@konker.dev/config-o-tron 0.0.1

package/dist/providers/AwsSsmProvider.js

@@ -0,0 +1,230 @@
+/**
+ * AWS SSM Provider
+ *
+ * Default provider implementation using AWS SDK (SSM Parameter Store)
+ */
+import { DeleteParameterCommand, GetParameterCommand, GetParametersByPathCommand, PutParameterCommand, SSMClient, } from '@aws-sdk/client-ssm';
+import { GetCallerIdentityCommand, STSClient } from '@aws-sdk/client-sts';
+import * as Effect from 'effect/Effect';
+import { pipe } from 'effect/Function';
+import * as ParseResult from 'effect/ParseResult';
+import * as Schema from 'effect/Schema';
+import { authenticationFailedError, connectionFailedError, parameterNotFoundError, providerGuardMismatchError, writePermissionDeniedError, } from '../errors.js';
+import { buildFullPath, EncryptionType, slashToDotPath, } from './Provider.js';
+import { registerProvider } from './registry.js';
+// --------------------------------------------------------------------------
+// Types
+// --------------------------------------------------------------------------
+const AwsSsmGuardsSchema = Schema.Struct({
+    accountId: Schema.optional(Schema.String),
+    region: Schema.optional(Schema.String),
+});
+// --------------------------------------------------------------------------
+// Helpers
+// --------------------------------------------------------------------------
+const ssmClient = new SSMClient({});
+const stsClient = new STSClient({});
+function readEnvValue(value) {
+    if (!value)
+        return undefined;
+    const trimmed = value.trim();
+    return trimmed.length > 0 ? trimmed : undefined;
+}
+function getAwsErrorName(error) {
+    if (typeof error !== 'object' || error === null) {
+        return undefined;
+    }
+    const maybe = error;
+    return maybe.name ?? maybe.code ?? maybe.Code;
+}
+function describeAwsError(error) {
+    if (error instanceof Error) {
+        return error.message;
+    }
+    return String(error);
+}
+function buildServicePath(ctx) {
+    const prefix = ctx.prefix.endsWith('/') ? ctx.prefix.slice(0, -1) : ctx.prefix;
+    return `${prefix}/${ctx.env}/${ctx.service}`;
+}
+function parseAwsSsmGuards(guards) {
+    if (guards === undefined) {
+        return Effect.succeed(undefined);
+    }
+    return pipe(Schema.decodeUnknown(AwsSsmGuardsSchema)(guards), Effect.mapError((error) => providerGuardMismatchError('aws-ssm', ParseResult.TreeFormatter.formatErrorSync(error))), Effect.map((decoded) => (decoded.accountId || decoded.region ? decoded : undefined)));
+}
+function resolveAwsAccountId() {
+    const envAccountId = readEnvValue(process.env.AWS_ACCOUNT_ID);
+    if (envAccountId) {
+        return Effect.succeed(envAccountId);
+    }
+    return Effect.tryPromise({
+        try: async () => {
+            const result = await stsClient.send(new GetCallerIdentityCommand({}));
+            const accountId = result.Account?.trim();
+            if (!accountId) {
+                return Promise.reject(new Error('Empty AWS account ID'));
+            }
+            return accountId;
+        },
+        catch: (error) => providerGuardMismatchError('aws-ssm', `Unable to resolve AWS account ID: ${describeAwsError(error)}`),
+    });
+}
+function resolveAwsRegion() {
+    const envRegion = readEnvValue(process.env.AWS_REGION ?? process.env.AWS_DEFAULT_REGION);
+    if (envRegion) {
+        return Effect.succeed(envRegion);
+    }
+    return Effect.tryPromise({
+        try: async () => {
+            const regionProvider = ssmClient.config.region;
+            const region = typeof regionProvider === 'function' ? await regionProvider() : regionProvider;
+            if (!region) {
+                return Promise.reject(new Error('AWS region not configured'));
+            }
+            return region;
+        },
+        catch: (error) => providerGuardMismatchError('aws-ssm', `Unable to resolve AWS region: ${describeAwsError(error)}`),
+    });
+}
+function classifyAwsError(error, ctx, operation, keyPath) {
+    const errorName = getAwsErrorName(error);
+    const detail = describeAwsError(error);
+    const message = errorName ? `${errorName}: ${detail}` : detail;
+    if (errorName === 'ParameterNotFound' && keyPath) {
+        return parameterNotFoundError(keyPath, buildFullPath(ctx, keyPath));
+    }
+    if (errorName === 'UnrecognizedClientException' ||
+        errorName === 'InvalidClientTokenId' ||
+        errorName === 'ExpiredToken' ||
+        errorName === 'CredentialsError') {
+        return authenticationFailedError('aws-ssm', message);
+    }
+    if (errorName === 'AccessDeniedException' || errorName === 'AccessDenied' || errorName === 'UnauthorizedOperation') {
+        if (operation === 'upsert' || operation === 'delete') {
+            return writePermissionDeniedError(keyPath ?? '(unknown)', message);
+        }
+        return authenticationFailedError('aws-ssm', message);
+    }
+    if (errorName === 'ThrottlingException' || errorName === 'RequestTimeout' || errorName === 'TimeoutError') {
+        return connectionFailedError('aws-ssm', message);
+    }
+    return connectionFailedError('aws-ssm', message);
+}
+// --------------------------------------------------------------------------
+// Provider Implementation
+// --------------------------------------------------------------------------
+const capabilities = {
+    secureWrite: true,
+    encryptionVerification: true,
+    transactions: false,
+};
+function checkGuards(ctx, guards) {
+    return pipe(parseAwsSsmGuards(guards), Effect.flatMap((parsed) => {
+        if (!parsed) {
+            return Effect.void;
+        }
+        const contextLabel = `${ctx.prefix}/${ctx.env}/${ctx.service}`;
+        const accountIdEffect = parsed.accountId ? resolveAwsAccountId() : Effect.succeed(undefined);
+        const regionEffect = parsed.region ? resolveAwsRegion() : Effect.succeed(undefined);
+        return pipe(Effect.all({ accountId: accountIdEffect, region: regionEffect }), Effect.flatMap(({ accountId, region }) => {
+            const mismatches = [];
+            if (parsed.accountId && accountId !== parsed.accountId) {
+                mismatches.push(`accountId expected '${parsed.accountId}' but got '${accountId}'`);
+            }
+            if (parsed.region && region !== parsed.region) {
+                mismatches.push(`region expected '${parsed.region}' but got '${region}'`);
+            }
+            if (mismatches.length > 0) {
+                return Effect.fail(providerGuardMismatchError('aws-ssm', `${mismatches.join('; ')} (context ${contextLabel})`));
+            }
+            return Effect.void;
+        }));
+    }));
+}
+function fetch(ctx) {
+    const servicePath = buildServicePath(ctx);
+    const basePrefix = servicePath.endsWith('/') ? servicePath : `${servicePath}/`;
+    return pipe(Effect.tryPromise({
+        try: async () => {
+            const results = [];
+            let nextToken = undefined;
+            do {
+                const response = await ssmClient.send(new GetParametersByPathCommand({
+                    Path: servicePath,
+                    Recursive: true,
+                    WithDecryption: true,
+                    MaxResults: 10,
+                    NextToken: nextToken,
+                }));
+                results.push(...(response.Parameters ?? []));
+                nextToken = response.NextToken;
+            } while (nextToken);
+            return results;
+        },
+        catch: (error) => classifyAwsError(error, ctx, 'fetch'),
+    }), Effect.map((parameters) => {
+        const kv = {};
+        for (const param of parameters) {
+            if (!param.Name) {
+                continue;
+            }
+            if (!param.Name.startsWith(basePrefix)) {
+                continue;
+            }
+            const relativePath = param.Name.slice(basePrefix.length);
+            const dotPath = slashToDotPath(relativePath);
+            kv[dotPath] = param.Value ?? '';
+        }
+        return kv;
+    }));
+}
+function upsert(ctx, keyPath, value) {
+    return Effect.tryPromise({
+        try: async () => {
+            const fullPath = buildFullPath(ctx, keyPath);
+            await ssmClient.send(new PutParameterCommand({
+                Name: fullPath,
+                Value: value,
+                Type: 'SecureString',
+                Overwrite: true,
+            }));
+        },
+        catch: (error) => classifyAwsError(error, ctx, 'upsert', keyPath),
+    });
+}
+function deleteKey(ctx, keyPath) {
+    return Effect.tryPromise({
+        try: async () => {
+            const fullPath = buildFullPath(ctx, keyPath);
+            await ssmClient.send(new DeleteParameterCommand({ Name: fullPath }));
+        },
+        catch: (error) => classifyAwsError(error, ctx, 'delete', keyPath),
+    });
+}
+function verifyEncryption(ctx, keyPath) {
+    return Effect.tryPromise({
+        try: async () => {
+            const fullPath = buildFullPath(ctx, keyPath);
+            const response = await ssmClient.send(new GetParameterCommand({ Name: fullPath }));
+            const type = response.Parameter?.Type;
+            if (type === 'SecureString')
+                return EncryptionType.SECURE_STRING;
+            if (type === 'String')
+                return EncryptionType.STRING;
+            return EncryptionType.UNKNOWN;
+        },
+        catch: (error) => classifyAwsError(error, ctx, 'verify', keyPath),
+    });
+}
+export const awsSsmProvider = {
+    name: 'aws-ssm',
+    capabilities,
+    checkGuards,
+    fetch,
+    upsert,
+    delete: deleteKey,
+    verifyEncryption,
+};
+registerProvider('aws-ssm', () => awsSsmProvider);
+//# sourceMappingURL=AwsSsmProvider.js.map

package/dist/providers/AwsSsmProvider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"AwsSsmProvider.js","sourceRoot":"","sources":["../../src/providers/AwsSsmProvider.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EACL,sBAAsB,EACtB,mBAAmB,EACnB,0BAA0B,EAG1B,mBAAmB,EACnB,SAAS,GACV,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,wBAAwB,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAC1E,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,EAAE,IAAI,EAAE,MAAM,iBAAiB,CAAC;AACvC,OAAO,KAAK,WAAW,MAAM,oBAAoB,CAAC;AAClD,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AAExC,OAAO,EACL,yBAAyB,EACzB,qBAAqB,EACrB,sBAAsB,EAEtB,0BAA0B,EAC1B,0BAA0B,GAC3B,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,aAAa,EACb,cAAc,EAMd,cAAc,GACf,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAEjD,6EAA6E;AAC7E,QAAQ;AACR,6EAA6E;AAE7E,MAAM,kBAAkB,GAAG,MAAM,CAAC,MAAM,CAAC;IACvC,SAAS,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC;IACzC,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC;CACvC,CAAC,CAAC;AAWH,6EAA6E;AAC7E,UAAU;AACV,6EAA6E;AAE7E,MAAM,SAAS,GAAG,IAAI,SAAS,CAAC,EAAE,CAAC,CAAC;AACpC,MAAM,SAAS,GAAG,IAAI,SAAS,CAAC,EAAE,CAAC,CAAC;AAEpC,SAAS,YAAY,CAAC,KAAyB;IAC7C,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAC;IAC7B,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;AAClD,CAAC;AAED,SAAS,eAAe,CAAC,KAAc;IACrC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QAChD,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,KAAK,GAAG,KAAiB,CAAC;IAChC,OAAO,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,IAAI,CAAC;AAChD,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc;IACtC,IAAI,KAAK,YAAY,KAAK,EAAE,CAAC;QAC3B,OAAO,KAAK,CAAC,OAAO,CAAC;IACvB,CAAC;IACD,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;AACvB,CAAC;AAED,SAAS,gBAAgB,CAAC,GAAoB;IAC5C,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC;IAC/E,OAAO,GAAG,MAAM,IAAI,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;AAC/C,CAAC;AAED,SAAS,iBAAiB,CAAC,MAAgB;IACzC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,OAAO,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACnC,CAAC;IAED,OAAO,IAAI,CACT,MAAM,CAAC,aAAa,CAAC,kBAAkB,CAAC,CAAC,MAAM,CAAC,EAChD,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,0BAA0B,CAAC,SAAS,EAAE,WAAW,CAAC,aAAa,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC,EACnH,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CACrF,CAAC;AACJ,CAAC;AAED,SAAS,mBAAmB;IAC1B,MAAM,YAAY,GAAG,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;IAC9D,IAAI,YAAY,EAAE,CAAC;QACjB,OAAO,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IACtC,CAAC;IAED,OAAO,MAAM,CAAC,UAAU,CAAC;QACvB,GAAG,EAAE,KAAK,IAAI,EAAE;YACd,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,IAAI,wBAAwB,CAAC,EAAE,CAAC,CAAC,CAAC;YACtE,MAAM,SAAS,GAAG,MAAM,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC;YACzC,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC,CAAC;YAC3D,CAAC;YACD,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,KAAK,EAAE,CAAC,KAAc,EAAE,EAAE,CACxB,0BAA0B,CAAC,SAAS,EAAE,qCAAqC,gBAAgB,CAAC,KAAK,CAAC,EAAE,CAAC;KACxG,CAAC,CAAC;AACL,CAAC;AAED,SAAS,gBAAgB;IACvB,MAAM,SAAS,GAAG,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;IACzF,IAAI,SAAS,EAAE,CAAC;QACd,OAAO,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACnC,CAAC;IAED,OAAO,MAAM,CAAC,UAAU,CAAC;QACvB,GAAG,EAAE,KAAK,IAAI,EAAE;YACd,MAAM,cAAc,GAAG,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC;YAC/C,MAAM,MAAM,GAAG,OAAO,cAAc,KAAK,UAAU,CAAC,CAAC,CAAC,MAAM,cAAc,EAAE,CAAC,CAAC,CAAC,cAAc,CAAC;YAC9F,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC,CAAC;YAChE,CAAC;YACD,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,KAAK,EAAE,CAAC,KAAc,EAAE,EAAE,CACxB,0BAA0B,CAAC,SAAS,EAAE,iCAAiC,gBAAgB,CAAC,KAAK,CAAC,EAAE,CAAC;KACpG,CAAC,CAAC;AACL,CAAC;AAED,SAAS,gBAAgB,CACvB,KAAc,EACd,GAAoB,EACpB,SAAmD,EACnD,OAAgB;IAEhB,MAAM,SAAS,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;IACzC,MAAM,MAAM,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC;IACvC,MAAM,OAAO,GAAG,SAAS,CAAC,CAAC,CAAC,GAAG,SAAS,KAAK,MAAM,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;IAE/D,IAAI,SAAS,KAAK,mBAAmB,IAAI,OAAO,EAAE,CAAC;QACjD,OAAO,sBAAsB,CAAC,OAAO,EAAE,aAAa,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC;IACtE,CAAC;IAED,IACE,SAAS,KAAK,6BAA6B;QAC3C,SAAS,KAAK,sBAAsB;QACpC,SAAS,KAAK,cAAc;QAC5B,SAAS,KAAK,kBAAkB,EAChC,CAAC;QACD,OAAO,yBAAyB,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IACvD,CAAC;IAED,IAAI,SAAS,KAAK,uBAAuB,IAAI,SAAS,KAAK,cAAc,IAAI,SAAS,KAAK,uBAAuB,EAAE,CAAC;QACnH,IAAI,SAAS,KAAK,QAAQ,IAAI,SAAS,KAAK,QAAQ,EAAE,CAAC;YACrD,OAAO,0BAA0B,CAAC,OAAO,IAAI,WAAW,EAAE,OAAO,CAAC,CAAC;QACrE,CAAC;QACD,OAAO,yBAAyB,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IACvD,CAAC;IAED,IAAI,SAAS,KAAK,qBAAqB,IAAI,SAAS,KAAK,gBAAgB,IAAI,SAAS,KAAK,cAAc,EAAE,CAAC;QAC1G,OAAO,qBAAqB,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IACnD,CAAC;IAED,OAAO,qBAAqB,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;AACnD,CAAC;AAED,6EAA6E;AAC7E,0BAA0B;AAC1B,6EAA6E;AAE7E,MAAM,YAAY,GAAyB;IACzC,WAAW,EAAE,IAAI;IACjB,sBAAsB,EAAE,IAAI;IAC5B,YAAY,EAAE,KAAK;CACpB,CAAC;AAEF,SAAS,WAAW,CAAC,GAAoB,EAAE,MAAgB;IACzD,OAAO,IAAI,CACT,iBAAiB,CAAC,MAAM,CAAC,EACzB,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE;QACxB,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,MAAM,CAAC,IAAI,CAAC;QACrB,CAAC;QAED,MAAM,YAAY,GAAG,GAAG,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;QAC/D,MAAM,eAAe,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,mBAAmB,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAC7F,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAEpF,OAAO,IAAI,CACT,MAAM,CAAC,GAAG,CAAC,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC,EAChE,MAAM,CAAC,OAAO,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,EAAE;YACvC,MAAM,UAAU,GAAkB,EAAE,CAAC;YAErC,IAAI,MAAM,CAAC,SAAS,IAAI,SAAS,KAAK,MAAM,CAAC,SAAS,EAAE,CAAC;gBACvD,UAAU,CAAC,IAAI,CAAC,uBAAuB,MAAM,CAAC,SAAS,cAAc,SAAS,GAAG,CAAC,CAAC;YACrF,CAAC;YACD,IAAI,MAAM,CAAC,MAAM,IAAI,MAAM,KAAK,MAAM,CAAC,MAAM,EAAE,CAAC;gBAC9C,UAAU,CAAC,IAAI,CAAC,oBAAoB,MAAM,CAAC,MAAM,cAAc,MAAM,GAAG,CAAC,CAAC;YAC5E,CAAC;YAED,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC1B,OAAO,MAAM,CAAC,IAAI,CAChB,0BAA0B,CAAC,SAAS,EAAE,GAAG,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,YAAY,GAAG,CAAC,CAC5F,CAAC;YACJ,CAAC;YAED,OAAO,MAAM,CAAC,IAAI,CAAC;QACrB,CAAC,CAAC,CACH,CAAC;IACJ,CAAC,CAAC,CACH,CAAC;AACJ,CAAC;AAED,SAAS,KAAK,CAAC,GAAoB;IACjC,MAAM,WAAW,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;IAC1C,MAAM,UAAU,GAAG,WAAW,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,GAAG,WAAW,GAAG,CAAC;IAE/E,OAAO,IAAI,CACT,MAAM,CAAC,UAAU,CAAC;QAChB,GAAG,EAAE,KAAK,IAAI,EAAE;YACd,MAAM,OAAO,GAAqB,EAAE,CAAC;YACrC,IAAI,SAAS,GAAuB,SAAS,CAAC;YAE9C,GAAG,CAAC;gBACF,MAAM,QAAQ,GAAqC,MAAM,SAAS,CAAC,IAAI,CACrE,IAAI,0BAA0B,CAAC;oBAC7B,IAAI,EAAE,WAAW;oBACjB,SAAS,EAAE,IAAI;oBACf,cAAc,EAAE,IAAI;oBACpB,UAAU,EAAE,EAAE;oBACd,SAAS,EAAE,SAAS;iBACrB,CAAC,CACH,CAAC;gBACF,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,CAAC;gBAC7C,SAAS,GAAG,QAAQ,CAAC,SAAS,CAAC;YACjC,CAAC,QAAQ,SAAS,EAAE;YAEpB,OAAO,OAAO,CAAC;QACjB,CAAC;QACD,KAAK,EAAE,CAAC,KAAc,EAAE,EAAE,CAAC,gBAAgB,CAAC,KAAK,EAAE,GAAG,EAAE,OAAO,CAAC;KACjE,CAAC,EACF,MAAM,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE;QACxB,MAAM,EAAE,GAAe,EAAE,CAAC;QAE1B,KAAK,MAAM,KAAK,IAAI,UAAU,EAAE,CAAC;YAC/B,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;gBAChB,SAAS;YACX,CAAC;YAED,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;gBACvC,SAAS;YACX,CAAC;YAED,MAAM,YAAY,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;YACzD,MAAM,OAAO,GAAG,cAAc,CAAC,YAAY,CAAC,CAAC;YAC7C,EAAE,CAAC,OAAO,CAAC,GAAG,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC;QAClC,CAAC;QAED,OAAO,EAAE,CAAC;IACZ,CAAC,CAAC,CACH,CAAC;AACJ,CAAC;AAED,SAAS,MAAM,CAAC,GAAoB,EAAE,OAAe,EAAE,KAAa;IAClE,OAAO,MAAM,CAAC,UAAU,CAAC;QACvB,GAAG,EAAE,KAAK,IAAI,EAAE;YACd,MAAM,QAAQ,GAAG,aAAa,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;YAC7C,MAAM,SAAS,CAAC,IAAI,CAClB,IAAI,mBAAmB,CAAC;gBACtB,IAAI,EAAE,QAAQ;gBACd,KAAK,EAAE,KAAK;gBACZ,IAAI,EAAE,cAAc;gBACpB,SAAS,EAAE,IAAI;aAChB,CAAC,CACH,CAAC;QACJ,CAAC;QACD,KAAK,EAAE,CAAC,KAAc,EAAE,EAAE,CAAC,gBAAgB,CAAC,KAAK,EAAE,GAAG,EAAE,QAAQ,EAAE,OAAO,CAAC;KAC3E,CAAC,CAAC;AACL,CAAC;AAED,SAAS,SAAS,CAAC,GAAoB,EAAE,OAAe;IACtD,OAAO,MAAM,CAAC,UAAU,CAAC;QACvB,GAAG,EAAE,KAAK,IAAI,EAAE;YACd,MAAM,QAAQ,GAAG,aAAa,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;YAC7C,MAAM,SAAS,CAAC,IAAI,CAAC,IAAI,sBAAsB,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC;QACvE,CAAC;QACD,KAAK,EAAE,CAAC,KAAc,EAAE,EAAE,CAAC,gBAAgB,CAAC,KAAK,EAAE,GAAG,EAAE,QAAQ,EAAE,OAAO,CAAC;KAC3E,CAAC,CAAC;AACL,CAAC;AAED,SAAS,gBAAgB,CAAC,GAAoB,EAAE,OAAe;IAC7D,OAAO,MAAM,CAAC,UAAU,CAAC;QACvB,GAAG,EAAE,KAAK,IAAI,EAAE;YACd,MAAM,QAAQ,GAAG,aAAa,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;YAC7C,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,IAAI,mBAAmB,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC;YACnF,MAAM,IAAI,GAAG,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAC;YACtC,IAAI,IAAI,KAAK,cAAc;gBAAE,OAAO,cAAc,CAAC,aAAa,CAAC;YACjE,IAAI,IAAI,KAAK,QAAQ;gBAAE,OAAO,cAAc,CAAC,MAAM,CAAC;YACpD,OAAO,cAAc,CAAC,OAAO,CAAC;QAChC,CAAC;QACD,KAAK,EAAE,CAAC,KAAc,EAAE,EAAE,CAAC,gBAAgB,CAAC,KAAK,EAAE,GAAG,EAAE,QAAQ,EAAE,OAAO,CAAC;KAC3E,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,MAAM,cAAc,GAAa;IACtC,IAAI,EAAE,SAAS;IACf,YAAY;IACZ,WAAW;IACX,KAAK;IACL,MAAM;IACN,MAAM,EAAE,SAAS;IACjB,gBAAgB;CACjB,CAAC;AAEF,gBAAgB,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,cAAc,CAAC,CAAC"}

package/dist/providers/AwsSsmProvider.test.d.ts

@@ -0,0 +1,5 @@
+/**
+ * AwsSsmProvider Tests
+ */
+import 'aws-sdk-client-mock-vitest';
+//# sourceMappingURL=AwsSsmProvider.test.d.ts.map

package/dist/providers/AwsSsmProvider.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"AwsSsmProvider.test.d.ts","sourceRoot":"","sources":["../../src/providers/AwsSsmProvider.test.ts"],"names":[],"mappings":"AACA;;GAEG;AACH,OAAO,4BAA4B,CAAC"}

package/dist/providers/AwsSsmProvider.test.js

@@ -0,0 +1,200 @@
+/* eslint-disable fp/no-delete */
+/**
+ * AwsSsmProvider Tests
+ */
+import 'aws-sdk-client-mock-vitest';
+import { DeleteParameterCommand, GetParameterCommand, GetParametersByPathCommand, PutParameterCommand, SSMClient, } from '@aws-sdk/client-ssm';
+import { GetCallerIdentityCommand, STSClient } from '@aws-sdk/client-sts';
+import { mockClient } from 'aws-sdk-client-mock';
+import * as Effect from 'effect/Effect';
+import { afterEach, beforeEach, describe, expect, it } from 'vitest';
+import { ErrorCode } from '../errors.js';
+import { awsSsmProvider } from './AwsSsmProvider.js';
+import { EncryptionType } from './Provider.js';
+describe('AwsSsmProvider', () => {
+    const ssmMock = mockClient(SSMClient);
+    const stsMock = mockClient(STSClient);
+    const ctx = { prefix: '/config-o-tron', env: 'prod', service: 'api' };
+    const originalEnv = process.env;
+    beforeEach(() => {
+        ssmMock.reset();
+        stsMock.reset();
+        process.env = { ...originalEnv };
+        delete process.env.AWS_REGION;
+        delete process.env.AWS_DEFAULT_REGION;
+        delete process.env.AWS_ACCOUNT_ID;
+    });
+    afterEach(() => {
+        process.env = originalEnv;
+    });
+    it('should expose expected provider metadata', () => {
+        expect(awsSsmProvider.name).toBe('aws-ssm');
+        expect(awsSsmProvider.capabilities.secureWrite).toBe(true);
+        expect(awsSsmProvider.capabilities.encryptionVerification).toBe(true);
+        expect(awsSsmProvider.capabilities.transactions).toBe(false);
+    });
+    it('should fetch and normalize parameters to dot paths', async () => {
+        ssmMock.on(GetParametersByPathCommand).callsFake(async (input) => {
+            if (!input.NextToken) {
+                return {
+                    Parameters: [
+                        { Name: '/config-o-tron/prod/api/database/url', Value: 'postgres://db' },
+                        { Name: '/config-o-tron/prod/api/feature/enableBeta', Value: 'true' },
+                        { Value: 'missing-name' },
+                    ],
+                    NextToken: 'next',
+                };
+            }
+            return {
+                Parameters: [
+                    { Name: '/config-o-tron/prod/api/database/timeout', Value: '30' },
+                    { Name: '/config-o-tron/prod/other/ignore', Value: 'nope' },
+                ],
+                NextToken: undefined,
+            };
+        });
+        const result = await Effect.runPromise(awsSsmProvider.fetch(ctx));
+        expect(result).toEqual({
+            'database.url': 'postgres://db',
+            'feature.enableBeta': 'true',
+            'database.timeout': '30',
+        });
+        expect(ssmMock.commandCalls(GetParametersByPathCommand)).toHaveLength(2);
+    });
+    it('should upsert with SecureString parameters', async () => {
+        ssmMock.on(PutParameterCommand).resolves({});
+        await Effect.runPromise(awsSsmProvider.upsert(ctx, 'database.url', 'postgres://db'));
+        const upsertCall = ssmMock.commandCalls(PutParameterCommand)[0];
+        expect(upsertCall?.args[0].input).toEqual({
+            Name: '/config-o-tron/prod/api/database/url',
+            Value: 'postgres://db',
+            Type: 'SecureString',
+            Overwrite: true,
+        });
+    });
+    it('should delete parameters by full path', async () => {
+        ssmMock.on(DeleteParameterCommand).resolves({});
+        await Effect.runPromise(awsSsmProvider.delete(ctx, 'database.url'));
+        const deleteCall = ssmMock.commandCalls(DeleteParameterCommand)[0];
+        expect(deleteCall?.args[0].input).toEqual({
+            Name: '/config-o-tron/prod/api/database/url',
+        });
+    });
+    it('should verify encryption types', async () => {
+        ssmMock.on(GetParameterCommand).resolves({ Parameter: { Type: 'SecureString' } });
+        const secure = await Effect.runPromise(awsSsmProvider.verifyEncryption(ctx, 'database.url'));
+        expect(secure).toBe(EncryptionType.SECURE_STRING);
+        ssmMock.on(GetParameterCommand).resolves({ Parameter: { Type: 'String' } });
+        const plain = await Effect.runPromise(awsSsmProvider.verifyEncryption(ctx, 'database.url'));
+        expect(plain).toBe(EncryptionType.STRING);
+        ssmMock.on(GetParameterCommand).resolves({ Parameter: { Type: undefined } });
+        const unknown = await Effect.runPromise(awsSsmProvider.verifyEncryption(ctx, 'database.url'));
+        expect(unknown).toBe(EncryptionType.UNKNOWN);
+    });
+    it('should validate provider guards and detect mismatches', async () => {
+        stsMock.on(GetCallerIdentityCommand).resolves({ Account: '222222222222' });
+        process.env.AWS_REGION = 'us-east-1';
+        const exit = await Effect.runPromiseExit(awsSsmProvider.checkGuards?.(ctx, { accountId: '111111111111', region: 'us-west-2' }) ?? Effect.void);
+        expect(exit._tag).toBe('Failure');
+        if (exit._tag === 'Failure' && exit.cause._tag === 'Fail') {
+            expect(exit.cause.error.context.code).toBe(ErrorCode.PROV006);
+        }
+    });
+    it('should no-op when provider guards are empty', async () => {
+        await Effect.runPromise(awsSsmProvider.checkGuards?.(ctx, {}) ?? Effect.void);
+    });
+    it('should no-op when provider guards are undefined', async () => {
+        await Effect.runPromise(awsSsmProvider.checkGuards?.(ctx, undefined) ?? Effect.void);
+    });
+    it('should accept matching provider guards', async () => {
+        stsMock.on(GetCallerIdentityCommand).resolves({ Account: '111111111111' });
+        process.env.AWS_REGION = 'us-east-1';
+        await Effect.runPromise(awsSsmProvider.checkGuards?.(ctx, { accountId: '111111111111', region: 'us-east-1' }) ?? Effect.void);
+    });
+    it('should honor AWS_ACCOUNT_ID when present', async () => {
+        process.env.AWS_ACCOUNT_ID = ' 123456789012 ';
+        process.env.AWS_REGION = 'us-east-1';
+        await Effect.runPromise(awsSsmProvider.checkGuards?.(ctx, { accountId: '123456789012', region: 'us-east-1' }) ?? Effect.void);
+    });
+    it('should fail when AWS account ID cannot be resolved', async () => {
+        stsMock.on(GetCallerIdentityCommand).rejects(new Error('sts down'));
+        const exit = await Effect.runPromiseExit(awsSsmProvider.checkGuards?.(ctx, { accountId: '123456789012' }) ?? Effect.void);
+        expect(exit._tag).toBe('Failure');
+        if (exit._tag === 'Failure' && exit.cause._tag === 'Fail') {
+            expect(exit.cause.error.context.code).toBe(ErrorCode.PROV006);
+        }
+    });
+    it('should fail when AWS account ID is empty', async () => {
+        stsMock.on(GetCallerIdentityCommand).resolves({ Account: '   ' });
+        const exit = await Effect.runPromiseExit(awsSsmProvider.checkGuards?.(ctx, { accountId: '123456789012' }) ?? Effect.void);
+        expect(exit._tag).toBe('Failure');
+        if (exit._tag === 'Failure' && exit.cause._tag === 'Fail') {
+            expect(exit.cause.error.context.code).toBe(ErrorCode.PROV006);
+        }
+    });
+    it('should fail when AWS region cannot be resolved', async () => {
+        const exit = await Effect.runPromiseExit(awsSsmProvider.checkGuards?.(ctx, { region: 'us-east-1' }) ?? Effect.void);
+        expect(exit._tag).toBe('Failure');
+        if (exit._tag === 'Failure' && exit.cause._tag === 'Fail') {
+            expect(exit.cause.error.context.code).toBe(ErrorCode.PROV006);
+        }
+    });
+    it('should reject invalid provider guard shape', async () => {
+        const exit = await Effect.runPromiseExit(awsSsmProvider.checkGuards?.(ctx, { accountId: 123 }) ?? Effect.void);
+        expect(exit._tag).toBe('Failure');
+        if (exit._tag === 'Failure' && exit.cause._tag === 'Fail') {
+            expect(exit.cause.error.context.code).toBe(ErrorCode.PROV006);
+        }
+    });
+    it('should map AWS errors to authentication failures', async () => {
+        ssmMock.on(GetParametersByPathCommand).rejects({ name: 'UnrecognizedClientException', message: 'bad' });
+        const exit = await Effect.runPromiseExit(awsSsmProvider.fetch(ctx));
+        expect(exit._tag).toBe('Failure');
+        if (exit._tag === 'Failure' && exit.cause._tag === 'Fail') {
+            expect(exit.cause.error.context.code).toBe(ErrorCode.PROV002);
+        }
+    });
+    it('should map access denied on fetch to authentication failures', async () => {
+        ssmMock.on(GetParametersByPathCommand).rejects({ name: 'AccessDeniedException', message: 'denied' });
+        const exit = await Effect.runPromiseExit(awsSsmProvider.fetch(ctx));
+        expect(exit._tag).toBe('Failure');
+        if (exit._tag === 'Failure' && exit.cause._tag === 'Fail') {
+            expect(exit.cause.error.context.code).toBe(ErrorCode.PROV002);
+        }
+    });
+    it('should map access denied on upsert to write permission errors', async () => {
+        ssmMock.on(PutParameterCommand).rejects({ name: 'AccessDeniedException', message: 'denied' });
+        const exit = await Effect.runPromiseExit(awsSsmProvider.upsert(ctx, 'database.url', 'value'));
+        expect(exit._tag).toBe('Failure');
+        if (exit._tag === 'Failure' && exit.cause._tag === 'Fail') {
+            expect(exit.cause.error.context.code).toBe(ErrorCode.PROV005);
+        }
+    });
+    it('should map parameter not found to provider error', async () => {
+        ssmMock.on(GetParameterCommand).rejects({ name: 'ParameterNotFound', message: 'missing' });
+        const exit = await Effect.runPromiseExit(awsSsmProvider.verifyEncryption(ctx, 'database.url'));
+        expect(exit._tag).toBe('Failure');
+        if (exit._tag === 'Failure' && exit.cause._tag === 'Fail') {
+            expect(exit.cause.error.context.code).toBe(ErrorCode.PROV003);
+        }
+    });
+    it('should map throttling errors to connection failures', async () => {
+        ssmMock.on(DeleteParameterCommand).rejects({ name: 'ThrottlingException', message: 'slow down' });
+        const exit = await Effect.runPromiseExit(awsSsmProvider.delete(ctx, 'database.url'));
+        expect(exit._tag).toBe('Failure');
+        if (exit._tag === 'Failure' && exit.cause._tag === 'Fail') {
+            expect(exit.cause.error.context.code).toBe(ErrorCode.PROV001);
+        }
+    });
+    it('should map unknown errors to connection failures', async () => {
+        ssmMock.on(GetParametersByPathCommand).callsFake(async () => {
+            throw 'kaboom';
+        });
+        const exit = await Effect.runPromiseExit(awsSsmProvider.fetch(ctx));
+        expect(exit._tag).toBe('Failure');
+        if (exit._tag === 'Failure' && exit.cause._tag === 'Fail') {
+            expect(exit.cause.error.context.code).toBe(ErrorCode.PROV001);
+        }
+    });
+});
+//# sourceMappingURL=AwsSsmProvider.test.js.map

package/dist/providers/AwsSsmProvider.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"AwsSsmProvider.test.js","sourceRoot":"","sources":["../../src/providers/AwsSsmProvider.test.ts"],"names":[],"mappings":"AAAA,iCAAiC;AACjC;;GAEG;AACH,OAAO,4BAA4B,CAAC;AAEpC,OAAO,EACL,sBAAsB,EACtB,mBAAmB,EACnB,0BAA0B,EAC1B,mBAAmB,EACnB,SAAS,GACV,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,wBAAwB,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAC1E,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACjD,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAErE,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AACrD,OAAO,EAAE,cAAc,EAAwB,MAAM,eAAe,CAAC;AAErE,QAAQ,CAAC,gBAAgB,EAAE,GAAG,EAAE;IAC9B,MAAM,OAAO,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC;IACtC,MAAM,OAAO,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC;IACtC,MAAM,GAAG,GAAoB,EAAE,MAAM,EAAE,gBAAgB,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IACvF,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC;IAEhC,UAAU,CAAC,GAAG,EAAE;QACd,OAAO,CAAC,KAAK,EAAE,CAAC;QAChB,OAAO,CAAC,KAAK,EAAE,CAAC;QAChB,OAAO,CAAC,GAAG,GAAG,EAAE,GAAG,WAAW,EAAE,CAAC;QACjC,OAAO,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC;QAC9B,OAAO,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC;QACtC,OAAO,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC;IACpC,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,GAAG,EAAE;QACb,OAAO,CAAC,GAAG,GAAG,WAAW,CAAC;IAC5B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0CAA0C,EAAE,GAAG,EAAE;QAClD,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC5C,MAAM,CAAC,cAAc,CAAC,YAAY,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3D,MAAM,CAAC,cAAc,CAAC,YAAY,CAAC,sBAAsB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtE,MAAM,CAAC,cAAc,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC/D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oDAAoD,EAAE,KAAK,IAAI,EAAE;QAClE,OAAO,CAAC,EAAE,CAAC,0BAA0B,CAAC,CAAC,SAAS,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;YAC/D,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC;gBACrB,OAAO;oBACL,UAAU,EAAE;wBACV,EAAE,IAAI,EAAE,sCAAsC,EAAE,KAAK,EAAE,eAAe,EAAE;wBACxE,EAAE,IAAI,EAAE,4CAA4C,EAAE,KAAK,EAAE,MAAM,EAAE;wBACrE,EAAE,KAAK,EAAE,cAAc,EAAE;qBAC1B;oBACD,SAAS,EAAE,MAAM;iBAClB,CAAC;YACJ,CAAC;YAED,OAAO;gBACL,UAAU,EAAE;oBACV,EAAE,IAAI,EAAE,0CAA0C,EAAE,KAAK,EAAE,IAAI,EAAE;oBACjE,EAAE,IAAI,EAAE,kCAAkC,EAAE,KAAK,EAAE,MAAM,EAAE;iBAC5D;gBACD,SAAS,EAAE,SAAS;aACrB,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,UAAU,CAAC,cAAc,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;QAElE,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC;YACrB,cAAc,EAAE,eAAe;YAC/B,oBAAoB,EAAE,MAAM;YAC5B,kBAAkB,EAAE,IAAI;SACzB,CAAC,CAAC;QACH,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,0BAA0B,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IAC3E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4CAA4C,EAAE,KAAK,IAAI,EAAE;QAC1D,OAAO,CAAC,EAAE,CAAC,mBAAmB,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QAE7C,MAAM,MAAM,CAAC,UAAU,CAAC,cAAc,CAAC,MAAM,CAAC,GAAG,EAAE,cAAc,EAAE,eAAe,CAAC,CAAC,CAAC;QAErF,MAAM,UAAU,GAAG,OAAO,CAAC,YAAY,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,CAAC;QAChE,MAAM,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC;YACxC,IAAI,EAAE,sCAAsC;YAC5C,KAAK,EAAE,eAAe;YACtB,IAAI,EAAE,cAAc;YACpB,SAAS,EAAE,IAAI;SAChB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uCAAuC,EAAE,KAAK,IAAI,EAAE;QACrD,OAAO,CAAC,EAAE,CAAC,sBAAsB,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QAEhD,MAAM,MAAM,CAAC,UAAU,CAAC,cAAc,CAAC,MAAM,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC,CAAC;QAEpE,MAAM,UAAU,GAAG,OAAO,CAAC,YAAY,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAC,CAAC;QACnE,MAAM,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC;YACxC,IAAI,EAAE,sCAAsC;SAC7C,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gCAAgC,EAAE,KAAK,IAAI,EAAE;QAC9C,OAAO,CAAC,EAAE,CAAC,mBAAmB,CAAC,CAAC,QAAQ,CAAC,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,EAAE,CAAC,CAAC;QAClF,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,UAAU,CAAC,cAAc,CAAC,gBAAiB,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC,CAAC;QAC9F,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,aAAa,CAAC,CAAC;QAElD,OAAO,CAAC,EAAE,CAAC,mBAAmB,CAAC,CAAC,QAAQ,CAAC,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC;QAC5E,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,UAAU,CAAC,cAAc,CAAC,gBAAiB,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC,CAAC;QAC7F,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;QAE1C,OAAO,CAAC,EAAE,CAAC,mBAAmB,CAAC,CAAC,QAAQ,CAAC,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;QAC7E,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,UAAU,CAAC,cAAc,CAAC,gBAAiB,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC,CAAC;QAC/F,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC;IAC/C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uDAAuD,EAAE,KAAK,IAAI,EAAE;QACrE,OAAO,CAAC,EAAE,CAAC,wBAAwB,CAAC,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,cAAc,EAAE,CAAC,CAAC;QAC3E,OAAO,CAAC,GAAG,CAAC,UAAU,GAAG,WAAW,CAAC;QAErC,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,cAAc,CACtC,cAAc,CAAC,WAAW,EAAE,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,IAAI,MAAM,CAAC,IAAI,CACrG,CAAC;QAEF,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAClC,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YAC1D,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QAChE,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6CAA6C,EAAE,KAAK,IAAI,EAAE;QAC3D,MAAM,MAAM,CAAC,UAAU,CAAC,cAAc,CAAC,WAAW,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC;IAChF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iDAAiD,EAAE,KAAK,IAAI,EAAE;QAC/D,MAAM,MAAM,CAAC,UAAU,CAAC,cAAc,CAAC,WAAW,EAAE,CAAC,GAAG,EAAE,SAAS,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC;IACvF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wCAAwC,EAAE,KAAK,IAAI,EAAE;QACtD,OAAO,CAAC,EAAE,CAAC,wBAAwB,CAAC,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,cAAc,EAAE,CAAC,CAAC;QAC3E,OAAO,CAAC,GAAG,CAAC,UAAU,GAAG,WAAW,CAAC;QAErC,MAAM,MAAM,CAAC,UAAU,CACrB,cAAc,CAAC,WAAW,EAAE,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,IAAI,MAAM,CAAC,IAAI,CACrG,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0CAA0C,EAAE,KAAK,IAAI,EAAE;QACxD,OAAO,CAAC,GAAG,CAAC,cAAc,GAAG,gBAAgB,CAAC;QAC9C,OAAO,CAAC,GAAG,CAAC,UAAU,GAAG,WAAW,CAAC;QAErC,MAAM,MAAM,CAAC,UAAU,CACrB,cAAc,CAAC,WAAW,EAAE,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,IAAI,MAAM,CAAC,IAAI,CACrG,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oDAAoD,EAAE,KAAK,IAAI,EAAE;QAClE,OAAO,CAAC,EAAE,CAAC,wBAAwB,CAAC,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC;QAEpE,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,cAAc,CACtC,cAAc,CAAC,WAAW,EAAE,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,cAAc,EAAE,CAAC,IAAI,MAAM,CAAC,IAAI,CAChF,CAAC;QAEF,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAClC,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YAC1D,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QAChE,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0CAA0C,EAAE,KAAK,IAAI,EAAE;QACxD,OAAO,CAAC,EAAE,CAAC,wBAAwB,CAAC,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;QAElE,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,cAAc,CACtC,cAAc,CAAC,WAAW,EAAE,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,cAAc,EAAE,CAAC,IAAI,MAAM,CAAC,IAAI,CAChF,CAAC;QAEF,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAClC,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YAC1D,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QAChE,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gDAAgD,EAAE,KAAK,IAAI,EAAE;QAC9D,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,cAAc,CAAC,cAAc,CAAC,WAAW,EAAE,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC;QAEpH,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAClC,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YAC1D,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QAChE,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4CAA4C,EAAE,KAAK,IAAI,EAAE;QAC1D,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,cAAc,CAAC,cAAc,CAAC,WAAW,EAAE,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC;QAE/G,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAClC,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YAC1D,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QAChE,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kDAAkD,EAAE,KAAK,IAAI,EAAE;QAChE,OAAO,CAAC,EAAE,CAAC,0BAA0B,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,6BAA6B,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;QAExG,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,cAAc,CAAC,cAAc,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;QAEpE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAClC,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YAC1D,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QAChE,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8DAA8D,EAAE,KAAK,IAAI,EAAE;QAC5E,OAAO,CAAC,EAAE,CAAC,0BAA0B,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,uBAAuB,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC;QAErG,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,cAAc,CAAC,cAAc,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;QAEpE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAClC,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YAC1D,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QAChE,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+DAA+D,EAAE,KAAK,IAAI,EAAE;QAC7E,OAAO,CAAC,EAAE,CAAC,mBAAmB,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,uBAAuB,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC;QAE9F,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,cAAc,CAAC,cAAc,CAAC,MAAM,CAAC,GAAG,EAAE,cAAc,EAAE,OAAO,CAAC,CAAC,CAAC;QAE9F,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAClC,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YAC1D,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QAChE,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kDAAkD,EAAE,KAAK,IAAI,EAAE;QAChE,OAAO,CAAC,EAAE,CAAC,mBAAmB,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,mBAAmB,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC;QAE3F,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,cAAc,CAAC,cAAc,CAAC,gBAAiB,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC,CAAC;QAEhG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAClC,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YAC1D,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QAChE,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qDAAqD,EAAE,KAAK,IAAI,EAAE;QACnE,OAAO,CAAC,EAAE,CAAC,sBAAsB,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,qBAAqB,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC,CAAC;QAElG,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,cAAc,CAAC,cAAc,CAAC,MAAM,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC,CAAC;QAErF,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAClC,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YAC1D,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QAChE,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kDAAkD,EAAE,KAAK,IAAI,EAAE;QAChE,OAAO,CAAC,EAAE,CAAC,0BAA0B,CAAC,CAAC,SAAS,CAAC,KAAK,IAAI,EAAE;YAC1D,MAAM,QAAQ,CAAC;QACjB,CAAC,CAAC,CAAC;QAEH,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,cAAc,CAAC,cAAc,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;QAEpE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAClC,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YAC1D,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QAChE,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/providers/MockProvider.d.ts

@@ -0,0 +1,21 @@
+import { type Provider, type ProviderKV } from './Provider.js';
+/**
+ * Storage key format: "prefix/env/service"
+ */
+type StorageKey = string;
+/**
+ * In-memory storage
+ */
+type MockStorage = Map<StorageKey, ProviderKV>;
+/**
+ * Create a mock provider with optional initial data
+ */
+export declare function createMockProvider(initialData?: Record<string, ProviderKV>): Provider & {
+    readonly storage: MockStorage;
+};
+/**
+ * Default mock provider instance (empty storage)
+ */
+export declare const mockProvider: Provider;
+export {};
+//# sourceMappingURL=MockProvider.d.ts.map

package/dist/providers/MockProvider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"MockProvider.d.ts","sourceRoot":"","sources":["../../src/providers/MockProvider.ts"],"names":[],"mappings":"AASA,OAAO,EAGL,KAAK,QAAQ,EAGb,KAAK,UAAU,EAChB,MAAM,eAAe,CAAC;AAMvB;;GAEG;AACH,KAAK,UAAU,GAAG,MAAM,CAAC;AAEzB;;GAEG;AACH,KAAK,WAAW,GAAG,GAAG,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;AAoD/C;;GAEG;AACH,wBAAgB,kBAAkB,CAChC,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,GACvC,QAAQ,GAAG;IAAE,QAAQ,CAAC,OAAO,EAAE,WAAW,CAAA;CAAE,CA4F9C;AAED;;GAEG;AACH,eAAO,MAAM,YAAY,EAAE,QAA+B,CAAC"}

package/dist/providers/MockProvider.js

@@ -0,0 +1,118 @@
+/**
+ * Mock Provider
+ *
+ * In-memory provider for testing and development
+ */
+import * as Effect from 'effect/Effect';
+import { pipe } from 'effect/Function';
+import { parameterNotFoundError, providerGuardMismatchError } from '../errors.js';
+import { EncryptionType, } from './Provider.js';
+function isRecord(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value);
+}
+function parseMockGuards(guards) {
+    if (guards === undefined) {
+        return Effect.succeed(undefined);
+    }
+    if (!isRecord(guards)) {
+        return Effect.fail(providerGuardMismatchError('mock', 'Invalid providerGuards config for mock provider'));
+    }
+    const prefixRaw = guards.prefix;
+    const serviceRaw = guards.service;
+    const envRaw = guards.env;
+    if (prefixRaw !== undefined && typeof prefixRaw !== 'string') {
+        return Effect.fail(providerGuardMismatchError('mock', 'providerGuards.prefix must be a string'));
+    }
+    if (serviceRaw !== undefined && typeof serviceRaw !== 'string') {
+        return Effect.fail(providerGuardMismatchError('mock', 'providerGuards.service must be a string'));
+    }
+    if (envRaw !== undefined && typeof envRaw !== 'string') {
+        return Effect.fail(providerGuardMismatchError('mock', 'providerGuards.env must be a string'));
+    }
+    const parsed = {
+        ...(typeof prefixRaw === 'string' ? { prefix: prefixRaw } : {}),
+        ...(typeof serviceRaw === 'string' ? { service: serviceRaw } : {}),
+        ...(typeof envRaw === 'string' ? { env: envRaw } : {}),
+    };
+    if (Object.keys(parsed).length === 0) {
+        return Effect.succeed(undefined);
+    }
+    return Effect.succeed(parsed);
+}
+// --------------------------------------------------------------------------
+// Factory
+// --------------------------------------------------------------------------
+/**
+ * Create a mock provider with optional initial data
+ */
+export function createMockProvider(initialData) {
+    const storage = new Map();
+    // Initialize with provided data
+    if (initialData) {
+        for (const [key, kv] of Object.entries(initialData)) {
+            storage.set(key, { ...kv });
+        }
+    }
+    const getStorageKey = (ctx) => `${ctx.prefix}/${ctx.env}/${ctx.service}`;
+    const capabilities = {
+        secureWrite: true,
+        encryptionVerification: true,
+        transactions: false,
+    };
+    const fetch = (ctx) => Effect.sync(() => {
+        const key = getStorageKey(ctx);
+        return storage.get(key) ?? {};
+    });
+    const upsert = (ctx, keyPath, value) => Effect.sync(() => {
+        const key = getStorageKey(ctx);
+        const existing = storage.get(key) ?? {};
+        storage.set(key, { ...existing, [keyPath]: value });
+    });
+    const deleteKey = (ctx, keyPath) => pipe(Effect.sync(() => {
+        const key = getStorageKey(ctx);
+        const existing = storage.get(key);
+        return { key, existing };
+    }), Effect.flatMap(({ existing, key }) => {
+        if (!existing || !(keyPath in existing)) {
+            return Effect.fail(parameterNotFoundError(keyPath, `${key}/${keyPath}`));
+        }
+        const { [keyPath]: _, ...rest } = existing;
+        storage.set(key, rest);
+        return Effect.void;
+    }));
+    const verifyEncryption = (_ctx, _keyPath) => Effect.succeed(EncryptionType.SECURE_STRING);
+    const checkGuards = (ctx, guards) => pipe(parseMockGuards(guards), Effect.flatMap((parsed) => {
+        if (!parsed) {
+            return Effect.void;
+        }
+        const mismatches = [];
+        if (parsed.prefix && parsed.prefix !== ctx.prefix) {
+            mismatches.push(`prefix expected '${parsed.prefix}' but got '${ctx.prefix}'`);
+        }
+        if (parsed.service && parsed.service !== ctx.service) {
+            mismatches.push(`service expected '${parsed.service}' but got '${ctx.service}'`);
+        }
+        if (parsed.env && parsed.env !== ctx.env) {
+            mismatches.push(`env expected '${parsed.env}' but got '${ctx.env}'`);
+        }
+        if (mismatches.length > 0) {
+            return Effect.fail(providerGuardMismatchError('mock', mismatches.join('; ')));
+        }
+        return Effect.void;
+    }));
+    return {
+        name: 'mock',
+        capabilities,
+        fetch,
+        upsert,
+        delete: deleteKey,
+        verifyEncryption,
+        checkGuards,
+        storage,
+    };
+}
+/**
+ * Default mock provider instance (empty storage)
+ */
+export const mockProvider = createMockProvider();
+//# sourceMappingURL=MockProvider.js.map

package/dist/providers/MockProvider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"MockProvider.js","sourceRoot":"","sources":["../../src/providers/MockProvider.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,EAAE,IAAI,EAAE,MAAM,iBAAiB,CAAC;AAEvC,OAAO,EAAE,sBAAsB,EAAsB,0BAA0B,EAAE,MAAM,cAAc,CAAC;AACtG,OAAO,EACL,cAAc,GAMf,MAAM,eAAe,CAAC;AAsBvB,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,eAAe,CAAC,MAAgB;IACvC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,OAAO,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACnC,CAAC;IAED,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QACtB,OAAO,MAAM,CAAC,IAAI,CAAC,0BAA0B,CAAC,MAAM,EAAE,iDAAiD,CAAC,CAAC,CAAC;IAC5G,CAAC;IAED,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC;IAChC,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO,CAAC;IAClC,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC;IAE1B,IAAI,SAAS,KAAK,SAAS,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;QAC7D,OAAO,MAAM,CAAC,IAAI,CAAC,0BAA0B,CAAC,MAAM,EAAE,wCAAwC,CAAC,CAAC,CAAC;IACnG,CAAC;IACD,IAAI,UAAU,KAAK,SAAS,IAAI,OAAO,UAAU,KAAK,QAAQ,EAAE,CAAC;QAC/D,OAAO,MAAM,CAAC,IAAI,CAAC,0BAA0B,CAAC,MAAM,EAAE,yCAAyC,CAAC,CAAC,CAAC;IACpG,CAAC;IACD,IAAI,MAAM,KAAK,SAAS,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;QACvD,OAAO,MAAM,CAAC,IAAI,CAAC,0BAA0B,CAAC,MAAM,EAAE,qCAAqC,CAAC,CAAC,CAAC;IAChG,CAAC;IAED,MAAM,MAAM,GAAuB;QACjC,GAAG,CAAC,OAAO,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/D,GAAG,CAAC,OAAO,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAClE,GAAG,CAAC,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACvD,CAAC;IAEF,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACrC,OAAO,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACnC,CAAC;IAED,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;AAChC,CAAC;AAED,6EAA6E;AAC7E,UAAU;AACV,6EAA6E;AAE7E;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAChC,WAAwC;IAExC,MAAM,OAAO,GAAgB,IAAI,GAAG,EAAE,CAAC;IAEvC,gCAAgC;IAChC,IAAI,WAAW,EAAE,CAAC;QAChB,KAAK,MAAM,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;YACpD,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;QAC9B,CAAC;IACH,CAAC;IAED,MAAM,aAAa,GAAG,CAAC,GAAoB,EAAc,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;IAEtG,MAAM,YAAY,GAAyB;QACzC,WAAW,EAAE,IAAI;QACjB,sBAAsB,EAAE,IAAI;QAC5B,YAAY,EAAE,KAAK;KACpB,CAAC;IAEF,MAAM,KAAK,GAAG,CAAC,GAAoB,EAA4C,EAAE,CAC/E,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE;QACf,MAAM,GAAG,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;QAC/B,OAAO,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;IAChC,CAAC,CAAC,CAAC;IAEL,MAAM,MAAM,GAAG,CAAC,GAAoB,EAAE,OAAe,EAAE,KAAa,EAAsC,EAAE,CAC1G,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE;QACf,MAAM,GAAG,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;QAC/B,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;QACxC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,GAAG,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;IACtD,CAAC,CAAC,CAAC;IAEL,MAAM,SAAS,GAAG,CAAC,GAAoB,EAAE,OAAe,EAAsC,EAAE,CAC9F,IAAI,CACF,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE;QACf,MAAM,GAAG,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;QAC/B,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAClC,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC;IAC3B,CAAC,CAAC,EACF,MAAM,CAAC,OAAO,CAAC,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE,EAAE,EAAE;QACnC,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC,OAAO,IAAI,QAAQ,CAAC,EAAE,CAAC;YACxC,OAAO,MAAM,CAAC,IAAI,CAAC,sBAAsB,CAAC,OAAO,EAAE,GAAG,GAAG,IAAI,OAAO,EAAE,CAAC,CAAC,CAAC;QAC3E,CAAC;QAED,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,GAAG,IAAI,EAAE,GAAG,QAAQ,CAAC;QAC3C,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QACvB,OAAO,MAAM,CAAC,IAAI,CAAC;IACrB,CAAC,CAAC,CACH,CAAC;IAEJ,MAAM,gBAAgB,GAAG,CACvB,IAAqB,EACrB,QAAgB,EACmC,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,aAAa,CAAC,CAAC;IAErG,MAAM,WAAW,GAAG,CAAC,GAAoB,EAAE,MAAgB,EAAsC,EAAE,CACjG,IAAI,CACF,eAAe,CAAC,MAAM,CAAC,EACvB,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE;QACxB,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,MAAM,CAAC,IAAI,CAAC;QACrB,CAAC;QAED,MAAM,UAAU,GAAkB,EAAE,CAAC;QAErC,IAAI,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,KAAK,GAAG,CAAC,MAAM,EAAE,CAAC;YAClD,UAAU,CAAC,IAAI,CAAC,oBAAoB,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC;QAChF,CAAC;QACD,IAAI,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,OAAO,KAAK,GAAG,CAAC,OAAO,EAAE,CAAC;YACrD,UAAU,CAAC,IAAI,CAAC,qBAAqB,MAAM,CAAC,OAAO,cAAc,GAAG,CAAC,OAAO,GAAG,CAAC,CAAC;QACnF,CAAC;QACD,IAAI,MAAM,CAAC,GAAG,IAAI,MAAM,CAAC,GAAG,KAAK,GAAG,CAAC,GAAG,EAAE,CAAC;YACzC,UAAU,CAAC,IAAI,CAAC,iBAAiB,MAAM,CAAC,GAAG,cAAc,GAAG,CAAC,GAAG,GAAG,CAAC,CAAC;QACvE,CAAC;QAED,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC1B,OAAO,MAAM,CAAC,IAAI,CAAC,0BAA0B,CAAC,MAAM,EAAE,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAChF,CAAC;QAED,OAAO,MAAM,CAAC,IAAI,CAAC;IACrB,CAAC,CAAC,CACH,CAAC;IAEJ,OAAO;QACL,IAAI,EAAE,MAAM;QACZ,YAAY;QACZ,KAAK;QACL,MAAM;QACN,MAAM,EAAE,SAAS;QACjB,gBAAgB;QAChB,WAAW;QACX,OAAO;KACR,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,YAAY,GAAa,kBAAkB,EAAE,CAAC"}

package/dist/providers/MockProvider.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=MockProvider.test.d.ts.map

package/dist/providers/MockProvider.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"MockProvider.test.d.ts","sourceRoot":"","sources":["../../src/providers/MockProvider.test.ts"],"names":[],"mappings":""}