@diia-inhouse/workflow 1.15.0

package/dist/cli/syncTemporalSchedules.js

@@ -0,0 +1,92 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SyncTemporalSchedulesCommand = void 0;
+const node_fs_1 = require("node:fs");
+const node_path_1 = __importDefault(require("node:path"));
+const client_1 = require("@temporalio/client");
+const ts_node_1 = require("ts-node");
+const env_1 = require("@diia-inhouse/env");
+const utils_1 = require("@diia-inhouse/utils");
+const client_2 = require("../services/client");
+(0, ts_node_1.register)();
+class SyncTemporalSchedulesCommand {
+    logger;
+    envService;
+    constructor(logger, envService) {
+        this.logger = logger;
+        this.envService = envService;
+    }
+    async run(schedulesPath = 'worker/schedules', taskQueueParam) {
+        const startTime = Date.now();
+        this.logger.info('Starting sync temporal schedules', { schedulesPath, taskQueue: taskQueueParam });
+        const schedules = await this.loadSchedules(schedulesPath);
+        if (!schedules) {
+            this.logger.info('Temporal schedules not found under provided path', { schedulesPath });
+            return;
+        }
+        const taskQueue = taskQueueParam || this.getTaskQueue();
+        if (!taskQueue) {
+            throw new Error('Task queue is not provided');
+        }
+        const temporalConfig = {
+            address: env_1.EnvService.getVar('TEMPORAL_ADDRESS'),
+            namespace: env_1.EnvService.getVar('TEMPORAL_NAMESPACE', 'string', 'default'),
+            taskQueue,
+            encryptionEnabled: env_1.EnvService.getVar('TEMPORAL_ENCRYPTION_ENABLED', 'boolean', false),
+            encryptionKeyId: env_1.EnvService.getVar('TEMPORAL_ENCRYPTION_KEY_ID', 'string', ''),
+        };
+        const client = new client_2.TemporalClient(temporalConfig, this.envService, this.logger);
+        await client.onInit();
+        await this.syncSchedules(client, schedules);
+        this.logger.info(`Sync temporal schedules finished! It took ${((Date.now() - startTime) / 1000).toFixed(1)} seconds`);
+        await client.nativeClient.connection.close();
+        // eslint-disable-next-line unicorn/no-process-exit
+        process.exit(0);
+    }
+    async loadSchedules(schedulesPath) {
+        const fullSchedulesPath = this.resolveSchedulesPath(schedulesPath);
+        // eslint-disable-next-line security/detect-non-literal-fs-filename
+        const schedulesExist = (0, node_fs_1.existsSync)(fullSchedulesPath); // nosemgrep: eslint.detect-non-literal-fs-filename
+        if (!schedulesExist) {
+            return;
+        }
+        const module = await import(fullSchedulesPath);
+        return module.default;
+    }
+    resolveSchedulesPath(schedulesPath) {
+        const baseDir = node_path_1.default.resolve('./dist');
+        const fullPath = node_path_1.default.resolve(baseDir, schedulesPath, 'index.js');
+        if (!fullPath.startsWith(baseDir + node_path_1.default.sep)) {
+            throw new Error(`Invalid schedules path: path traversal detected in '${schedulesPath}'`);
+        }
+        return fullPath;
+    }
+    async syncSchedules(client, schedules) {
+        try {
+            const scheduleNames = Object.keys(schedules);
+            this.logger.info(`Found ${scheduleNames.length} schedules to sync: ${scheduleNames.join(', ')}`);
+            await client.syncSchedules(schedules);
+            this.logger.info('Successfully synced temporal schedules');
+        }
+        catch (err) {
+            if (err instanceof client_1.ScheduleAlreadyRunning) {
+                this.logger.info('Schedule already running, skipping creation');
+                return;
+            }
+            this.logger.error('Failed to sync temporal schedules', { err });
+            throw err;
+        }
+    }
+    getTaskQueue() {
+        const taskQueue = env_1.EnvService.getVar('TEMPORAL_TASK_QUEUE', 'string', '');
+        if (!taskQueue) {
+            return utils_1.utils.getServiceName();
+        }
+        return taskQueue;
+    }
+}
+exports.SyncTemporalSchedulesCommand = SyncTemporalSchedulesCommand;
+//# sourceMappingURL=syncTemporalSchedules.js.map

package/dist/cli/syncTemporalSchedules.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"syncTemporalSchedules.js","sourceRoot":"","sources":["../../src/cli/syncTemporalSchedules.ts"],"names":[],"mappings":";;;;;;AAAA,qCAAoC;AACpC,0DAA4B;AAE5B,+CAA4E;AAC5E,qCAAkC;AAElC,2CAA8C;AAE9C,+CAA2C;AAG3C,+CAAmD;AAEnD,IAAA,kBAAQ,GAAE,CAAA;AAEV,MAAa,4BAA4B;IAEhB;IACA;IAFrB,YACqB,MAAc,EACd,UAAsB;QADtB,WAAM,GAAN,MAAM,CAAQ;QACd,eAAU,GAAV,UAAU,CAAY;IACxC,CAAC;IAEJ,KAAK,CAAC,GAAG,CAAC,aAAa,GAAG,kBAAkB,EAAE,cAAuB;QACjE,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;QAE5B,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,kCAAkC,EAAE,EAAE,aAAa,EAAE,SAAS,EAAE,cAAc,EAAE,CAAC,CAAA;QAElG,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,aAAa,CAAC,CAAA;QACzD,IAAI,CAAC,SAAS,EAAE,CAAC;YACb,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,kDAAkD,EAAE,EAAE,aAAa,EAAE,CAAC,CAAA;YAEvF,OAAM;QACV,CAAC;QAED,MAAM,SAAS,GAAG,cAAc,IAAI,IAAI,CAAC,YAAY,EAAE,CAAA;QACvD,IAAI,CAAC,SAAS,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAA;QACjD,CAAC;QAED,MAAM,cAAc,GAAmB;YACnC,OAAO,EAAE,gBAAU,CAAC,MAAM,CAAC,kBAAkB,CAAC;YAC9C,SAAS,EAAE,gBAAU,CAAC,MAAM,CAAC,oBAAoB,EAAE,QAAQ,EAAE,SAAS,CAAC;YACvE,SAAS;YACT,iBAAiB,EAAE,gBAAU,CAAC,MAAM,CAAC,6BAA6B,EAAE,SAAS,EAAE,KAAK,CAAC;YACrF,eAAe,EAAE,gBAAU,CAAC,MAAM,CAAC,4BAA4B,EAAE,QAAQ,EAAE,EAAE,CAAC;SACjF,CAAA;QAED,MAAM,MAAM,GAAG,IAAI,uBAAc,CAAC,cAAc,EAAE,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,CAAA;QAE/E,MAAM,MAAM,CAAC,MAAM,EAAE,CAAA;QAErB,MAAM,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,SAAS,CAAC,CAAA;QAE3C,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,6CAA6C,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,CAAA;QAErH,MAAM,MAAM,CAAC,YAAY,CAAC,UAAU,CAAC,KAAK,EAAE,CAAA;QAE5C,mDAAmD;QACnD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACnB,CAAC;IAEO,KAAK,CAAC,aAAa,CACvB,aAAqB;QAErB,MAAM,iBAAiB,GAAG,IAAI,CAAC,oBAAoB,CAAC,aAAa,CAAC,CAAA;QAElE,mEAAmE;QACnE,MAAM,cAAc,GAAG,IAAA,oBAAU,EAAC,iBAAiB,CAAC,CAAA,CAAC,mDAAmD;QACxG,IAAI,CAAC,cAAc,EAAE,CAAC;YAClB,OAAM;QACV,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,iBAAiB,CAAC,CAAA;QAE9C,OAAO,MAAM,CAAC,OAAO,CAAA;IACzB,CAAC;IAEO,oBAAoB,CAAC,aAAqB;QAC9C,MAAM,OAAO,GAAG,mBAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAA;QACtC,MAAM,QAAQ,GAAG,mBAAI,CAAC,OAAO,CAAC,OAAO,EAAE,aAAa,EAAE,UAAU,CAAC,CAAA;QAEjE,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,OAAO,GAAG,mBAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YAC3C,MAAM,IAAI,KAAK,CAAC,uDAAuD,aAAa,GAAG,CAAC,CAAA;QAC5F,CAAC;QAED,OAAO,QAAQ,CAAA;IACnB,CAAC;IAEO,KAAK,CAAC,aAAa,CACvB,MAAsB,EACtB,SAA0F;QAE1F,IAAI,CAAC;YACD,MAAM,aAAa,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;YAE5C,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,aAAa,CAAC,MAAM,uBAAuB,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;YAEhG,MAAM,MAAM,CAAC,aAAa,CAAC,SAAS,CAAC,CAAA;YAErC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,wCAAwC,CAAC,CAAA;QAC9D,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACX,IAAI,GAAG,YAAY,+BAAsB,EAAE,CAAC;gBACxC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,6CAA6C,CAAC,CAAA;gBAE/D,OAAM;YACV,CAAC;YAED,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,mCAAmC,EAAE,EAAE,GAAG,EAAE,CAAC,CAAA;YAC/D,MAAM,GAAG,CAAA;QACb,CAAC;IACL,CAAC;IAEO,YAAY;QAChB,MAAM,SAAS,GAAG,gBAAU,CAAC,MAAM,CAAC,qBAAqB,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAA;QAExE,IAAI,CAAC,SAAS,EAAE,CAAC;YACb,OAAO,aAAK,CAAC,cAAc,EAAE,CAAA;QACjC,CAAC;QAED,OAAO,SAAS,CAAA;IACpB,CAAC;CACJ;AAzGD,oEAyGC"}

package/dist/cli/updateTemporalSchedule.js

@@ -0,0 +1,53 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.UpdateTemporalScheduleCommand = void 0;
+const env_1 = require("@diia-inhouse/env");
+const utils_1 = require("@diia-inhouse/utils");
+const client_1 = require("../services/client");
+class UpdateTemporalScheduleCommand {
+    logger;
+    envService;
+    constructor(logger, envService) {
+        this.logger = logger;
+        this.envService = envService;
+    }
+    async run(scheduleId, updateData) {
+        const startTime = Date.now();
+        this.logger.info('Starting update temporal schedule', { scheduleId });
+        const taskQueue = this.getTaskQueue();
+        if (!taskQueue) {
+            throw new Error('Task queue is not provided');
+        }
+        const temporalConfig = {
+            address: env_1.EnvService.getVar('TEMPORAL_ADDRESS'),
+            namespace: env_1.EnvService.getVar('TEMPORAL_NAMESPACE', 'string', 'default'),
+            taskQueue,
+            encryptionEnabled: env_1.EnvService.getVar('TEMPORAL_ENCRYPTION_ENABLED', 'boolean', false),
+            encryptionKeyId: env_1.EnvService.getVar('TEMPORAL_ENCRYPTION_KEY_ID', 'string', ''),
+        };
+        const client = new client_1.TemporalClient(temporalConfig, this.envService, this.logger);
+        await client.onInit();
+        try {
+            await client.updateSchedule(scheduleId, updateData);
+        }
+        catch (err) {
+            this.logger.error('Failed to update temporal schedule', { err });
+            throw err;
+        }
+        finally {
+            await client.nativeClient.connection.close();
+        }
+        this.logger.info(`Update temporal schedule finished! It took ${((Date.now() - startTime) / 1000).toFixed(1)} seconds`);
+        // eslint-disable-next-line unicorn/no-process-exit
+        process.exit(0);
+    }
+    getTaskQueue() {
+        const taskQueue = env_1.EnvService.getVar('TEMPORAL_TASK_QUEUE', 'string', '');
+        if (!taskQueue) {
+            return utils_1.utils.getServiceName();
+        }
+        return taskQueue;
+    }
+}
+exports.UpdateTemporalScheduleCommand = UpdateTemporalScheduleCommand;
+//# sourceMappingURL=updateTemporalSchedule.js.map

package/dist/cli/updateTemporalSchedule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"updateTemporalSchedule.js","sourceRoot":"","sources":["../../src/cli/updateTemporalSchedule.ts"],"names":[],"mappings":";;;AAEA,2CAA8C;AAE9C,+CAA2C;AAG3C,+CAAmD;AAEnD,MAAa,6BAA6B;IAEjB;IACA;IAFrB,YACqB,MAAc,EACd,UAAsB;QADtB,WAAM,GAAN,MAAM,CAAQ;QACd,eAAU,GAAV,UAAU,CAAY;IACxC,CAAC;IAEJ,KAAK,CAAC,GAAG,CAAC,UAAkB,EAAE,UAAmC;QAC7D,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;QAE5B,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,mCAAmC,EAAE,EAAE,UAAU,EAAE,CAAC,CAAA;QAErE,MAAM,SAAS,GAAG,IAAI,CAAC,YAAY,EAAE,CAAA;QACrC,IAAI,CAAC,SAAS,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAA;QACjD,CAAC;QAED,MAAM,cAAc,GAAmB;YACnC,OAAO,EAAE,gBAAU,CAAC,MAAM,CAAC,kBAAkB,CAAC;YAC9C,SAAS,EAAE,gBAAU,CAAC,MAAM,CAAC,oBAAoB,EAAE,QAAQ,EAAE,SAAS,CAAC;YACvE,SAAS;YACT,iBAAiB,EAAE,gBAAU,CAAC,MAAM,CAAC,6BAA6B,EAAE,SAAS,EAAE,KAAK,CAAC;YACrF,eAAe,EAAE,gBAAU,CAAC,MAAM,CAAC,4BAA4B,EAAE,QAAQ,EAAE,EAAE,CAAC;SACjF,CAAA;QAED,MAAM,MAAM,GAAG,IAAI,uBAAc,CAAC,cAAc,EAAE,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,CAAA;QAE/E,MAAM,MAAM,CAAC,MAAM,EAAE,CAAA;QAErB,IAAI,CAAC;YACD,MAAM,MAAM,CAAC,cAAc,CAAC,UAAU,EAAE,UAAmC,CAAC,CAAA;QAChF,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACX,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,oCAAoC,EAAE,EAAE,GAAG,EAAE,CAAC,CAAA;YAChE,MAAM,GAAG,CAAA;QACb,CAAC;gBAAS,CAAC;YACP,MAAM,MAAM,CAAC,YAAY,CAAC,UAAU,CAAC,KAAK,EAAE,CAAA;QAChD,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,8CAA8C,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,CAAA;QAEtH,mDAAmD;QACnD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACnB,CAAC;IAEO,YAAY;QAChB,MAAM,SAAS,GAAG,gBAAU,CAAC,MAAM,CAAC,qBAAqB,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAA;QAExE,IAAI,CAAC,SAAS,EAAE,CAAC;YACb,OAAO,aAAK,CAAC,cAAc,EAAE,CAAA;QACjC,CAAC;QAED,OAAO,SAAS,CAAA;IACpB,CAAC;CACJ;AApDD,sEAoDC"}

package/dist/client.js

@@ -0,0 +1,19 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.TemporalClient = exports.ChildWorkflowFailure = exports.ApplicationFailure = exports.TerminatedFailure = exports.CancelledFailure = exports.TemporalFailure = exports.TimeoutFailure = exports.ServerFailure = exports.ActivityFailure = exports.WorkflowClient = exports.MONTHS = exports.DAYS_OF_WEEK = exports.Client = void 0;
+var client_1 = require("@temporalio/client");
+Object.defineProperty(exports, "Client", { enumerable: true, get: function () { return client_1.Client; } });
+Object.defineProperty(exports, "DAYS_OF_WEEK", { enumerable: true, get: function () { return client_1.DAYS_OF_WEEK; } });
+Object.defineProperty(exports, "MONTHS", { enumerable: true, get: function () { return client_1.MONTHS; } });
+Object.defineProperty(exports, "WorkflowClient", { enumerable: true, get: function () { return client_1.WorkflowClient; } });
+Object.defineProperty(exports, "ActivityFailure", { enumerable: true, get: function () { return client_1.ActivityFailure; } });
+Object.defineProperty(exports, "ServerFailure", { enumerable: true, get: function () { return client_1.ServerFailure; } });
+Object.defineProperty(exports, "TimeoutFailure", { enumerable: true, get: function () { return client_1.TimeoutFailure; } });
+Object.defineProperty(exports, "TemporalFailure", { enumerable: true, get: function () { return client_1.TemporalFailure; } });
+Object.defineProperty(exports, "CancelledFailure", { enumerable: true, get: function () { return client_1.CancelledFailure; } });
+Object.defineProperty(exports, "TerminatedFailure", { enumerable: true, get: function () { return client_1.TerminatedFailure; } });
+Object.defineProperty(exports, "ApplicationFailure", { enumerable: true, get: function () { return client_1.ApplicationFailure; } });
+Object.defineProperty(exports, "ChildWorkflowFailure", { enumerable: true, get: function () { return client_1.ChildWorkflowFailure; } });
+var client_2 = require("./services/client");
+Object.defineProperty(exports, "TemporalClient", { enumerable: true, get: function () { return client_2.TemporalClient; } });
+//# sourceMappingURL=client.js.map

package/dist/client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":";;;AAAA,6CAkB2B;AAjBvB,gGAAA,MAAM,OAAA;AAEN,sGAAA,YAAY,OAAA;AAEZ,gGAAA,MAAM,OAAA;AAEN,wGAAA,cAAc,OAAA;AACd,yGAAA,eAAe,OAAA;AAEf,uGAAA,aAAa,OAAA;AACb,wGAAA,cAAc,OAAA;AACd,yGAAA,eAAe,OAAA;AACf,0GAAA,gBAAgB,OAAA;AAChB,2GAAA,iBAAiB,OAAA;AACjB,4GAAA,kBAAkB,OAAA;AAClB,8GAAA,oBAAoB,OAAA;AAIxB,4CAAkD;AAAzC,wGAAA,cAAc,OAAA"}

package/dist/common.js

@@ -0,0 +1,13 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.WorkflowExecutionAlreadyStartedError = exports.rootCause = exports.defaultFailureConverter = exports.extractWorkflowType = exports.ensureTemporalFailure = exports.ensureApplicationFailure = exports.cutoffStackTrace = exports.arrayFromPayloads = void 0;
+var common_1 = require("@temporalio/common");
+Object.defineProperty(exports, "arrayFromPayloads", { enumerable: true, get: function () { return common_1.arrayFromPayloads; } });
+Object.defineProperty(exports, "cutoffStackTrace", { enumerable: true, get: function () { return common_1.cutoffStackTrace; } });
+Object.defineProperty(exports, "ensureApplicationFailure", { enumerable: true, get: function () { return common_1.ensureApplicationFailure; } });
+Object.defineProperty(exports, "ensureTemporalFailure", { enumerable: true, get: function () { return common_1.ensureTemporalFailure; } });
+Object.defineProperty(exports, "extractWorkflowType", { enumerable: true, get: function () { return common_1.extractWorkflowType; } });
+Object.defineProperty(exports, "defaultFailureConverter", { enumerable: true, get: function () { return common_1.defaultFailureConverter; } });
+Object.defineProperty(exports, "rootCause", { enumerable: true, get: function () { return common_1.rootCause; } });
+Object.defineProperty(exports, "WorkflowExecutionAlreadyStartedError", { enumerable: true, get: function () { return common_1.WorkflowExecutionAlreadyStartedError; } });
+//# sourceMappingURL=common.js.map

package/dist/common.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"common.js","sourceRoot":"","sources":["../src/common.ts"],"names":[],"mappings":";;;AAAA,6CAU2B;AARvB,2GAAA,iBAAiB,OAAA;AACjB,0GAAA,gBAAgB,OAAA;AAChB,kHAAA,wBAAwB,OAAA;AACxB,+GAAA,qBAAqB,OAAA;AACrB,6GAAA,mBAAmB,OAAA;AACnB,iHAAA,uBAAuB,OAAA;AACvB,mGAAA,SAAS,OAAA;AACT,8HAAA,oCAAoC,OAAA"}

package/dist/encryption/crypto.js

@@ -0,0 +1,28 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.encrypt = encrypt;
+exports.decrypt = decrypt;
+const crypto_1 = require("crypto");
+const CIPHER = 'AES-GCM';
+const IV_LENGTH_BYTES = 12;
+const TAG_LENGTH_BYTES = 16;
+async function encrypt(data, key) {
+    const iv = crypto_1.webcrypto.getRandomValues(new Uint8Array(IV_LENGTH_BYTES));
+    const encrypted = await crypto_1.webcrypto.subtle.encrypt({
+        name: CIPHER,
+        iv,
+        tagLength: TAG_LENGTH_BYTES * 8,
+    }, key, data);
+    return Buffer.concat([iv, new Uint8Array(encrypted)]);
+}
+async function decrypt(encryptedData, key) {
+    const iv = encryptedData.subarray(0, IV_LENGTH_BYTES);
+    const ciphertext = encryptedData.subarray(IV_LENGTH_BYTES);
+    const decrypted = await crypto_1.webcrypto.subtle.decrypt({
+        name: CIPHER,
+        iv,
+        tagLength: TAG_LENGTH_BYTES * 8,
+    }, key, ciphertext);
+    return new Uint8Array(decrypted);
+}
+//# sourceMappingURL=crypto.js.map

package/dist/encryption/crypto.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"crypto.js","sourceRoot":"","sources":["../../src/encryption/crypto.ts"],"names":[],"mappings":";;AAMA,0BAaC;AAED,0BAcC;AAnCD,mCAA4C;AAE5C,MAAM,MAAM,GAAG,SAAS,CAAA;AACxB,MAAM,eAAe,GAAG,EAAE,CAAA;AAC1B,MAAM,gBAAgB,GAAG,EAAE,CAAA;AAEpB,KAAK,UAAU,OAAO,CAAC,IAAgB,EAAE,GAAqB;IACjE,MAAM,EAAE,GAAG,kBAAM,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,eAAe,CAAC,CAAC,CAAA;IAClE,MAAM,SAAS,GAAG,MAAM,kBAAM,CAAC,MAAM,CAAC,OAAO,CACzC;QACI,IAAI,EAAE,MAAM;QACZ,EAAE;QACF,SAAS,EAAE,gBAAgB,GAAG,CAAC;KAClC,EACD,GAAG,EACH,IAAI,CACP,CAAA;IAED,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,IAAI,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAA;AACzD,CAAC;AAEM,KAAK,UAAU,OAAO,CAAC,aAAyB,EAAE,GAAqB;IAC1E,MAAM,EAAE,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC,EAAE,eAAe,CAAC,CAAA;IACrD,MAAM,UAAU,GAAG,aAAa,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAA;IAC1D,MAAM,SAAS,GAAG,MAAM,kBAAM,CAAC,MAAM,CAAC,OAAO,CACzC;QACI,IAAI,EAAE,MAAM;QACZ,EAAE;QACF,SAAS,EAAE,gBAAgB,GAAG,CAAC;KAClC,EACD,GAAG,EACH,UAAU,CACb,CAAA;IAED,OAAO,IAAI,UAAU,CAAC,SAAS,CAAC,CAAA;AACpC,CAAC"}

package/dist/encryption/dataConverter.js

@@ -0,0 +1,27 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getDataConverter = getDataConverter;
+const env_1 = require("@diia-inhouse/env");
+const types_1 = require("@diia-inhouse/types");
+const encryptionCodec_1 = require("./encryptionCodec");
+let dataConverterPromise;
+const defaultRefreshInterval = types_1.DurationMs.Day;
+async function getDataConverter(keyId, envService, refreshInterval) {
+    if (!dataConverterPromise) {
+        dataConverterPromise = createDataConverter(keyId, envService, refreshInterval);
+    }
+    return await dataConverterPromise;
+}
+async function createDataConverter(keyId, envService, refreshInterval = defaultRefreshInterval) {
+    const vaultEnabled = env_1.EnvService.getVar('VAULT_ENABLED', 'boolean', false);
+    const codec = await encryptionCodec_1.EncryptionCodec.create(keyId, envService, { vaultEnabled });
+    if (vaultEnabled && refreshInterval > 0) {
+        setInterval(async () => {
+            await codec?.refreshDefaultKey();
+        }, refreshInterval);
+    }
+    return {
+        payloadCodecs: [codec],
+    };
+}
+//# sourceMappingURL=dataConverter.js.map

package/dist/encryption/dataConverter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dataConverter.js","sourceRoot":"","sources":["../../src/encryption/dataConverter.ts"],"names":[],"mappings":";;AAUA,4CAMC;AAdD,2CAA8C;AAC9C,+CAAgD;AAEhD,uDAAmD;AAEnD,IAAI,oBAA4C,CAAA;AAChD,MAAM,sBAAsB,GAAG,kBAAU,CAAC,GAAG,CAAA;AAEtC,KAAK,UAAU,gBAAgB,CAAC,KAAa,EAAE,UAAsB,EAAE,eAAwB;IAClG,IAAI,CAAC,oBAAoB,EAAE,CAAC;QACxB,oBAAoB,GAAG,mBAAmB,CAAC,KAAK,EAAE,UAAU,EAAE,eAAe,CAAC,CAAA;IAClF,CAAC;IAED,OAAO,MAAM,oBAAoB,CAAA;AACrC,CAAC;AAED,KAAK,UAAU,mBAAmB,CAC9B,KAAa,EACb,UAAsB,EACtB,eAAe,GAAG,sBAAsB;IAExC,MAAM,YAAY,GAAG,gBAAU,CAAC,MAAM,CAAC,eAAe,EAAE,SAAS,EAAE,KAAK,CAAC,CAAA;IACzE,MAAM,KAAK,GAAG,MAAM,iCAAe,CAAC,MAAM,CAAC,KAAK,EAAE,UAAU,EAAE,EAAE,YAAY,EAAE,CAAC,CAAA;IAE/E,IAAI,YAAY,IAAI,eAAe,GAAG,CAAC,EAAE,CAAC;QACtC,WAAW,CAAC,KAAK,IAAI,EAAE;YACnB,MAAM,KAAK,EAAE,iBAAiB,EAAE,CAAA;QACpC,CAAC,EAAE,eAAe,CAAC,CAAA;IACvB,CAAC;IAED,OAAO;QACH,aAAa,EAAE,CAAC,KAAK,CAAC;KACzB,CAAA;AACL,CAAC"}

package/dist/encryption/encryptionCodec.js

@@ -0,0 +1,125 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.EncryptionCodec = void 0;
+const node_crypto_1 = require("node:crypto");
+const common_1 = require("@temporalio/common");
+const encoding_1 = require("@temporalio/common/lib/encoding");
+const proto_1 = require("@temporalio/proto");
+const diia_logger_1 = __importDefault(require("@diia-inhouse/diia-logger"));
+const crypto_1 = require("./crypto");
+class EncryptionCodec {
+    keys;
+    defaultKeyId;
+    envService;
+    logger;
+    batchSize;
+    encoding = 'binary/encrypted';
+    metadataEncryptionKeyId = 'encryption-key-id';
+    constructor(keys, defaultKeyId, envService, logger, options = {}) {
+        this.keys = keys;
+        this.defaultKeyId = defaultKeyId;
+        this.envService = envService;
+        this.logger = logger;
+        this.batchSize = options.batchSize ?? 50;
+        this.defaultKeyId = defaultKeyId;
+    }
+    static async create(keyId, envService, options, logger = new diia_logger_1.default()) {
+        const storedKeys = new Map();
+        const { vaultEnabled } = options;
+        if (!vaultEnabled) {
+            logger.info('Vault is disabled, extracting static keys from env for Temporal encryption');
+            const keys = JSON.parse(keyId);
+            for (const [fullKeyName, key] of Object.entries(keys)) {
+                storedKeys.set(fullKeyName, await EncryptionCodec.createCryptoKey(key));
+            }
+            const defaultKey = Object.keys(keys).toSorted((a, b) => {
+                const versionA = Number.parseInt(a.split('/').at(-1) || '0');
+                const versionB = Number.parseInt(b.split('/').at(-1) || '0');
+                return versionB - versionA;
+            })[0];
+            return new this(storedKeys, defaultKey, envService, logger, options);
+        }
+        const { fullKeyName, key } = await envService.getTransitKey(keyId, { keyVersion: 'latest' });
+        storedKeys.set(fullKeyName, await EncryptionCodec.createCryptoKey(key));
+        return new this(storedKeys, fullKeyName, envService, logger, options);
+    }
+    static async createCryptoKey(key) {
+        try {
+            const keyBuffer = Buffer.from(key, 'base64');
+            const cryptoKey = await node_crypto_1.webcrypto.subtle.importKey('raw', keyBuffer, {
+                name: 'AES-GCM',
+                length: 256,
+            }, true, ['encrypt', 'decrypt']);
+            return cryptoKey;
+        }
+        catch (err) {
+            throw new Error(`Failed to create crypto key: ${err.message}`);
+        }
+    }
+    async refreshDefaultKey() {
+        const { name: keyId } = this.splitKeyId(this.defaultKeyId);
+        const { fullKeyName, key } = await this.envService.getTransitKey(keyId, { keyVersion: 'latest' });
+        if (!this.keys.has(fullKeyName)) {
+            const newKey = await EncryptionCodec.createCryptoKey(key);
+            this.keys.set(fullKeyName, newKey);
+            this.defaultKeyId = fullKeyName;
+        }
+    }
+    async encode(payloads) {
+        return await this.processBatch(payloads, async (payload) => ({
+            metadata: {
+                [common_1.METADATA_ENCODING_KEY]: (0, encoding_1.encode)(this.encoding),
+                [this.metadataEncryptionKeyId]: (0, encoding_1.encode)(this.defaultKeyId),
+            },
+            data: await (0, crypto_1.encrypt)(proto_1.temporal.api.common.v1.Payload.encode(payload).finish(), this.keys.get(this.defaultKeyId)),
+        }));
+    }
+    async decode(payloads) {
+        return await this.processBatch(payloads, async (payload) => {
+            if (!payload.metadata || (0, encoding_1.decode)(payload.metadata[common_1.METADATA_ENCODING_KEY]) !== this.encoding) {
+                return payload;
+            }
+            if (!payload.data) {
+                throw new common_1.ValueError('Payload data is missing');
+            }
+            const keyIdBytes = payload.metadata[this.metadataEncryptionKeyId];
+            if (!keyIdBytes) {
+                throw new common_1.ValueError('Unable to decrypt Payload without encryption key id');
+            }
+            const keyId = (0, encoding_1.decode)(keyIdBytes);
+            let key = this.keys.get(keyId);
+            if (!key) {
+                const { name, version } = this.splitKeyId(keyId);
+                const { key: rawKey } = await this.envService.getTransitKey(name, { keyVersion: version });
+                this.logger.info(`Decryption key ${keyId} not found in cache, fetched from vault`);
+                key = await EncryptionCodec.createCryptoKey(rawKey);
+                this.keys.set(keyId, key);
+            }
+            const decryptedPayloadBytes = await (0, crypto_1.decrypt)(payload.data, key);
+            return proto_1.temporal.api.common.v1.Payload.decode(decryptedPayloadBytes);
+        });
+    }
+    async processBatch(items, processor) {
+        const results = [];
+        for (let i = 0; i < items.length; i += this.batchSize) {
+            const batch = items.slice(i, i + this.batchSize);
+            const batchPromises = batch.map(processor);
+            const batchResults = await Promise.all(batchPromises);
+            results.push(...batchResults);
+        }
+        return results;
+    }
+    splitKeyId(fullKeyId) {
+        const name = fullKeyId.split('/').slice(0, -1).join('/');
+        const version = fullKeyId.split('/').at(-1);
+        if (!version || Number.isNaN(Number(version))) {
+            throw new Error(`Invalid key ID: ${fullKeyId}. Failed to get version`);
+        }
+        return { name, version };
+    }
+}
+exports.EncryptionCodec = EncryptionCodec;
+//# sourceMappingURL=encryptionCodec.js.map

package/dist/encryption/encryptionCodec.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"encryptionCodec.js","sourceRoot":"","sources":["../../src/encryption/encryptionCodec.ts"],"names":[],"mappings":";;;;;;AAAA,6CAAiD;AAEjD,+CAA6F;AAC7F,8DAAgE;AAChE,6CAA4C;AAE5C,4EAAkD;AAIlD,qCAA2C;AAE3C,MAAa,eAAe;IAMH;IACT;IACS;IACA;IARJ,SAAS,CAAQ;IACjB,QAAQ,GAAG,kBAAkB,CAAA;IAC7B,uBAAuB,GAAG,mBAAmB,CAAA;IAE9D,YACqB,IAAmC,EAC5C,YAAoB,EACX,UAAsB,EACtB,MAAc,EAC/B,UAA0D,EAAE;QAJ3C,SAAI,GAAJ,IAAI,CAA+B;QAC5C,iBAAY,GAAZ,YAAY,CAAQ;QACX,eAAU,GAAV,UAAU,CAAY;QACtB,WAAM,GAAN,MAAM,CAAQ;QAG/B,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,EAAE,CAAA;QACxC,IAAI,CAAC,YAAY,GAAG,YAAY,CAAA;IACpC,CAAC;IAED,MAAM,CAAC,KAAK,CAAC,MAAM,CACf,KAAa,EACb,UAAsB,EACtB,OAAuD,EACvD,SAAiB,IAAI,qBAAU,EAAE;QAEjC,MAAM,UAAU,GAAG,IAAI,GAAG,EAA4B,CAAA;QACtD,MAAM,EAAE,YAAY,EAAE,GAAG,OAAO,CAAA;QAEhC,IAAI,CAAC,YAAY,EAAE,CAAC;YAChB,MAAM,CAAC,IAAI,CAAC,4EAA4E,CAAC,CAAA;YACzF,MAAM,IAAI,GAA2B,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;YACtD,KAAK,MAAM,CAAC,WAAW,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;gBACpD,UAAU,CAAC,GAAG,CAAC,WAAW,EAAE,MAAM,eAAe,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAA;YAC3E,CAAC;YAED,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;gBACnD,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAA;gBAC5D,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAA;gBAE5D,OAAO,QAAQ,GAAG,QAAQ,CAAA;YAC9B,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;YAEL,OAAO,IAAI,IAAI,CAAC,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,EAAE,OAAO,CAAC,CAAA;QACxE,CAAC;QAED,MAAM,EAAE,WAAW,EAAE,GAAG,EAAE,GAAG,MAAM,UAAU,CAAC,aAAa,CAAC,KAAK,EAAE,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC,CAAA;QAE5F,UAAU,CAAC,GAAG,CAAC,WAAW,EAAE,MAAM,eAAe,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAA;QAEvE,OAAO,IAAI,IAAI,CAAC,UAAU,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,EAAE,OAAO,CAAC,CAAA;IACzE,CAAC;IAEO,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,GAAW;QAC5C,IAAI,CAAC;YACD,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAA;YAE5C,MAAM,SAAS,GAAG,MAAM,uBAAM,CAAC,MAAM,CAAC,SAAS,CAC3C,KAAK,EACL,SAAS,EACT;gBACI,IAAI,EAAE,SAAS;gBACf,MAAM,EAAE,GAAG;aACd,EACD,IAAI,EACJ,CAAC,SAAS,EAAE,SAAS,CAAC,CACzB,CAAA;YAED,OAAO,SAAS,CAAA;QACpB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACX,MAAM,IAAI,KAAK,CAAC,gCAAiC,GAAa,CAAC,OAAO,EAAE,CAAC,CAAA;QAC7E,CAAC;IACL,CAAC;IAED,KAAK,CAAC,iBAAiB;QACnB,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,YAAY,CAAC,CAAA;QAC1D,MAAM,EAAE,WAAW,EAAE,GAAG,EAAE,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,KAAK,EAAE,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC,CAAA;QAEjG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;YAC9B,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,eAAe,CAAC,GAAG,CAAC,CAAA;YAEzD,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,MAAM,CAAC,CAAA;YAClC,IAAI,CAAC,YAAY,GAAG,WAAW,CAAA;QACnC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,QAAmB;QAC5B,OAAO,MAAM,IAAI,CAAC,YAAY,CAAC,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;YACzD,QAAQ,EAAE;gBACN,CAAC,8BAAqB,CAAC,EAAE,IAAA,iBAAM,EAAC,IAAI,CAAC,QAAQ,CAAC;gBAC9C,CAAC,IAAI,CAAC,uBAAuB,CAAC,EAAE,IAAA,iBAAM,EAAC,IAAI,CAAC,YAAY,CAAC;aAC5D;YACD,IAAI,EAAE,MAAM,IAAA,gBAAO,EAAC,gBAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,YAAY,CAAE,CAAC;SAClH,CAAC,CAAC,CAAA;IACP,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,QAAmB;QAC5B,OAAO,MAAM,IAAI,CAAC,YAAY,CAAC,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;YACvD,IAAI,CAAC,OAAO,CAAC,QAAQ,IAAI,IAAA,iBAAM,EAAC,OAAO,CAAC,QAAQ,CAAC,8BAAqB,CAAC,CAAC,KAAK,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACzF,OAAO,OAAO,CAAA;YAClB,CAAC;YAED,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;gBAChB,MAAM,IAAI,mBAAU,CAAC,yBAAyB,CAAC,CAAA;YACnD,CAAC;YAED,MAAM,UAAU,GAAG,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAA;YACjE,IAAI,CAAC,UAAU,EAAE,CAAC;gBACd,MAAM,IAAI,mBAAU,CAAC,qDAAqD,CAAC,CAAA;YAC/E,CAAC;YAED,MAAM,KAAK,GAAG,IAAA,iBAAM,EAAC,UAAU,CAAC,CAAA;YAChC,IAAI,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;YAC9B,IAAI,CAAC,GAAG,EAAE,CAAC;gBACP,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAA;gBAChD,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,IAAI,EAAE,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,CAAA;gBAE1F,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,kBAAkB,KAAK,yCAAyC,CAAC,CAAA;gBAElF,GAAG,GAAG,MAAM,eAAe,CAAC,eAAe,CAAC,MAAM,CAAC,CAAA;gBACnD,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,CAAA;YAC7B,CAAC;YAED,MAAM,qBAAqB,GAAG,MAAM,IAAA,gBAAO,EAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAA;YAE9D,OAAO,gBAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,qBAAqB,CAAC,CAAA;QACvE,CAAC,CAAC,CAAA;IACN,CAAC;IAEO,KAAK,CAAC,YAAY,CAAI,KAAU,EAAE,SAAwC;QAC9E,MAAM,OAAO,GAAc,EAAE,CAAA;QAE7B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACpD,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,CAAA;YAChD,MAAM,aAAa,GAAG,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;YAC1C,MAAM,YAAY,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,CAAA;YAErD,OAAO,CAAC,IAAI,CAAC,GAAG,YAAY,CAAC,CAAA;QACjC,CAAC;QAED,OAAO,OAAO,CAAA;IAClB,CAAC;IAEO,UAAU,CAAC,SAAiB;QAChC,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QACxD,MAAM,OAAO,GAAG,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAA;QAE3C,IAAI,CAAC,OAAO,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;YAC5C,MAAM,IAAI,KAAK,CAAC,mBAAmB,SAAS,yBAAyB,CAAC,CAAA;QAC1E,CAAC;QAED,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAA;IAC5B,CAAC;CACJ;AArJD,0CAqJC"}

package/dist/encryption/index.js

@@ -0,0 +1,20 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./dataConverter"), exports);
+__exportStar(require("./encryptionCodec"), exports);
+__exportStar(require("./crypto"), exports);
+//# sourceMappingURL=index.js.map

package/dist/encryption/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/encryption/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,kDAA+B;AAE/B,oDAAiC;AAEjC,2CAAwB"}

package/dist/index.js

@@ -0,0 +1,42 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.proto = void 0;
+exports.proto = __importStar(require("@temporalio/proto"));
+__exportStar(require("./encryption"), exports);
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,2DAA0C;AAI1C,+CAA4B"}

package/dist/instrumentation.js

@@ -0,0 +1,10 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.traceExporter = void 0;
+const exporter_trace_otlp_grpc_1 = require("@opentelemetry/exporter-trace-otlp-grpc");
+const env_1 = require("@diia-inhouse/env");
+exports.traceExporter = new exporter_trace_otlp_grpc_1.OTLPTraceExporter({
+    url: env_1.EnvService.getVar('TRACING_EXPORTER_URL', 'string', 'http://localhost:4317') ||
+        'http://opentelemetry-collector.tracing.svc.cluster.local:4317',
+});
+//# sourceMappingURL=instrumentation.js.map

package/dist/instrumentation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"instrumentation.js","sourceRoot":"","sources":["../src/instrumentation.ts"],"names":[],"mappings":";;;AAAA,sFAAoG;AAEpG,2CAA8C;AAEjC,QAAA,aAAa,GAAG,IAAI,4CAAqB,CAAC;IACnD,GAAG,EACC,gBAAU,CAAC,MAAM,CAAC,sBAAsB,EAAE,QAAQ,EAAE,uBAAuB,CAAC;QAC5E,+DAA+D;CACtE,CAAC,CAAA"}

package/dist/interceptors/asyncLocalStorageBridge.js

@@ -0,0 +1,67 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AsyncLocalStorageBridgeInterceptor = void 0;
+const otel = __importStar(require("@opentelemetry/api"));
+/**
+ * Bridges OpenTelemetry trace context to AsyncLocalStorage for Temporal activities.
+ *
+ * Extracts trace_id from OpenTelemetry span and injects it into AsyncLocalStorage,
+ * making it available to services.
+ *
+ * @example
+ * // In a service called from an activity:
+ * const traceId = this.asyncLocalStorage.getStore()?.logData?.traceId
+ */
+class AsyncLocalStorageBridgeInterceptor {
+    ctx;
+    asyncLocalStorage;
+    logger;
+    constructor(ctx, asyncLocalStorage, logger) {
+        this.ctx = ctx;
+        this.asyncLocalStorage = asyncLocalStorage;
+        this.logger = logger;
+    }
+    async execute(input, next) {
+        const span = otel.trace.getSpan(otel.context.active());
+        const spanContext = span?.spanContext();
+        const traceId = spanContext && otel.isSpanContextValid(spanContext) ? spanContext.traceId : undefined;
+        const logData = this.logger.prepareContext({ traceId });
+        const alsData = { logData };
+        return await this.asyncLocalStorage.run(alsData, async () => await next(input));
+    }
+}
+exports.AsyncLocalStorageBridgeInterceptor = AsyncLocalStorageBridgeInterceptor;
+//# sourceMappingURL=asyncLocalStorageBridge.js.map

package/dist/interceptors/asyncLocalStorageBridge.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"asyncLocalStorageBridge.js","sourceRoot":"","sources":["../../src/interceptors/asyncLocalStorageBridge.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAEA,yDAA0C;AAM1C;;;;;;;;;GASG;AACH,MAAa,kCAAkC;IAEpB;IACF;IACA;IAHrB,YACuB,GAAoB,EACtB,iBAA6C,EAC7C,MAAc;QAFZ,QAAG,GAAH,GAAG,CAAiB;QACtB,sBAAiB,GAAjB,iBAAiB,CAA4B;QAC7C,WAAM,GAAN,MAAM,CAAQ;IAChC,CAAC;IAEJ,KAAK,CAAC,OAAO,CAAC,KAA2B,EAAE,IAAsD;QAC7F,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAA;QACtD,MAAM,WAAW,GAAG,IAAI,EAAE,WAAW,EAAE,CAAA;QACvC,MAAM,OAAO,GAAG,WAAW,IAAI,IAAI,CAAC,kBAAkB,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAA;QAErG,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,EAAE,OAAO,EAAE,CAAC,CAAA;QACvD,MAAM,OAAO,GAAY,EAAE,OAAO,EAAE,CAAA;QAEpC,OAAO,MAAM,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,CAAC,CAAA;IACnF,CAAC;CACJ;AAjBD,gFAiBC"}

package/dist/interceptors/index.js

@@ -0,0 +1,6 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AsyncLocalStorageBridgeInterceptor = void 0;
+var asyncLocalStorageBridge_1 = require("./asyncLocalStorageBridge");
+Object.defineProperty(exports, "AsyncLocalStorageBridgeInterceptor", { enumerable: true, get: function () { return asyncLocalStorageBridge_1.AsyncLocalStorageBridgeInterceptor; } });
+//# sourceMappingURL=index.js.map

package/dist/interceptors/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/interceptors/index.ts"],"names":[],"mappings":";;;AAAA,qEAA8E;AAArE,6IAAA,kCAAkC,OAAA"}

package/dist/interceptors.js

@@ -0,0 +1,10 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.workflowInterceptors = void 0;
+const interceptors_opentelemetry_1 = require("@temporalio/interceptors-opentelemetry");
+const workflowInterceptors = () => ({
+    inbound: [new interceptors_opentelemetry_1.OpenTelemetryInboundInterceptor()],
+    outbound: [new interceptors_opentelemetry_1.OpenTelemetryOutboundInterceptor()],
+});
+exports.workflowInterceptors = workflowInterceptors;
+//# sourceMappingURL=interceptors.js.map

package/dist/interceptors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"interceptors.js","sourceRoot":"","sources":["../src/interceptors.ts"],"names":[],"mappings":";;;AAAA,uFAA0H;AAGnH,MAAM,oBAAoB,GAAgC,GAAG,EAAE,CAAC,CAAC;IACpE,OAAO,EAAE,CAAC,IAAI,4DAA+B,EAAE,CAAC;IAChD,QAAQ,EAAE,CAAC,IAAI,6DAAgC,EAAE,CAAC;CACrD,CAAC,CAAA;AAHW,QAAA,oBAAoB,wBAG/B"}

package/dist/interfaces/config.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=config.js.map

package/dist/interfaces/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../src/interfaces/config.ts"],"names":[],"mappings":""}

package/dist/interfaces/index.js

@@ -0,0 +1,18 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./config"), exports);
+//# sourceMappingURL=index.js.map

package/dist/interfaces/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/interfaces/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,2CAAwB"}

package/dist/interfaces/services/worker.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=worker.js.map