@koralabs/kora-labs-common 6.4.18 → 6.4.19

package/aws/index.d.ts

@@ -0,0 +1,2 @@
+export { decryptKmsCiphertext, hydrateKmsEnvironment } from './kmsEnvironment';
+export type { KmsClientLike } from './kmsEnvironment';

package/aws/index.js

@@ -0,0 +1,6 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.hydrateKmsEnvironment = exports.decryptKmsCiphertext = void 0;
+var kmsEnvironment_1 = require("./kmsEnvironment");
+Object.defineProperty(exports, "decryptKmsCiphertext", { enumerable: true, get: function () { return kmsEnvironment_1.decryptKmsCiphertext; } });
+Object.defineProperty(exports, "hydrateKmsEnvironment", { enumerable: true, get: function () { return kmsEnvironment_1.hydrateKmsEnvironment; } });

package/aws/kmsEnvironment.d.ts

@@ -0,0 +1,9 @@
+/// <reference types="node" />
+import { KMSClient } from '@aws-sdk/client-kms';
+export type KmsClientLike = Pick<KMSClient, 'send'>;
+export declare function decryptKmsCiphertext(ciphertext: string, client?: KmsClientLike): Promise<string>;
+export declare function hydrateKmsEnvironment({ env, client, keys }?: {
+    env?: NodeJS.ProcessEnv;
+    client?: KmsClientLike;
+    keys?: string[];
+}): Promise<string[]>;

package/aws/kmsEnvironment.js

@@ -0,0 +1,33 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.hydrateKmsEnvironment = exports.decryptKmsCiphertext = void 0;
+const client_kms_1 = require("@aws-sdk/client-kms");
+async function decryptKmsCiphertext(ciphertext, client = new client_kms_1.KMSClient({})) {
+    const response = await client.send(new client_kms_1.DecryptCommand({
+        CiphertextBlob: Buffer.from(ciphertext, 'base64')
+    }));
+    if (!response.Plaintext) {
+        throw new Error('KMS decrypt returned empty plaintext');
+    }
+    return Buffer.from(response.Plaintext).toString('utf8');
+}
+exports.decryptKmsCiphertext = decryptKmsCiphertext;
+async function hydrateKmsEnvironment({ env = process.env, client = new client_kms_1.KMSClient({}), keys } = {}) {
+    const candidateKeys = (keys !== null && keys !== void 0 ? keys : Object.keys(env)
+        .filter((key) => key.endsWith('_ENC'))
+        .map((key) => key.slice(0, -4))).sort();
+    const hydratedKeys = [];
+    for (const key of candidateKeys) {
+        if (env[key]) {
+            continue;
+        }
+        const ciphertext = env[`${key}_ENC`];
+        if (!ciphertext) {
+            continue;
+        }
+        env[key] = await decryptKmsCiphertext(ciphertext, client);
+        hydratedKeys.push(key);
+    }
+    return hydratedKeys;
+}
+exports.hydrateKmsEnvironment = hydrateKmsEnvironment;

package/index.d.ts

@@ -1,4 +1,5 @@
 export * from './constants';
+export * from './aws';
 export { ComputeEnvironment, Environment } from './environment';
 export * from './errors';
 export * from './handles';

package/index.js

@@ -16,6 +16,7 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.ProtectedWords = exports.Logger = exports.LogCategory = exports.Environment = exports.ComputeEnvironment = void 0;
 __exportStar(require("./constants"), exports);
+__exportStar(require("./aws"), exports);
 var environment_1 = require("./environment");
 Object.defineProperty(exports, "ComputeEnvironment", { enumerable: true, get: function () { return environment_1.ComputeEnvironment; } });
 Object.defineProperty(exports, "Environment", { enumerable: true, get: function () { return environment_1.Environment; } });

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@koralabs/kora-labs-common",
-    "version": "6.4.18",
+    "version": "6.4.19",
     "description": "Kora Labs Common Utilities",
     "main": "index.js",
     "types": "index.d.ts",
@@ -39,6 +39,7 @@
         "typescript": "^4.7.3"
     },
     "dependencies": {
+        "@aws-sdk/client-kms": "^3.1003.0",
         "bech32": "^2.0.0",
         "blakejs": "^1.2.1",
         "boolean": "^3.2.0",