@lupaflow/secrets 0.1.0

package/package.json

@@ -0,0 +1,32 @@
+{
+    "name":  "@lupaflow/secrets",
+    "version":  "0.1.0",
+    "type":  "module",
+    "license":  "MIT",
+    "publishConfig":  {
+                          "access":  "public"
+                      },
+    "main":  "./dist/index.js",
+    "module":  "./dist/index.js",
+    "types":  "./dist/index.d.ts",
+    "exports":  {
+                    ".":  {
+                              "types":  "./dist/index.d.ts",
+                              "require":  "./dist/index.js",
+                              "import":  "./dist/index.js"
+                          }
+                },
+    "scripts":  {
+                    "build":  "tsup",
+                    "dev":  "tsup --watch"
+                },
+    "dependencies":  {
+                         "@lupaflow/core":  "workspace:*",
+                         "conf":  "^13.1.0",
+                         "dotenv":  "^16.4.5"
+                     },
+    "devDependencies":  {
+                            "tsup":  "^8.3.0",
+                            "typescript":  "^5.6.0"
+                        }
+}

package/src/index.ts

@@ -0,0 +1,2 @@
+export { SecretsManager } from "./manager"
+export { getOpenRouterKey, getGoogleKey, getGroqKey } from "./providers"

package/src/manager.ts

@@ -0,0 +1,66 @@
+import dotenv from "dotenv"
+import Conf from "conf"
+import { ConfigError } from "@lupaflow/core"
+
+dotenv.config()
+
+const store = new Conf({
+  projectName: "lupaflow",
+  schema: {
+    apiKeys: {
+      type: "object",
+      default: {},
+    },
+  },
+})
+
+export class SecretsManager {
+  private static keys: Map<string, string> = new Map()
+
+  static init(): void {
+    const saved = store.get("apiKeys") as Record<string, string>
+    for (const [key, value] of Object.entries(saved)) {
+      SecretsManager.keys.set(key, value)
+    }
+  }
+
+  static get(key: string): string | undefined {
+    const envKey = key.toUpperCase()
+    const envValue = process.env[envKey] || process.env[`LUPAFLOW_${envKey}`]
+    if (envValue) return envValue
+    return SecretsManager.keys.get(key)
+  }
+
+  static require(key: string): string {
+    const value = SecretsManager.get(key)
+    if (!value) {
+      throw new ConfigError(`Missing required secret: ${key}`, {
+        hint: `Set ${key.toUpperCase()} in your .env file or run: lupaflow secrets set ${key} <value>`,
+      })
+    }
+    return value
+  }
+
+  static set(key: string, value: string): void {
+    SecretsManager.keys.set(key, value)
+    const saved = store.get("apiKeys") as Record<string, string>
+    saved[key] = value
+    store.set("apiKeys", saved)
+  }
+
+  static delete(key: string): void {
+    SecretsManager.keys.delete(key)
+    const saved = store.get("apiKeys") as Record<string, string>
+    delete saved[key]
+    store.set("apiKeys", saved)
+  }
+
+  static list(): string[] {
+    return Array.from(SecretsManager.keys.keys())
+  }
+
+  static clear(): void {
+    SecretsManager.keys.clear()
+    store.set("apiKeys", {})
+  }
+}

package/src/providers.ts

@@ -0,0 +1,13 @@
+import { SecretsManager } from "./manager"
+
+export function getOpenRouterKey(): string {
+  return SecretsManager.require("OPENROUTER_API_KEY")
+}
+
+export function getGoogleKey(): string {
+  return SecretsManager.require("GOOGLE_API_KEY")
+}
+
+export function getGroqKey(): string {
+  return SecretsManager.require("GROQ_API_KEY")
+}

package/tsconfig.json

@@ -0,0 +1,8 @@
+{
+  "extends": "../../tsconfig.json",
+  "compilerOptions": {
+    "outDir": "./dist",
+    "rootDir": "./src"
+  },
+  "include": ["src"]
+}

package/tsup.config.ts

@@ -0,0 +1,9 @@
+import { defineConfig } from "tsup"
+export default defineConfig({
+  entry: { index: "src/index.ts" },
+  format: ["cjs", "esm"],
+  dts: true,
+  sourcemap: true,
+  clean: true,
+  external: [/node_modules/],
+})