@koralabs/kora-labs-common 6.4.19 → 6.4.21

package/aws/index.d.ts

@@ -1,2 +1,2 @@
-export { decryptKmsCiphertext, hydrateKmsEnvironment } from './kmsEnvironment';
+export { decryptKmsCiphertext, hydrateKmsEnvironment, loadAfterHydratingKmsEnvironment } from './kmsEnvironment';
 export type { KmsClientLike } from './kmsEnvironment';

package/aws/index.js

@@ -1,6 +1,7 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.hydrateKmsEnvironment = exports.decryptKmsCiphertext = void 0;
+exports.loadAfterHydratingKmsEnvironment = exports.hydrateKmsEnvironment = exports.decryptKmsCiphertext = void 0;
 var kmsEnvironment_1 = require("./kmsEnvironment");
 Object.defineProperty(exports, "decryptKmsCiphertext", { enumerable: true, get: function () { return kmsEnvironment_1.decryptKmsCiphertext; } });
 Object.defineProperty(exports, "hydrateKmsEnvironment", { enumerable: true, get: function () { return kmsEnvironment_1.hydrateKmsEnvironment; } });
+Object.defineProperty(exports, "loadAfterHydratingKmsEnvironment", { enumerable: true, get: function () { return kmsEnvironment_1.loadAfterHydratingKmsEnvironment; } });

package/aws/kmsEnvironment.d.ts

@@ -7,3 +7,8 @@ export declare function hydrateKmsEnvironment({ env, client, keys }?: {
     client?: KmsClientLike;
     keys?: string[];
 }): Promise<string[]>;
+export declare function loadAfterHydratingKmsEnvironment<T>(load: () => Promise<T>, options?: {
+    env?: NodeJS.ProcessEnv;
+    client?: KmsClientLike;
+    keys?: string[];
+}): Promise<T>;

package/aws/kmsEnvironment.js

@@ -1,7 +1,8 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.hydrateKmsEnvironment = exports.decryptKmsCiphertext = void 0;
+exports.loadAfterHydratingKmsEnvironment = exports.hydrateKmsEnvironment = exports.decryptKmsCiphertext = void 0;
 const client_kms_1 = require("@aws-sdk/client-kms");
+const KMS_ENV_BUNDLE_KEY = 'KMS_ENV_BUNDLE_ENC';
 async function decryptKmsCiphertext(ciphertext, client = new client_kms_1.KMSClient({})) {
     const response = await client.send(new client_kms_1.DecryptCommand({
         CiphertextBlob: Buffer.from(ciphertext, 'base64')
@@ -13,10 +14,35 @@ async function decryptKmsCiphertext(ciphertext, client = new client_kms_1.KMSCli
 }
 exports.decryptKmsCiphertext = decryptKmsCiphertext;
 async function hydrateKmsEnvironment({ env = process.env, client = new client_kms_1.KMSClient({}), keys } = {}) {
+    const hydratedKeys = [];
+    const bundleCiphertext = env[KMS_ENV_BUNDLE_KEY];
+    if (bundleCiphertext) {
+        const plaintext = await decryptKmsCiphertext(bundleCiphertext, client);
+        let bundle;
+        try {
+            bundle = JSON.parse(plaintext);
+        }
+        catch (_a) {
+            throw new Error('KMS env bundle plaintext must be a JSON object');
+        }
+        if (!bundle || typeof bundle !== 'object' || Array.isArray(bundle)) {
+            throw new Error('KMS env bundle plaintext must be a JSON object');
+        }
+        for (const key of Object.keys(bundle).sort()) {
+            if (env[key]) {
+                continue;
+            }
+            const value = bundle[key];
+            if (typeof value !== 'string') {
+                throw new Error(`KMS env bundle value for ${key} must be a string`);
+            }
+            env[key] = value;
+            hydratedKeys.push(key);
+        }
+    }
     const candidateKeys = (keys !== null && keys !== void 0 ? keys : Object.keys(env)
-        .filter((key) => key.endsWith('_ENC'))
+        .filter((key) => key.endsWith('_ENC') && key !== KMS_ENV_BUNDLE_KEY)
         .map((key) => key.slice(0, -4))).sort();
-    const hydratedKeys = [];
     for (const key of candidateKeys) {
         if (env[key]) {
             continue;
@@ -31,3 +57,8 @@ async function hydrateKmsEnvironment({ env = process.env, client = new client_km
     return hydratedKeys;
 }
 exports.hydrateKmsEnvironment = hydrateKmsEnvironment;
+async function loadAfterHydratingKmsEnvironment(load, options) {
+    await hydrateKmsEnvironment(options);
+    return load();
+}
+exports.loadAfterHydratingKmsEnvironment = loadAfterHydratingKmsEnvironment;

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@koralabs/kora-labs-common",
-    "version": "6.4.19",
+    "version": "6.4.21",
     "description": "Kora Labs Common Utilities",
     "main": "index.js",
     "types": "index.d.ts",