@optimizely/ocp-local-env 1.0.0-beta.10

package/dist/src/local_engine/storage/LocalSecretsStore.js

@@ -0,0 +1,350 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.LocalSecretsStore = void 0;
+const fs_1 = __importDefault(require("fs"));
+const path_1 = __importDefault(require("path"));
+const LogManager_1 = require("../../logging/LogManager");
+/**
+ * Local secrets store that manages app secrets in .ocp-local/secrets.json
+ * Implements singleton pattern to ensure consistent state across wrapper and API
+ * Provides basic obfuscation for secrets at rest
+ */
+class LocalSecretsStore {
+    constructor(appRootDir) {
+        this.logManager = LogManager_1.LogManager.getInstance();
+        this.appRootDir = appRootDir;
+        this.configDirPath = path_1.default.join(appRootDir, '.ocp-local');
+        this.secretsPath = path_1.default.join(this.configDirPath, 'secrets.json');
+        // Initialize secrets file if it doesn't exist
+        this.ensureSecretsFileExists();
+    }
+    /**
+     * Get or create a singleton instance for the given app directory
+     */
+    static getInstance(appRootDir) {
+        const normalizedPath = path_1.default.resolve(appRootDir);
+        if (!this.instances.has(normalizedPath)) {
+            this.instances.set(normalizedPath, new LocalSecretsStore(normalizedPath));
+        }
+        return this.instances.get(normalizedPath);
+    }
+    /**
+     * Clear all instances (useful for testing)
+     */
+    static clearAllInstances() {
+        this.instances.clear();
+    }
+    /**
+     * Ensure the secrets file exists with proper permissions
+     */
+    ensureSecretsFileExists() {
+        try {
+            // Create config directory if it doesn't exist
+            if (!fs_1.default.existsSync(this.configDirPath)) {
+                fs_1.default.mkdirSync(this.configDirPath, { recursive: true });
+            }
+            // Create secrets file if it doesn't exist
+            if (!fs_1.default.existsSync(this.secretsPath)) {
+                const defaultSecrets = {};
+                this.saveSecretsToDisk(defaultSecrets);
+            }
+        }
+        catch (error) {
+            this.logManager.warn(LogManager_1.LogSource.System, LogManager_1.LogCategory.Secrets, `Failed to ensure secrets file exists: ${error instanceof Error ? error.message : String(error)}`, {
+                id: 'secrets',
+                store: 'LocalSecretsStore',
+                operation: 'set',
+                error
+            });
+        }
+    }
+    /**
+     * Load secrets from disk with basic deobfuscation
+     */
+    loadSecretsFromDisk() {
+        try {
+            if (!fs_1.default.existsSync(this.secretsPath)) {
+                return {};
+            }
+            const fileContent = fs_1.default.readFileSync(this.secretsPath, 'utf-8');
+            const obfuscatedData = JSON.parse(fileContent);
+            // Deobfuscate the secrets
+            const secrets = {};
+            for (const [key, value] of Object.entries(obfuscatedData)) {
+                try {
+                    if (typeof value === 'string') {
+                        // Try to decode Base64, fallback to original value if invalid
+                        secrets[key] = this.deobfuscateValue(value);
+                    }
+                    else {
+                        // Handle nested objects
+                        secrets[key] = this.deobfuscateObject(value);
+                    }
+                }
+                catch (error) {
+                    // If deobfuscation fails, keep original value
+                    secrets[key] = value;
+                }
+            }
+            return secrets;
+        }
+        catch (error) {
+            this.logManager.warn(LogManager_1.LogSource.System, LogManager_1.LogCategory.Secrets, `Error loading secrets from disk: ${error instanceof Error ? error.message : String(error)}`, {
+                id: 'secrets',
+                store: 'LocalSecretsStore',
+                operation: 'get',
+                error
+            });
+            return {};
+        }
+    }
+    /**
+     * Save secrets to disk with basic obfuscation
+     */
+    saveSecretsToDisk(secrets) {
+        try {
+            // Obfuscate the secrets before saving
+            const obfuscatedSecrets = {};
+            for (const [key, value] of Object.entries(secrets)) {
+                if (typeof value === 'string') {
+                    obfuscatedSecrets[key] = this.obfuscateValue(value);
+                }
+                else {
+                    // Handle nested objects
+                    obfuscatedSecrets[key] = this.obfuscateObject(value);
+                }
+            }
+            const jsonContent = JSON.stringify(obfuscatedSecrets, null, 2);
+            // Write to temp file first, then rename for atomicity
+            const tempPath = `${this.secretsPath}.tmp`;
+            fs_1.default.writeFileSync(tempPath, jsonContent, 'utf-8');
+            // Set restrictive permissions on the temp file
+            try {
+                fs_1.default.chmodSync(tempPath, 0o600); // Read/write for owner only
+            }
+            catch (error) {
+                this.logManager.warn(LogManager_1.LogSource.System, LogManager_1.LogCategory.Secrets, `Could not set restrictive permissions on secrets file: ${error instanceof Error ? error.message : String(error)}`, {
+                    id: 'secrets',
+                    store: 'LocalSecretsStore',
+                    operation: 'set',
+                    error
+                });
+            }
+            // Atomic rename
+            fs_1.default.renameSync(tempPath, this.secretsPath);
+        }
+        catch (error) {
+            this.logManager.error(LogManager_1.LogSource.System, LogManager_1.LogCategory.Secrets, `Error saving secrets to disk: ${error instanceof Error ? error.message : String(error)}`, {
+                id: 'secrets',
+                store: 'LocalSecretsStore',
+                operation: 'set',
+                error
+            });
+            throw error;
+        }
+    }
+    /**
+     * Basic obfuscation using Base64 encoding
+     */
+    obfuscateValue(value) {
+        return Buffer.from(value, 'utf-8').toString('base64');
+    }
+    /**
+     * Basic deobfuscation using Base64 decoding
+     */
+    deobfuscateValue(value) {
+        try {
+            return Buffer.from(value, 'base64').toString('utf-8');
+        }
+        catch (error) {
+            // If Base64 decoding fails, return original value
+            return value;
+        }
+    }
+    /**
+     * Recursively obfuscate object values
+     */
+    obfuscateObject(obj) {
+        if (typeof obj === 'string') {
+            return this.obfuscateValue(obj);
+        }
+        else if (Array.isArray(obj)) {
+            return obj.map(item => this.obfuscateObject(item));
+        }
+        else if (obj !== null && typeof obj === 'object') {
+            const obfuscated = {};
+            for (const [key, value] of Object.entries(obj)) {
+                obfuscated[key] = this.obfuscateObject(value);
+            }
+            return obfuscated;
+        }
+        return obj;
+    }
+    /**
+     * Recursively deobfuscate object values
+     */
+    deobfuscateObject(obj) {
+        if (typeof obj === 'string') {
+            return this.deobfuscateValue(obj);
+        }
+        else if (Array.isArray(obj)) {
+            return obj.map(item => this.deobfuscateObject(item));
+        }
+        else if (obj !== null && typeof obj === 'object') {
+            const deobfuscated = {};
+            for (const [key, value] of Object.entries(obj)) {
+                deobfuscated[key] = this.deobfuscateObject(value);
+            }
+            return deobfuscated;
+        }
+        return obj;
+    }
+    /**
+     * Get all secrets
+     */
+    getSecrets() {
+        return this.loadSecretsFromDisk();
+    }
+    /**
+     * Get secrets for a specific section/key
+     */
+    getSectionSecrets(section) {
+        const secrets = this.loadSecretsFromDisk();
+        return secrets[section] || {};
+    }
+    /**
+     * Get a specific secret value
+     */
+    getSecret(key) {
+        const secrets = this.loadSecretsFromDisk();
+        return secrets[key];
+    }
+    /**
+     * Set a specific secret value
+     */
+    setSecret(key, value) {
+        const secrets = this.loadSecretsFromDisk();
+        secrets[key] = value;
+        this.saveSecretsToDisk(secrets);
+    }
+    /**
+     * Update multiple secrets at once
+     */
+    updateSecrets(newSecrets) {
+        const secrets = this.loadSecretsFromDisk();
+        const updatedSecrets = { ...secrets, ...newSecrets };
+        this.saveSecretsToDisk(updatedSecrets);
+    }
+    /**
+     * Update secrets for a specific section
+     */
+    updateSectionSecrets(section, sectionSecrets) {
+        const secrets = this.loadSecretsFromDisk();
+        if (Object.keys(sectionSecrets).length === 0) {
+            // If empty object, delete the section
+            delete secrets[section];
+        }
+        else {
+            // Merge with existing section secrets
+            secrets[section] = { ...secrets[section], ...sectionSecrets };
+        }
+        this.saveSecretsToDisk(secrets);
+    }
+    /**
+     * Delete a specific secret
+     */
+    deleteSecret(key) {
+        const secrets = this.loadSecretsFromDisk();
+        delete secrets[key];
+        this.saveSecretsToDisk(secrets);
+    }
+    /**
+     * Delete specific fields from a secret section
+     */
+    deleteSecretFields(section, fields) {
+        const secrets = this.loadSecretsFromDisk();
+        const sectionSecrets = secrets[section];
+        if (sectionSecrets && typeof sectionSecrets === 'object') {
+            fields.forEach(field => {
+                delete sectionSecrets[field];
+            });
+            // If section is empty after deletion, remove it entirely
+            if (Object.keys(sectionSecrets).length === 0) {
+                delete secrets[section];
+            }
+            else {
+                secrets[section] = sectionSecrets;
+            }
+            this.saveSecretsToDisk(secrets);
+        }
+    }
+    /**
+     * Clear all secrets (wipe the store)
+     */
+    clearSecrets() {
+        this.saveSecretsToDisk({});
+    }
+    /**
+     * Check if secrets store is empty
+     */
+    isEmpty() {
+        const secrets = this.loadSecretsFromDisk();
+        return Object.keys(secrets).length === 0;
+    }
+    /**
+     * Check if a specific secret exists
+     */
+    hasSecret(key) {
+        const secrets = this.loadSecretsFromDisk();
+        return key in secrets;
+    }
+    /**
+     * Check if a section has any secrets
+     */
+    hasSectionSecrets(section) {
+        const secrets = this.loadSecretsFromDisk();
+        const sectionSecrets = secrets[section];
+        return !!(sectionSecrets && typeof sectionSecrets === 'object' && Object.keys(sectionSecrets).length > 0);
+    }
+    /**
+     * Get the path to the secrets file
+     */
+    getSecretsPath() {
+        return this.secretsPath;
+    }
+    /**
+     * Get the config directory path
+     */
+    getConfigDirPath() {
+        return this.configDirPath;
+    }
+    /**
+     * Wipe all secrets and remove the secrets file (for app uninstall)
+     */
+    wipeSecrets() {
+        try {
+            if (fs_1.default.existsSync(this.secretsPath)) {
+                fs_1.default.unlinkSync(this.secretsPath);
+            }
+            this.logManager.info(LogManager_1.LogSource.System, LogManager_1.LogCategory.Secrets, `Wiped secrets for app: ${this.appRootDir}`, {
+                id: 'secrets',
+                store: 'LocalSecretsStore',
+                operation: 'clear'
+            });
+        }
+        catch (error) {
+            this.logManager.warn(LogManager_1.LogSource.System, LogManager_1.LogCategory.Secrets, `Failed to wipe secrets: ${error instanceof Error ? error.message : String(error)}`, {
+                id: 'secrets',
+                store: 'LocalSecretsStore',
+                operation: 'clear',
+                error
+            });
+        }
+    }
+}
+exports.LocalSecretsStore = LocalSecretsStore;
+LocalSecretsStore.instances = new Map();
+//# sourceMappingURL=LocalSecretsStore.js.map

package/dist/src/local_engine/storage/LocalSecretsStore.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"LocalSecretsStore.js","sourceRoot":"","sources":["../../../../src/local_engine/storage/LocalSecretsStore.ts"],"names":[],"mappings":";;;;;;AAAA,4CAAoB;AACpB,gDAAwB;AACxB,yDAA8E;AAS9E;;;;GAIG;AACH,MAAa,iBAAiB;IAQ5B,YAAoB,UAAkB;QAN9B,eAAU,GAAG,uBAAU,CAAC,WAAW,EAAE,CAAC;QAO5C,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,aAAa,GAAG,cAAI,CAAC,IAAI,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;QACzD,IAAI,CAAC,WAAW,GAAG,cAAI,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,cAAc,CAAC,CAAC;QACjE,8CAA8C;QAC9C,IAAI,CAAC,uBAAuB,EAAE,CAAC;IACjC,CAAC;IAED;;OAEG;IACI,MAAM,CAAC,WAAW,CAAC,UAAkB;QAC1C,MAAM,cAAc,GAAG,cAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QAEhD,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,CAAC;YACxC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,cAAc,EAAE,IAAI,iBAAiB,CAAC,cAAc,CAAC,CAAC,CAAC;QAC5E,CAAC;QAED,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,cAAc,CAAE,CAAC;IAC7C,CAAC;IAED;;OAEG;IACI,MAAM,CAAC,iBAAiB;QAC7B,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;IACzB,CAAC;IAED;;OAEG;IACK,uBAAuB;QAC7B,IAAI,CAAC;YACH,8CAA8C;YAC9C,IAAI,CAAC,YAAE,CAAC,UAAU,CAAC,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC;gBACvC,YAAE,CAAC,SAAS,CAAC,IAAI,CAAC,aAAa,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YACxD,CAAC;YAED,0CAA0C;YAC1C,IAAI,CAAC,YAAE,CAAC,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;gBACrC,MAAM,cAAc,GAAG,EAAE,CAAC;gBAC1B,IAAI,CAAC,iBAAiB,CAAC,cAAc,CAAC,CAAC;YACzC,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,sBAAS,CAAC,MAAM,EAAE,wBAAW,CAAC,OAAO,EAAE,yCAAyC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE;gBAC7J,EAAE,EAAE,SAAS;gBACb,KAAK,EAAE,mBAAmB;gBAC1B,SAAS,EAAE,KAAK;gBAChB,KAAK;aACN,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED;;OAEG;IACK,mBAAmB;QACzB,IAAI,CAAC;YACH,IAAI,CAAC,YAAE,CAAC,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;gBACrC,OAAO,EAAE,CAAC;YACZ,CAAC;YAED,MAAM,WAAW,GAAG,YAAE,CAAC,YAAY,CAAC,IAAI,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;YAC/D,MAAM,cAAc,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;YAE/C,0BAA0B;YAC1B,MAAM,OAAO,GAAoB,EAAE,CAAC;YACpC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,CAAC;gBAC1D,IAAI,CAAC;oBACH,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;wBAC9B,8DAA8D;wBAC9D,OAAO,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC;oBAC9C,CAAC;yBAAM,CAAC;wBACN,wBAAwB;wBACxB,OAAO,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC;oBAC/C,CAAC;gBACH,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,8CAA8C;oBAC9C,OAAO,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;gBACvB,CAAC;YACH,CAAC;YAED,OAAO,OAAO,CAAC;QACjB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,sBAAS,CAAC,MAAM,EAAE,wBAAW,CAAC,OAAO,EAAE,oCAAoC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE;gBACxJ,EAAE,EAAE,SAAS;gBACb,KAAK,EAAE,mBAAmB;gBAC1B,SAAS,EAAE,KAAK;gBAChB,KAAK;aACN,CAAC,CAAC;YACH,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IAED;;OAEG;IACK,iBAAiB,CAAC,OAAwB;QAChD,IAAI,CAAC;YACH,sCAAsC;YACtC,MAAM,iBAAiB,GAAQ,EAAE,CAAC;YAClC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;gBACnD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;oBAC9B,iBAAiB,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;gBACtD,CAAC;qBAAM,CAAC;oBACN,wBAAwB;oBACxB,iBAAiB,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;gBACvD,CAAC;YACH,CAAC;YAED,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,CAAC,iBAAiB,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;YAE/D,sDAAsD;YACtD,MAAM,QAAQ,GAAG,GAAG,IAAI,CAAC,WAAW,MAAM,CAAC;YAC3C,YAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC;YAEjD,+CAA+C;YAC/C,IAAI,CAAC;gBACH,YAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC,4BAA4B;YAC7D,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,sBAAS,CAAC,MAAM,EAAE,wBAAW,CAAC,OAAO,EAAE,0DAA0D,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE;oBAC9K,EAAE,EAAE,SAAS;oBACb,KAAK,EAAE,mBAAmB;oBAC1B,SAAS,EAAE,KAAK;oBAChB,KAAK;iBACN,CAAC,CAAC;YACL,CAAC;YAED,gBAAgB;YAChB,YAAE,CAAC,UAAU,CAAC,QAAQ,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;QAC5C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,sBAAS,CAAC,MAAM,EAAE,wBAAW,CAAC,OAAO,EAAE,iCAAiC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE;gBACtJ,EAAE,EAAE,SAAS;gBACb,KAAK,EAAE,mBAAmB;gBAC1B,SAAS,EAAE,KAAK;gBAChB,KAAK;aACN,CAAC,CAAC;YACH,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED;;OAEG;IACK,cAAc,CAAC,KAAa;QAClC,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACxD,CAAC;IAED;;OAEG;IACK,gBAAgB,CAAC,KAAa;QACpC,IAAI,CAAC;YACH,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QACxD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,kDAAkD;YAClD,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED;;OAEG;IACK,eAAe,CAAC,GAAQ;QAC9B,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;YAC5B,OAAO,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC;QAClC,CAAC;aAAM,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;YAC9B,OAAO,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC;QACrD,CAAC;aAAM,IAAI,GAAG,KAAK,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;YACnD,MAAM,UAAU,GAAQ,EAAE,CAAC;YAC3B,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC/C,UAAU,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;YAChD,CAAC;YACD,OAAO,UAAU,CAAC;QACpB,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAED;;OAEG;IACK,iBAAiB,CAAC,GAAQ;QAChC,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;YAC5B,OAAO,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC;QACpC,CAAC;aAAM,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;YAC9B,OAAO,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC;QACvD,CAAC;aAAM,IAAI,GAAG,KAAK,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;YACnD,MAAM,YAAY,GAAQ,EAAE,CAAC;YAC7B,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC/C,YAAY,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC;YACpD,CAAC;YACD,OAAO,YAAY,CAAC;QACtB,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAED;;OAEG;IACI,UAAU;QACf,OAAO,IAAI,CAAC,mBAAmB,EAAE,CAAC;IACpC,CAAC;IAED;;OAEG;IACI,iBAAiB,CAAC,OAAe;QACtC,MAAM,OAAO,GAAG,IAAI,CAAC,mBAAmB,EAAE,CAAC;QAC3C,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;IAChC,CAAC;IAED;;OAEG;IACI,SAAS,CAAC,GAAW;QAC1B,MAAM,OAAO,GAAG,IAAI,CAAC,mBAAmB,EAAE,CAAC;QAC3C,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC;IACtB,CAAC;IAED;;OAEG;IACI,SAAS,CAAC,GAAW,EAAE,KAAU;QACtC,MAAM,OAAO,GAAG,IAAI,CAAC,mBAAmB,EAAE,CAAC;QAC3C,OAAO,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QACrB,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC;IAClC,CAAC;IAED;;OAEG;IACI,aAAa,CAAC,UAAoC;QACvD,MAAM,OAAO,GAAG,IAAI,CAAC,mBAAmB,EAAE,CAAC;QAC3C,MAAM,cAAc,GAAG,EAAE,GAAG,OAAO,EAAE,GAAG,UAAU,EAAE,CAAC;QACrD,IAAI,CAAC,iBAAiB,CAAC,cAAc,CAAC,CAAC;IACzC,CAAC;IAED;;OAEG;IACI,oBAAoB,CAAC,OAAe,EAAE,cAAmB;QAC9D,MAAM,OAAO,GAAG,IAAI,CAAC,mBAAmB,EAAE,CAAC;QAC3C,IAAI,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC7C,sCAAsC;YACtC,OAAO,OAAO,CAAC,OAAO,CAAC,CAAC;QAC1B,CAAC;aAAM,CAAC;YACN,sCAAsC;YACtC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC,EAAE,GAAG,cAAc,EAAE,CAAC;QAChE,CAAC;QACD,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC;IAClC,CAAC;IAED;;OAEG;IACI,YAAY,CAAC,GAAW;QAC7B,MAAM,OAAO,GAAG,IAAI,CAAC,mBAAmB,EAAE,CAAC;QAC3C,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC;QACpB,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC;IAClC,CAAC;IAED;;OAEG;IACI,kBAAkB,CAAC,OAAe,EAAE,MAAgB;QACzD,MAAM,OAAO,GAAG,IAAI,CAAC,mBAAmB,EAAE,CAAC;QAC3C,MAAM,cAAc,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;QAExC,IAAI,cAAc,IAAI,OAAO,cAAc,KAAK,QAAQ,EAAE,CAAC;YACzD,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE;gBACrB,OAAO,cAAc,CAAC,KAAK,CAAC,CAAC;YAC/B,CAAC,CAAC,CAAC;YAEH,yDAAyD;YACzD,IAAI,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC7C,OAAO,OAAO,CAAC,OAAO,CAAC,CAAC;YAC1B,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,OAAO,CAAC,GAAG,cAAc,CAAC;YACpC,CAAC;YAED,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC;QAClC,CAAC;IACH,CAAC;IAED;;OAEG;IACI,YAAY;QACjB,IAAI,CAAC,iBAAiB,CAAC,EAAE,CAAC,CAAC;IAC7B,CAAC;IAED;;OAEG;IACI,OAAO;QACZ,MAAM,OAAO,GAAG,IAAI,CAAC,mBAAmB,EAAE,CAAC;QAC3C,OAAO,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC;IAC3C,CAAC;IAED;;OAEG;IACI,SAAS,CAAC,GAAW;QAC1B,MAAM,OAAO,GAAG,IAAI,CAAC,mBAAmB,EAAE,CAAC;QAC3C,OAAO,GAAG,IAAI,OAAO,CAAC;IACxB,CAAC;IAED;;OAEG;IACI,iBAAiB,CAAC,OAAe;QACtC,MAAM,OAAO,GAAG,IAAI,CAAC,mBAAmB,EAAE,CAAC;QAC3C,MAAM,cAAc,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;QACxC,OAAO,CAAC,CAAC,CAAC,cAAc,IAAI,OAAO,cAAc,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC5G,CAAC;IAED;;OAEG;IACI,cAAc;QACnB,OAAO,IAAI,CAAC,WAAW,CAAC;IAC1B,CAAC;IAED;;OAEG;IACI,gBAAgB;QACrB,OAAO,IAAI,CAAC,aAAa,CAAC;IAC5B,CAAC;IAED;;OAEG;IACI,WAAW;QAChB,IAAI,CAAC;YACH,IAAI,YAAE,CAAC,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;gBACpC,YAAE,CAAC,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YAClC,CAAC;YACD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,sBAAS,CAAC,MAAM,EAAE,wBAAW,CAAC,OAAO,EAAE,0BAA0B,IAAI,CAAC,UAAU,EAAE,EAAE;gBACvG,EAAE,EAAE,SAAS;gBACb,KAAK,EAAE,mBAAmB;gBAC1B,SAAS,EAAE,OAAO;aACnB,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,sBAAS,CAAC,MAAM,EAAE,wBAAW,CAAC,OAAO,EAAE,2BAA2B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE;gBAC/I,EAAE,EAAE,SAAS;gBACb,KAAK,EAAE,mBAAmB;gBAC1B,SAAS,EAAE,OAAO;gBAClB,KAAK;aACN,CAAC,CAAC;QACL,CAAC;IACH,CAAC;;AAvWH,8CAwWC;AAvWgB,2BAAS,GAAmC,IAAI,GAAG,EAAE,AAA5C,CAA6C"}

package/dist/src/local_engine/storage/LocalSecretsStoreWrapper.d.ts

@@ -0,0 +1,19 @@
+import { LogCategory } from '../../logging/LogManager';
+import { BaseKVStoreWrapper } from './BaseKVStoreWrapper';
+import { LocalSecretsStore } from './LocalSecretsStore';
+/**
+ * Wrapper to make LocalSecretsStore compatible with BaseKVStore interface
+ */
+export declare class LocalSecretsStoreWrapper extends BaseKVStoreWrapper {
+    private secretsStore;
+    protected readonly storeName = "LocalSecretsStore";
+    protected readonly logCategory = LogCategory.Secrets;
+    constructor(secretsStore: LocalSecretsStore);
+    protected getSectionData(key: string): Record<string, any>;
+    protected updateSectionData(key: string, value: any): void;
+    protected hasSectionData(key: string): boolean;
+    /**
+     * Override delete to use deleteSecretFields for field-level deletion
+     */
+    delete(key: string, fields?: string[]): Promise<true>;
+}

package/dist/src/local_engine/storage/LocalSecretsStoreWrapper.js

@@ -0,0 +1,52 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.LocalSecretsStoreWrapper = void 0;
+const LogManager_1 = require("../../logging/LogManager");
+const BaseKVStoreWrapper_1 = require("./BaseKVStoreWrapper");
+/**
+ * Wrapper to make LocalSecretsStore compatible with BaseKVStore interface
+ */
+class LocalSecretsStoreWrapper extends BaseKVStoreWrapper_1.BaseKVStoreWrapper {
+    constructor(secretsStore) {
+        super();
+        this.secretsStore = secretsStore;
+        this.storeName = 'LocalSecretsStore';
+        this.logCategory = LogManager_1.LogCategory.Secrets;
+    }
+    getSectionData(key) {
+        return this.secretsStore.getSectionSecrets(key) || {};
+    }
+    updateSectionData(key, value) {
+        this.secretsStore.updateSectionSecrets(key, value);
+    }
+    hasSectionData(key) {
+        return this.secretsStore.hasSectionSecrets(key);
+    }
+    /**
+     * Override delete to use deleteSecretFields for field-level deletion
+     */
+    async delete(key, fields) {
+        const context = {
+            id: key || 'unknown',
+            store: this.storeName,
+            operation: 'delete',
+            key
+        };
+        this.logManager.debug(LogManager_1.LogSource.System, this.logCategory, `DELETE: key="${key}", fields=${JSON.stringify(fields)}`, context);
+        try {
+            if (fields?.length) {
+                this.secretsStore.deleteSecretFields(key, fields);
+            }
+            else {
+                this.updateSectionData(key, {});
+            }
+            return true;
+        }
+        catch (error) {
+            this.logManager.error(LogManager_1.LogSource.System, this.logCategory, `DELETE failed: key="${key}"`, { ...context, error });
+            return true;
+        }
+    }
+}
+exports.LocalSecretsStoreWrapper = LocalSecretsStoreWrapper;
+//# sourceMappingURL=LocalSecretsStoreWrapper.js.map

package/dist/src/local_engine/storage/LocalSecretsStoreWrapper.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"LocalSecretsStoreWrapper.js","sourceRoot":"","sources":["../../../../src/local_engine/storage/LocalSecretsStoreWrapper.ts"],"names":[],"mappings":";;;AAAA,yDAAqF;AACrF,6DAA0D;AAG1D;;GAEG;AACH,MAAa,wBAAyB,SAAQ,uCAAkB;IAI9D,YAAoB,YAA+B;QACjD,KAAK,EAAE,CAAC;QADU,iBAAY,GAAZ,YAAY,CAAmB;QAHhC,cAAS,GAAG,mBAAmB,CAAC;QAChC,gBAAW,GAAG,wBAAW,CAAC,OAAO,CAAC;IAIrD,CAAC;IAES,cAAc,CAAC,GAAW;QAClC,OAAO,IAAI,CAAC,YAAY,CAAC,iBAAiB,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;IACxD,CAAC;IAES,iBAAiB,CAAC,GAAW,EAAE,KAAU;QACjD,IAAI,CAAC,YAAY,CAAC,oBAAoB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IACrD,CAAC;IAES,cAAc,CAAC,GAAW;QAClC,OAAO,IAAI,CAAC,YAAY,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC;IAClD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CAAC,GAAW,EAAE,MAAiB;QACzC,MAAM,OAAO,GAAsB;YACjC,EAAE,EAAE,GAAG,IAAI,SAAS;YACpB,KAAK,EAAE,IAAI,CAAC,SAAS;YACrB,SAAS,EAAE,QAAQ;YACnB,GAAG;SACJ,CAAC;QACF,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,sBAAS,CAAC,MAAM,EAAE,IAAI,CAAC,WAAW,EAAE,gBAAgB,GAAG,aAAa,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;QAC7H,IAAI,CAAC;YACH,IAAI,MAAM,EAAE,MAAM,EAAE,CAAC;gBACnB,IAAI,CAAC,YAAY,CAAC,kBAAkB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;YACpD,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,iBAAiB,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YAClC,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,sBAAS,CAAC,MAAM,EAAE,IAAI,CAAC,WAAW,EAAE,uBAAuB,GAAG,GAAG,EAAE,EAAE,GAAG,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;YAChH,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;CACF;AA3CD,4DA2CC"}

package/dist/src/local_engine/storage/LocalSettingsStore.d.ts

@@ -0,0 +1,168 @@
+/**
+ * Interface for local app settings
+ */
+export interface LocalAppSettings {
+    [key: string]: any;
+}
+/**
+ * Interface for settings field metadata
+ */
+export interface SettingsFieldSchema {
+    type?: string;
+    secret?: boolean;
+    required?: boolean;
+    description?: string;
+    default?: any;
+}
+/**
+ * Interface for settings section schema
+ */
+export interface SettingsSectionSchema {
+    [fieldName: string]: SettingsFieldSchema;
+}
+/**
+ * Interface for complete settings schema
+ */
+export interface SettingsSchema {
+    [sectionName: string]: SettingsSectionSchema;
+}
+/**
+ * Interface for settings field with metadata
+ */
+export interface SettingsFieldWithMetadata {
+    value: any;
+    isSecret: boolean;
+    isFromYml: boolean;
+    hasLocalValue: boolean;
+    fieldSchema?: SettingsFieldSchema;
+}
+/**
+ * Local settings store that manages app settings in .ocp-local/settings.json
+ * Implements singleton pattern to ensure consistent state across wrapper and API
+ */
+export declare class LocalSettingsStore {
+    private static instances;
+    private logManager;
+    private settingsPath;
+    private configDirPath;
+    private appRootDir;
+    private settingsYmlSections;
+    private settingsSchema;
+    private constructor();
+    /**
+     * Get or create a singleton instance for the given app directory
+     */
+    static getInstance(appRootDir: string): LocalSettingsStore;
+    /**
+     * Clear singleton instance for the given app directory (useful for testing)
+     */
+    static clearInstance(appRootDir: string): void;
+    /**
+     * Clear all singleton instances (useful for testing)
+     */
+    static clearAllInstances(): void;
+    /**
+     * Parse settings.yml file to extract sections and field schemas
+     */
+    private parseSettingsYml;
+    /**
+     * Parse field schema from settings.yml fields array
+     */
+    private parseFieldsSchema;
+    /**
+     * Parse field schema from JSON Schema style properties
+     */
+    private parseJsonSchemaFields;
+    /**
+     * Create default settings structure based on sections from settings.yml
+     */
+    private createDefaultSettings;
+    /**
+     * Ensure settings file exists with default structure
+     */
+    private ensureSettingsFileExists;
+    /**
+     * Load settings from disk every time
+     */
+    private loadSettingsFromDisk;
+    /**
+     * Save settings to disk
+     */
+    private saveSettingsToDisk;
+    /**
+     * Get all current settings
+     */
+    getSettings(): LocalAppSettings;
+    /**
+     * Get settings as JSON string for API response
+     */
+    getSettingsAsJson(): string;
+    /**
+     * Get a specific setting value
+     */
+    getSetting(key: string): any;
+    /**
+     * Set a specific setting value
+     */
+    setSetting(key: string, value: any): void;
+    /**
+     * Update multiple settings at once
+     */
+    updateSettings(newSettings: Partial<LocalAppSettings>): void;
+    /**
+     * Update settings from JSON string
+     */
+    updateSettingsFromJson(jsonString: string): void;
+    /**
+     * Clear all settings (reset to empty)
+     */
+    clearSettings(): void;
+    /**
+     * Check if settings are empty
+     */
+    isEmpty(): boolean;
+    /**
+     * Remove a specific setting
+     */
+    removeSetting(key: string): boolean;
+    /**
+     * Get the list of sections parsed from settings.yml
+     */
+    getSections(): string[];
+    /**
+     * Get settings for a specific section
+     */
+    getSectionSettings(sectionName: string): any;
+    /**
+     * Update settings for a specific section.
+     * Preserves original values for secret fields when redacted values are submitted.
+     */
+    updateSectionSettings(sectionName: string, sectionSettings: any): void;
+    /**
+     * Get the parsed settings schema from settings.yml
+     */
+    getSettingsSchema(): SettingsSchema;
+    /**
+     * Get schema for a specific section
+     */
+    getSectionSchema(sectionName: string): SettingsSectionSchema;
+    /**
+     * Get settings for a section with metadata about each field
+     */
+    getSectionSettingsWithMetadata(sectionName: string): {
+        [fieldName: string]: SettingsFieldWithMetadata;
+    };
+    /**
+     * Get all settings with metadata organized by section
+     */
+    getAllSettingsWithMetadata(): {
+        [sectionName: string]: {
+            [fieldName: string]: SettingsFieldWithMetadata;
+        };
+    };
+    /**
+     * Get form data with secret fields redacted (matches OCP behavior)
+     * Secret fields with non-null, non-empty values are replaced with {redacted: true}
+     */
+    getRedactedFormData(): LocalAppSettings;
+}