@liflig/load-secrets 1.0.3 → 1.0.5

package/lib/cli/reporter.d.ts

@@ -0,0 +1,21 @@
+import chalk from "chalk";
+export declare function createReporter(argv: Record<string, unknown>): CLIReporter;
+export declare class CLIReporter {
+    constructor(opts?: {
+        nonInteractive?: boolean;
+        verbose?: boolean;
+    });
+    stdout: NodeJS.WriteStream & {
+        fd: 1;
+    };
+    stderr: NodeJS.WriteStream & {
+        fd: 2;
+    };
+    nonInteractive: boolean;
+    isVerbose: boolean;
+    format: typeof chalk;
+    error(msg: string): void;
+    log(msg: string): void;
+    warn(msg: string): void;
+    info(msg: string): void;
+}

package/lib/cli/reporter.js

@@ -0,0 +1,41 @@
+import chalk from "chalk";
+import readline from "readline";
+const CLEAR_WHOLE_LINE = 0;
+export function createReporter(argv) {
+    return new CLIReporter({
+        verbose: !!argv.verbose,
+        nonInteractive: !!argv.nonInteractive,
+    });
+}
+function clearLine(stdout) {
+    readline.clearLine(stdout, CLEAR_WHOLE_LINE);
+    readline.cursorTo(stdout, 0);
+}
+export class CLIReporter {
+    constructor(opts = {}) {
+        this.nonInteractive = !!opts.nonInteractive;
+        this.isVerbose = !!opts.verbose;
+    }
+    stdout = process.stdout;
+    stderr = process.stderr;
+    nonInteractive;
+    isVerbose;
+    format = chalk;
+    error(msg) {
+        clearLine(this.stderr);
+        this.stderr.write(`${this.format.red("error")} ${msg}\n`);
+    }
+    log(msg) {
+        clearLine(this.stdout);
+        this.stdout.write(`${msg}\n`);
+    }
+    warn(msg) {
+        clearLine(this.stderr);
+        this.stderr.write(`${this.format.yellow("warning")} ${msg}\n`);
+    }
+    info(msg) {
+        clearLine(this.stdout);
+        this.stdout.write(`${this.format.blue("info")} ${msg}\n`);
+    }
+}
+//# sourceMappingURL=reporter.js.map

package/lib/cli/reporter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"reporter.js","sourceRoot":"","sources":["../../src/cli/reporter.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,QAAQ,MAAM,UAAU,CAAC;AAEhC,MAAM,gBAAgB,GAAG,CAAC,CAAC;AAE3B,MAAM,UAAU,cAAc,CAAC,IAA6B;IAC1D,OAAO,IAAI,WAAW,CAAC;QACrB,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,OAAO;QACvB,cAAc,EAAE,CAAC,CAAC,IAAI,CAAC,cAAc;KACtC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,SAAS,CAAC,MAA0B;IAC3C,QAAQ,CAAC,SAAS,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;IAC7C,QAAQ,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;AAC/B,CAAC;AAED,MAAM,OAAO,WAAW;IACtB,YACE,OAGI,EAAE;QAEN,IAAI,CAAC,cAAc,GAAG,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC;QAC5C,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC;IAClC,CAAC;IAEM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IACxB,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IACxB,cAAc,CAAU;IACxB,SAAS,CAAU;IACnB,MAAM,GAAiB,KAAK,CAAC;IAE7B,KAAK,CAAC,GAAW;QACtB,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACvB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC;IAC5D,CAAC;IAEM,GAAG,CAAC,GAAW;QACpB,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACvB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC;IAChC,CAAC;IAEM,IAAI,CAAC,GAAW;QACrB,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACvB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC;IACjE,CAAC;IAEM,IAAI,CAAC,GAAW;QACrB,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACvB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC;IAC5D,CAAC;CACF"}

package/lib/index.d.ts

@@ -0,0 +1 @@
+export * as loadSecrets from "./load-secrets";

package/lib/index.js

@@ -0,0 +1,2 @@
+export * as loadSecrets from "./load-secrets";
+//# sourceMappingURL=index.js.map

package/lib/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,WAAW,MAAM,gBAAgB,CAAC"}

package/lib/load-secrets/index.d.ts

@@ -0,0 +1,2 @@
+export { loadSecretsCli } from "./load-secrets";
+export type { JsonSecret, Secret, SecretGroup } from "./types";

package/lib/load-secrets/index.js

@@ -0,0 +1,2 @@
+export { loadSecretsCli } from "./load-secrets";
+//# sourceMappingURL=index.js.map

package/lib/load-secrets/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/load-secrets/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC"}

package/lib/load-secrets/load-secrets.d.ts

@@ -0,0 +1,7 @@
+import type { SecretGroup } from "./types";
+/**
+ * Load secrets interactively into Secrets Manager.
+ */
+export declare function loadSecretsCli(props: {
+    secretGroups: SecretGroup[];
+}): void;

package/lib/load-secrets/load-secrets.js

@@ -0,0 +1,314 @@
+import { CreateSecretCommand, DescribeSecretCommand, GetSecretValueCommand, PutSecretValueCommand, RemoveRegionsFromReplicationCommand, ReplicateSecretToRegionsCommand, ResourceNotFoundException, RestoreSecretCommand, SecretsManagerClient, TagResourceCommand, UntagResourceCommand, } from "@aws-sdk/client-secrets-manager";
+import { GetCallerIdentityCommand, STSClient } from "@aws-sdk/client-sts";
+import { read } from "read";
+import { createReporter } from "../cli/reporter";
+class LoadSecrets {
+    smClientForRegions = {};
+    stsClient;
+    reporter;
+    silent;
+    constructor(props) {
+        this.stsClient = new STSClient({
+            region: "eu-west-1",
+        });
+        this.reporter = props.reporter;
+        this.silent = props.silent;
+    }
+    getSmClient(region) {
+        if (!this.smClientForRegions[region]) {
+            this.smClientForRegions[region] = new SecretsManagerClient({
+                region,
+            });
+        }
+        return this.smClientForRegions[region];
+    }
+    async getInput(options) {
+        return read(options);
+    }
+    async getSecretDetails(client, secretId) {
+        try {
+            return await client.send(new DescribeSecretCommand({ SecretId: secretId }));
+        }
+        catch (e) {
+            if (e instanceof ResourceNotFoundException) {
+                return null;
+            }
+            throw e;
+        }
+    }
+    async handleStringUpdate() {
+        return await this.getInput({
+            prompt: "Enter value (Ctrl+C to abort): ",
+            silent: this.silent,
+        });
+    }
+    async handleJsonUpdate(secret) {
+        this.reporter.log("The secret is of type JSON with these expected fields:");
+        for (const field of secret.fields) {
+            const key = typeof field === "string" ? field : field.key;
+            const desc = typeof field === "string"
+                ? ""
+                : field.description
+                    ? ` (${field.description})`
+                    : "";
+            this.reporter.log(`  - ${key}${desc}`);
+        }
+        this.reporter.log("");
+        // TODO: Ability to specify full json value as one line.
+        const collectedValues = {};
+        for (const field of secret.fields) {
+            const key = typeof field === "string" ? field : field.key;
+            this.reporter.log(`Field: ${this.reporter.format.greenBright(key)}`);
+            if (typeof field !== "string" && field.example != null) {
+                this.reporter.log(`Example: ${this.reporter.format.magentaBright(field.example)}`);
+            }
+            collectedValues[key] = await this.getInput({
+                prompt: "Enter value (Ctrl+C to abort): ",
+                silent: this.silent,
+            });
+            this.reporter.log("");
+        }
+        return JSON.stringify(collectedValues, undefined, "  ");
+    }
+    getFullName(secretGroup, secret) {
+        return `${secretGroup.namePrefix}${secret.name}`;
+    }
+    async syncTags(client, secret, tags) {
+        const keysToRemove = secret
+            .Tags.filter((existingTag) => !tags.some((it) => it.Key === existingTag.Key))
+            .map((it) => it.Key);
+        if (keysToRemove.length > 0) {
+            this.reporter.log(`Removing obsolete tags: ${keysToRemove.join(", ")}`);
+            await client.send(new UntagResourceCommand({
+                SecretId: secret.ARN,
+                TagKeys: keysToRemove,
+            }));
+        }
+        const tagsToUpdate = tags.filter((expectedTag) => {
+            const existing = secret.Tags.find((it) => it.Key === expectedTag.Key);
+            return existing == null || existing.Value != expectedTag.Value;
+        });
+        if (tagsToUpdate.length > 0) {
+            this.reporter.log(`Storing tags: ${tagsToUpdate.map((it) => it.Key).join(", ")}`);
+            await client.send(new TagResourceCommand({
+                SecretId: secret.ARN,
+                Tags: tagsToUpdate,
+            }));
+        }
+    }
+    async getSecretValue(client, secretId) {
+        const result = await client.send(new GetSecretValueCommand({
+            SecretId: secretId,
+        }));
+        if (result.SecretString == null) {
+            throw new Error("Missing SecretString (is it a binary?)");
+        }
+        return result.SecretString;
+    }
+    async handleUpdate(secretGroup, secret) {
+        const client = this.getSmClient(secretGroup.region);
+        const fullName = this.getFullName(secretGroup, secret);
+        const describeSecret = await this.getSecretDetails(client, fullName);
+        this.reporter.log(`Secret: ${this.reporter.format.greenBright(fullName)}`);
+        if (describeSecret == null) {
+            this.reporter.log("The secret does not already exist and will be created");
+        }
+        else {
+            this.reporter.log("Current value:");
+            this.reporter.log(this.reporter.format.yellowBright((await this.getSecretValue(client, fullName)).replace(/^/gm, "  ")));
+        }
+        this.reporter.log("");
+        let secretValue;
+        if (secret.type === "json") {
+            try {
+                secretValue = await this.handleJsonUpdate(secret);
+            }
+            catch (e) {
+                if (e instanceof Error && e.message === "canceled") {
+                    this.reporter.log("Aborted");
+                    return;
+                }
+                throw e;
+            }
+        }
+        else if (secret.type === "string") {
+            secretValue = await this.handleStringUpdate();
+        }
+        else {
+            throw new Error(`Unsupported type`);
+        }
+        this.reporter.log("Storing secret value:");
+        this.reporter.log(this.reporter.format.yellowBright(secretValue.replace(/^/gm, "  ")));
+        const tags = [
+            {
+                Key: "Source",
+                Value: "load-secrets script",
+            },
+        ];
+        let arn;
+        let version;
+        let newReplicaRegions;
+        let removedReplicaRegions = [];
+        if (describeSecret == null) {
+            newReplicaRegions = secret.replicaRegions ?? [];
+            const createResult = await client.send(new CreateSecretCommand({
+                Name: fullName,
+                AddReplicaRegions: secret.replicaRegions
+                    ? secret.replicaRegions.map((replicaRegion) => ({
+                        Region: replicaRegion,
+                    }))
+                    : undefined,
+                Description: "Created by load-secrets",
+                SecretString: secretValue,
+                Tags: tags,
+            }));
+            if (createResult.VersionId == null) {
+                throw new Error("Expected versionId");
+            }
+            arn = createResult.ARN;
+            version = createResult.VersionId;
+        }
+        else {
+            if (describeSecret.DeletedDate != null) {
+                await client.send(new RestoreSecretCommand({
+                    SecretId: fullName,
+                }));
+            }
+            const updateResult = await client.send(new PutSecretValueCommand({
+                SecretId: fullName,
+                SecretString: secretValue,
+            }));
+            const currentReplicaRegions = describeSecret.ReplicationStatus?.map((replicationStatus) => replicationStatus.Region) ?? [];
+            newReplicaRegions =
+                secret.replicaRegions?.filter((region) => !currentReplicaRegions.includes(region)) ?? [];
+            removedReplicaRegions = currentReplicaRegions
+                .filter((region) => !!region && true)
+                .filter((region) => !(secret.replicaRegions || []).includes(region));
+            if (newReplicaRegions.length > 0) {
+                await client.send(new ReplicateSecretToRegionsCommand({
+                    SecretId: fullName,
+                    AddReplicaRegions: newReplicaRegions.map((region) => ({
+                        Region: region,
+                    })),
+                }));
+            }
+            if (removedReplicaRegions.length > 0) {
+                await client.send(new RemoveRegionsFromReplicationCommand({
+                    SecretId: fullName,
+                    RemoveReplicaRegions: removedReplicaRegions,
+                }));
+            }
+            if (updateResult.VersionId == null) {
+                throw new Error("Expected versionId");
+            }
+            await this.syncTags(client, describeSecret, tags);
+            arn = updateResult.ARN;
+            version = updateResult.VersionId;
+        }
+        this.reporter.log("");
+        this.reporter.log("Secret stored:");
+        this.reporter.log(`ARN: ${this.reporter.format.greenBright(arn)}`);
+        this.reporter.log(`Version: ${this.reporter.format.greenBright(version)}`);
+        if (newReplicaRegions.length > 0) {
+            this.reporter.log(`Read replicas added to regions: ${newReplicaRegions
+                .map((r) => this.reporter.format.greenBright(r))
+                .join(", ")}`);
+        }
+        if (removedReplicaRegions.length > 0) {
+            this.reporter.log(`Read replicas removed from regions: ${removedReplicaRegions
+                .map((r) => this.reporter.format.redBright(r))
+                .join(", ")}`);
+        }
+    }
+    checkSecretGroup(secretGroup) {
+        if (!secretGroup.namePrefix.startsWith("/") ||
+            !secretGroup.namePrefix.endsWith("/")) {
+            throw new Error(`namePrefix should start and end with /. Current value: ${secretGroup.namePrefix}`);
+        }
+    }
+    getSecretDescription(details) {
+        return details == null
+            ? "not yet created"
+            : details?.DeletedDate != null
+                ? `scheduled for deletion ${details.DeletedDate.toISOString()}`
+                : `last changed ${details.LastChangedDate?.toISOString() ?? "unknown"}`;
+    }
+    /**
+     * Returns false if aborted.
+     */
+    async selectAndUpdate(secretGroups) {
+        const secrets = [];
+        this.reporter.log("Select secret to write:");
+        this.reporter.log("");
+        for (const secretGroup of secretGroups) {
+            this.reporter.log(`${secretGroup.description} (prefix: ${secretGroup.namePrefix})`);
+            for (let i = 0; i < secretGroup.secrets.length; i++) {
+                const offset = secrets.length;
+                const secret = secretGroup.secrets[i];
+                secrets.push({
+                    secret: secret,
+                    secretGroup,
+                });
+                const client = this.getSmClient(secretGroup.region);
+                const details = await this.getSecretDetails(client, this.getFullName(secretGroup, secret));
+                const desc = this.getSecretDescription(details);
+                this.reporter.log(`  (${offset}) ${secret.name} (${desc})`);
+            }
+            this.reporter.log("");
+        }
+        let index;
+        try {
+            const answer = await this.getInput({
+                prompt: "Enter index (or enter to quit): ",
+            });
+            if (answer.trim() === "") {
+                return false;
+            }
+            index = parseInt(answer);
+            if (!secrets[index]) {
+                throw new Error();
+            }
+        }
+        catch (_) {
+            this.reporter.warn("Secret not found - aborting");
+            return false;
+        }
+        this.reporter.log("");
+        await this.handleUpdate(secrets[index].secretGroup, secrets[index].secret);
+        this.reporter.log("");
+        return true;
+    }
+    async process(secretGroups) {
+        this.reporter.info("Checking account for current credentials");
+        this.reporter.info("If any error is given, make sure you have valid credentials active");
+        const currentAccount = await this.stsClient.send(new GetCallerIdentityCommand({}));
+        this.reporter.info(`Running for account ${currentAccount.Account}`);
+        this.reporter.log("");
+        const matchedSecretGroups = secretGroups.filter((it) => it.accountId === currentAccount.Account);
+        if (matchedSecretGroups.length === 0) {
+            this.reporter.error(`No secrets specified for this account - aborting`);
+            return;
+        }
+        for (const secretGroup of matchedSecretGroups) {
+            this.checkSecretGroup(secretGroup);
+        }
+        // eslint-disable-next-line no-empty
+        while (await this.selectAndUpdate(matchedSecretGroups)) { }
+    }
+}
+/**
+ * Load secrets interactively into Secrets Manager.
+ */
+export function loadSecretsCli(props) {
+    const loadSecrets = new LoadSecrets({
+        reporter: createReporter({}),
+        // For now, we show the secrets, so that we get positive feedback that the value
+        // is correctly entered.
+        silent: false,
+    });
+    loadSecrets.process(props.secretGroups).catch((error) => {
+        console.error(error.stack || error.message || error);
+        process.exitCode = 1;
+    });
+}
+//# sourceMappingURL=load-secrets.js.map

package/lib/load-secrets/load-secrets.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"load-secrets.js","sourceRoot":"","sources":["../../src/load-secrets/load-secrets.ts"],"names":[],"mappings":"AAIA,OAAO,EACL,mBAAmB,EACnB,qBAAqB,EACrB,qBAAqB,EACrB,qBAAqB,EACrB,mCAAmC,EACnC,+BAA+B,EAC/B,yBAAyB,EACzB,oBAAoB,EACpB,oBAAoB,EACpB,kBAAkB,EAClB,oBAAoB,GACrB,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,wBAAwB,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAE1E,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAE5B,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAIjD,MAAM,WAAW;IACE,kBAAkB,GACjC,EAAE,CAAC;IACY,SAAS,CAAY;IAErB,QAAQ,CAAc;IACtB,MAAM,CAAU;IAEjC,YAAY,KAAiD;QAC3D,IAAI,CAAC,SAAS,GAAG,IAAI,SAAS,CAAC;YAC7B,MAAM,EAAE,WAAW;SACpB,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC;QAC/B,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;IAC7B,CAAC;IAEO,WAAW,CAAC,MAAc;QAChC,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,EAAE,CAAC;YACrC,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,GAAG,IAAI,oBAAoB,CAAC;gBACzD,MAAM;aACP,CAAC,CAAC;QACL,CAAC;QAED,OAAO,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC;IACzC,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,OAAgB;QAC7B,OAAO,IAAI,CAAC,OAAO,CAAC,CAAC;IACvB,CAAC;IAED,KAAK,CAAC,gBAAgB,CACpB,MAA4B,EAC5B,QAAgB;QAEhB,IAAI,CAAC;YACH,OAAO,MAAM,MAAM,CAAC,IAAI,CACtB,IAAI,qBAAqB,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAClD,CAAC;QACJ,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,IAAI,CAAC,YAAY,yBAAyB,EAAE,CAAC;gBAC3C,OAAO,IAAI,CAAC;YACd,CAAC;YAED,MAAM,CAAC,CAAC;QACV,CAAC;IACH,CAAC;IAED,KAAK,CAAC,kBAAkB;QACtB,OAAO,MAAM,IAAI,CAAC,QAAQ,CAAC;YACzB,MAAM,EAAE,iCAAiC;YACzC,MAAM,EAAE,IAAI,CAAC,MAAM;SACpB,CAAC,CAAC;IACL,CAAC;IACD,KAAK,CAAC,gBAAgB,CAAC,MAAkB;QACvC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,wDAAwD,CAAC,CAAC;QAC5E,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;YAClC,MAAM,GAAG,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC;YAC1D,MAAM,IAAI,GACR,OAAO,KAAK,KAAK,QAAQ;gBACvB,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC,KAAK,CAAC,WAAW;oBACjB,CAAC,CAAC,KAAK,KAAK,CAAC,WAAW,GAAG;oBAC3B,CAAC,CAAC,EAAE,CAAC;YACX,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,GAAG,GAAG,IAAI,EAAE,CAAC,CAAC;QACzC,CAAC;QAED,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAEtB,wDAAwD;QAExD,MAAM,eAAe,GAAkC,EAAE,CAAC;QAC1D,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;YAClC,MAAM,GAAG,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC;YAE1D,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,UAAU,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAErE,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,IAAI,IAAI,EAAE,CAAC;gBACvD,IAAI,CAAC,QAAQ,CAAC,GAAG,CACf,YAAY,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAChE,CAAC;YACJ,CAAC;YAED,eAAe,CAAC,GAAG,CAAC,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC;gBACzC,MAAM,EAAE,iCAAiC;gBACzC,MAAM,EAAE,IAAI,CAAC,MAAM;aACpB,CAAC,CAAC;YAEH,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACxB,CAAC;QAED,OAAO,IAAI,CAAC,SAAS,CAAC,eAAe,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC;IAC1D,CAAC;IAED,WAAW,CAAC,WAAwB,EAAE,MAAc;QAClD,OAAO,GAAG,WAAW,CAAC,UAAU,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;IACnD,CAAC;IAED,KAAK,CAAC,QAAQ,CACZ,MAA4B,EAC5B,MAA8B,EAC9B,IAAW;QAEX,MAAM,YAAY,GAAG,MAAM;aACxB,IAAK,CAAC,MAAM,CACX,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,GAAI,KAAK,WAAW,CAAC,GAAI,CAAC,CAClE;aACA,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,GAAI,CAAC,CAAC;QAExB,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC5B,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,2BAA2B,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACxE,MAAM,MAAM,CAAC,IAAI,CACf,IAAI,oBAAoB,CAAC;gBACvB,QAAQ,EAAE,MAAM,CAAC,GAAI;gBACrB,OAAO,EAAE,YAAY;aACtB,CAAC,CACH,CAAC;QACJ,CAAC;QAED,MAAM,YAAY,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,EAAE;YAC/C,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAK,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,GAAI,KAAK,WAAW,CAAC,GAAI,CAAC,CAAC;YACzE,OAAO,QAAQ,IAAI,IAAI,IAAI,QAAQ,CAAC,KAAK,IAAI,WAAW,CAAC,KAAK,CAAC;QACjE,CAAC,CAAC,CAAC;QAEH,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC5B,IAAI,CAAC,QAAQ,CAAC,GAAG,CACf,iBAAiB,YAAY,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,GAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAChE,CAAC;YACF,MAAM,MAAM,CAAC,IAAI,CACf,IAAI,kBAAkB,CAAC;gBACrB,QAAQ,EAAE,MAAM,CAAC,GAAI;gBACrB,IAAI,EAAE,YAAY;aACnB,CAAC,CACH,CAAC;QACJ,CAAC;IACH,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,MAA4B,EAAE,QAAgB;QACjE,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,CAC9B,IAAI,qBAAqB,CAAC;YACxB,QAAQ,EAAE,QAAQ;SACnB,CAAC,CACH,CAAC;QAEF,IAAI,MAAM,CAAC,YAAY,IAAI,IAAI,EAAE,CAAC;YAChC,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;QAC5D,CAAC;QAED,OAAO,MAAM,CAAC,YAAY,CAAC;IAC7B,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,WAAwB,EAAE,MAAc;QACzD,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QAEpD,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;QACvD,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QAErE,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,WAAW,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QAE3E,IAAI,cAAc,IAAI,IAAI,EAAE,CAAC;YAC3B,IAAI,CAAC,QAAQ,CAAC,GAAG,CACf,uDAAuD,CACxD,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;YACpC,IAAI,CAAC,QAAQ,CAAC,GAAG,CACf,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,YAAY,CAC/B,CAAC,MAAM,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,CACnE,CACF,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAEtB,IAAI,WAAmB,CAAC;QAExB,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YAC3B,IAAI,CAAC;gBACH,WAAW,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC;YACpD,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,IAAI,CAAC,YAAY,KAAK,IAAI,CAAC,CAAC,OAAO,KAAK,UAAU,EAAE,CAAC;oBACnD,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;oBAC7B,OAAO;gBACT,CAAC;gBACD,MAAM,CAAC,CAAC;YACV,CAAC;QACH,CAAC;aAAM,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACpC,WAAW,GAAG,MAAM,IAAI,CAAC,kBAAkB,EAAE,CAAC;QAChD,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC;QACtC,CAAC;QAED,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC;QAC3C,IAAI,CAAC,QAAQ,CAAC,GAAG,CACf,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,YAAY,CAAC,WAAW,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CACpE,CAAC;QAEF,MAAM,IAAI,GAAU;YAClB;gBACE,GAAG,EAAE,QAAQ;gBACb,KAAK,EAAE,qBAAqB;aAC7B;SACF,CAAC;QAEF,IAAI,GAAW,CAAC;QAChB,IAAI,OAAe,CAAC;QACpB,IAAI,iBAA2B,CAAC;QAChC,IAAI,qBAAqB,GAAa,EAAE,CAAC;QAEzC,IAAI,cAAc,IAAI,IAAI,EAAE,CAAC;YAC3B,iBAAiB,GAAG,MAAM,CAAC,cAAc,IAAI,EAAE,CAAC;YAChD,MAAM,YAAY,GAAG,MAAM,MAAM,CAAC,IAAI,CACpC,IAAI,mBAAmB,CAAC;gBACtB,IAAI,EAAE,QAAQ;gBACd,iBAAiB,EAAE,MAAM,CAAC,cAAc;oBACtC,CAAC,CAAC,MAAM,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC;wBAC5C,MAAM,EAAE,aAAa;qBACtB,CAAC,CAAC;oBACL,CAAC,CAAC,SAAS;gBACb,WAAW,EAAE,yBAAyB;gBACtC,YAAY,EAAE,WAAW;gBACzB,IAAI,EAAE,IAAI;aACX,CAAC,CACH,CAAC;YAEF,IAAI,YAAY,CAAC,SAAS,IAAI,IAAI,EAAE,CAAC;gBACnC,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;YACxC,CAAC;YAED,GAAG,GAAG,YAAY,CAAC,GAAI,CAAC;YACxB,OAAO,GAAG,YAAY,CAAC,SAAS,CAAC;QACnC,CAAC;aAAM,CAAC;YACN,IAAI,cAAc,CAAC,WAAW,IAAI,IAAI,EAAE,CAAC;gBACvC,MAAM,MAAM,CAAC,IAAI,CACf,IAAI,oBAAoB,CAAC;oBACvB,QAAQ,EAAE,QAAQ;iBACnB,CAAC,CACH,CAAC;YACJ,CAAC;YAED,MAAM,YAAY,GAAG,MAAM,MAAM,CAAC,IAAI,CACpC,IAAI,qBAAqB,CAAC;gBACxB,QAAQ,EAAE,QAAQ;gBAClB,YAAY,EAAE,WAAW;aAC1B,CAAC,CACH,CAAC;YACF,MAAM,qBAAqB,GACzB,cAAc,CAAC,iBAAiB,EAAE,GAAG,CACnC,CAAC,iBAAiB,EAAE,EAAE,CAAC,iBAAiB,CAAC,MAAM,CAChD,IAAI,EAAE,CAAC;YACV,iBAAiB;gBACf,MAAM,CAAC,cAAc,EAAE,MAAM,CAC3B,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,qBAAqB,CAAC,QAAQ,CAAC,MAAM,CAAC,CACpD,IAAI,EAAE,CAAC;YACV,qBAAqB,GAAG,qBAAqB;iBAC1C,MAAM,CAAC,CAAC,MAAM,EAAoB,EAAE,CAAC,CAAC,CAAC,MAAM,IAAI,IAAI,CAAC;iBACtD,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;YACvE,IAAI,iBAAiB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACjC,MAAM,MAAM,CAAC,IAAI,CACf,IAAI,+BAA+B,CAAC;oBAClC,QAAQ,EAAE,QAAQ;oBAClB,iBAAiB,EAAE,iBAAiB,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;wBACpD,MAAM,EAAE,MAAM;qBACf,CAAC,CAAC;iBACJ,CAAC,CACH,CAAC;YACJ,CAAC;YACD,IAAI,qBAAqB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACrC,MAAM,MAAM,CAAC,IAAI,CACf,IAAI,mCAAmC,CAAC;oBACtC,QAAQ,EAAE,QAAQ;oBAClB,oBAAoB,EAAE,qBAAqB;iBAC5C,CAAC,CACH,CAAC;YACJ,CAAC;YAED,IAAI,YAAY,CAAC,SAAS,IAAI,IAAI,EAAE,CAAC;gBACnC,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;YACxC,CAAC;YAED,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;YAElD,GAAG,GAAG,YAAY,CAAC,GAAI,CAAC;YACxB,OAAO,GAAG,YAAY,CAAC,SAAS,CAAC;QACnC,CAAC;QAED,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACtB,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;QACpC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACnE,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,YAAY,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAC3E,IAAI,iBAAiB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACjC,IAAI,CAAC,QAAQ,CAAC,GAAG,CACf,mCAAmC,iBAAiB;iBACjD,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;iBAC/C,IAAI,CAAC,IAAI,CAAC,EAAE,CAChB,CAAC;QACJ,CAAC;QACD,IAAI,qBAAqB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACrC,IAAI,CAAC,QAAQ,CAAC,GAAG,CACf,uCAAuC,qBAAqB;iBACzD,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;iBAC7C,IAAI,CAAC,IAAI,CAAC,EAAE,CAChB,CAAC;QACJ,CAAC;IACH,CAAC;IAED,gBAAgB,CAAC,WAAwB;QACvC,IACE,CAAC,WAAW,CAAC,UAAU,CAAC,UAAU,CAAC,GAAG,CAAC;YACvC,CAAC,WAAW,CAAC,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,EACrC,CAAC;YACD,MAAM,IAAI,KAAK,CACb,0DAA0D,WAAW,CAAC,UAAU,EAAE,CACnF,CAAC;QACJ,CAAC;IACH,CAAC;IAED,oBAAoB,CAAC,OAAsC;QACzD,OAAO,OAAO,IAAI,IAAI;YACpB,CAAC,CAAC,iBAAiB;YACnB,CAAC,CAAC,OAAO,EAAE,WAAW,IAAI,IAAI;gBAC5B,CAAC,CAAC,0BAA0B,OAAO,CAAC,WAAW,CAAC,WAAW,EAAE,EAAE;gBAC/D,CAAC,CAAC,gBAAgB,OAAO,CAAC,eAAe,EAAE,WAAW,EAAE,IAAI,SAAS,EAAE,CAAC;IAC9E,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,eAAe,CAAC,YAA2B;QAC/C,MAAM,OAAO,GAAmD,EAAE,CAAC;QAEnE,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC;QAC7C,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAEtB,KAAK,MAAM,WAAW,IAAI,YAAY,EAAE,CAAC;YACvC,IAAI,CAAC,QAAQ,CAAC,GAAG,CACf,GAAG,WAAW,CAAC,WAAW,aAAa,WAAW,CAAC,UAAU,GAAG,CACjE,CAAC;YAEF,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,WAAW,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBACpD,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;gBAC9B,MAAM,MAAM,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;gBAEtC,OAAO,CAAC,IAAI,CAAC;oBACX,MAAM,EAAE,MAAM;oBACd,WAAW;iBACZ,CAAC,CAAC;gBAEH,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;gBACpD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,gBAAgB,CACzC,MAAM,EACN,IAAI,CAAC,WAAW,CAAC,WAAW,EAAE,MAAM,CAAC,CACtC,CAAC;gBACF,MAAM,IAAI,GAAG,IAAI,CAAC,oBAAoB,CAAC,OAAO,CAAC,CAAC;gBAEhD,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,MAAM,KAAK,MAAM,CAAC,IAAI,KAAK,IAAI,GAAG,CAAC,CAAC;YAC9D,CAAC;YACD,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACxB,CAAC;QAED,IAAI,KAAa,CAAC;QAClB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC;gBACjC,MAAM,EAAE,kCAAkC;aAC3C,CAAC,CAAC;YACH,IAAI,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;gBACzB,OAAO,KAAK,CAAC;YACf,CAAC;YAED,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC;YACzB,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;gBACpB,MAAM,IAAI,KAAK,EAAE,CAAC;YACpB,CAAC;QACH,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC;YAClD,OAAO,KAAK,CAAC;QACf,CAAC;QAED,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACtB,MAAM,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC;QAC3E,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAEtB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,YAA2B;QACvC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,0CAA0C,CAAC,CAAC;QAC/D,IAAI,CAAC,QAAQ,CAAC,IAAI,CAChB,oEAAoE,CACrE,CAAC;QACF,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAC9C,IAAI,wBAAwB,CAAC,EAAE,CAAC,CACjC,CAAC;QAEF,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,uBAAuB,cAAc,CAAC,OAAQ,EAAE,CAAC,CAAC;QACrE,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAEtB,MAAM,mBAAmB,GAAG,YAAY,CAAC,MAAM,CAC7C,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,SAAS,KAAK,cAAc,CAAC,OAAQ,CACjD,CAAC;QACF,IAAI,mBAAmB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACrC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,kDAAkD,CAAC,CAAC;YACxE,OAAO;QACT,CAAC;QAED,KAAK,MAAM,WAAW,IAAI,mBAAmB,EAAE,CAAC;YAC9C,IAAI,CAAC,gBAAgB,CAAC,WAAW,CAAC,CAAC;QACrC,CAAC;QAED,oCAAoC;QACpC,OAAO,MAAM,IAAI,CAAC,eAAe,CAAC,mBAAmB,CAAC,EAAE,CAAC,CAAA,CAAC;IAC5D,CAAC;CACF;AAED;;GAEG;AACH,MAAM,UAAU,cAAc,CAAC,KAAsC;IACnE,MAAM,WAAW,GAAG,IAAI,WAAW,CAAC;QAClC,QAAQ,EAAE,cAAc,CAAC,EAAE,CAAC;QAC5B,gFAAgF;QAChF,wBAAwB;QACxB,MAAM,EAAE,KAAK;KACd,CAAC,CAAC;IAEH,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;QACtD,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC,CAAC;QACrD,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;IACvB,CAAC,CAAC,CAAC;AACL,CAAC"}

package/lib/load-secrets/types.d.ts

@@ -0,0 +1,34 @@
+export interface BaseSecret {
+    name: string;
+    description?: string;
+    /**
+     * A list of regions to create read replicas
+     * of the secret in.
+     */
+    replicaRegions?: string[];
+}
+export type JsonSecretSimpleField = string;
+export interface JsonSecretDescribedField {
+    key: string;
+    description?: string;
+    example?: string;
+}
+/**
+ * Used for secrets that are a single plaintext string,
+ * and do not require JSON formating.
+ */
+export interface StringSecret extends BaseSecret {
+    type: "string";
+}
+export interface JsonSecret extends BaseSecret {
+    type: "json";
+    fields: (JsonSecretSimpleField | JsonSecretDescribedField)[];
+}
+export type Secret = JsonSecret | StringSecret;
+export interface SecretGroup {
+    accountId: string;
+    region: string;
+    description: string;
+    namePrefix: string;
+    secrets: Secret[];
+}

package/lib/load-secrets/types.js

@@ -0,0 +1 @@
+//# sourceMappingURL=types.js.map

package/lib/load-secrets/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/load-secrets/types.ts"],"names":[],"mappings":""}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@liflig/load-secrets",
-  "version": "1.0.3",
+  "version": "1.0.5",
   "description": "Library for loading project secrets into AWS Secrets Manager",
   "license": "Apache-2.0",
   "type": "module",
@@ -10,7 +10,7 @@
     "url": "git+https://github.com/capralifecycle/load-secrets.git"
   },
   "scripts": {
-    "prepare": "husky",
+    "prepare": "npm run build && husky",
     "build": "tsc",
     "lint": "eslint .",
     "lint:fix": "eslint --fix .",
@@ -23,6 +23,7 @@
     "@aws-sdk/client-secrets-manager": "3.699.0",
     "@aws-sdk/client-sts": "3.699.0",
     "chalk": "4.0.0",
+    "read": "4.0.0",
     "typescript": "5.7.2"
   },
   "devDependencies": {

package/renovate.json5

@@ -0,0 +1,6 @@
+{
+  "extends": [
+    "github>capraconsulting/renovate-config:library",
+    "github>capraconsulting/renovate-config:aggressive"
+  ]
+}

package/src/load-secrets/load-secrets.ts

@@ -7,16 +7,17 @@ import {
   DescribeSecretCommand,
   GetSecretValueCommand,
   PutSecretValueCommand,
+  RemoveRegionsFromReplicationCommand,
+  ReplicateSecretToRegionsCommand,
+  ResourceNotFoundException,
   RestoreSecretCommand,
   SecretsManagerClient,
   TagResourceCommand,
   UntagResourceCommand,
-  ReplicateSecretToRegionsCommand,
-  RemoveRegionsFromReplicationCommand,
 } from "@aws-sdk/client-secrets-manager";
 import { GetCallerIdentityCommand, STSClient } from "@aws-sdk/client-sts";
-import { ResourceNotFoundException } from "@aws-sdk/client-secrets-manager";
-import read from "read";
+import type { Options } from "read";
+import { read } from "read";
 import type { CLIReporter } from "../cli/reporter";
 import { createReporter } from "../cli/reporter";
 
@@ -48,15 +49,8 @@ class LoadSecrets {
     return this.smClientForRegions[region];
   }
 
-  async getInput(options: read.Options): Promise<string> {
-    return new Promise<string>((resolve, reject) => {
-      read(options, (err, answer) => {
-        if (err) {
-          reject(err);
-        }
-        resolve(answer);
-      });
-    });
+  async getInput(options: Options): Promise<string> {
+    return read(options);
   }
 
   async getSecretDetails(
@@ -111,11 +105,10 @@ class LoadSecrets {
         );
       }
 
-      const value = await this.getInput({
+      collectedValues[key] = await this.getInput({
         prompt: "Enter value (Ctrl+C to abort): ",
         silent: this.silent,
       });
-      collectedValues[key] = value;
 
       this.reporter.log("");
     }
@@ -235,7 +228,7 @@ class LoadSecrets {
 
     let arn: string;
     let version: string;
-    let newReplicaRegions: string[] = [];
+    let newReplicaRegions: string[];
     let removedReplicaRegions: string[] = [];
 
     if (describeSecret == null) {
@@ -284,9 +277,7 @@ class LoadSecrets {
           (region) => !currentReplicaRegions.includes(region),
         ) ?? [];
       removedReplicaRegions = currentReplicaRegions
-        .filter(
-          (region): region is string => !!region && typeof region === "string",
-        )
+        .filter((region): region is string => !!region && true)
         .filter((region) => !(secret.replicaRegions || []).includes(region));
       if (newReplicaRegions.length > 0) {
         await client.send(