretValue || ""
+        );
         const createAccountCredentials = (await Promise.all(
           credentials.map(
             async (cr) => createAccountCredentialsCommand(this.db, encryptionKey, {

package/dist/export/worker.mjs

@@ -1,8 +1,7 @@
 import { uuidv4, first, bankAccountMetadataSchema, workflowInstanceStatusSchema, develitWorker, createInternalError, action, service } from '@develit-io/backend-sdk';
+import { t as tables, e as encrypt, i as importAesKey, b as getCredentialsByAccountId, u as upsertBatchCommand, g as getBatchByIdQuery, d as createPaymentCommand, a as getAccountByIdQuery } from '../shared/bank.B51e8oDT.mjs';
 import { WorkerEntrypoint } from 'cloudflare:workers';
 import { drizzle } from 'drizzle-orm/d1';
-import { t as tables, e as encrypt, i as importAesKey, b as getCredentialsByAccountId, u as upsertBatchCommand, g as getBatchByIdQuery, d as createPaymentCommand, a as getAccountByIdQuery } from '../shared/bank.B51e8oDT.mjs';
-import { i as initiateConnector, t as toIncomingPayment, d as assignAccount, e as toBatchedPayment } from '../shared/bank.DinCwx0P.mjs';
 import { z } from 'zod';
 import { I as INSTRUCTION_PRIORITIES, C as CHARGE_BEARERS, P as PAYMENT_TYPES, d as CONNECTOR_KEYS, B as BATCH_STATUSES, a as PAYMENT_STATUSES, b as PAYMENT_DIRECTIONS, f as accountInsertSchema } from '../shared/bank.qc8ALZwm.mjs';
 import { CURRENCY_CODES } from '@develit-io/general-codes';
@@ -10,6 +9,7 @@ import 'date-fns';
 import 'jose';
 import { eq, sql, inArray, and, asc, desc, gte, lte } from 'drizzle-orm';
 import 'node:crypto';
+import { i as initiateConnector, t as toIncomingPayment, d as assignAccount, e as toBatchedPayment } from '../shared/bank.B-ZnLUcL.mjs';
 import '../shared/bank.BUSlmr6r.mjs';
 import 'drizzle-orm/relations';
 import 'drizzle-orm/sqlite-core';
@@ -453,7 +453,11 @@ let BankServiceBase = class extends develitWorker(WorkerEntrypoint) {
     }
     let connectedAccounts = [];
     if (!skipAccounts) {
-      const encryptionKey = await importAesKey(this.env.ENCRYPTION_KEY);
+      const encryptionKey = await importAesKey(
+        (await this.env.SECRETS_STORE.get({
+          secretName: "BANK_SERVICE_ENCRYPTION_KEY"
+        })).data?.secretValue || ""
+      );
       const accounts = await this._getConnectedAccounts();
       const accountsForConnector = accounts.filter(
         (acc) => acc.connectorKey === connectorKey
@@ -904,7 +908,11 @@ let BankServiceBase = class extends develitWorker(WorkerEntrypoint) {
             accountId: acc.id
           }).command
         );
-        const encryptionKey = await importAesKey(this.env.ENCRYPTION_KEY);
+        const encryptionKey = await importAesKey(
+          (await this.env.SECRETS_STORE.get({
+            secretName: "BANK_SERVICE_ENCRYPTION_KEY"
+          })).data?.secretValue || ""
+        );
         const createAccountCredentials = (await Promise.all(
           credentials.map(
             async (cr) => createAccountCredentialsCommand(this.db, encryptionKey, {

package/dist/export/workflows.cjs

@@ -1,13 +1,13 @@
 'use strict';
 
 const backendSdk = require('@develit-io/backend-sdk');
-const cloudflare_workers = require('cloudflare:workers');
-const cloudflare_workflows = require('cloudflare:workflows');
-const d1 = require('drizzle-orm/d1');
 const drizzle = require('../shared/bank.DEvSNsEs.cjs');
 const batchLifecycle = require('../shared/bank.Bg3Pdwm4.cjs');
-const mock_connector = require('../shared/bank.CfSZTfWS.cjs');
+const mock_connector = require('../shared/bank.BJroS_i3.cjs');
 const drizzleOrm = require('drizzle-orm');
+const cloudflare_workers = require('cloudflare:workers');
+const cloudflare_workflows = require('cloudflare:workflows');
+const d1 = require('drizzle-orm/d1');
 require('../shared/bank.c38V_FCq.cjs');
 require('../shared/bank.BeIpkWR-.cjs');
 require('drizzle-orm/relations');
@@ -98,7 +98,11 @@ class BankProcessBatch extends cloudflare_workers.WorkflowEntrypoint {
         if (!account) {
           throw new cloudflare_workflows.NonRetryableError(`Account not found: ${batch.accountId}`);
         }
-        const encryptionKey = await drizzle.importAesKey(this.env.ENCRYPTION_KEY);
+        const encryptionKey = await drizzle.importAesKey(
+          (await this.env.SECRETS_STORE.get({
+            secretName: "BANK_SERVICE_ENCRYPTION_KEY"
+          })).data?.secretValue || ""
+        );
         const credentials = await drizzle.getCredentialsByAccountId(db, encryptionKey, {
           accountId: account.id
         });
@@ -112,7 +116,7 @@ class BankProcessBatch extends cloudflare_workers.WorkflowEntrypoint {
             `Credentials have expired for account: ${account.id}`
           );
         }
-        const connector = mock_connector.initiateConnector({
+        const connector = await mock_connector.initiateConnector({
           env: this.env,
           bank: account.connectorKey,
           connectedAccounts: [
@@ -245,6 +249,9 @@ class BankSyncAccountPayments extends cloudflare_workers.WorkflowEntrypoint {
   async run(event, step) {
     const { accountId } = event.payload;
     const db = d1.drizzle(this.env.BANK_D1, { schema: drizzle.tables });
+    if (!accountId) {
+      throw new cloudflare_workflows.NonRetryableError(`Haven't obtained accountId to load.`);
+    }
     while (true) {
       const now = /* @__PURE__ */ new Date();
       const account = await step.do("load account", async () => {
@@ -265,7 +272,11 @@ class BankSyncAccountPayments extends cloudflare_workers.WorkflowEntrypoint {
           timeout: "30 seconds"
         },
         async () => {
-          const encryptionKey = await drizzle.importAesKey(this.env.ENCRYPTION_KEY);
+          const encryptionKey = await drizzle.importAesKey(
+            (await this.env.SECRETS_STORE.get({
+              secretName: "BANK_SERVICE_ENCRYPTION_KEY"
+            })).data?.secretValue || ""
+          );
           const credentials = await drizzle.getCredentialsByAccountId(
             db,
             encryptionKey,
@@ -281,7 +292,7 @@ class BankSyncAccountPayments extends cloudflare_workers.WorkflowEntrypoint {
               `Credentials have expired for account: ${accountId}`
             );
           }
-          const connector = mock_connector.initiateConnector({
+          const connector = await mock_connector.initiateConnector({
             env: this.env,
             bank: account.connectorKey,
             connectedAccounts: [

package/dist/export/workflows.mjs

@@ -1,11 +1,11 @@
 import { first, uuidv4, asNonEmpty } from '@develit-io/backend-sdk';
-import { WorkflowEntrypoint } from 'cloudflare:workers';
-import { NonRetryableError } from 'cloudflare:workflows';
-import { drizzle } from 'drizzle-orm/d1';
 import { t as tables, g as getBatchByIdQuery, c as checksum, u as upsertBatchCommand, a as getAccountByIdQuery, i as importAesKey, b as getCredentialsByAccountId, d as createPaymentCommand } from '../shared/bank.B51e8oDT.mjs';
 import { d as isBatchSigned, j as isBatchFailed, g as isBatchOpen, a as isPaymentCompleted } from '../shared/bank.Dpx6PvkA.mjs';
-import { f as toPreparedPayment, i as initiateConnector, g as toCompletedPayment } from '../shared/bank.DinCwx0P.mjs';
+import { f as toPreparedPayment, i as initiateConnector, g as toCompletedPayment } from '../shared/bank.B-ZnLUcL.mjs';
 import { eq } from 'drizzle-orm';
+import { WorkflowEntrypoint } from 'cloudflare:workers';
+import { NonRetryableError } from 'cloudflare:workflows';
+import { drizzle } from 'drizzle-orm/d1';
 import '../shared/bank.BUSlmr6r.mjs';
 import '../shared/bank.qc8ALZwm.mjs';
 import 'drizzle-orm/relations';
@@ -96,7 +96,11 @@ class BankProcessBatch extends WorkflowEntrypoint {
         if (!account) {
           throw new NonRetryableError(`Account not found: ${batch.accountId}`);
         }
-        const encryptionKey = await importAesKey(this.env.ENCRYPTION_KEY);
+        const encryptionKey = await importAesKey(
+          (await this.env.SECRETS_STORE.get({
+            secretName: "BANK_SERVICE_ENCRYPTION_KEY"
+          })).data?.secretValue || ""
+        );
         const credentials = await getCredentialsByAccountId(db, encryptionKey, {
           accountId: account.id
         });
@@ -110,7 +114,7 @@ class BankProcessBatch extends WorkflowEntrypoint {
             `Credentials have expired for account: ${account.id}`
           );
         }
-        const connector = initiateConnector({
+        const connector = await initiateConnector({
           env: this.env,
           bank: account.connectorKey,
           connectedAccounts: [
@@ -243,6 +247,9 @@ class BankSyncAccountPayments extends WorkflowEntrypoint {
   async run(event, step) {
     const { accountId } = event.payload;
     const db = drizzle(this.env.BANK_D1, { schema: tables });
+    if (!accountId) {
+      throw new NonRetryableError(`Haven't obtained accountId to load.`);
+    }
     while (true) {
       const now = /* @__PURE__ */ new Date();
       const account = await step.do("load account", async () => {
@@ -263,7 +270,11 @@ class BankSyncAccountPayments extends WorkflowEntrypoint {
           timeout: "30 seconds"
         },
         async () => {
-          const encryptionKey = await importAesKey(this.env.ENCRYPTION_KEY);
+          const encryptionKey = await importAesKey(
+            (await this.env.SECRETS_STORE.get({
+              secretName: "BANK_SERVICE_ENCRYPTION_KEY"
+            })).data?.secretValue || ""
+          );
           const credentials = await getCredentialsByAccountId(
             db,
             encryptionKey,
@@ -279,7 +290,7 @@ class BankSyncAccountPayments extends WorkflowEntrypoint {
               `Credentials have expired for account: ${accountId}`
             );
           }
-          const connector = initiateConnector({
+          const connector = await initiateConnector({
             env: this.env,
             bank: account.connectorKey,
             connectedAccounts: [

package/dist/export/wrangler.cjs

@@ -10,16 +10,15 @@ function defineBankServiceWrangler(config) {
       name
     }),
     vars: {
-      // Secrets
-      ENCRYPTION_KEY: "[SECRET]",
-      FINBRICKS_PRIVATE_KEY_PEM: "[SECRET]",
-      ERSTE_API_KEY: "[SECRET]",
-      ERSTE_CLIENT_SECRET: "[SECRET]",
-      ERSTE_CLIENT_ID: "[SECRET]",
-      // Variables
       ...envs.local.vars,
       ENVIRONMENT: "localhost"
     },
+    services: [
+      {
+        binding: "SECRETS_STORE",
+        service: `${project}-secrets-store`
+      }
+    ],
     triggers: envs.local.triggers,
     kv_namespaces: [
       {
@@ -81,6 +80,12 @@ function defineBankServiceWrangler(config) {
         ...envCfg.vars,
         ENVIRONMENT: envName
       },
+      services: [
+        {
+          binding: "SECRETS_STORE",
+          service: `${project}-secrets-store-${envName}`
+        }
+      ],
       triggers: envs.local.triggers,
       d1_databases: [
         {

package/dist/export/wrangler.d.cts

@@ -14,12 +14,11 @@ declare function defineBankServiceWrangler(config: BankServiceWranglerConfig): {
         DBUCS_BASE_URI: string;
         DBUCS_USERNAME: string;
         REDIRECT_URI: string;
-        ENCRYPTION_KEY: string;
-        FINBRICKS_PRIVATE_KEY_PEM: string;
-        ERSTE_API_KEY: string;
-        ERSTE_CLIENT_SECRET: string;
-        ERSTE_CLIENT_ID: string;
     };
+    services: {
+        binding: string;
+        service: string;
+    }[];
     triggers: {
         crons: string[];
     };

package/dist/export/wrangler.d.mts

@@ -14,12 +14,11 @@ declare function defineBankServiceWrangler(config: BankServiceWranglerConfig): {
         DBUCS_BASE_URI: string;
         DBUCS_USERNAME: string;
         REDIRECT_URI: string;
-        ENCRYPTION_KEY: string;
-        FINBRICKS_PRIVATE_KEY_PEM: string;
-        ERSTE_API_KEY: string;
-        ERSTE_CLIENT_SECRET: string;
-        ERSTE_CLIENT_ID: string;
     };
+    services: {
+        binding: string;
+        service: string;
+    }[];
     triggers: {
         crons: string[];
     };

package/dist/export/wrangler.d.ts

@@ -14,12 +14,11 @@ declare function defineBankServiceWrangler(config: BankServiceWranglerConfig): {
         DBUCS_BASE_URI: string;
         DBUCS_USERNAME: string;
         REDIRECT_URI: string;
-        ENCRYPTION_KEY: string;
-        FINBRICKS_PRIVATE_KEY_PEM: string;
-        ERSTE_API_KEY: string;
-        ERSTE_CLIENT_SECRET: string;
-        ERSTE_CLIENT_ID: string;
     };
+    services: {
+        binding: string;
+        service: string;
+    }[];
     triggers: {
         crons: string[];
     };

package/dist/export/wrangler.mjs

@@ -8,16 +8,15 @@ function defineBankServiceWrangler(config) {
       name
     }),
     vars: {
-      // Secrets
-      ENCRYPTION_KEY: "[SECRET]",
-      FINBRICKS_PRIVATE_KEY_PEM: "[SECRET]",
-      ERSTE_API_KEY: "[SECRET]",
-      ERSTE_CLIENT_SECRET: "[SECRET]",
-      ERSTE_CLIENT_ID: "[SECRET]",
-      // Variables
       ...envs.local.vars,
       ENVIRONMENT: "localhost"
     },
+    services: [
+      {
+        binding: "SECRETS_STORE",
+        service: `${project}-secrets-store`
+      }
+    ],
     triggers: envs.local.triggers,
     kv_namespaces: [
       {
@@ -79,6 +78,12 @@ function defineBankServiceWrangler(config) {
         ...envCfg.vars,
         ENVIRONMENT: envName
       },
+      services: [
+        {
+          binding: "SECRETS_STORE",
+          service: `${project}-secrets-store-${envName}`
+        }
+      ],
       triggers: envs.local.triggers,
       d1_databases: [
         {

package/dist/shared/{bank.DinCwx0P.mjs → bank.B-ZnLUcL.mjs}

@@ -748,27 +748,27 @@ class FinbricksConnector extends IBankConnector {
   }
 }
 
-class CreditasConnector extends FinbricksConnector {
+class AirBankConnector extends FinbricksConnector {
   constructor(config) {
-    super("CREDITAS", config);
+    super("AIRBANK", config);
   }
 }
 
-class FioConnector extends FinbricksConnector {
+class CreditasConnector extends FinbricksConnector {
   constructor(config) {
-    super("FIO", config);
+    super("CREDITAS", config);
   }
 }
 
-class AirBankConnector extends FinbricksConnector {
+class CSASConnector extends FinbricksConnector {
   constructor(config) {
-    super("AIRBANK", config);
+    super("CSAS", config);
   }
 }
 
-class CSASConnector extends FinbricksConnector {
+class FioConnector extends FinbricksConnector {
   constructor(config) {
-    super("CSAS", config);
+    super("FIO", config);
   }
 }
 
@@ -786,7 +786,7 @@ const getPaymentDirection = (payment, iban) => {
   return "OUTGOING";
 };
 
-const initiateConnector = ({
+const initiateConnector = async ({
   bank,
   env,
   connectedAccounts
@@ -794,9 +794,15 @@ const initiateConnector = ({
   switch (bank) {
     case "ERSTE":
       return new ErsteConnector({
-        API_KEY: env.ERSTE_API_KEY,
-        CLIENT_ID: env.ERSTE_CLIENT_ID,
-        CLIENT_SECRET: env.ERSTE_CLIENT_SECRET,
+        API_KEY: (await env.SECRETS_STORE.get({
+          secretName: "BANK_SERVICE_ERSTE_API_KEY"
+        })).data?.secretValue || "",
+        CLIENT_ID: (await env.SECRETS_STORE.get({
+          secretName: "BANK_SERVICE_ERSTE_CLIENT_ID"
+        })).data?.secretValue || "",
+        CLIENT_SECRET: (await env.SECRETS_STORE.get({
+          secretName: "BANK_SERVICE_ERSTE_CLIENT_SECRET"
+        })).data?.secretValue || "",
         REDIRECT_URI: env.REDIRECT_URI,
         AUTH_URI: env.ERSTE_AUTH_URI,
         PAYMENTS_URI: env.ERSTE_PAYMENTS_URI,
@@ -807,7 +813,9 @@ const initiateConnector = ({
       return new CreditasConnector({
         BASE_URI: env.FINBRICKS_BASE_URI,
         MERCHANT_ID: env.FINBRICKS_MERCHANT_ID,
-        PRIVATE_KEY_PEM: env.FINBRICKS_PRIVATE_KEY_PEM,
+        PRIVATE_KEY_PEM: (await env.SECRETS_STORE.get({
+          secretName: "BANK_SERVICE_FINBRICKS_PRIVATE_KEY_PEM"
+        })).data?.secretValue || "",
         REDIRECT_URI: env.REDIRECT_URI,
         connectedAccounts
       });
@@ -815,7 +823,9 @@ const initiateConnector = ({
       return new MockCobsConnector({
         BASE_URI: env.FINBRICKS_BASE_URI,
         MERCHANT_ID: env.FINBRICKS_MERCHANT_ID,
-        PRIVATE_KEY_PEM: env.FINBRICKS_PRIVATE_KEY_PEM,
+        PRIVATE_KEY_PEM: (await env.SECRETS_STORE.get({
+          secretName: "BANK_SERVICE_FINBRICKS_PRIVATE_KEY_PEM"
+        })).data?.secretValue || "",
         REDIRECT_URI: env.REDIRECT_URI,
         connectedAccounts
       });
@@ -823,7 +833,9 @@ const initiateConnector = ({
       return new FioConnector({
         BASE_URI: env.FINBRICKS_BASE_URI,
         MERCHANT_ID: env.FINBRICKS_MERCHANT_ID,
-        PRIVATE_KEY_PEM: env.FINBRICKS_PRIVATE_KEY_PEM,
+        PRIVATE_KEY_PEM: (await env.SECRETS_STORE.get({
+          secretName: "BANK_SERVICE_FINBRICKS_PRIVATE_KEY_PEM"
+        })).data?.secretValue || "",
         REDIRECT_URI: env.REDIRECT_URI,
         connectedAccounts
       });
@@ -831,7 +843,9 @@ const initiateConnector = ({
       return new MonetaConnector({
         BASE_URI: env.FINBRICKS_BASE_URI,
         MERCHANT_ID: env.FINBRICKS_MERCHANT_ID,
-        PRIVATE_KEY_PEM: env.FINBRICKS_PRIVATE_KEY_PEM,
+        PRIVATE_KEY_PEM: (await env.SECRETS_STORE.get({
+          secretName: "BANK_SERVICE_FINBRICKS_PRIVATE_KEY_PEM"
+        })).data?.secretValue || "",
         REDIRECT_URI: env.REDIRECT_URI,
         connectedAccounts
       });
@@ -839,7 +853,9 @@ const initiateConnector = ({
       return new AirBankConnector({
         BASE_URI: env.FINBRICKS_BASE_URI,
         MERCHANT_ID: env.FINBRICKS_MERCHANT_ID,
-        PRIVATE_KEY_PEM: env.FINBRICKS_PRIVATE_KEY_PEM,
+        PRIVATE_KEY_PEM: (await env.SECRETS_STORE.get({
+          secretName: "BANK_SERVICE_FINBRICKS_PRIVATE_KEY_PEM"
+        })).data?.secretValue || "",
         REDIRECT_URI: env.REDIRECT_URI,
         connectedAccounts
       });
@@ -847,7 +863,9 @@ const initiateConnector = ({
       return new CSASConnector({
         BASE_URI: env.FINBRICKS_BASE_URI,
         MERCHANT_ID: env.FINBRICKS_MERCHANT_ID,
-        PRIVATE_KEY_PEM: env.FINBRICKS_PRIVATE_KEY_PEM,
+        PRIVATE_KEY_PEM: (await env.SECRETS_STORE.get({
+          secretName: "BANK_SERVICE_FINBRICKS_PRIVATE_KEY_PEM"
+        })).data?.secretValue || "",
         REDIRECT_URI: env.REDIRECT_URI,
         connectedAccounts
       });

package/dist/shared/{bank.CfSZTfWS.cjs → bank.BJroS_i3.cjs}

@@ -750,27 +750,27 @@ class FinbricksConnector extends IBankConnector {
   }
 }
 
-class CreditasConnector extends FinbricksConnector {
+class AirBankConnector extends FinbricksConnector {
   constructor(config) {
-    super("CREDITAS", config);
+    super("AIRBANK", config);
   }
 }
 
-class FioConnector extends FinbricksConnector {
+class CreditasConnector extends FinbricksConnector {
   constructor(config) {
-    super("FIO", config);
+    super("CREDITAS", config);
   }
 }
 
-class AirBankConnector extends FinbricksConnector {
+class CSASConnector extends FinbricksConnector {
   constructor(config) {
-    super("AIRBANK", config);
+    super("CSAS", config);
   }
 }
 
-class CSASConnector extends FinbricksConnector {
+class FioConnector extends FinbricksConnector {
   constructor(config) {
-    super("CSAS", config);
+    super("FIO", config);
   }
 }
 
@@ -788,7 +788,7 @@ const getPaymentDirection = (payment, iban) => {
   return "OUTGOING";
 };
 
-const initiateConnector = ({
+const initiateConnector = async ({
   bank,
   env,
   connectedAccounts
@@ -796,9 +796,15 @@ const initiateConnector = ({
   switch (bank) {
     case "ERSTE":
       return new ErsteConnector({
-        API_KEY: env.ERSTE_API_KEY,
-        CLIENT_ID: env.ERSTE_CLIENT_ID,
-        CLIENT_SECRET: env.ERSTE_CLIENT_SECRET,
+        API_KEY: (await env.SECRETS_STORE.get({
+          secretName: "BANK_SERVICE_ERSTE_API_KEY"
+        })).data?.secretValue || "",
+        CLIENT_ID: (await env.SECRETS_STORE.get({
+          secretName: "BANK_SERVICE_ERSTE_CLIENT_ID"
+        })).data?.secretValue || "",
+        CLIENT_SECRET: (await env.SECRETS_STORE.get({
+          secretName: "BANK_SERVICE_ERSTE_CLIENT_SECRET"
+        })).data?.secretValue || "",
         REDIRECT_URI: env.REDIRECT_URI,
         AUTH_URI: env.ERSTE_AUTH_URI,
         PAYMENTS_URI: env.ERSTE_PAYMENTS_URI,
@@ -809,7 +815,9 @@ const initiateConnector = ({
       return new CreditasConnector({
         BASE_URI: env.FINBRICKS_BASE_URI,
         MERCHANT_ID: env.FINBRICKS_MERCHANT_ID,
-        PRIVATE_KEY_PEM: env.FINBRICKS_PRIVATE_KEY_PEM,
+        PRIVATE_KEY_PEM: (await env.SECRETS_STORE.get({
+          secretName: "BANK_SERVICE_FINBRICKS_PRIVATE_KEY_PEM"
+        })).data?.secretValue || "",
         REDIRECT_URI: env.REDIRECT_URI,
         connectedAccounts
       });
@@ -817,7 +825,9 @@ const initiateConnector = ({
       return new MockCobsConnector({
         BASE_URI: env.FINBRICKS_BASE_URI,
         MERCHANT_ID: env.FINBRICKS_MERCHANT_ID,
-        PRIVATE_KEY_PEM: env.FINBRICKS_PRIVATE_KEY_PEM,
+        PRIVATE_KEY_PEM: (await env.SECRETS_STORE.get({
+          secretName: "BANK_SERVICE_FINBRICKS_PRIVATE_KEY_PEM"
+        })).data?.secretValue || "",
         REDIRECT_URI: env.REDIRECT_URI,
         connectedAccounts
       });
@@ -825,7 +835,9 @@ const initiateConnector = ({
       return new FioConnector({
         BASE_URI: env.FINBRICKS_BASE_URI,
         MERCHANT_ID: env.FINBRICKS_MERCHANT_ID,
-        PRIVATE_KEY_PEM: env.FINBRICKS_PRIVATE_KEY_PEM,
+        PRIVATE_KEY_PEM: (await env.SECRETS_STORE.get({
+          secretName: "BANK_SERVICE_FINBRICKS_PRIVATE_KEY_PEM"
+        })).data?.secretValue || "",
         REDIRECT_URI: env.REDIRECT_URI,
         connectedAccounts
       });
@@ -833,7 +845,9 @@ const initiateConnector = ({
       return new MonetaConnector({
         BASE_URI: env.FINBRICKS_BASE_URI,
         MERCHANT_ID: env.FINBRICKS_MERCHANT_ID,
-        PRIVATE_KEY_PEM: env.FINBRICKS_PRIVATE_KEY_PEM,
+        PRIVATE_KEY_PEM: (await env.SECRETS_STORE.get({
+          secretName: "BANK_SERVICE_FINBRICKS_PRIVATE_KEY_PEM"
+        })).data?.secretValue || "",
         REDIRECT_URI: env.REDIRECT_URI,
         connectedAccounts
       });
@@ -841,7 +855,9 @@ const initiateConnector = ({
       return new AirBankConnector({
         BASE_URI: env.FINBRICKS_BASE_URI,
         MERCHANT_ID: env.FINBRICKS_MERCHANT_ID,
-        PRIVATE_KEY_PEM: env.FINBRICKS_PRIVATE_KEY_PEM,
+        PRIVATE_KEY_PEM: (await env.SECRETS_STORE.get({
+          secretName: "BANK_SERVICE_FINBRICKS_PRIVATE_KEY_PEM"
+        })).data?.secretValue || "",
         REDIRECT_URI: env.REDIRECT_URI,
         connectedAccounts
       });
@@ -849,7 +865,9 @@ const initiateConnector = ({
       return new CSASConnector({
         BASE_URI: env.FINBRICKS_BASE_URI,
         MERCHANT_ID: env.FINBRICKS_MERCHANT_ID,
-        PRIVATE_KEY_PEM: env.FINBRICKS_PRIVATE_KEY_PEM,
+        PRIVATE_KEY_PEM: (await env.SECRETS_STORE.get({
+          secretName: "BANK_SERVICE_FINBRICKS_PRIVATE_KEY_PEM"
+        })).data?.secretValue || "",
         REDIRECT_URI: env.REDIRECT_URI,
         connectedAccounts
       });

package/dist/types.cjs

@@ -1,6 +1,6 @@
 'use strict';
 
-const mock_connector = require('./shared/bank.CfSZTfWS.cjs');
+const mock_connector = require('./shared/bank.BJroS_i3.cjs');
 const payment_schema = require('./shared/bank.BeIpkWR-.cjs');
 const batchLifecycle = require('./shared/bank.Bg3Pdwm4.cjs');
 const generalCodes = require('@develit-io/general-codes');

package/dist/types.mjs

@@ -1,4 +1,4 @@
-export { D as DbuConnector, E as ErsteConnector, c as FINBRICKS_ENDPOINTS, b as FinbricksClient, F as FinbricksConnector, I as IBankConnector, M as MockCobsConnector, a as MockConnector, d as assignAccount, h as batchTransform, s as signFinbricksJws, e as toBatchedPayment, g as toCompletedPayment, t as toIncomingPayment, f as toPreparedPayment, u as useFinbricksFetch } from './shared/bank.DinCwx0P.mjs';
+export { D as DbuConnector, E as ErsteConnector, c as FINBRICKS_ENDPOINTS, b as FinbricksClient, F as FinbricksConnector, I as IBankConnector, M as MockCobsConnector, a as MockConnector, d as assignAccount, h as batchTransform, s as signFinbricksJws, e as toBatchedPayment, g as toCompletedPayment, t as toIncomingPayment, f as toPreparedPayment, u as useFinbricksFetch } from './shared/bank.B-ZnLUcL.mjs';
 export { A as ACCOUNT_STATUSES, B as BATCH_STATUES, B as BATCH_STATUSES, C as CHARGE_BEARERS, d as CONNECTOR_KEYS, c as COUNTRY_CODES, e as CREDENTIALS_TYPES, I as INSTRUCTION_PRIORITIES, b as PAYMENT_DIRECTIONS, a as PAYMENT_STATUSES, P as PAYMENT_TYPES, T as TOKEN_TYPES, i as accountCredentialsInsertSchema, k as accountCredentialsSelectSchema, j as accountCredentialsUpdateSchema, f as accountInsertSchema, h as accountSelectSchema, g as accountUpdateSchema, o as ottInsertSchema, m as ottSelectSchema, l as ottUpdateSchema } from './shared/bank.qc8ALZwm.mjs';
 export { h as hasPaymentAccountAssigned, f as isBatchCompleted, j as isBatchFailed, b as isBatchInitiated, g as isBatchOpen, e as isBatchProcessing, c as isBatchReadyToSign, d as isBatchSigned, a as isPaymentCompleted, i as isPaymentPrepared } from './shared/bank.Dpx6PvkA.mjs';
 export { BANK_CODES, CURRENCY_CODES } from '@develit-io/general-codes';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@develit-services/bank",
-  "version": "0.5.0",
+  "version": "0.6.0",
   "author": "Develit.io s.r.o.",
   "type": "module",
   "exports": {
@@ -35,13 +35,13 @@
     "./dist"
   ],
   "scripts": {
-    "dev": "wrangler dev --port 9232 --persist-to ../../.wrangler/state",
+    "dev": "wrangler dev --port 9232 --persist-to ../../.wrangler/state -c ./wrangler.jsonc -c ../../apps/secrets-store/wrangler.jsonc",
     "wrangler:generate": "bunx develit wrangler:generate --types",
     "db:init": "wrangler d1 execute develit-bank --local --persist-to ../../.wrangler/state --command=\"SELECT 'Creating database...' AS status;\"",
     "db:generate": "drizzle-kit generate",
     "db:migrate": "drizzle-kit migrate",
     "db:explore": "drizzle-kit studio",
-    "types": "wrangler types --env-interface BankEnv --include-runtime false",
+    "types": "bash typegen.sh",
     "lint": "biome check",
     "lint:fix": "biome check --fix",
     "test": "vitest",