@kibibit/configit 1.0.0-beta.25 → 1.0.0-beta.27

package/lib/scripts/test-vault-gcp-ttl.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env npx ts-node
+export {};
+//# sourceMappingURL=test-vault-gcp-ttl.d.ts.map

package/lib/scripts/test-vault-gcp-ttl.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"test-vault-gcp-ttl.d.ts","sourceRoot":"","sources":["../../scripts/test-vault-gcp-ttl.ts"],"names":[],"mappings":""}

package/lib/scripts/test-vault-gcp-ttl.js

@@ -0,0 +1,218 @@
+#!/usr/bin/env npx ts-node
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __importStar = (this && this.__importStar) || function (mod) {
+    if (mod && mod.__esModule) return mod;
+    var result = {};
+    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+    __setModuleDefault(result, mod);
+    return result;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const vault_integration_1 = require("../src/vault/vault-integration");
+const vault_provider_1 = require("../src/vault/vault-provider");
+const decorators_1 = require("../src/vault/decorators");
+process.env.VAULT_ADDR = 'http://127.0.0.1:8200';
+const VAULT_ADDR = 'http://127.0.0.1:8200';
+const KEY_FILE = path.join(process.cwd(), 'secrets/gcp-sa-key.json');
+const GCP_PROJECT_FILE = path.join(process.cwd(), '.gcp-test-project');
+class TestConfigWithDynamicSecret {
+}
+__decorate([
+    (0, decorators_1.VaultEngine)('database'),
+    (0, decorators_1.VaultPath)('creds/configit-readonly'),
+    (0, decorators_1.VaultKey)('username'),
+    __metadata("design:type", String)
+], TestConfigWithDynamicSecret.prototype, "dbUser", void 0);
+__decorate([
+    (0, decorators_1.VaultEngine)('database'),
+    (0, decorators_1.VaultPath)('creds/configit-readonly'),
+    (0, decorators_1.VaultKey)('password'),
+    __metadata("design:type", String)
+], TestConfigWithDynamicSecret.prototype, "dbPassword", void 0);
+const GREEN = '\x1b[32m';
+const RED = '\x1b[31m';
+const YELLOW = '\x1b[33m';
+const BLUE = '\x1b[34m';
+const CYAN = '\x1b[36m';
+const NC = '\x1b[0m';
+function log(msg, color = NC) {
+    console.log(`${color}${msg}${NC}`);
+}
+function elapsed(start) {
+    return ((Date.now() - start) / 1000).toFixed(1);
+}
+async function sleep(ms) {
+    return new Promise((resolve) => setTimeout(resolve, ms));
+}
+async function runTest() {
+    var _a, _b, _c;
+    log('\n============================================', BLUE);
+    log('  GCP IAM Auth TTL Test', BLUE);
+    log('============================================\n', BLUE);
+    if (!fs.existsSync(KEY_FILE)) {
+        log('ERROR: GCP key file not found', RED);
+        log('Run: ./scripts/vault-setup.sh (without --skip-gcp)', YELLOW);
+        process.exit(1);
+    }
+    if (!fs.existsSync(GCP_PROJECT_FILE)) {
+        log('ERROR: GCP project file not found', RED);
+        log('Run: ./scripts/vault-setup.sh (without --skip-gcp)', YELLOW);
+        process.exit(1);
+    }
+    const keyData = JSON.parse(fs.readFileSync(KEY_FILE, 'utf-8'));
+    const serviceAccountEmail = keyData.client_email;
+    log(`Service Account: ${serviceAccountEmail}`, CYAN);
+    log('\n--- Test 1: GCP IAM Auth with 10s TTL ---', YELLOW);
+    const vaultOptions = {
+        endpoint: VAULT_ADDR,
+        auth: {
+            method: 'gcp',
+            role: 'configit-gcp-role',
+            serviceAccountKeyFile: KEY_FILE,
+            serviceAccountEmail
+        },
+        tls: { enabled: false, verifyCertificate: false }
+    };
+    const provider = new vault_provider_1.VaultProvider(vaultOptions);
+    const start1 = Date.now();
+    try {
+        await provider.connect();
+        log(`✓ Initial GCP auth successful (${elapsed(start1)}s)`, GREEN);
+    }
+    catch (err) {
+        log(`✗ GCP auth failed: ${err.message}`, RED);
+        process.exit(1);
+    }
+    const secret1 = await provider.readSecret('configit/api', 'kv2');
+    log(`✓ Read KV secret: api_key=${(_a = secret1.data['api_key']) === null || _a === void 0 ? void 0 : _a.slice(0, 10)}...`, GREEN);
+    log('\n--- Test 2: Wait for Auth TTL (10s) to Expire ---', YELLOW);
+    log('  Waiting 12 seconds for token to expire...', CYAN);
+    await sleep(12000);
+    log('  Token should be expired now, attempting to read...', CYAN);
+    try {
+        const secret2 = await provider.readSecret('configit/api', 'kv2');
+        log(`✗ Unexpectedly succeeded - secret: ${JSON.stringify(secret2.data)}`, RED);
+        log('  This might mean token hasn\'t expired or was auto-renewed', YELLOW);
+    }
+    catch (err) {
+        log(`✓ Expected: Token expired - ${err.message.slice(0, 50)}...`, GREEN);
+    }
+    log('\n--- Test 3: Re-authenticate After Expiry ---', YELLOW);
+    const start3 = Date.now();
+    await provider.connect();
+    log(`✓ Re-authentication successful (${elapsed(start3)}s)`, GREEN);
+    const secret3 = await provider.readSecret('configit/api', 'kv2');
+    log(`✓ Read secret after re-auth: api_key=${(_b = secret3.data['api_key']) === null || _b === void 0 ? void 0 : _b.slice(0, 10)}...`, GREEN);
+    await provider.disconnect();
+    log('\n--- Test 4: VaultIntegration with Short Auth TTL ---', YELLOW);
+    log('  Testing: Auth TTL (10s) < Secret TTL (60s)', CYAN);
+    log('  This verifies secrets stay valid even when auth expires', CYAN);
+    const integration = new vault_integration_1.VaultIntegration({
+        endpoint: VAULT_ADDR,
+        auth: {
+            method: 'gcp',
+            role: 'configit-gcp-role',
+            serviceAccountKeyFile: KEY_FILE,
+            serviceAccountEmail
+        },
+        tls: { enabled: false, verifyCertificate: false },
+        refreshBuffer: 5
+    });
+    const testConfig = new TestConfigWithDynamicSecret();
+    const start4 = Date.now();
+    try {
+        await integration.initialize();
+        await integration.loadSecrets(testConfig);
+        log(`✓ Initial load successful (${elapsed(start4)}s)`, GREEN);
+        log(`  DB User: ${testConfig.dbUser}`, CYAN);
+        log(`  DB Pass: ${(_c = testConfig.dbPassword) === null || _c === void 0 ? void 0 : _c.slice(0, 10)}...`, CYAN);
+    }
+    catch (err) {
+        log(`✗ Failed: ${err.message}`, RED);
+        await integration.shutdown();
+        process.exit(1);
+    }
+    const health = integration.getHealth();
+    log('\n  Health Status:', CYAN);
+    log(`    Connected: ${health.connected}`, health.connected ? GREEN : RED);
+    log(`    Cache Size: ${health.cacheSize}`, CYAN);
+    log(`    Refresh Queue: ${health.refreshQueueSize}`, CYAN);
+    log('\n--- Test 5: Multiple Auth TTL Cycles ---', YELLOW);
+    log('  Monitoring for 35 seconds (3+ auth TTL cycles)...', CYAN);
+    const initialUser = testConfig.dbUser;
+    let refreshCount = 0;
+    const checkInterval = 5000;
+    const totalWait = 35000;
+    for (let waited = 0; waited < totalWait; waited += checkInterval) {
+        await sleep(checkInterval);
+        const currentHealth = integration.getHealth();
+        const timeStr = `[${((waited + checkInterval) / 1000).toFixed(0)}s]`;
+        log(`  ${timeStr} Cache: ${currentHealth.cacheSize}, Queue: ${currentHealth.refreshQueueSize}`, CYAN);
+        const newUser = testConfig.dbUser;
+        if (newUser !== initialUser) {
+            refreshCount++;
+            log(`  ${timeStr} ✓ Secret REFRESHED: ${initialUser} -> ${newUser}`, GREEN);
+        }
+        if (currentHealth.errors.length > 0) {
+            log(`  ${timeStr} Errors: ${currentHealth.errors.length}`, YELLOW);
+            currentHealth.errors.slice(-2).forEach((e) => {
+                log(`    - ${e.path}: ${e.error.slice(0, 40)}...`, YELLOW);
+            });
+        }
+    }
+    log('\n--- Final Verification ---', YELLOW);
+    const finalUser = testConfig.dbUser;
+    const finalPass = testConfig.dbPassword;
+    if (finalUser && finalPass) {
+        log(`✓ Secrets still available after 35s:`, GREEN);
+        log(`  DB User: ${finalUser}`, CYAN);
+        log(`  DB Pass: ${finalPass === null || finalPass === void 0 ? void 0 : finalPass.slice(0, 10)}...`, CYAN);
+    }
+    else {
+        log(`✗ Secrets lost after auth cycles`, RED);
+    }
+    await integration.shutdown();
+    log('\n============================================', BLUE);
+    log('  Test Summary', BLUE);
+    log('============================================', BLUE);
+    log('  Auth Method: GCP IAM', CYAN);
+    log('  Auth TTL: 10 seconds', CYAN);
+    log('  Secret TTL: 60 seconds (database creds)', CYAN);
+    log('  Test Duration: 35 seconds', CYAN);
+    log(`  Secret Refreshes: ${refreshCount}`, refreshCount > 0 ? GREEN : YELLOW);
+    log('\n  ✓ Test Complete', GREEN);
+    log('============================================\n', BLUE);
+}
+runTest().catch((err) => {
+    log(`\nFATAL ERROR: ${err.message}`, RED);
+    console.error(err);
+    process.exit(1);
+});
+//# sourceMappingURL=test-vault-gcp-ttl.js.map

package/lib/scripts/test-vault-gcp-ttl.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"test-vault-gcp-ttl.js","sourceRoot":"","sources":["../../scripts/test-vault-gcp-ttl.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAYA,uCAAyB;AACzB,2CAA6B;AAC7B,sEAAkE;AAClE,gEAA4D;AAE5D,wDAA2E;AAG3E,OAAO,CAAC,GAAG,CAAC,UAAU,GAAG,uBAAuB,CAAC;AAEjD,MAAM,UAAU,GAAG,uBAAuB,CAAC;AAC3C,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,yBAAyB,CAAC,CAAC;AACrE,MAAM,gBAAgB,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,mBAAmB,CAAC,CAAC;AAGvE,MAAM,2BAA2B;CAUhC;AANC;IAHC,IAAA,wBAAW,EAAC,UAAU,CAAC;IACvB,IAAA,sBAAS,EAAC,yBAAyB,CAAC;IACpC,IAAA,qBAAQ,EAAC,UAAU,CAAC;;2DACL;AAKhB;IAHC,IAAA,wBAAW,EAAC,UAAU,CAAC;IACvB,IAAA,sBAAS,EAAC,yBAAyB,CAAC;IACpC,IAAA,qBAAQ,EAAC,UAAU,CAAC;;+DACD;AAItB,MAAM,KAAK,GAAG,UAAU,CAAC;AACzB,MAAM,GAAG,GAAG,UAAU,CAAC;AACvB,MAAM,MAAM,GAAG,UAAU,CAAC;AAC1B,MAAM,IAAI,GAAG,UAAU,CAAC;AACxB,MAAM,IAAI,GAAG,UAAU,CAAC;AACxB,MAAM,EAAE,GAAG,SAAS,CAAC;AAErB,SAAS,GAAG,CAAC,GAAW,EAAE,QAAgB,EAAE;IAC1C,OAAO,CAAC,GAAG,CAAC,GAAG,KAAK,GAAG,GAAG,GAAG,EAAE,EAAE,CAAC,CAAC;AACrC,CAAC;AAED,SAAS,OAAO,CAAC,KAAa;IAC5B,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AAClD,CAAC;AAED,KAAK,UAAU,KAAK,CAAC,EAAU;IAC7B,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;AAC3D,CAAC;AAED,KAAK,UAAU,OAAO;;IACpB,GAAG,CAAC,gDAAgD,EAAE,IAAI,CAAC,CAAC;IAC5D,GAAG,CAAC,yBAAyB,EAAE,IAAI,CAAC,CAAC;IACrC,GAAG,CAAC,gDAAgD,EAAE,IAAI,CAAC,CAAC;IAG5D,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE;QAC5B,GAAG,CAAC,+BAA+B,EAAE,GAAG,CAAC,CAAC;QAC1C,GAAG,CAAC,oDAAoD,EAAE,MAAM,CAAC,CAAC;QAClE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;KACjB;IAED,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,gBAAgB,CAAC,EAAE;QACpC,GAAG,CAAC,mCAAmC,EAAE,GAAG,CAAC,CAAC;QAC9C,GAAG,CAAC,oDAAoD,EAAE,MAAM,CAAC,CAAC;QAClE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;KACjB;IAGD,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC;IAC/D,MAAM,mBAAmB,GAAG,OAAO,CAAC,YAAY,CAAC;IACjD,GAAG,CAAC,oBAAoB,mBAAmB,EAAE,EAAE,IAAI,CAAC,CAAC;IAGrD,GAAG,CAAC,6CAA6C,EAAE,MAAM,CAAC,CAAC;IAE3D,MAAM,YAAY,GAAwB;QACxC,QAAQ,EAAE,UAAU;QACpB,IAAI,EAAE;YACJ,MAAM,EAAE,KAAc;YACtB,IAAI,EAAE,mBAAmB;YACzB,qBAAqB,EAAE,QAAQ;YAC/B,mBAAmB;SACpB;QACD,GAAG,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,iBAAiB,EAAE,KAAK,EAAE;KAClD,CAAC;IAEF,MAAM,QAAQ,GAAG,IAAI,8BAAa,CAAC,YAAY,CAAC,CAAC;IACjD,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAE1B,IAAI;QACF,MAAM,QAAQ,CAAC,OAAO,EAAE,CAAC;QACzB,GAAG,CAAC,kCAAkC,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;KACnE;IAAC,OAAO,GAAQ,EAAE;QACjB,GAAG,CAAC,sBAAsB,GAAG,CAAC,OAAO,EAAE,EAAE,GAAG,CAAC,CAAC;QAC9C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;KACjB;IAGD,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,UAAU,CAAC,cAAc,EAAE,KAAK,CAAC,CAAC;IACjE,GAAG,CAAC,6BAA6B,MAAA,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,0CAAE,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAGpF,GAAG,CAAC,qDAAqD,EAAE,MAAM,CAAC,CAAC;IACnE,GAAG,CAAC,6CAA6C,EAAE,IAAI,CAAC,CAAC;IAEzD,MAAM,KAAK,CAAC,KAAK,CAAC,CAAC;IAEnB,GAAG,CAAC,sDAAsD,EAAE,IAAI,CAAC,CAAC;IAElE,IAAI;QAEF,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,UAAU,CAAC,cAAc,EAAE,KAAK,CAAC,CAAC;QACjE,GAAG,CAAC,sCAAsC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;QAC/E,GAAG,CAAC,6DAA6D,EAAE,MAAM,CAAC,CAAC;KAC5E;IAAC,OAAO,GAAQ,EAAE;QACjB,GAAG,CAAC,+BAA+B,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;KAC1E;IAGD,GAAG,CAAC,gDAAgD,EAAE,MAAM,CAAC,CAAC;IAC9D,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAE1B,MAAM,QAAQ,CAAC,OAAO,EAAE,CAAC;IACzB,GAAG,CAAC,mCAAmC,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAEnE,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,UAAU,CAAC,cAAc,EAAE,KAAK,CAAC,CAAC;IACjE,GAAG,CAAC,wCAAwC,MAAA,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,0CAAE,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAE/F,MAAM,QAAQ,CAAC,UAAU,EAAE,CAAC;IAG5B,GAAG,CAAC,wDAAwD,EAAE,MAAM,CAAC,CAAC;IACtE,GAAG,CAAC,8CAA8C,EAAE,IAAI,CAAC,CAAC;IAC1D,GAAG,CAAC,2DAA2D,EAAE,IAAI,CAAC,CAAC;IAEvE,MAAM,WAAW,GAAG,IAAI,oCAAgB,CAAC;QACvC,QAAQ,EAAE,UAAU;QACpB,IAAI,EAAE;YACJ,MAAM,EAAE,KAAc;YACtB,IAAI,EAAE,mBAAmB;YACzB,qBAAqB,EAAE,QAAQ;YAC/B,mBAAmB;SACpB;QACD,GAAG,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,iBAAiB,EAAE,KAAK,EAAE;QACjD,aAAa,EAAE,CAAC;KACjB,CAAC,CAAC;IAEH,MAAM,UAAU,GAAG,IAAI,2BAA2B,EAAE,CAAC;IACrD,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAE1B,IAAI;QACF,MAAM,WAAW,CAAC,UAAU,EAAE,CAAC;QAC/B,MAAM,WAAW,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;QAC1C,GAAG,CAAC,8BAA8B,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAC9D,GAAG,CAAC,cAAc,UAAU,CAAC,MAAM,EAAE,EAAE,IAAI,CAAC,CAAC;QAC7C,GAAG,CAAC,cAAc,MAAA,UAAU,CAAC,UAAU,0CAAE,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;KACnE;IAAC,OAAO,GAAQ,EAAE;QACjB,GAAG,CAAC,aAAa,GAAG,CAAC,OAAO,EAAE,EAAE,GAAG,CAAC,CAAC;QACrC,MAAM,WAAW,CAAC,QAAQ,EAAE,CAAC;QAC7B,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;KACjB;IAGD,MAAM,MAAM,GAAG,WAAW,CAAC,SAAS,EAAE,CAAC;IACvC,GAAG,CAAC,oBAAoB,EAAE,IAAI,CAAC,CAAC;IAChC,GAAG,CAAC,kBAAkB,MAAM,CAAC,SAAS,EAAE,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IAC1E,GAAG,CAAC,mBAAmB,MAAM,CAAC,SAAS,EAAE,EAAE,IAAI,CAAC,CAAC;IACjD,GAAG,CAAC,sBAAsB,MAAM,CAAC,gBAAgB,EAAE,EAAE,IAAI,CAAC,CAAC;IAG3D,GAAG,CAAC,4CAA4C,EAAE,MAAM,CAAC,CAAC;IAC1D,GAAG,CAAC,qDAAqD,EAAE,IAAI,CAAC,CAAC;IAEjE,MAAM,WAAW,GAAG,UAAU,CAAC,MAAM,CAAC;IACtC,IAAI,YAAY,GAAG,CAAC,CAAC;IACrB,MAAM,aAAa,GAAG,IAAI,CAAC;IAC3B,MAAM,SAAS,GAAG,KAAK,CAAC;IAExB,KAAK,IAAI,MAAM,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,EAAE,MAAM,IAAI,aAAa,EAAE;QAChE,MAAM,KAAK,CAAC,aAAa,CAAC,CAAC;QAC3B,MAAM,aAAa,GAAG,WAAW,CAAC,SAAS,EAAE,CAAC;QAC9C,MAAM,OAAO,GAAG,IAAI,CAAC,CAAC,MAAM,GAAG,aAAa,CAAC,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;QAErE,GAAG,CAAC,KAAK,OAAO,WAAW,aAAa,CAAC,SAAS,YAAY,aAAa,CAAC,gBAAgB,EAAE,EAAE,IAAI,CAAC,CAAC;QAGtG,MAAM,OAAO,GAAG,UAAU,CAAC,MAAM,CAAC;QAClC,IAAI,OAAO,KAAK,WAAW,EAAE;YAC3B,YAAY,EAAE,CAAC;YACf,GAAG,CAAC,KAAK,OAAO,wBAAwB,WAAW,OAAO,OAAO,EAAE,EAAE,KAAK,CAAC,CAAC;SAC7E;QAGD,IAAI,aAAa,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE;YACnC,GAAG,CAAC,KAAK,OAAO,YAAY,aAAa,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,MAAM,CAAC,CAAC;YACnE,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE;gBAC3C,GAAG,CAAC,SAAS,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;YAC7D,CAAC,CAAC,CAAC;SACJ;KACF;IAGD,GAAG,CAAC,8BAA8B,EAAE,MAAM,CAAC,CAAC;IAC5C,MAAM,SAAS,GAAG,UAAU,CAAC,MAAM,CAAC;IACpC,MAAM,SAAS,GAAG,UAAU,CAAC,UAAU,CAAC;IAExC,IAAI,SAAS,IAAI,SAAS,EAAE;QAC1B,GAAG,CAAC,sCAAsC,EAAE,KAAK,CAAC,CAAC;QACnD,GAAG,CAAC,cAAc,SAAS,EAAE,EAAE,IAAI,CAAC,CAAC;QACrC,GAAG,CAAC,cAAc,SAAS,aAAT,SAAS,uBAAT,SAAS,CAAE,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;KACvD;SAAM;QACL,GAAG,CAAC,kCAAkC,EAAE,GAAG,CAAC,CAAC;KAC9C;IAED,MAAM,WAAW,CAAC,QAAQ,EAAE,CAAC;IAG7B,GAAG,CAAC,gDAAgD,EAAE,IAAI,CAAC,CAAC;IAC5D,GAAG,CAAC,gBAAgB,EAAE,IAAI,CAAC,CAAC;IAC5B,GAAG,CAAC,8CAA8C,EAAE,IAAI,CAAC,CAAC;IAC1D,GAAG,CAAC,wBAAwB,EAAE,IAAI,CAAC,CAAC;IACpC,GAAG,CAAC,wBAAwB,EAAE,IAAI,CAAC,CAAC;IACpC,GAAG,CAAC,2CAA2C,EAAE,IAAI,CAAC,CAAC;IACvD,GAAG,CAAC,6BAA6B,EAAE,IAAI,CAAC,CAAC;IACzC,GAAG,CAAC,uBAAuB,YAAY,EAAE,EAAE,YAAY,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IAC9E,GAAG,CAAC,qBAAqB,EAAE,KAAK,CAAC,CAAC;IAClC,GAAG,CAAC,gDAAgD,EAAE,IAAI,CAAC,CAAC;AAC9D,CAAC;AAED,OAAO,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;IACtB,GAAG,CAAC,kBAAkB,GAAG,CAAC,OAAO,EAAE,EAAE,GAAG,CAAC,CAAC;IAC1C,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACnB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/lib/scripts/test-vault.d.ts

@@ -0,0 +1,2 @@
+import 'reflect-metadata';
+//# sourceMappingURL=test-vault.d.ts.map

package/lib/scripts/test-vault.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"test-vault.d.ts","sourceRoot":"","sources":["../../scripts/test-vault.ts"],"names":[],"mappings":"AAWA,OAAO,kBAAkB,CAAC"}

package/lib/scripts/test-vault.js

@@ -0,0 +1,167 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+require("reflect-metadata");
+const class_validator_1 = require("class-validator");
+const vault_1 = require("../src/vault");
+class TestVaultConfig {
+}
+__decorate([
+    (0, vault_1.VaultPath)('secret/data/configit/api'),
+    (0, vault_1.VaultKey)('api_key'),
+    (0, class_validator_1.IsString)(),
+    __metadata("design:type", String)
+], TestVaultConfig.prototype, "API_KEY", void 0);
+__decorate([
+    (0, vault_1.VaultPath)('secret/data/configit/api'),
+    (0, vault_1.VaultKey)('api_secret'),
+    (0, class_validator_1.IsString)(),
+    __metadata("design:type", String)
+], TestVaultConfig.prototype, "API_SECRET", void 0);
+__decorate([
+    (0, vault_1.VaultPath)('secret/data/configit/database'),
+    (0, vault_1.VaultKey)('host'),
+    (0, class_validator_1.IsString)(),
+    __metadata("design:type", String)
+], TestVaultConfig.prototype, "DB_HOST", void 0);
+__decorate([
+    (0, vault_1.VaultPath)('secret/data/configit/database'),
+    (0, vault_1.VaultKey)('port'),
+    (0, class_validator_1.IsString)(),
+    __metadata("design:type", String)
+], TestVaultConfig.prototype, "DB_PORT", void 0);
+__decorate([
+    (0, vault_1.VaultPath)('secret/data/configit/database'),
+    (0, vault_1.VaultKey)('username'),
+    (0, class_validator_1.IsString)(),
+    __metadata("design:type", String)
+], TestVaultConfig.prototype, "DB_USERNAME", void 0);
+__decorate([
+    (0, vault_1.VaultPath)('secret/data/configit/database'),
+    (0, vault_1.VaultKey)('password'),
+    (0, class_validator_1.IsString)(),
+    __metadata("design:type", String)
+], TestVaultConfig.prototype, "DB_PASSWORD", void 0);
+__decorate([
+    (0, vault_1.VaultPath)('secret/data/configit/features'),
+    (0, vault_1.VaultKey)('enable_beta'),
+    (0, class_validator_1.IsString)(),
+    __metadata("design:type", String)
+], TestVaultConfig.prototype, "ENABLE_BETA", void 0);
+__decorate([
+    (0, vault_1.VaultPath)('secret/data/configit/features'),
+    (0, vault_1.VaultKey)('max_connections'),
+    (0, class_validator_1.IsString)(),
+    __metadata("design:type", String)
+], TestVaultConfig.prototype, "MAX_CONNECTIONS", void 0);
+const VAULT_CONFIG = {
+    endpoint: process.env.LOCAL_VAULT_ADDR || 'http://127.0.0.1:8200',
+    auth: {
+        methods: [
+            {
+                type: 'token',
+                config: {
+                    type: 'token',
+                    token: process.env.LOCAL_VAULT_TOKEN || 'configit-dev-token'
+                }
+            }
+        ]
+    },
+    tls: {
+        enabled: false,
+        verifyCertificate: false
+    }
+};
+async function runTests() {
+    console.log('='.repeat(50));
+    console.log('  Configit Vault Integration Test');
+    console.log('='.repeat(50));
+    console.log('');
+    const integration = new vault_1.VaultIntegration(VAULT_CONFIG);
+    try {
+        console.log('Test 1: Initializing Vault connection...');
+        await integration.initialize();
+        console.log('  ✓ Initialized successfully\n');
+        console.log('Test 2: Loading secrets from Vault...');
+        await integration.loadSecrets(TestVaultConfig);
+        console.log('  ✓ Secrets loaded\n');
+        console.log('Test 3: Verifying secret values...');
+        const expectedSecrets = {
+            API_KEY: 'test-api-key-123',
+            API_SECRET: 'test-api-secret-xyz',
+            DB_HOST: 'localhost',
+            DB_PORT: '5432',
+            DB_USERNAME: 'testuser',
+            DB_PASSWORD: 'testpassword',
+            ENABLE_BETA: 'true',
+            MAX_CONNECTIONS: '100'
+        };
+        let allPassed = true;
+        for (const [key, expected] of Object.entries(expectedSecrets)) {
+            const actual = integration.getSecret(key);
+            const passed = actual === expected;
+            const status = passed ? '✓' : '✗';
+            console.log(`  ${status} ${key}: ${passed ? 'correct' : `expected "${expected}", got "${actual}"`}`);
+            if (!passed) {
+                allPassed = false;
+            }
+        }
+        console.log('');
+        console.log('Test 4: Checking health status...');
+        const health = integration.getHealth();
+        console.log(`  Connected: ${health.connected}`);
+        console.log(`  Authenticated: ${health.authenticated}`);
+        console.log(`  Cache size: ${health.cacheSize}`);
+        console.log(`  Errors: ${health.errors.length}`);
+        console.log('');
+        console.log('Test 5: Testing cache invalidation...');
+        const beforeInvalidate = integration.getSecret('API_KEY');
+        integration.invalidateProperty('API_KEY');
+        const afterInvalidate = integration.getSecret('API_KEY');
+        if (beforeInvalidate === 'test-api-key-123' && afterInvalidate === null) {
+            console.log('  ✓ Cache invalidation works correctly\n');
+        }
+        else {
+            console.log('  ✗ Cache invalidation failed\n');
+            allPassed = false;
+        }
+        console.log('='.repeat(50));
+        if (allPassed) {
+            console.log('  ✓ All tests passed!');
+        }
+        else {
+            console.log('  ✗ Some tests failed');
+        }
+        console.log('='.repeat(50));
+        return allPassed;
+    }
+    catch (error) {
+        console.error('');
+        console.error('✗ Test failed with error:', error.message);
+        console.error('');
+        console.error('Make sure Vault is running:');
+        console.error('  docker compose -f docker-compose.vault.yml up -d');
+        console.error('  bash scripts/vault-setup.sh');
+        return false;
+    }
+    finally {
+        integration.shutdown();
+    }
+}
+runTests()
+    .then((passed) => {
+    process.exit(passed ? 0 : 1);
+})
+    .catch((error) => {
+    console.error('Unexpected error:', error);
+    process.exit(1);
+});
+//# sourceMappingURL=test-vault.js.map

package/lib/scripts/test-vault.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"test-vault.js","sourceRoot":"","sources":["../../scripts/test-vault.ts"],"names":[],"mappings":";;;;;;;;;;;AAWA,4BAA0B;AAC1B,qDAA2C;AAC3C,wCAKsB;AAKtB,MAAM,eAAe;CAwCpB;AApCC;IAHC,IAAA,iBAAS,EAAC,0BAA0B,CAAC;IACrC,IAAA,gBAAQ,EAAC,SAAS,CAAC;IACnB,IAAA,0BAAQ,GAAE;;gDACM;AAKjB;IAHC,IAAA,iBAAS,EAAC,0BAA0B,CAAC;IACrC,IAAA,gBAAQ,EAAC,YAAY,CAAC;IACtB,IAAA,0BAAQ,GAAE;;mDACS;AAKpB;IAHC,IAAA,iBAAS,EAAC,+BAA+B,CAAC;IAC1C,IAAA,gBAAQ,EAAC,MAAM,CAAC;IAChB,IAAA,0BAAQ,GAAE;;gDACM;AAKjB;IAHC,IAAA,iBAAS,EAAC,+BAA+B,CAAC;IAC1C,IAAA,gBAAQ,EAAC,MAAM,CAAC;IAChB,IAAA,0BAAQ,GAAE;;gDACM;AAKjB;IAHC,IAAA,iBAAS,EAAC,+BAA+B,CAAC;IAC1C,IAAA,gBAAQ,EAAC,UAAU,CAAC;IACpB,IAAA,0BAAQ,GAAE;;oDACU;AAKrB;IAHC,IAAA,iBAAS,EAAC,+BAA+B,CAAC;IAC1C,IAAA,gBAAQ,EAAC,UAAU,CAAC;IACpB,IAAA,0BAAQ,GAAE;;oDACU;AAKrB;IAHC,IAAA,iBAAS,EAAC,+BAA+B,CAAC;IAC1C,IAAA,gBAAQ,EAAC,aAAa,CAAC;IACvB,IAAA,0BAAQ,GAAE;;oDACU;AAKrB;IAHC,IAAA,iBAAS,EAAC,+BAA+B,CAAC;IAC1C,IAAA,gBAAQ,EAAC,iBAAiB,CAAC;IAC3B,IAAA,0BAAQ,GAAE;;wDACc;AAI3B,MAAM,YAAY,GAAwB;IACxC,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,uBAAuB;IACjE,IAAI,EAAE;QACJ,OAAO,EAAE;YACP;gBACE,IAAI,EAAE,OAAO;gBACb,MAAM,EAAE;oBACN,IAAI,EAAE,OAAO;oBACb,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,oBAAoB;iBAC7D;aACF;SACF;KACF;IACD,GAAG,EAAE;QACH,OAAO,EAAE,KAAK;QACd,iBAAiB,EAAE,KAAK;KACzB;CACF,CAAC;AAEF,KAAK,UAAU,QAAQ;IACrB,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;IAC5B,OAAO,CAAC,GAAG,CAAC,mCAAmC,CAAC,CAAC;IACjD,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;IAC5B,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAEhB,MAAM,WAAW,GAAG,IAAI,wBAAgB,CAAC,YAAY,CAAC,CAAC;IAEvD,IAAI;QAEF,OAAO,CAAC,GAAG,CAAC,0CAA0C,CAAC,CAAC;QACxD,MAAM,WAAW,CAAC,UAAU,EAAE,CAAC;QAC/B,OAAO,CAAC,GAAG,CAAC,gCAAgC,CAAC,CAAC;QAG9C,OAAO,CAAC,GAAG,CAAC,uCAAuC,CAAC,CAAC;QACrD,MAAM,WAAW,CAAC,WAAW,CAAC,eAAe,CAAC,CAAC;QAC/C,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;QAGpC,OAAO,CAAC,GAAG,CAAC,oCAAoC,CAAC,CAAC;QAClD,MAAM,eAAe,GAAG;YACtB,OAAO,EAAE,kBAAkB;YAC3B,UAAU,EAAE,qBAAqB;YACjC,OAAO,EAAE,WAAW;YACpB,OAAO,EAAE,MAAM;YACf,WAAW,EAAE,UAAU;YACvB,WAAW,EAAE,cAAc;YAC3B,WAAW,EAAE,MAAM;YACnB,eAAe,EAAE,KAAK;SACvB,CAAC;QAEF,IAAI,SAAS,GAAG,IAAI,CAAC;QACrB,KAAK,MAAM,CAAE,GAAG,EAAE,QAAQ,CAAE,IAAI,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC,EAAE;YAC/D,MAAM,MAAM,GAAG,WAAW,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;YAC1C,MAAM,MAAM,GAAG,MAAM,KAAK,QAAQ,CAAC;YACnC,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;YAClC,OAAO,CAAC,GAAG,CAAC,KAAM,MAAO,IAAK,GAAI,KAAM,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,aAAc,QAAS,WAAY,MAAO,GAAI,EAAE,CAAC,CAAC;YAC/G,IAAI,CAAC,MAAM,EAAE;gBACX,SAAS,GAAG,KAAK,CAAC;aACnB;SACF;QACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAGhB,OAAO,CAAC,GAAG,CAAC,mCAAmC,CAAC,CAAC;QACjD,MAAM,MAAM,GAAG,WAAW,CAAC,SAAS,EAAE,CAAC;QACvC,OAAO,CAAC,GAAG,CAAC,gBAAiB,MAAM,CAAC,SAAU,EAAE,CAAC,CAAC;QAClD,OAAO,CAAC,GAAG,CAAC,oBAAqB,MAAM,CAAC,aAAc,EAAE,CAAC,CAAC;QAC1D,OAAO,CAAC,GAAG,CAAC,iBAAkB,MAAM,CAAC,SAAU,EAAE,CAAC,CAAC;QACnD,OAAO,CAAC,GAAG,CAAC,aAAc,MAAM,CAAC,MAAM,CAAC,MAAO,EAAE,CAAC,CAAC;QACnD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAGhB,OAAO,CAAC,GAAG,CAAC,uCAAuC,CAAC,CAAC;QACrD,MAAM,gBAAgB,GAAG,WAAW,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QAC1D,WAAW,CAAC,kBAAkB,CAAC,SAAS,CAAC,CAAC;QAC1C,MAAM,eAAe,GAAG,WAAW,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QACzD,IAAI,gBAAgB,KAAK,kBAAkB,IAAI,eAAe,KAAK,IAAI,EAAE;YACvE,OAAO,CAAC,GAAG,CAAC,0CAA0C,CAAC,CAAC;SACzD;aAAM;YACL,OAAO,CAAC,GAAG,CAAC,iCAAiC,CAAC,CAAC;YAC/C,SAAS,GAAG,KAAK,CAAC;SACnB;QAGD,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;QAC5B,IAAI,SAAS,EAAE;YACb,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC;SACtC;aAAM;YACL,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC;SACtC;QACD,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;QAE5B,OAAO,SAAS,CAAC;KAClB;IAAC,OAAO,KAAU,EAAE;QACnB,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAClB,OAAO,CAAC,KAAK,CAAC,2BAA2B,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;QAC1D,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAClB,OAAO,CAAC,KAAK,CAAC,6BAA6B,CAAC,CAAC;QAC7C,OAAO,CAAC,KAAK,CAAC,oDAAoD,CAAC,CAAC;QACpE,OAAO,CAAC,KAAK,CAAC,+BAA+B,CAAC,CAAC;QAC/C,OAAO,KAAK,CAAC;KACd;YAAS;QACR,WAAW,CAAC,QAAQ,EAAE,CAAC;KACxB;AACH,CAAC;AAED,QAAQ,EAAE;KACP,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE;IACf,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC/B,CAAC,CAAC;KACD,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;IACf,OAAO,CAAC,KAAK,CAAC,mBAAmB,EAAE,KAAK,CAAC,CAAC;IAC1C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/lib/src/config.errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.errors.d.ts","sourceRoot":"","sources":["../../src/config.errors.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAIlD,OAAO,OAAO,MAAM,mBAAmB,CAAC;AAExC,qBAAa,qBAAsB,SAAQ,OAAO;gBACpC,gBAAgB,EAAE,eAAe,EAAE;CAkBhD"}

package/lib/src/config.errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.errors.js","sourceRoot":"","sources":["../../src/config.errors.ts"],"names":[],"mappings":";;;;;;AACA,mCAAmC;AACnC,mCAAuC;AAEvC,iEAAwC;AAExC,MAAa,qBAAsB,SAAQ,kBAAO;IAChD,YAAY,gBAAmC;QAC7C,MAAM,OAAO,GAAG,gBAAgB;aAC7B,GAAG,CAAC,CAAC,eAAe,EAAE,EAAE;YACvB,MAAM,IAAI,GAAG,IAAA,aAAI,EAAC,IAAA,cAAK,EAAC,EAAE,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;YACjD,OAAO;gBACL,EAAE;gBACF,IAAI;gBACJ,IAAK,IAAA,aAAI,EAAC,WAAW,CAAE,IAAK,eAAe,CAAC,QAAS,EAAE;gBACvD,IAAK,IAAA,aAAI,EAAC,QAAQ,CAAE,IAAK,IAAA,YAAG,EAAC,eAAe,CAAC,KAAK,CAAE,EAAE;gBACtD,IAAI;gBACJ,IAAA,eAAM,EAAC,eAAe,CAAC,WAAW,CAAC;qBAChC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,SAAU,IAAA,YAAG,EAAC,KAAK,CAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;aACtD,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACf,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC;QAEvB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,uBAAuB,CAAC;IACtC,CAAC;CACF;AAnBD,sDAmBC"}

package/lib/src/config.model.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.model.d.ts","sourceRoot":"","sources":["../../src/config.model.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAIhD,eAAO,MAAM,wBAAwB,UAQpC,CAAC;AAEF,KAAK,MAAM,CAAC,CAAC,IAAI,CAAC,KAAK,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;AAElD,qBACa,UAAU;IACrB,IAAI,EAAE,MAAM,CAAC;IAOX,QAAQ,SAAiB;IAOzB,UAAU,UAAS;IAQnB,OAAO,EAAE,YAAY,CAAC;IAQtB,OAAO,MAAC;IAQR,QAAQ,MAAC;gBAEC,OAAO,GAAE,OAAO,CAAC,UAAU,CAAM;IAItC,YAAY;IAwCnB,OAAO,CAAC,aAAa;IAOrB,OAAO,CAAC,YAAY,EAAE,MAAM,CAAC,UAAU,CAAC;IAIxC,WAAW,CAAC,GAAG,EAAE,MAAM,EAAE,cAAc,UAAQ;IAU/C,iBAAiB;CAGlB"}

package/lib/src/config.model.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.model.js","sourceRoot":"","sources":["../../src/config.model.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,qDAKyB;AACzB,2EAA0E;AAC1E,mCAA0C;AAE1C,qDAAgD;AAChD,+DAAuD;AACvD,mEAAwE;AAE3D,QAAA,wBAAwB,GAAG;IACtC,QAAQ;IACR,aAAa;IACb,YAAY;IACZ,MAAM;IACN,cAAc;IACd,SAAS;IACT,KAAK;CACN,CAAC;AAIF,IACa,UAAU,GADvB,MACa,UAAU;IAyCrB,YAAY,UAA+B,EAAE;QAjC3C,aAAQ,GAAG,aAAa,CAAC;QAOzB,eAAU,GAAG,KAAK,CAAC;QA2BnB,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAC/B,CAAC;IAEM,YAAY;QACjB,MAAM,mBAAmB,GAAG,IAAA,yDAA4B,EAAC;YACvD,oBAAoB,EAAE;gBACpB,UAAU,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;oBACrB,WAAW,EAAE,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC;iBACvC,CAAC;aACH;SACF,CAAC,CAAC;QAEH,MAAM,cAAc,GAAG,IAAA,cAAK,EAAC,mBAAmB,CAAC;aAC9C,IAAI,EAAE;aACN,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,KAAK,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC;aACxD,KAAK,EAAE,CAAC;QACX,MAAM,gBAAgB,GAAG,IAAA,cAAK,EAAC,mBAAmB,CAAC,cAAc,CAAC,CAAC;aAChE,IAAI,CAAC;YACJ,qBAAqB;YACrB,oBAAoB;YACpB,uBAAuB;YACvB,qBAAqB;YACrB,oBAAoB;YACpB,oBAAoB;SACrB,CAAC;aACD,KAAK,EAAE,CAAC;QAEX,IAAI,gBAAgB,CAAC,QAAQ,EAAE;YAC7B,gBAAgB,CAAC,QAAQ,GAAG,IAAA,cAAK,EAAC,gBAAgB,CAAC,QAAQ,CAAC;iBACzD,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;gBAClB,UAAU;gBACV,SAAS;gBACT,YAAY;gBACZ,UAAU;gBACV,SAAS;gBACT,SAAS;aACV,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;iBACjB,KAAK,EAAE,CAAC;SACZ;QAED,OAAO,gBAAgB,CAAC;IAC1B,CAAC;IAEO,aAAa,CAAC,QAAgB;QACpC,OAAO,IAAA,cAAK,EAAC,QAAQ,CAAC;aACnB,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC;aACvB,OAAO,CAAC,iBAAiB,EAAE,EAAE,CAAC;aAC9B,KAAK,EAAE,CAAC;IACb,CAAC;IAED,OAAO,CAAC,YAAgC;QACtC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,aAAa,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;IACpD,CAAC;IAED,WAAW,CAAC,GAAW,EAAE,cAAc,GAAG,KAAK;QAC7C,OAAO;YACL,OAAO;YACP,IAAA,oCAAc,GAAE,EAAE,GAAG;YACrB,cAAc,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE;YACjC,IAAA,kBAAS,EAAC,IAAI,CAAC,IAAI,CAAC,EAAE,GAAG;YACzB,GAAG;SACJ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACb,CAAC;IAED,iBAAiB;QACf,OAAO,GAAI,IAAA,kBAAS,EAAC,IAAI,CAAC,IAAI,CAAE,kBAAkB,CAAC;IACrD,CAAC;CACF,CAAA;AArGG;IALD,IAAA,0BAAQ,GAAE;IACV,IAAA,sCAAc,EACb,oEAAoE,EACpE,EAAE,OAAO,EAAE,IAAI,EAAE,CAClB;;4CAC0B;AAOzB;IALD,IAAA,2BAAS,GAAE;IACX,IAAA,sCAAc,EAAC;QACd,oEAAoE;QACpE,4EAA4E;KAC7E,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;;8CACA;AAQnB;IAND,IAAA,wBAAM,EAAC,6BAAY,CAAC;IACpB,IAAA,4BAAU,GAAE;IACZ,IAAA,sCAAc,EACb,0DAA0D,EAC1D,EAAE,OAAO,EAAE,IAAI,EAAE,CAClB;;2CACuB;AAQtB;IAND,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,GAAE;IACZ,IAAA,sCAAc,EACb,+BAA+B,EAC/B,EAAE,OAAO,EAAE,IAAI,EAAE,CAClB;;2CACS;AAQR;IAND,IAAA,2BAAS,GAAE;IACX,IAAA,4BAAU,GAAE;IACZ,IAAA,sCAAc,EACb,6CAA6C,EAC7C,EAAE,OAAO,EAAE,IAAI,EAAE,CAClB;;4CACU;AAvCA,UAAU;IADtB,IAAA,qCAAa,GAAE;;GACH,UAAU,CA6GtB;AA7GY,gCAAU"}

package/lib/{config.service.d.ts → src/config.service.d.ts}

@@ -1,4 +1,5 @@
 import { BaseConfig } from './config.model';
+import { IVaultConfigOptions, VaultHealth } from './vault';
 export interface IConfigServiceOptions {
     convertToCamelCase?: boolean;
     convertUppercaseBooleans?: boolean;
@@ -12,6 +13,7 @@ export interface IConfigServiceOptions {
         algorithm: string;
         secret: string;
     };
+    vault?: IVaultConfigOptions;
 }
 export declare enum EFileFormats {
     json = "json",
@@ -30,14 +32,21 @@ export declare class ConfigService<T extends BaseConfig> {
     private fileExtension;
     readonly mode: string;
     readonly options: IConfigServiceOptions;
-    readonly config?: T;
+    private _config?;
     readonly genericClass?: TClass<T>;
     readonly fileName?: string;
     readonly configFileName: string;
     readonly configFileFullPath?: string;
     readonly configFileRoot?: string;
     readonly appRoot: string;
+    private vaultIntegration?;
     constructor(givenClass: TClass<T>, passedConfig?: Partial<T>, options?: IConfigServiceOptions);
+    get config(): T;
+    initializeVault(): Promise<void>;
+    getVaultHealth(): VaultHealth | null;
+    invalidateVaultCache(vaultPath: string): void;
+    invalidateVaultProperty(propertyName: string): void;
+    shutdownVault(): void;
     toPlainObject(): Record<string, any>;
     writeConfigToFile({ fileFormat, excludeSchema, objectWrapper, outputFolder }?: IWriteConfigToFileOptions): void;
     private createConfigInstance;

package/lib/src/config.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.service.d.ts","sourceRoot":"","sources":["../../src/config.service.ts"],"names":[],"mappings":"AAsBA,OAAO,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAE5C,OAAO,EAAE,mBAAmB,EAAE,WAAW,EAAoB,MAAM,SAAS,CAAC;AAW7E,MAAM,WAAW,qBAAqB;IACpC,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,wBAAwB,CAAC,EAAE,OAAO,CAAC;IACnC,UAAU,CAAC,EAAE,YAAY,CAAC;IAC1B,YAAY,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC;IACpC,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,wBAAwB,CAAC,EAAE,MAAM,CAAC;IAClC,aAAa,CAAC,EAAE;QACd,SAAS,EAAE,MAAM,CAAC;QAClB,MAAM,EAAE,MAAM,CAAC;KAChB,CAAC;IACF,KAAK,CAAC,EAAE,mBAAmB,CAAC;CAC7B;AAED,oBAAY,YAAY;IACtB,IAAI,SAAS;IACb,IAAI,SAAS;IACb,KAAK,UAAU;IACf,KAAK,UAAU;CAChB;AAED,MAAM,WAAW,yBAAyB;IACtC,UAAU,EAAE,YAAY,CAAC;IACzB,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,YAAY,CAAC,EAAE,MAAM,CAAC;CACzB;AAKD,KAAK,MAAM,CAAC,CAAC,IAAI,CAAC,KAAK,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;AAQlD,qBAAa,aAAa,CAAC,CAAC,SAAS,UAAU;IAC7C,OAAO,CAAC,aAAa,CAAe;IACpC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAoB;IACzC,QAAQ,CAAC,OAAO,EAAE,qBAAqB,CAAC;IACxC,OAAO,CAAC,OAAO,CAAC,CAAI;IACpB,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;IAClC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAM;IACrC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IACrC,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,OAAO,CAAC,gBAAgB,CAAC,CAAmB;gBAG1C,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC,EACrB,YAAY,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,EACzB,OAAO,GAAE,qBAA0B;IA4FrC,IAAI,MAAM,IAAI,CAAC,CAed;IAeK,eAAe,IAAI,OAAO,CAAC,IAAI,CAAC;IA0DtC,cAAc,IAAI,WAAW,GAAG,IAAI;IAUpC,oBAAoB,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI;IAS7C,uBAAuB,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI;IASnD,aAAa,IAAI,IAAI;IAMrB,aAAa;IAKb,iBAAiB,CACf,EACE,UAAU,EACV,aAAa,EACb,aAAa,EACb,YAAY,EACb,GAAE,yBAGF;IA8DH,OAAO,CAAC,oBAAoB;IAO5B,OAAO,CAAC,eAAe;IA2DvB,OAAO,CAAC,WAAW;IAuCnB,OAAO,CAAC,eAAe;IAWvB,OAAO,CAAC,iBAAiB;IAezB,OAAO,CAAC,uBAAuB;IAoC/B,OAAO,CAAC,QAAQ;IAgBhB,OAAO,CAAC,cAAc;IAsBtB,OAAO,CAAC,aAAa;IAsCrB,OAAO,CAAC,mBAAmB;IAqB3B,OAAO,CAAC,wBAAwB;CAQjC"}

package/lib/{config.service.js → src/config.service.js}

@@ -41,6 +41,7 @@ const yaml_1 = __importDefault(require("yaml"));
 const nconfJsoncFormat = __importStar(require("@kibibit/nconf-jsonc"));
 const config_errors_1 = require("./config.errors");
 const environment_service_1 = require("./environment.service");
+const vault_1 = require("./vault");
 const nconfFormats = nconf_1.default.formats;
 nconfFormats.yaml = nconf_yaml_1.default;
 nconfFormats.jsonc = nconfJsoncFormat;
@@ -65,16 +66,19 @@ class ConfigService {
         this.appRoot = this.findRoot();
         this.genericClass = givenClass;
         this.fileExtension = this.options.fileFormat || EFileFormats.json;
-        this.config = this.createConfigInstance(this.genericClass, {});
-        this.configFileName = this.config.getFileName(this.fileExtension);
+        this._config = this.createConfigInstance(this.genericClass, {});
+        this.configFileName = this._config.getFileName(this.fileExtension);
         this.configFileRoot = this.findConfigRoot();
         this.configFileFullPath = (0, path_1.join)(this.configFileRoot, this.configFileName);
         this.initializeNconf();
+        if (this.options.vault) {
+            this.vaultIntegration = new vault_1.VaultIntegration(this.options.vault);
+        }
         const config = passedConfig || nconf_1.default.get();
         const pathDoesNotExist = (0, fs_extra_1.pathExistsSync)(this.configFileFullPath) === false;
         if (pathDoesNotExist && (config.saveToFile || config.init)) {
             console.log((0, colors_1.cyan)('Initializing Configuration File'));
-            this.config = this.createConfigInstance(this.genericClass, {});
+            this._config = this.createConfigInstance(this.genericClass, {});
             this.writeConfigToFile();
             this.writeSchema();
             console.log((0, colors_1.cyan)('EXITING'));
@@ -94,7 +98,7 @@ class ConfigService {
             return;
         }
         envConfig.NODE_ENV = this.mode;
-        this.config = this.createConfigInstance(this.genericClass, envConfig);
+        this._config = this.createConfigInstance(this.genericClass, envConfig);
         if (config.saveToFile || config.init) {
             if (config.convert) {
                 console.log((0, colors_1.cyan)('Converting Configuration File'));
@@ -108,8 +112,70 @@ class ConfigService {
         }
         configService = this;
     }
+    get config() {
+        if (this.options.vault && this.vaultIntegration && !this.vaultIntegration.isInitialized()) {
+            console.warn('Warning: Vault is configured but not initialized. ' +
+                'Call await configService.initializeVault() before accessing config. ' +
+                'Config may not include Vault secrets.');
+        }
+        if (!this._config) {
+            throw new Error('ConfigService config not initialized');
+        }
+        return this._config;
+    }
+    async initializeVault() {
+        if (!this.options.vault) {
+            return;
+        }
+        if (!this.vaultIntegration) {
+            throw new Error('VaultIntegration not created. Check constructor.');
+        }
+        if (!this.genericClass) {
+            throw new Error('ConfigService not properly initialized');
+        }
+        try {
+            await this.vaultIntegration.initialize();
+            await this.vaultIntegration.loadSecrets(this.genericClass);
+            const config = nconf_1.default.get();
+            const envConfig = this.validateInput(config);
+            if (envConfig) {
+                envConfig.NODE_ENV = this.mode;
+                this._config = this.createConfigInstance(this.genericClass, envConfig);
+            }
+        }
+        catch (error) {
+            const fallback = this.options.vault.fallback;
+            if ((fallback === null || fallback === void 0 ? void 0 : fallback.required) !== false) {
+                throw new Error(`Vault initialization failed: ${(error === null || error === void 0 ? void 0 : error.message) || 'Unknown error'}. ` +
+                    `Vault is required for this configuration.`);
+            }
+            console.warn(`Vault initialization failed: ${(error === null || error === void 0 ? void 0 : error.message) || 'Unknown error'}. ` +
+                `Continuing without Vault secrets.`);
+        }
+    }
+    getVaultHealth() {
+        if (!this.vaultIntegration) {
+            return null;
+        }
+        return this.vaultIntegration.getHealth();
+    }
+    invalidateVaultCache(vaultPath) {
+        if (this.vaultIntegration) {
+            this.vaultIntegration.invalidateCache(vaultPath);
+        }
+    }
+    invalidateVaultProperty(propertyName) {
+        if (this.vaultIntegration) {
+            this.vaultIntegration.invalidateProperty(propertyName);
+        }
+    }
+    shutdownVault() {
+        if (this.vaultIntegration) {
+            this.vaultIntegration.shutdown();
+        }
+    }
     toPlainObject() {
-        return (0, class_transformer_1.classToPlain)(new this.genericClass(this.config));
+        return (0, class_transformer_1.classToPlain)(new this.genericClass(this._config));
     }
     writeConfigToFile({ fileFormat, excludeSchema, objectWrapper, outputFolder } = {
         fileFormat: this.options.fileFormat,
@@ -217,8 +283,8 @@ class ConfigService {
             const sharedConfigSchema = this.writeSharedSchema(sharedConfig);
             sharedConfigsSchemas.push(sharedConfigSchema);
         }
-        const schema = this.config.toJsonSchema();
-        const schemaFullPath = (0, path_1.join)(this.configFileRoot, '/', this.options.schemaFolderName, '/', this.config.getSchemaFileName());
+        const schema = this._config.toJsonSchema();
+        const schemaFullPath = (0, path_1.join)(this.configFileRoot, '/', this.options.schemaFolderName, '/', this._config.getSchemaFileName());
         let sharedConfigsProperties = {};
         for (const sharedConfigSchema of sharedConfigsSchemas) {
             (0, lodash_1.mapValues)(sharedConfigSchema.properties, (value) => value.description = `(OVERRIDE SHARED CONFIG)\n${value.description}`);
@@ -247,7 +313,7 @@ class ConfigService {
         return schema;
     }
     writeSharedConfigToFile(configClass) {
-        const config = this.createConfigInstance(configClass, this.config);
+        const config = this.createConfigInstance(configClass, this._config);
         const plainConfig = (0, class_transformer_1.classToPlain)(config);
         const relativePathToSchema = (0, path_1.relative)(this.configFileRoot, (0, path_1.join)(this.appRoot, `/${this.options.schemaFolderName}/${config.getSchemaFileName()}`));
         plainConfig.$schema = relativePathToSchema;
@@ -312,7 +378,7 @@ class ConfigService {
         }
         if (validationErrors.length > 0) {
             const validationError = new config_errors_1.ConfigValidationError(validationErrors);
-            const errorMessageTitle = `${(0, lodash_1.startCase)(this.config.name)} Configuration Errors`;
+            const errorMessageTitle = `${(0, lodash_1.startCase)(this._config.name)} Configuration Errors`;
             const titleBar = this.generateTerminalTitleBar(errorMessageTitle);
             console.error(titleBar, validationError.message);
             shouldExitProcess = shouldExitProcess || validationErrors.length > 0;