@griffin-app/griffin-executor 0.1.3 → 0.1.5

package/dist/secrets/providers/hub.d.ts

@@ -10,7 +10,11 @@ export declare class HubSecretProvider implements SecretProvider {
     readonly name = "hub";
     private readonly sdk;
     private readonly environment;
-    constructor(sdk: GriffinHubSdk, environment: string);
-    resolve(ref: string, _options?: SecretResolveOptions): Promise<string>;
+    private readonly organizationId;
+    private readonly cache?;
+    private readonly cacheExpires?;
+    private readonly ttlMs;
+    constructor(sdk: GriffinHubSdk, environment: string, organizationId: string, cache?: Map<string, string>, ttlMs?: number);
+    resolve(ref: string, options?: SecretResolveOptions): Promise<string>;
 }
 //# sourceMappingURL=hub.d.ts.map

package/dist/secrets/providers/hub.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"hub.d.ts","sourceRoot":"","sources":["../../../src/secrets/providers/hub.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAClE,OAAO,KAAK,EAAE,cAAc,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AAGxE,qBAAa,iBAAkB,YAAW,cAAc;IACtD,QAAQ,CAAC,IAAI,SAAS;IACtB,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAgB;IACpC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAS;gBAEzB,GAAG,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM;IAK7C,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,oBAAoB,GAAG,OAAO,CAAC,MAAM,CAAC;CAc7E"}
+{"version":3,"file":"hub.d.ts","sourceRoot":"","sources":["../../../src/secrets/providers/hub.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAClE,OAAO,KAAK,EAAE,cAAc,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AAQxE,qBAAa,iBAAkB,YAAW,cAAc;IACtD,QAAQ,CAAC,IAAI,SAAS;IACtB,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAgB;IACpC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAS;IACrC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAS;IACxC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAsB;IAC7C,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAsB;IACpD,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAS;gBAG7B,GAAG,EAAE,aAAa,EAClB,WAAW,EAAE,MAAM,EACnB,cAAc,EAAE,MAAM,EACtB,KAAK,CAAC,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,EAC3B,KAAK,CAAC,EAAE,MAAM;IAYV,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,oBAAoB,GAAG,OAAO,CAAC,MAAM,CAAC;CAsC5E"}

package/dist/secrets/providers/hub.js

@@ -5,22 +5,61 @@
  * The hub is the sole gateway for AWS Secrets Manager — no credentials leave the hub.
  */
 import { SecretResolutionError } from "../types.js";
+function cacheKey(ref, options) {
+    if (!options?.version && !options?.field)
+        return ref;
+    return `${ref}\0${options.version ?? ""}\0${options.field ?? ""}`;
+}
 export class HubSecretProvider {
     name = "hub";
     sdk;
     environment;
-    constructor(sdk, environment) {
+    organizationId;
+    cache;
+    cacheExpires;
+    ttlMs;
+    constructor(sdk, environment, organizationId, cache, ttlMs) {
         this.sdk = sdk;
+        this.organizationId = organizationId;
         this.environment = environment;
+        this.cache = cache;
+        this.ttlMs = ttlMs ?? 0;
+        if (this.cache != null && this.ttlMs > 0) {
+            this.cacheExpires = new Map();
+        }
     }
-    async resolve(ref, _options) {
+    async resolve(ref, options) {
+        const key = cacheKey(ref, options);
+        if (this.cache != null) {
+            const expiresAt = this.cacheExpires?.get(key);
+            const now = Date.now();
+            if (expiresAt == null || now < expiresAt) {
+                const cached = this.cache.get(key);
+                if (cached !== undefined)
+                    return cached;
+            }
+            else {
+                this.cache.delete(key);
+                this.cacheExpires?.delete(key);
+            }
+        }
         const response = await this.sdk.postSecretsResolve({
-            body: { name: ref, environment: this.environment },
+            body: {
+                name: ref,
+                environment: this.environment,
+                organizationId: this.organizationId,
+            },
         });
         const value = response.data?.data?.value;
         if (value === undefined) {
             throw new SecretResolutionError(`Secret "${ref}" not found for environment "${this.environment}"`, { ref });
         }
+        if (this.cache != null) {
+            this.cache.set(key, value);
+            if (this.cacheExpires != null && this.ttlMs > 0) {
+                this.cacheExpires.set(key, Date.now() + this.ttlMs);
+            }
+        }
         return value;
     }
 }

package/dist/secrets/providers/hub.js.map

@@ -1 +1 @@
-{"version":3,"file":"hub.js","sourceRoot":"","sources":["../../../src/secrets/providers/hub.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,OAAO,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AAEpD,MAAM,OAAO,iBAAiB;IACnB,IAAI,GAAG,KAAK,CAAC;IACL,GAAG,CAAgB;IACnB,WAAW,CAAS;IAErC,YAAY,GAAkB,EAAE,WAAmB;QACjD,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;QACf,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;IACjC,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,GAAW,EAAE,QAA+B;QACxD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,kBAAkB,CAAC;YACjD,IAAI,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE;SACnD,CAAC,CAAC;QAEH,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC;QACzC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,MAAM,IAAI,qBAAqB,CAC7B,WAAW,GAAG,gCAAgC,IAAI,CAAC,WAAW,GAAG,EACjE,EAAE,GAAG,EAAE,CACR,CAAC;QACJ,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;CACF"}
+{"version":3,"file":"hub.js","sourceRoot":"","sources":["../../../src/secrets/providers/hub.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,OAAO,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AAEpD,SAAS,QAAQ,CAAC,GAAW,EAAE,OAA8B;IAC3D,IAAI,CAAC,OAAO,EAAE,OAAO,IAAI,CAAC,OAAO,EAAE,KAAK;QAAE,OAAO,GAAG,CAAC;IACrD,OAAO,GAAG,GAAG,KAAK,OAAO,CAAC,OAAO,IAAI,EAAE,KAAK,OAAO,CAAC,KAAK,IAAI,EAAE,EAAE,CAAC;AACpE,CAAC;AAED,MAAM,OAAO,iBAAiB;IACnB,IAAI,GAAG,KAAK,CAAC;IACL,GAAG,CAAgB;IACnB,WAAW,CAAS;IACpB,cAAc,CAAS;IACvB,KAAK,CAAuB;IAC5B,YAAY,CAAuB;IACnC,KAAK,CAAS;IAE/B,YACE,GAAkB,EAClB,WAAmB,EACnB,cAAsB,EACtB,KAA2B,EAC3B,KAAc;QAEd,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;QACf,IAAI,CAAC,cAAc,GAAG,cAAc,CAAC;QACrC,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;QAC/B,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACnB,IAAI,CAAC,KAAK,GAAG,KAAK,IAAI,CAAC,CAAC;QACxB,IAAI,IAAI,CAAC,KAAK,IAAI,IAAI,IAAI,IAAI,CAAC,KAAK,GAAG,CAAC,EAAE,CAAC;YACzC,IAAI,CAAC,YAAY,GAAG,IAAI,GAAG,EAAE,CAAC;QAChC,CAAC;IACH,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,GAAW,EAAE,OAA8B;QACvD,MAAM,GAAG,GAAG,QAAQ,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QACnC,IAAI,IAAI,CAAC,KAAK,IAAI,IAAI,EAAE,CAAC;YACvB,MAAM,SAAS,GAAG,IAAI,CAAC,YAAY,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC;YAC9C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACvB,IAAI,SAAS,IAAI,IAAI,IAAI,GAAG,GAAG,SAAS,EAAE,CAAC;gBACzC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;gBACnC,IAAI,MAAM,KAAK,SAAS;oBAAE,OAAO,MAAM,CAAC;YAC1C,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBACvB,IAAI,CAAC,YAAY,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC;YACjC,CAAC;QACH,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,kBAAkB,CAAC;YACjD,IAAI,EAAE;gBACJ,IAAI,EAAE,GAAG;gBACT,WAAW,EAAE,IAAI,CAAC,WAAW;gBAC7B,cAAc,EAAE,IAAI,CAAC,cAAc;aACpC;SACF,CAAC,CAAC;QAEH,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC;QACzC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,MAAM,IAAI,qBAAqB,CAC7B,WAAW,GAAG,gCAAgC,IAAI,CAAC,WAAW,GAAG,EACjE,EAAE,GAAG,EAAE,CACR,CAAC;QACJ,CAAC;QAED,IAAI,IAAI,CAAC,KAAK,IAAI,IAAI,EAAE,CAAC;YACvB,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YAC3B,IAAI,IAAI,CAAC,YAAY,IAAI,IAAI,IAAI,IAAI,CAAC,KAAK,GAAG,CAAC,EAAE,CAAC;gBAChD,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;YACtD,CAAC;QACH,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;CACF"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@griffin-app/griffin-executor",
-  "version": "0.1.3",
+  "version": "0.1.5",
   "description": "Executor for griffin JSON test monitors",
   "type": "module",
   "main": "dist/index.js",
@@ -22,7 +22,7 @@
   "license": "MIT",
   "dependencies": {
     "@aws-sdk/client-kinesis": "^3.975.0",
-    "@griffin-app/griffin-hub-sdk": "1.0.27",
+    "@griffin-app/griffin-hub-sdk": "1.0.28",
     "@griffin-app/griffin-core": "0.2.2",
     "axios": "^1.13.2",
     "ts-edge": "^1.0.4",

package/src/secrets/providers/hub.ts

@@ -9,19 +9,57 @@ import type { GriffinHubSdk } from "@griffin-app/griffin-hub-sdk";
 import type { SecretProvider, SecretResolveOptions } from "../types.js";
 import { SecretResolutionError } from "../types.js";
 
+function cacheKey(ref: string, options?: SecretResolveOptions): string {
+  if (!options?.version && !options?.field) return ref;
+  return `${ref}\0${options.version ?? ""}\0${options.field ?? ""}`;
+}
+
 export class HubSecretProvider implements SecretProvider {
   readonly name = "hub";
   private readonly sdk: GriffinHubSdk;
   private readonly environment: string;
+  private readonly organizationId: string;
+  private readonly cache?: Map<string, string>;
+  private readonly cacheExpires?: Map<string, number>;
+  private readonly ttlMs: number;
 
-  constructor(sdk: GriffinHubSdk, environment: string) {
+  constructor(
+    sdk: GriffinHubSdk,
+    environment: string,
+    organizationId: string,
+    cache?: Map<string, string>,
+    ttlMs?: number,
+  ) {
     this.sdk = sdk;
+    this.organizationId = organizationId;
     this.environment = environment;
+    this.cache = cache;
+    this.ttlMs = ttlMs ?? 0;
+    if (this.cache != null && this.ttlMs > 0) {
+      this.cacheExpires = new Map();
+    }
   }
 
-  async resolve(ref: string, _options?: SecretResolveOptions): Promise<string> {
+  async resolve(ref: string, options?: SecretResolveOptions): Promise<string> {
+    const key = cacheKey(ref, options);
+    if (this.cache != null) {
+      const expiresAt = this.cacheExpires?.get(key);
+      const now = Date.now();
+      if (expiresAt == null || now < expiresAt) {
+        const cached = this.cache.get(key);
+        if (cached !== undefined) return cached;
+      } else {
+        this.cache.delete(key);
+        this.cacheExpires?.delete(key);
+      }
+    }
+
     const response = await this.sdk.postSecretsResolve({
-      body: { name: ref, environment: this.environment },
+      body: {
+        name: ref,
+        environment: this.environment,
+        organizationId: this.organizationId,
+      },
     });
 
     const value = response.data?.data?.value;
@@ -31,6 +69,13 @@ export class HubSecretProvider implements SecretProvider {
         { ref },
       );
     }
+
+    if (this.cache != null) {
+      this.cache.set(key, value);
+      if (this.cacheExpires != null && this.ttlMs > 0) {
+        this.cacheExpires.set(key, Date.now() + this.ttlMs);
+      }
+    }
     return value;
   }
 }