@ductape/sdk 0.0.4-v51 → 0.0.4-v52

package/dist/apps/utils/auth-context-manager.d.ts

@@ -0,0 +1,137 @@
+/**
+ * AuthContextManager - Manages authentication context for action execution
+ *
+ * This utility allows developers to set up authentication once per app/env
+ * combination, and have those credentials automatically merged into action
+ * inputs without needing to specify them on every call.
+ *
+ * @example
+ * ```ts
+ * // Set up auth once
+ * ductape.action.auth({
+ *   app: 'stripe',
+ *   env: 'prd',
+ *   headers: { Authorization: 'Bearer sk_live_xxx' }
+ * });
+ *
+ * // Now all stripe actions in prd env automatically include auth
+ * const result = await ductape.action.run({
+ *   app: 'stripe',
+ *   env: 'prd',
+ *   action: 'create-charge',
+ *   input: { amount: 1000, currency: 'usd' }
+ * });
+ * // Headers automatically include Authorization from auth context
+ * ```
+ */
+import { IResolvedInput } from './input-resolver';
+/**
+ * Auth context configuration for an app/env combination
+ */
+export interface IAuthContextConfig {
+    /** App tag */
+    app: string;
+    /** Environment slug */
+    env: string;
+    /** Optional product tag (defaults to current product) */
+    product?: string;
+    /** Headers to inject (e.g., Authorization) */
+    headers?: Record<string, unknown>;
+    /** Body fields to inject */
+    body?: Record<string, unknown>;
+    /** Query parameters to inject */
+    query?: Record<string, unknown>;
+    /** Path parameters to inject */
+    params?: Record<string, unknown>;
+}
+/**
+ * Validation error thrown for invalid auth context
+ */
+export declare class AuthContextError extends Error {
+    readonly errorType: 'invalid_config' | 'not_found' | 'duplicate';
+    constructor(message: string, errorType: 'invalid_config' | 'not_found' | 'duplicate');
+}
+/**
+ * AuthContextManager stores and retrieves authentication contexts
+ * for app/env combinations.
+ */
+export declare class AuthContextManager {
+    /** Storage for auth contexts, keyed by app:env or product:app:env */
+    private contexts;
+    /** Default product for contexts without explicit product */
+    private defaultProduct?;
+    /**
+     * Set the default product for auth contexts
+     */
+    setDefaultProduct(product: string): void;
+    /**
+     * Get the default product
+     */
+    getDefaultProduct(): string | undefined;
+    /**
+     * Register an authentication context for an app/env combination
+     *
+     * @param config - Auth context configuration
+     * @throws AuthContextError if configuration is invalid
+     */
+    setAuth(config: IAuthContextConfig): void;
+    /**
+     * Validate that credential values are valid (not undefined)
+     */
+    private validateCredentialValues;
+    /**
+     * Get authentication context for an app/env combination
+     *
+     * @param app - App tag
+     * @param env - Environment slug
+     * @param product - Optional product tag
+     * @returns Auth context or undefined if not set
+     */
+    getAuth(app: string, env: string, product?: string): IResolvedInput | undefined;
+    /**
+     * Check if auth context exists for an app/env combination
+     */
+    hasAuth(app: string, env: string, product?: string): boolean;
+    /**
+     * Remove authentication context for an app/env combination
+     *
+     * @param app - App tag
+     * @param env - Environment slug
+     * @param product - Optional product tag
+     * @returns true if context was removed, false if it didn't exist
+     */
+    removeAuth(app: string, env: string, product?: string): boolean;
+    /**
+     * Clear all authentication contexts
+     */
+    clearAll(): void;
+    /**
+     * Clear all authentication contexts for a specific app
+     */
+    clearApp(app: string): void;
+    /**
+     * Clear all authentication contexts for a specific environment
+     */
+    clearEnv(env: string): void;
+    /**
+     * Get all registered app/env combinations
+     */
+    listContexts(): Array<{
+        app: string;
+        env: string;
+        product?: string;
+    }>;
+    /**
+     * Merge auth context with user-provided input
+     * Auth context values are used as defaults; user input takes precedence
+     *
+     * @param authContext - Auth context from manager
+     * @param userInput - User-provided resolved input
+     * @returns Merged input with auth context as defaults
+     */
+    mergeWithInput(authContext: IResolvedInput, userInput: IResolvedInput): IResolvedInput;
+}
+/**
+ * Singleton instance for convenience
+ */
+export declare const authContextManager: AuthContextManager;

package/dist/apps/utils/auth-context-manager.js

@@ -0,0 +1,248 @@
+"use strict";
+/**
+ * AuthContextManager - Manages authentication context for action execution
+ *
+ * This utility allows developers to set up authentication once per app/env
+ * combination, and have those credentials automatically merged into action
+ * inputs without needing to specify them on every call.
+ *
+ * @example
+ * ```ts
+ * // Set up auth once
+ * ductape.action.auth({
+ *   app: 'stripe',
+ *   env: 'prd',
+ *   headers: { Authorization: 'Bearer sk_live_xxx' }
+ * });
+ *
+ * // Now all stripe actions in prd env automatically include auth
+ * const result = await ductape.action.run({
+ *   app: 'stripe',
+ *   env: 'prd',
+ *   action: 'create-charge',
+ *   input: { amount: 1000, currency: 'usd' }
+ * });
+ * // Headers automatically include Authorization from auth context
+ * ```
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.authContextManager = exports.AuthContextManager = exports.AuthContextError = void 0;
+/**
+ * Validation error thrown for invalid auth context
+ */
+class AuthContextError extends Error {
+    constructor(message, errorType) {
+        super(message);
+        this.errorType = errorType;
+        this.name = 'AuthContextError';
+    }
+}
+exports.AuthContextError = AuthContextError;
+/**
+ * Generate a unique key for app/env/product combination
+ */
+function generateContextKey(app, env, product) {
+    return product ? `${product}:${app}:${env}` : `${app}:${env}`;
+}
+/**
+ * AuthContextManager stores and retrieves authentication contexts
+ * for app/env combinations.
+ */
+class AuthContextManager {
+    constructor() {
+        /** Storage for auth contexts, keyed by app:env or product:app:env */
+        this.contexts = new Map();
+    }
+    /**
+     * Set the default product for auth contexts
+     */
+    setDefaultProduct(product) {
+        this.defaultProduct = product;
+    }
+    /**
+     * Get the default product
+     */
+    getDefaultProduct() {
+        return this.defaultProduct;
+    }
+    /**
+     * Register an authentication context for an app/env combination
+     *
+     * @param config - Auth context configuration
+     * @throws AuthContextError if configuration is invalid
+     */
+    setAuth(config) {
+        // Validate required fields
+        if (!config.app || typeof config.app !== 'string') {
+            throw new AuthContextError('Auth context requires a valid app tag', 'invalid_config');
+        }
+        if (!config.env || typeof config.env !== 'string') {
+            throw new AuthContextError('Auth context requires a valid env slug', 'invalid_config');
+        }
+        // Ensure at least one credential type is provided
+        const hasCredentials = (config.headers && Object.keys(config.headers).length > 0) ||
+            (config.body && Object.keys(config.body).length > 0) ||
+            (config.query && Object.keys(config.query).length > 0) ||
+            (config.params && Object.keys(config.params).length > 0);
+        if (!hasCredentials) {
+            throw new AuthContextError('Auth context requires at least one of: headers, body, query, or params', 'invalid_config');
+        }
+        // Validate credential values are not undefined
+        this.validateCredentialValues('headers', config.headers);
+        this.validateCredentialValues('body', config.body);
+        this.validateCredentialValues('query', config.query);
+        this.validateCredentialValues('params', config.params);
+        const product = config.product || this.defaultProduct;
+        const key = generateContextKey(config.app, config.env, product);
+        // Build the resolved input
+        const resolvedAuth = {};
+        if (config.headers)
+            resolvedAuth.headers = Object.assign({}, config.headers);
+        if (config.body)
+            resolvedAuth.body = Object.assign({}, config.body);
+        if (config.query)
+            resolvedAuth.query = Object.assign({}, config.query);
+        if (config.params)
+            resolvedAuth.params = Object.assign({}, config.params);
+        this.contexts.set(key, resolvedAuth);
+    }
+    /**
+     * Validate that credential values are valid (not undefined)
+     */
+    validateCredentialValues(location, credentials) {
+        if (!credentials)
+            return;
+        for (const [key, value] of Object.entries(credentials)) {
+            if (value === undefined) {
+                throw new AuthContextError(`Auth context ${location}.${key} cannot be undefined. Provide a valid value or remove the key.`, 'invalid_config');
+            }
+        }
+    }
+    /**
+     * Get authentication context for an app/env combination
+     *
+     * @param app - App tag
+     * @param env - Environment slug
+     * @param product - Optional product tag
+     * @returns Auth context or undefined if not set
+     */
+    getAuth(app, env, product) {
+        const resolvedProduct = product || this.defaultProduct;
+        // Try product-specific key first
+        if (resolvedProduct) {
+            const productKey = generateContextKey(app, env, resolvedProduct);
+            const productContext = this.contexts.get(productKey);
+            if (productContext)
+                return productContext;
+        }
+        // Fall back to non-product key
+        const key = generateContextKey(app, env);
+        return this.contexts.get(key);
+    }
+    /**
+     * Check if auth context exists for an app/env combination
+     */
+    hasAuth(app, env, product) {
+        return this.getAuth(app, env, product) !== undefined;
+    }
+    /**
+     * Remove authentication context for an app/env combination
+     *
+     * @param app - App tag
+     * @param env - Environment slug
+     * @param product - Optional product tag
+     * @returns true if context was removed, false if it didn't exist
+     */
+    removeAuth(app, env, product) {
+        const resolvedProduct = product || this.defaultProduct;
+        const key = generateContextKey(app, env, resolvedProduct);
+        return this.contexts.delete(key);
+    }
+    /**
+     * Clear all authentication contexts
+     */
+    clearAll() {
+        this.contexts.clear();
+    }
+    /**
+     * Clear all authentication contexts for a specific app
+     */
+    clearApp(app) {
+        const keysToDelete = [];
+        for (const key of this.contexts.keys()) {
+            // Key format: product:app:env or app:env
+            const parts = key.split(':');
+            const appPart = parts.length === 3 ? parts[1] : parts[0];
+            if (appPart === app) {
+                keysToDelete.push(key);
+            }
+        }
+        for (const key of keysToDelete) {
+            this.contexts.delete(key);
+        }
+    }
+    /**
+     * Clear all authentication contexts for a specific environment
+     */
+    clearEnv(env) {
+        const keysToDelete = [];
+        for (const key of this.contexts.keys()) {
+            // Key format: product:app:env or app:env
+            const parts = key.split(':');
+            const envPart = parts[parts.length - 1];
+            if (envPart === env) {
+                keysToDelete.push(key);
+            }
+        }
+        for (const key of keysToDelete) {
+            this.contexts.delete(key);
+        }
+    }
+    /**
+     * Get all registered app/env combinations
+     */
+    listContexts() {
+        const result = [];
+        for (const key of this.contexts.keys()) {
+            const parts = key.split(':');
+            if (parts.length === 3) {
+                result.push({ product: parts[0], app: parts[1], env: parts[2] });
+            }
+            else {
+                result.push({ app: parts[0], env: parts[1] });
+            }
+        }
+        return result;
+    }
+    /**
+     * Merge auth context with user-provided input
+     * Auth context values are used as defaults; user input takes precedence
+     *
+     * @param authContext - Auth context from manager
+     * @param userInput - User-provided resolved input
+     * @returns Merged input with auth context as defaults
+     */
+    mergeWithInput(authContext, userInput) {
+        const result = {};
+        // Merge each location, with user input taking precedence
+        if (authContext.headers || userInput.headers) {
+            result.headers = Object.assign(Object.assign({}, authContext.headers), userInput.headers);
+        }
+        if (authContext.body || userInput.body) {
+            result.body = Object.assign(Object.assign({}, authContext.body), userInput.body);
+        }
+        if (authContext.query || userInput.query) {
+            result.query = Object.assign(Object.assign({}, authContext.query), userInput.query);
+        }
+        if (authContext.params || userInput.params) {
+            result.params = Object.assign(Object.assign({}, authContext.params), userInput.params);
+        }
+        return result;
+    }
+}
+exports.AuthContextManager = AuthContextManager;
+/**
+ * Singleton instance for convenience
+ */
+exports.authContextManager = new AuthContextManager();
+//# sourceMappingURL=auth-context-manager.js.map

package/dist/apps/utils/auth-context-manager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-context-manager.js","sourceRoot":"","sources":["../../../src/apps/utils/auth-context-manager.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;;;AAwBH;;GAEG;AACH,MAAa,gBAAiB,SAAQ,KAAK;IACzC,YACE,OAAe,EACC,SAAuD;QAEvE,KAAK,CAAC,OAAO,CAAC,CAAC;QAFC,cAAS,GAAT,SAAS,CAA8C;QAGvE,IAAI,CAAC,IAAI,GAAG,kBAAkB,CAAC;IACjC,CAAC;CACF;AARD,4CAQC;AAED;;GAEG;AACH,SAAS,kBAAkB,CAAC,GAAW,EAAE,GAAW,EAAE,OAAgB;IACpE,OAAO,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,IAAI,GAAG,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,GAAG,IAAI,GAAG,EAAE,CAAC;AAChE,CAAC;AAED;;;GAGG;AACH,MAAa,kBAAkB;IAA/B;QACE,qEAAqE;QAC7D,aAAQ,GAAgC,IAAI,GAAG,EAAE,CAAC;IAkO5D,CAAC;IA7NC;;OAEG;IACH,iBAAiB,CAAC,OAAe;QAC/B,IAAI,CAAC,cAAc,GAAG,OAAO,CAAC;IAChC,CAAC;IAED;;OAEG;IACH,iBAAiB;QACf,OAAO,IAAI,CAAC,cAAc,CAAC;IAC7B,CAAC;IAED;;;;;OAKG;IACH,OAAO,CAAC,MAA0B;QAChC,2BAA2B;QAC3B,IAAI,CAAC,MAAM,CAAC,GAAG,IAAI,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ,EAAE,CAAC;YAClD,MAAM,IAAI,gBAAgB,CACxB,uCAAuC,EACvC,gBAAgB,CACjB,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,GAAG,IAAI,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ,EAAE,CAAC;YAClD,MAAM,IAAI,gBAAgB,CACxB,wCAAwC,EACxC,gBAAgB,CACjB,CAAC;QACJ,CAAC;QAED,kDAAkD;QAClD,MAAM,cAAc,GAClB,CAAC,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;YAC1D,CAAC,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;YACpD,CAAC,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;YACtD,CAAC,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QAE3D,IAAI,CAAC,cAAc,EAAE,CAAC;YACpB,MAAM,IAAI,gBAAgB,CACxB,wEAAwE,EACxE,gBAAgB,CACjB,CAAC;QACJ,CAAC;QAED,+CAA+C;QAC/C,IAAI,CAAC,wBAAwB,CAAC,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;QACzD,IAAI,CAAC,wBAAwB,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;QACnD,IAAI,CAAC,wBAAwB,CAAC,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;QACrD,IAAI,CAAC,wBAAwB,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;QAEvD,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,IAAI,IAAI,CAAC,cAAc,CAAC;QACtD,MAAM,GAAG,GAAG,kBAAkB,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QAEhE,2BAA2B;QAC3B,MAAM,YAAY,GAAmB,EAAE,CAAC;QACxC,IAAI,MAAM,CAAC,OAAO;YAAE,YAAY,CAAC,OAAO,qBAAQ,MAAM,CAAC,OAAO,CAAE,CAAC;QACjE,IAAI,MAAM,CAAC,IAAI;YAAE,YAAY,CAAC,IAAI,qBAAQ,MAAM,CAAC,IAAI,CAAE,CAAC;QACxD,IAAI,MAAM,CAAC,KAAK;YAAE,YAAY,CAAC,KAAK,qBAAQ,MAAM,CAAC,KAAK,CAAE,CAAC;QAC3D,IAAI,MAAM,CAAC,MAAM;YAAE,YAAY,CAAC,MAAM,qBAAQ,MAAM,CAAC,MAAM,CAAE,CAAC;QAE9D,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;IACvC,CAAC;IAED;;OAEG;IACK,wBAAwB,CAAC,QAAgB,EAAE,WAAqC;QACtF,IAAI,CAAC,WAAW;YAAE,OAAO;QAEzB,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;YACvD,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;gBACxB,MAAM,IAAI,gBAAgB,CACxB,gBAAgB,QAAQ,IAAI,GAAG,gEAAgE,EAC/F,gBAAgB,CACjB,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAED;;;;;;;OAOG;IACH,OAAO,CAAC,GAAW,EAAE,GAAW,EAAE,OAAgB;QAChD,MAAM,eAAe,GAAG,OAAO,IAAI,IAAI,CAAC,cAAc,CAAC;QAEvD,iCAAiC;QACjC,IAAI,eAAe,EAAE,CAAC;YACpB,MAAM,UAAU,GAAG,kBAAkB,CAAC,GAAG,EAAE,GAAG,EAAE,eAAe,CAAC,CAAC;YACjE,MAAM,cAAc,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;YACrD,IAAI,cAAc;gBAAE,OAAO,cAAc,CAAC;QAC5C,CAAC;QAED,+BAA+B;QAC/B,MAAM,GAAG,GAAG,kBAAkB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACzC,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAChC,CAAC;IAED;;OAEG;IACH,OAAO,CAAC,GAAW,EAAE,GAAW,EAAE,OAAgB;QAChD,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC,KAAK,SAAS,CAAC;IACvD,CAAC;IAED;;;;;;;OAOG;IACH,UAAU,CAAC,GAAW,EAAE,GAAW,EAAE,OAAgB;QACnD,MAAM,eAAe,GAAG,OAAO,IAAI,IAAI,CAAC,cAAc,CAAC;QACvD,MAAM,GAAG,GAAG,kBAAkB,CAAC,GAAG,EAAE,GAAG,EAAE,eAAe,CAAC,CAAC;QAC1D,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACnC,CAAC;IAED;;OAEG;IACH,QAAQ;QACN,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;IACxB,CAAC;IAED;;OAEG;IACH,QAAQ,CAAC,GAAW;QAClB,MAAM,YAAY,GAAa,EAAE,CAAC;QAElC,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC;YACvC,yCAAyC;YACzC,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAC7B,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YACzD,IAAI,OAAO,KAAK,GAAG,EAAE,CAAC;gBACpB,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACzB,CAAC;QACH,CAAC;QAED,KAAK,MAAM,GAAG,IAAI,YAAY,EAAE,CAAC;YAC/B,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC5B,CAAC;IACH,CAAC;IAED;;OAEG;IACH,QAAQ,CAAC,GAAW;QAClB,MAAM,YAAY,GAAa,EAAE,CAAC;QAElC,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC;YACvC,yCAAyC;YACzC,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAC7B,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;YACxC,IAAI,OAAO,KAAK,GAAG,EAAE,CAAC;gBACpB,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACzB,CAAC;QACH,CAAC;QAED,KAAK,MAAM,GAAG,IAAI,YAAY,EAAE,CAAC;YAC/B,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC5B,CAAC;IACH,CAAC;IAED;;OAEG;IACH,YAAY;QACV,MAAM,MAAM,GAA0D,EAAE,CAAC;QAEzE,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC;YACvC,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAC7B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACvB,MAAM,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YACnE,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YAChD,CAAC;QACH,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;;;;;;OAOG;IACH,cAAc,CAAC,WAA2B,EAAE,SAAyB;QACnE,MAAM,MAAM,GAAmB,EAAE,CAAC;QAElC,yDAAyD;QACzD,IAAI,WAAW,CAAC,OAAO,IAAI,SAAS,CAAC,OAAO,EAAE,CAAC;YAC7C,MAAM,CAAC,OAAO,mCAAQ,WAAW,CAAC,OAAO,GAAK,SAAS,CAAC,OAAO,CAAE,CAAC;QACpE,CAAC;QACD,IAAI,WAAW,CAAC,IAAI,IAAI,SAAS,CAAC,IAAI,EAAE,CAAC;YACvC,MAAM,CAAC,IAAI,mCAAQ,WAAW,CAAC,IAAI,GAAK,SAAS,CAAC,IAAI,CAAE,CAAC;QAC3D,CAAC;QACD,IAAI,WAAW,CAAC,KAAK,IAAI,SAAS,CAAC,KAAK,EAAE,CAAC;YACzC,MAAM,CAAC,KAAK,mCAAQ,WAAW,CAAC,KAAK,GAAK,SAAS,CAAC,KAAK,CAAE,CAAC;QAC9D,CAAC;QACD,IAAI,WAAW,CAAC,MAAM,IAAI,SAAS,CAAC,MAAM,EAAE,CAAC;YAC3C,MAAM,CAAC,MAAM,mCAAQ,WAAW,CAAC,MAAM,GAAK,SAAS,CAAC,MAAM,CAAE,CAAC;QACjE,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;CACF;AApOD,gDAoOC;AAED;;GAEG;AACU,QAAA,kBAAkB,GAAG,IAAI,kBAAkB,EAAE,CAAC"}

package/dist/apps/utils/credential-manager.d.ts

@@ -0,0 +1,128 @@
+/**
+ * CredentialManager - Manages shared credentials for action execution
+ *
+ * This utility allows developers to set up credentials once per app/product/env
+ * combination, and have those credentials automatically merged into action
+ * inputs before resolution.
+ *
+ * @example
+ * ```ts
+ * // Set up shared credentials once
+ * ductape.actions.share({
+ *   product: 'my-product',
+ *   app: 'stripe',
+ *   env: 'prd',
+ *   credentials: {
+ *     'headers:Authorization': '$Secret{StripeApiKey}',
+ *   }
+ * });
+ *
+ * // Now all stripe actions in prd env automatically include credentials
+ * const result = await ductape.actions.run({
+ *   product: 'my-product',
+ *   app: 'stripe',
+ *   env: 'prd',
+ *   event: 'create-charge',
+ *   input: { amount: 1000, currency: 'usd' }
+ * });
+ * // Input automatically includes 'headers:Authorization' from shared credentials
+ * ```
+ */
+/**
+ * Shared credentials configuration
+ */
+export interface IShareCredentialsConfig {
+    /** Product tag */
+    product: string;
+    /** App tag */
+    app: string;
+    /** Environment slug */
+    env: string;
+    /** Credentials to share (flat format with optional prefixes) */
+    credentials: Record<string, unknown>;
+}
+/**
+ * Options for getting shared credentials
+ */
+export interface IGetCredentialsOptions {
+    product: string;
+    app: string;
+    env: string;
+}
+/**
+ * Validation error thrown for invalid credential configurations
+ */
+export declare class CredentialError extends Error {
+    readonly errorType: 'invalid_config' | 'not_found';
+    constructor(message: string, errorType: 'invalid_config' | 'not_found');
+}
+/**
+ * CredentialManager stores and retrieves shared credentials
+ * for product/app/env combinations.
+ */
+export declare class CredentialManager {
+    /** Storage for credentials, keyed by product:app:env */
+    private credentials;
+    /**
+     * Share credentials for a product/app/env combination
+     *
+     * @param config - Credential configuration
+     * @throws CredentialError if configuration is invalid
+     */
+    share(config: IShareCredentialsConfig): void;
+    /**
+     * Get shared credentials for a product/app/env combination
+     *
+     * @param options - Options specifying product, app, and env
+     * @returns Shared credentials or undefined if not set
+     */
+    get(options: IGetCredentialsOptions): Record<string, unknown> | undefined;
+    /**
+     * Check if shared credentials exist for a product/app/env combination
+     */
+    has(options: IGetCredentialsOptions): boolean;
+    /**
+     * Remove shared credentials for a product/app/env combination
+     *
+     * @param options - Options specifying product, app, and env
+     * @returns true if credentials were removed, false if they didn't exist
+     */
+    remove(options: IGetCredentialsOptions): boolean;
+    /**
+     * Clear all shared credentials
+     */
+    clearAll(): void;
+    /**
+     * Clear all credentials for a specific product
+     */
+    clearProduct(product: string): void;
+    /**
+     * Clear all credentials for a specific app (across all products)
+     */
+    clearApp(app: string): void;
+    /**
+     * Clear all credentials for a specific environment (across all products and apps)
+     */
+    clearEnv(env: string): void;
+    /**
+     * Get all registered product/app/env combinations
+     */
+    list(): Array<{
+        product: string;
+        app: string;
+        env: string;
+    }>;
+    /**
+     * Merge shared credentials with user-provided input
+     * Shared credentials are used as defaults; user input takes precedence
+     *
+     * @param sharedCredentials - Shared credentials from manager
+     * @param userInput - User-provided flat input
+     * @returns Merged input with shared credentials as defaults
+     */
+    mergeWithInput(sharedCredentials: Record<string, unknown>, userInput: Record<string, unknown>): Record<string, unknown>;
+}
+/**
+ * Singleton instance for convenience
+ */
+export declare const credentialManager: CredentialManager;